Riccardo Scandariato

Proceedings of the ARES 2022: The 17th International Conference on Availability, Reliability and Security, Vienna,Austria, August 23, 2022

STRIPED: A Threat Analysis Method for IoT Systems.

[BibT_eX]

[DOI]

Kamakshi Srikumar

Komal Kashish

Kolja Eggers

Nicolás E. Díaz Ferreyra

Julian Koch

Thorsten Schüppstuhl

Proceedings of the ARES 2022: The 17th International Conference on Availability, Reliability and Security, Vienna,Austria, August 23, 2022

SoK: Security of Microservice Applications: A Practitioners' Perspective on Challenges and Best Practices.

[BibT_eX]

[DOI]

Priyanka Billawa

Anusha Bambhore Tukaram

Nicolás E. Díaz Ferreyra

Georg Simhandl

Proceedings of the ARES 2022: The 17th International Conference on Availability, Reliability and Security, Vienna,Austria, August 23, 2022

Precise Analysis of Purpose Limitation in Data Flow Diagrams.

[BibT_eX]

[DOI]

Proceedings of the ARES 2022: The 17th International Conference on Availability, Reliability and Security, Vienna,Austria, August 23, 2022

2021

SyntIoT: Privacy and security experimentation in consumer-oriented IoT ecosystems.

[BibT_eX]

[DOI]

Tomasz Kosinski

Morten Fjeld

EAI Endorsed Trans. Security Safety, 2021

Finding security threats that matter: Two industrial case studies.

[BibT_eX]

[DOI]

J. Syst. Softw., 2021

Security assurance cases - state of the art of an emerging approach.

[BibT_eX]

[DOI]

Mazen Mohamad

Empir. Softw. Eng., 2021

Secure Software Development in the Era of Fluid Multi-party Open Software and Services.

[BibT_eX]

[DOI]

Proceedings of the 43rd IEEE/ACM International Conference on Software Engineering: New Ideas and Emerging Results, 2021

Asset-driven Security Assurance Cases with Built-in Quality Assurance.

[BibT_eX]

[DOI]

Mazen Mohamad

Örjan Askerdal

Rodi Jolak

Proceedings of the 2nd IEEE/ACM International Workshop on Engineering and Cybersecurity of Critical Systems, 2021

2020

Cross-project Classification of Security-related Requirements.

[BibT_eX]

[DOI]

Mazen Mohamad

CoRR, 2020

REMIND: A Framework for the Resilient Design of Automotive Systems.

[BibT_eX]

[DOI]

Proceedings of the IEEE Secure Development, SecDev 2020, Atlanta, GA, USA, 2020

JavaScript Malware Detection Using Locality Sensitive Hashing.

[BibT_eX]

[DOI]

Stefan Carl Peiser

Ludwig Friborg

Francisco Gomes de Oliveira Neto

Proceedings of the ICT Systems Security and Privacy Protection, 2020

Secure Data-Flow Compliance Checks between Models and Code based on Automated Mappings.

[BibT_eX]

[DOI]

Proceedings of the Software Engineering 2020, 2020

Automating the early detection of security design flaws.

[BibT_eX]

[DOI]

Proceedings of the MoDELS '20: ACM/IEEE 23rd International Conference on Model Driven Engineering Languages and Systems, 2020

Perception and Acceptance of an Autonomous Refactoring Bot.

[BibT_eX]

[DOI]

Proceedings of the 12th International Conference on Agents and Artificial Intelligence, 2020

Contextualisation of Data Flow Diagrams for Security Analysis.

[BibT_eX]

[DOI]

Proceedings of the Graphical Models for Security - 7th International Workshop, 2020

Security assurance cases for road vehicles: an industry perspective.

[BibT_eX]

[DOI]

Proceedings of the ARES 2020: The 15th International Conference on Availability, 2020

2019

Finding Security Threats That Matter: An Industrial Case Study.

[BibT_eX]

[DOI]

CoRR, 2019

Towards Automated Security Design Flaw Detection.

