SecSE 2011
The fifth international workshop on secure software engineering (SecSE'11) was held in Vienna, Austria, on August 23-24 2011. In addition to an invited talk by Gary McGraw, the following papers were presented:
Session 1:
Indicator-based Security Evaluation for Service-oriented Environments
Authors : Christian Jung, Manuel Rudolph, Reinhard Schwarz
Security in Model Driven Development: A Survey
Authors : Jostein Jensen, Martin Gilje Jaatun
Characterising and Analysing Security Requirements Modelling Initiatives
Authors : Peter Karpati, Guttorm Sindre, Andreas L. Opdahl
Session 2:
User-Centered Information Security Policy Development in a Post-Stuxnet World
Authors : Shamal Faily, Ivan Flechais,
Here's Johnny: a Methodology for Developing Attacker Personas
Authors : Andrea Atzeni, Shamal Faily, John Lyle, Cesare Cameroni, Ivan Flechais,
Enhancing fuzzing technique for OKL4 syscalls testing
Authors : Amaury Gauthier, Clément Mazin, Julien Iguchi-Cartigny, Jean-Louis Lanet,
Session 3: (Wednesday)
Optimising CAPTCHA generation to be more usable
Authors : Suliman Alsuhibany, Aad van Moorsel,
Evaluating RBAC Supported Techniques and Their Validation and Verification
Authors : Nafees Qamar, Yves Ledru, Akram Idani,
The JavaSPI Framework for Security Protocol Implementation
Authors : Matteo Avalle, Alfredo Pironti, Davide Pozza, Riccardo Sisto,
SecSE 2010
The fourth international workshop on secure software engineering (SecSE'10) was held in Krakow, Poland, on February 16th 2010. The following papers were presented:
1. Investigating the limitations of Java annotations for input validation
Authors : (Federico Mancini, Dag Hovland, Khalid Mughal, )
2. Practical Experience gained from Modeling Security Goals
Authors : (Christian Jung, Frank Elberzhager, Alessandra Bagnato, Fabio Raiteri, )
3. Security modeling and tool support advantages
Authors : (Egilv Trygve Baadshaug, Gencer Erdogan, Per Håkon Meland )
4. Supporting Authorization Policy Modification in Agile Development of Web Applications
Authors : (Steffen Bartsch)
5. The road to Hell is paved with good intentions: A story of (in)secure software development
Authors : (Richard Sassoon, Martin Gilje Jaatun, Jostein Jensen, )
6. Classification of Buffer Overflow Vulnerability Monitors
Authors : (Hossain Shahriar, Mohammad Zulkernine )
7. Katana: A Hot Patching Framework for ELF Executables
Authors : (Ashwin Ramaswamy, Sergey Bratus, Sean W. Smith, Michael E. Locasto, )
8. Analysing and Visualising Security and Usability in IRIS
Authors : (Shamal Faily, Ivan Flechais)
9. Configuration Fuzzing for Software Vulnerability Detection
Authors : (Huning Dai, Christian Murphy, Gail Kaiser, )
10. Link-Layer Aware Intelligent Scanning and Mitigation Agents
Authors : (Ziyad Al-Salloum, Stephen Wolthusen, )
We received a total of 18 submissions this year, reflecting a 56% acceptance ratio.
SecSE 2009
The third international workshop on secure software engineering (SecSE'09) was held in Fukuoka, Japan, March 16th-19th 2009.
We considered 15 papers, and accepted 10 which are available in full text in the ARES'09 proceedings.
SecSE 2008
The second international workshop on secure software engineering (SecSE'08) was held in Barcelona in March 2008, and the following papers were presented:
1. Security requirement engineering at a Telecom provider
Albin Zuccato, Viktor Endersz and Nils Daniels
2.Identifying Security Aspects in Early Development Stages
Takao Okubo and Hidehiko Tanaka
3. Using security patterns to combine security metrics
Thomas Heyman, Riccardo Scandariato, Christophe Huygens and Wouter Joosen
4. Covering Your Assets in Software Engineering
Martin Gilje Jaatun and Inger Anne Tøndel
5. Secure Software Design in Practice
Per Håkon Meland and Jostein Jensen
6. A Non-Intrusive Approach to Enhance Legacy Embedded Control Systems with Cyber Protection Features
Shangping Ren and Kevin Kwiat
7. Towards Incorporating Discrete-Event Systems in Secure Software Development
Sarah Whittaker, Mohammad Zulkernine and Karen Rudie
8. How to Open a File and Not Get Hacked
James Kupsch and Barton Miller
9. Rules of Thumb for Developing Secure Software: Analyzing and consolidating two proposed sets of rules
Holger Peine
Full-text versions of the papers are available from IEEEXplore.
SecSE 2007
The first international workshop on secure software engineering (SecSE'07) was held in Vienna in April 2007, and the following papers were presented:
1. Using Privacy Process Patterns for Incorporating Privacy Requirements into the System Design Process
Christos Kalloniatis, Evangelia Kavakli, Stefanos Gritzalis
2. How can the developer benefit from security modeling?
Shanai Ardi, David Byers, Per Håkon Meland, Inger Anne Tøndel, Nahid Shahmehri
3. AProSec: an Aspect for Programming Secure Web Applications
Laurence Duchien, Roberto Gomez, Gabriel Hermosillo, Lionel Seinturier
4. Empirical and statistical analysis of techniques for threat management based on risk analysis
Koen Buyens, Bart De Win, Wouter Joosen
5. Secure Software Development through Coding Conventions and Frameworks
Takao Okubo, Hidehiko Tanaka
6. Pastures: Towards Usable Security Policy Engineering
Sergey Bratus, Doug McIlroy, Alex Ferguson, Sean Smith
7. A Novel Approach to Building Secure Systems
Dragan Vidakovic, Dejan Simic
These papers can be found in the Proceedings of ARES 2007