Mathias Ekstedt

Mathias Ekstedt is a Professor of Industrial Information and Control Systems at KTH Royal Institute of Technology in Stockholm, Sweden. Affiliated with the Software Systems Architecture and Security (SSAS) research group under the Division of Network and Systems Engineering in the Department of Computer Science, School of Electrical Engineering and Computer Science (EECS). He holds a Ph.D. (2004) and M.Sc. (1999) from KTH.

• Co-founder of foreseeti (acquired by Google in 2022)
• Director of KTH's Master Programme in Cybersecurity
• Member of the Digital Futures research center's Trust Working Group
• Affiliated with Center for Cyber Defense and Information Security (CDIS)

Ekstedt's research focuses on information security and cybersecurity integrated with software/systems architecture modeling and analysis. His work emphasizes probabilistic attack/defense graphs for system-of-systems security evaluation, particularly in SCADA and Industrial Control Systems within power infrastructure. He has developed the Meta Attack Language (MAL) and collaborated extensively with the power industry.

Recent research trends (2022-2025) include:

• Threat modeling languages for ICT and power systems
• Probabilistic attack graph applications in energy flexibility markets and smart cities
• Software Bill of Materials (SBOM) challenges in Java ecosystems
• Dynamic attack graph generation and lazy evaluation techniques
• Cyber-physical security for low-voltage grids and substation automation

Ekstedt supervises 17 Ph.D. students (11 as main supervisor, 6 as co-supervisor) and has mentored numerous postdocs. He leads major projects like the SSF project CHAINS (software supply chain security) and coordinates initiatives within SweGRIDS, HONOR, and SOCCRATES.