[BibT_eX]

[DOI]

Proceedings of the 34th IEEE/ACM International Conference on Automated Software Engineering Workshops, 2019

Current and future bots in software development.

[BibT_eX]

[DOI]

Linda Erlenhov

Philipp Leitner

Proceedings of the 1st International Workshop on Bots in Software Engineering, 2019

Flaws in Flows: Unveiling Design Flaws via Information Flow Analysis.

[BibT_eX]

[DOI]

Katja Tuma

Musard Balliu

Proceedings of the IEEE International Conference on Software Architecture, 2019

Inspection guidelines to identify security design flaws.

[BibT_eX]

[DOI]

Proceedings of the 13th European Conference on Software Architecture, 2019

2018

Threat analysis of software systems: A systematic literature review.

[BibT_eX]

[DOI]

Katja Tuma

Gül Çalikli

J. Syst. Softw., 2018

A Lingua Franca for Security by Design.

[BibT_eX]

[DOI]

Proceedings of the 2018 IEEE Cybersecurity Development, SecDev 2018, Cambridge, MA, USA, 2018

Generative secure design, defined.

[BibT_eX]

[DOI]

Jennifer Horkoff

Robert Feldt

Proceedings of the 40th International Conference on Software Engineering: New Ideas and Emerging Results, 2018

Back to the Drawing Board - Bringing Security Constraints in an Architecture-centric Software Development Process.

[BibT_eX]

[DOI]

Proceedings of the 4th International Conference on Information Systems Security and Privacy, 2018

Privacy Compliance Via Model Transformations.

[BibT_eX]

[DOI]

Thibaud Antignac

Gerardo Schneider

Proceedings of the 2018 IEEE European Symposium on Security and Privacy Workshops, 2018

Two Architectural Threat Analysis Techniques Compared.

[BibT_eX]

[DOI]

Katja Tuma

Proceedings of the Software Architecture, 2018

2017

The Effect of Dimensionality Reduction on Software Vulnerability Prediction Models.

[BibT_eX]

[DOI]

Jeffrey Stuckman

James Walden

IEEE Trans. Reliab., 2017

Design notations for secure software: a systematic literature review.

[BibT_eX]

[DOI]

Softw. Syst. Model., 2017

A Modular Meta-model for Security Solutions.

[BibT_eX]

[DOI]

Proceedings of the Companion to the first International Conference on the Art, 2017

A Model for Provably Secure Software Design.

[BibT_eX]

[DOI]

Proceedings of the 5th IEEE/ACM International FME Workshop on Formal Methods in Software Engineering, 2017

Traceability Metrics as Early Predictors of Software Defects?

[BibT_eX]

[DOI]

Bashar Nassar

Proceedings of the 2017 IEEE International Conference on Software Architecture, 2017

Towards Security Threats that Matter.

[BibT_eX]

[DOI]

Proceedings of the Computer Security - ESORICS 2017 International Workshops, 2017

Theta Architecture: Preserving the Quality of Analytics in Data-Driven Systems.

[BibT_eX]

[DOI]

Vasileios Theodorou

Ilias Gerostathopoulos

Proceedings of the New Trends in Databases and Information Systems, 2017

2016

Traceability Data in Early Development Phases as an Enabler for Decision Support.

[BibT_eX]

[DOI]

Bashar Nassar

Ali Shahrokni

Proceedings of the Scientific Workshop Proceedings of XP2016, 2016

Data veracity in intelligent transportation systems: The slippery road warning scenario.

[BibT_eX]

[DOI]

Miroslaw Staron

Proceedings of the 2016 IEEE Intelligent Vehicles Symposium, 2016

A Privacy-Aware Conceptual Model for Handling Personal Data.

[BibT_eX]

[DOI]

Thibaud Antignac

Gerardo Schneider

Proceedings of the Leveraging Applications of Formal Methods, Verification and Validation: Foundational Techniques, 2016

Is Newer Always Better?: The Case of Vulnerability Prediction Models.

