A static verification framework for secure peer-to-peer applications

Second International Conference on Internet and Web Applications and Services, ICIW'07

Volumn , Issue , 2007, Pages 8-14

  Zisman, Andrea ^a  

^a CITY UNIVERSITY   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER AIDED DESIGN; COMPUTER PROGRAMMING LANGUAGES; IDENTIFICATION (CONTROL SYSTEMS); MATHEMATICAL MODELS; SECURITY OF DATA; SPECIFICATIONS;

GRAPHICAL TEMPLATE LANGUAGE; SECURITY PROTOCOLS; VERIFICATION PROCESS;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 34548737170     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICIW.2007.11     Document Type: Conference Paper

References (36)

1. Abadi M., Blanchet B., and Fournet C. Just Fast Keying in the Pi Calculus. Proceedings of the 13th European Symposium on Programming (ESOP'04), volume 2986 of Lecture Notes on Computer Science, Spain, 2004.
2. Alexander, I., Misuse cases: Use cases with hostile intent. IEEE Software, 20, 58-66, 2003.
3. Anderson, R., Security Engineering: A guide to Building Dependable Distributed Systems. Wiley Computer Publishing.
4. AVISPA, http://www.avispa-project.org.
5. Chang, C. Symbolic Logic and Mechanical Theorem Proving. Academic Press, 1973.
6. Chess B., Improving Computer Security Using Extended Static Checking, Proc. IEEE Symp. Security and Privacy, IEEE CS Press, 2002.
7. Chess B. and McGraw G., Software Security, IEEE security and Privacy Magazine, 2(2):53-84, 2004.
8. Clarke, E., and Grumberg, O., Model Checking. MIT Press, 1999.
9. Clarke, E.M., Emerson, E.A, and Sistla, A.P. Automatic Verification of Finite-State Concurrent Systems Using temporal Logic Specifications. ACM Transactions on Programming Languages and Systems, 8(2): 244-263, 1986.
10. Crook, R., Ince, D., and Nuseibeh, B., Modelling Access Policies Using Roles in Requirements Engineering. Information and Software Technology, 45(14), 979-991, 2003.
11. nd International Conference on Software Engineering. Track on the Future of Software Engineering, Limerick, Ireland.
12. Duffy, D. A. Principles of automated theorem proving. Wiley, 1991.
13. Dwyer, M.B., Avrunim, G.S., and Corbett, J.C., Patterns in Property Specifications for Finite State Verification, in Proc. of the 21st International Conference on Software engineering (ICSE'99), May 1999.
14. Fernandez, E.B., Larrondo-Petrie, M.M., Sorgente, T., and Vanhilst, M., A Methodology to Develop secure Systems Using Patterns, in Integrating Security and Software Engineering Advances and Future Visions, editors H. Mouratidis and P. Giorgini, ISBN 1-59904-147-2, 2007.
15. Giorgini, P., Massaci, F., and Mylopoulos, J., Requirements Engineering Meets Security: A Case Study on Modelling Secure Electronic Transactions by VISA and Mastercard, Proceedings on the International Conference on Conceptual Modelling (ER), LNCS 2813, Springer-Verlag, 2003.
16. Giorgini, P., Mouratidis, H., and Zannone, N., Modelling Security and Trust with Secure Tropos, in Integrating Security and Software Engineering Advances and Future Visions, editors H. Mouratidis and P. Giorgini, ISBN 1-59904-147-2, 2007.
17. Gritzalis, S., Spinellis, S., Georgiadis P., Security Protocols Over Open Networks and Distributed Systems: Formal Methods for their Analysis, Design, and Verification. Computer Communications, 22(8): 695-707, 1999.
18. Heitmeyer, C., Applying Practical Formal Methods to the Specification and Analysis of Security Porperties.
19. Holzmann, G., Design and Validation of Computer Protocols. Prentice Hall, 1991.
20. Jayaram K.R. and Mathur A.P., Software Engineering for Secure Software - State of the Art: A Survey. Technical report of CERIAS (Purdue University) and SERC, 2005.
21. Jurjens J. Secure System Development with UML. Springer-Verlag 2005
22. Jurjens, J. and Shabalin P. Automated Verification of UMLsec Models for Security Requirements, Proceedings of the Unified Modelling Language Conference (UML 2004), Lisbon, Portugal, LNCS, Springer-Verlag. 2004.
23. Lodderstedt, T., Basin, D., and Dorser, J., SecureUML: A UML-based Modelling Language for Model Driven Security, Proceedings on the UML'02 Conference, LNCS 2460, Springer-Verlag.
24. McDermott, J. And Fox, C., Using Abuse Case Models for Security Requirements Analysis, In ACSAC 99: Proceedings of the 15th Annual Computer Security Applications Conferences, USA, 1999.
25. Meadows, C., Formal Verification of Cryptographic Protocols: A Survey. International Conference on the Theory and Application of Cryptology (ASIACRYPT), 1995.
26. Mouratidis, H., Giorgini, P., and Manson, G., When Security Meets Software Engineering: A Case of Modelling Secure Information Systems. Information Systems, 30(8), 609-629, 2005.
27. Mouratidis H. and Giorgini P., Integrating Security and Software Engineering: An Introduction, in Integrating Security and Software Engineering Advances and Future Visions, editors H. Mouratidis and P. Giorgini, ISBN 1-59904-147-2, 2007.
28. PEPERS. http://www.pepers.org/.
29. th IEEE Computer Security Foundations Workshop (CSFW'95), Ireland, 1995.
30. Senn D., Basin D. and Caronni G., Firewall Conformance Testing, in TestCom, pp. 226-241, 2005.
31. SPIN. http://spinroot.com/spin/whatispin.html
32. Stoneburner, G., Hayden, C., and Feringa, A., Engineering principles for Information Technology Security (A Baseline for Achieving Security), Computer Security Division, Information Technology laboratory National Institute of Standards and Technology, 2001.
33. Van Lamsweerde, A., and Letelier E., Handling Obstacles in Goal-Oriented Requirements Engineering, TSE, 26(10), 2000.
34. Vardi, M.Y., An automata-theoretic approach to linear temporal logic. In Banff Higher Order Workshop, pages 238-266, 1995.
35. st edition, Addison-Wesley, 2001.
36. Yu E., Liu L., Mylopoulos, J., A Social Ontology for Integrating Security and Software Engineering, in in Integrating Security and Software Engineering Advances and Future Visions, editors H. Mouratidis and P. Giorgini, ISBN 1-59904-147-2, 2007.