Towards a measuring framework for security properties of software

Proceedings of the 2nd ACM Workshop on Quality of Protection, QoP'06. Co-located with the 13th ACM Conference on Computer and Communications Security, CCS'06

Volumn , Issue , 2006, Pages 27-30

  Scandariato, Riccardo ^a   De Win, Bart ^a   Joosen, Wouter ^a  

^a UNIVERSITY OF LEUVEN   (Belgium)

Author keywords

Secure design; Security properties

Indexed keywords

COMPUTER SOFTWARE SELECTION AND EVALUATION; SECURITY OF DATA; SECURITY SYSTEMS; SOFTWARE ARCHITECTURE;

SECURE DESIGN; SECURITY PROPERTIES; SOFTWARE ARTIFACTS; SOFTWARE DEVELOPMENT PHASES;

SOFTWARE DESIGN;

EID: 34547462739     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1179494.1179500     Document Type: Conference Paper

References (9)

1. S. Butler. Security attribute evaluation method: a cost-benefit approach. In International Conference on Software Engineering (ICSE), Orlando, USA, May 2002.
2. D. Chapin and S. Akridge. How can security be measured? Information Systems Control Journal, 2, 2005.
3. S. Chidamber and C. Kemerer. A metrics suite for object oriented design. IEEE Transactions on Software Engineering, 20(6):476-493, June 1994.
4. A. Garcia, C. Sant'Anna, E. Figueiredo, U. Kulesza, C. Lucena, and A. von Staa. Modularizing design patterns with aspects: a quantitative study. In International Conference on Aspect-Oriented Software Development, Chicago, USA, March 2005.
5. M. Graff and K. van Wyk. Secure coding: principles and practices. O'Reilly, 2003.
6. M. Lindvall, R. Tesoriero, and P. Costa. An empirically-based process for software architecture evaluation. Empirical Software Engineering, 8(1):83-108, March 2003.
7. R. Reissing. Towards a model for object-oriented design measurement. In Workshop on Quantitative Approaches in Object-Oriented Software Engineering (QAOOSE), Budapest, Hungary, June 2001.
8. G. Stoneburner, C. Hayden, and A. Feringa. Engineering principles for information technology security. NIST Special Publication 800-27, Revision A, June 2004.
9. M. Swanson, N. Bartol, J. Sabato, J. Hash, and L. Graffo. Security metrics guide for information technology systems. NIST Special Publication 800-55, July 2003.