[BibT_eX]

[DOI]

Aram Hovsepyan

Proceedings of the 10th ACM/IEEE International Symposium on Empirical Software Engineering and Measurement, 2016

Static Analysis and Penetration Testing from the Perspective of Maintenance Teams.

[BibT_eX]

[DOI]

Mariano Ceccato

Proceedings of the 10th ACM/IEEE International Symposium on Empirical Software Engineering and Measurement, 2016

2015

A descriptive study of Microsoft's threat modeling technique.

[BibT_eX]

[DOI]

Kim Wuyts

Requir. Eng., 2015

SoSPa: A system of Security design Patterns for systematically engineering secure systems.

[BibT_eX]

[DOI]

Proceedings of the 18th ACM/IEEE International Conference on Model Driven Engineering Languages and Systems, 2015

Do Security Patterns Really Help Designers?

[BibT_eX]

[DOI]

Proceedings of the 37th IEEE/ACM International Conference on Software Engineering, 2015

MASC: Modelling Architectural Security Concerns.

[BibT_eX]

[DOI]

Laurens Sion

Proceedings of the 7th IEEE/ACM International Workshop on Modeling in Software Engineering, 2015

2014

Empirical Assessment of Security Requirements and Architecture: Lessons Learned.

[BibT_eX]

[DOI]

Proceedings of the Engineering Secure Future Internet Services and Systems, 2014

Predicting Vulnerable Software Components via Text Mining.

[BibT_eX]

[DOI]

IEEE Trans. Software Eng., 2014

Change patterns - Co-evolving requirements and architecture.

[BibT_eX]

[DOI]

Softw. Syst. Model., 2014

Empirical evaluation of a privacy-focused threat modeling methodology.

[BibT_eX]

[DOI]

Kim Wuyts

J. Syst. Softw., 2014

Design Churn as Predictor of Vulnerabilities?

[BibT_eX]

[DOI]

Int. J. Secur. Softw. Eng., 2014

Evolution of Security Engineering Artifacts: A State of the Art Survey.

[BibT_eX]

[DOI]

Int. J. Secur. Softw. Eng., 2014

Predicting Vulnerable Components: Software Metrics vs Text Mining.

[BibT_eX]

[DOI]

James Walden

Jeff Stuckman

Proceedings of the 25th IEEE International Symposium on Software Reliability Engineering, 2014

2013

Least privilege analysis in software architectures.

[BibT_eX]

[DOI]

Softw. Syst. Model., 2013

Static analysis versus penetration testing: A controlled experiment.

[BibT_eX]

[DOI]

James Walden

Proceedings of the IEEE 24th International Symposium on Software Reliability Engineering, 2013

2012

Extraction of an Architectural Model for Least Privilege Analysis.

[BibT_eX]

[DOI]

Bernard Spitz

Int. J. Secur. Softw. Eng., 2012

Reusable Formal Models for Secure Software Architectures.

[BibT_eX]

[DOI]

Thomas Heyman

Proceedings of the 2012 Joint Working IEEE/IFIP Conference on Software Architecture and European Conference on Software Architecture, 2012

Does organizing security patterns focus architectural choices?

[BibT_eX]

[DOI]

Proceedings of the 34th International Conference on Software Engineering, 2012

2011

A privacy threat analysis framework: supporting the elicitation and fulfillment of privacy requirements.

[BibT_eX]

[DOI]

Requir. Eng., 2011

Integrating Patient Consent in e-Health Access Control.

[BibT_eX]

[DOI]

Int. J. Secur. Softw. Eng., 2011

Composition of least privilege analysis results in software architectures (position paper).

[BibT_eX]

[DOI]

Proceedings of the 7th International Workshop on Software Engineering for Secure Systems, 2011

Requirements-Driven Runtime Reconfiguration for Security.

[BibT_eX]

[DOI]

Olivier-Nathanael Ben David

Benoit Baudry

Proceedings of the Eternal Systems - First International Workshop, 2011

The Security Twin Peaks.

