Development of a software security assessment instrument to reduce software security risk

Proceedings of the Workshop on Enabling Technologies: Infrastructure for Collaborative Enterprises, WETICE

Volumn 2001-January, Issue , 2001, Pages 144-149

  Gilliam, D P ^a   Kelly, J C ^a   Powell, J D ^a   Bishop, M ^b  

^a CALIFORNIA INSTITUTE OF TECHNOLOGY   (United States)

^b UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Application software; Data security; Databases; Information security; Instruments; National security; Paper technology; Programming; Software maintenance; Software tools

Indexed keywords

APPLICATION PROGRAMS; COMPLIANCE CONTROL; COMPUTER AIDED SOFTWARE ENGINEERING; COMPUTER SOFTWARE; COMPUTER SOFTWARE MAINTENANCE; DATABASE SYSTEMS; FORMAL METHODS; INSTRUMENT TESTING; INSTRUMENTS; LIFE CYCLE; MAINTENANCE; MATHEMATICAL PROGRAMMING; MODEL CHECKING; NASA; NATIONAL SECURITY; RISK ASSESSMENT; SECURITY OF DATA; SOFTWARE DESIGN; SOFTWARE ENGINEERING; SOFTWARE TESTING; VERIFICATION;

ASSESSMENT INSTRUMENTS; CALIFORNIA INSTITUTE OF TECHNOLOGY; JET PROPULSION LABORATORY; PAPER TECHNOLOGY; PROPERTY BASED TESTING; SOFTWARE DEVELOPMENT AND MAINTENANCES; UNIVERSITY OF CALIFORNIA; VERIFICATION OF SOFTWARES;

NETWORK SECURITY;

EID: 48749099042     PISSN: 15244547     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ENABL.2001.953404     Document Type: Conference Paper

References (9)

1. D. Gilliam, J. Kelly, M. Bishop, "Reducing Software Security Risk Through an Integrated Approach," Proc. of the Ninth IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises (June, 2000), Gaithersburg, MD, pp.141-146.
2. Published and maintained by Mitre. The CVE listing can be found at: http://cve.mitre.org/
3. G. Fink, M. Bishop, "Property Based Testing: A New Approach to Testing for Assurance," ACM SIGSOFT Software Engineering Notes 22(4) (July 1997).
4. M. Bishop, "Vulnerabilities Analysis," Proceedings of the Recent Advances in Intrusion Detection (Sep. 1999).
5. J. Dodson, "Specification and Classification of Generic Security Flaws for the Tester's Assistant Library," M.S. Thesis, Department of Computer Science, University of California at Davis, Davis CA (June 1996).
6. J. R. Callahan, S. M. Easterbrook and T. L. Montgomery, "Generating Test Oracles via Model Checking," NASA/WVU Software Research Lab, Fairmont, WV, Technical Report # NASA-IVV-98-015, 1998.
7. nd International Conference on Formal Engineering Methods (1998) pp. 46-54.
8. G. Lowe. Breaking and Fixing the Needham-Schroeder Public Key Protocol Using CSP and FDR. In TACAS96, 1996.
9. W. Wen and F Mizoguchi. Model checking Security Protocols: A Case Study Using SPIN, IMC Technical Report, November, 1998.