[BibT_eX]

[DOI]

Proceedings of the Engineering Secure Software and Systems - Third International Symposium, 2011

Preserving Aspects via Automation: A Maintainability Study.

[BibT_eX]

[DOI]

Proceedings of the 5th International Symposium on Empirical Software Engineering and Measurement, 2011

2010

SecureChange: Security Engineering for Lifelong Evolvable Systems.

[BibT_eX]

[DOI]

Fabio Massacci

Proceedings of the Leveraging Applications of Formal Methods, Verification, and Validation, 2010

Automated Detection of Least Privilege Violations in Software Architectures.

[BibT_eX]

[DOI]

Proceedings of the Software Architecture, 4th European Conference, 2010

Security in Context: Analysis and Refinement of Software Architectures.

[BibT_eX]

[DOI]

Thomas Heyman

Proceedings of the 34th Annual IEEE International Computer Software and Applications Conference, 2010

From aspect-oriented models to aspect-oriented code?: the maintenance perspective.

[BibT_eX]

[DOI]

Proceedings of the 9th International Conference on Aspect-Oriented Software Development, 2010

2009

On the secure software development process: CLASP, SDL and Touchpoints compared.

[BibT_eX]

[DOI]

Inf. Softw. Technol., 2009

Measuring the interplay of security principles in software architectures.

[BibT_eX]

[DOI]

Proceedings of the Third International Symposium on Empirical Software Engineering and Measurement, 2009

Linking Privacy Solutions to Developer Goals.

[BibT_eX]

[DOI]

Proceedings of the The Forth International Conference on Availability, 2009

Risk-Driven Architectural Decomposition.

[BibT_eX]

[DOI]

Thomas Heyman

Proceedings of the The Forth International Conference on Availability, 2009

2008

Identity in federated electronic healthcare.

[BibT_eX]

[DOI]

Proceedings of the 1st IFIP Wireless Days, 2008

Using Multi-Level Security Annotations to Improve Software Assurance.

[BibT_eX]

[DOI]

Eryk Kylikowski

Proceedings of the 11th IEEE High Assurance Systems Engineering Symposium, 2008

Transforming Security Requirements into Architecture.

[BibT_eX]

[DOI]

Proceedings of the The Third International Conference on Availability, 2008

Hardening XDS-Based Architectures.

[BibT_eX]

[DOI]

Proceedings of the The Third International Conference on Availability, 2008

Application-Oriented Trust in Distributed Computing.

[BibT_eX]

[DOI]

Proceedings of the The Third International Conference on Availability, 2008

Using Security Patterns to Combine Security Metrics.

[BibT_eX]

[DOI]

Proceedings of the The Third International Conference on Availability, 2008

2007

An Analysis of the Security Patterns Landscape.

[BibT_eX]

[DOI]

Proceedings of the Third International Workshop on Software Engineering for Secure Systems, 2007

On the Secure Software Development Process: CLASP and SDL Compared.

[BibT_eX]

[DOI]

Proceedings of the Third International Workshop on Software Engineering for Secure Systems, 2007

Process Activities Supporting Security Principles.

[BibT_eX]

[DOI]

Proceedings of the 31st Annual International Computer Software and Applications Conference, 2007

2006

Towards a measuring framework for security properties of software.

[BibT_eX]

[DOI]

Bart De Win

Proceedings of the 2nd ACM Workshop on Quality of Protection, 2006

Remote Trust with Aspect-Oriented Programming.

[BibT_eX]

[DOI]

Paolo Falcarin

Mario Baldi

Proceedings of the 20th International Conference on Advanced Information Networking and Applications (AINA 2006), 2006

2004

Plicy-based solutions for distributed systems.

[BibT_eX]

[DOI]

PhD thesis, 2004

The Design and Evaluation of a Defense System for Internet Worms.

[BibT_eX]

[DOI]

John C. Knight

Proceedings of the 23rd International Symposium on Reliable Distributed Systems (SRDS 2004), 2004

2002

LMAP: a protocol to automate the setup of logical networks.

[BibT_eX]

[DOI]