Vulnerability effect propagation in service-oriented architectures

Lecture Notes in Informatics (LNI), Proceedings - Series of the Gesellschaft fur Informatik (GI)

Volumn P-128, Issue , 2008, Pages 473-484

  Lowis, Lutz ^a   Höhn, Sebastian ^a   Gilliot, Maike ^a  

^a UNIVERSITY OF FREIBURG   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

BUSINESS PROCESS; BUSINESS PROCESS MODEL; COMPLEX SERVICES; SOFTWARE VULNERABILITIES;

RISK MANAGEMENT; SERVICE ORIENTED ARCHITECTURE (SOA);

INFORMATION SERVICES;

EID: 84874227644     PISSN: 16175468     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (19)

1. Matt Bishop. Computer Security. Addison-Wesley, Pearson Education, Boston, USA, 2003.
2. Chris Vanden Berghe, James Riordan, and Frank Piessens. A Vulnerability Taxonomy Methodology applied to Web Services. In Helger Lipmaa, Dieter Gollman, editor, Proceedings of the 10th Nordic Workshop on Secure IT Systems (NordSec 2005), 2005.
3. Brian Chess and Gary McGraw. Static Analysis for Security. In IEEE Security and Privacy. IEEE Computer Society, 2004.
4. MITRE Corporation. Open Vulnerability and Assessment Language (OVAL), 2007.
5. Vlad Gorelik. One Step Ahead. In ACM Queue. ACM, 2007.
6. Ivan Victor Krsul. Software Vulnerability Analysis (Ph. D. Thesis). Purdue University, 1998.
7. Michael Martin, Benjamin Livshits, and Monica S. Lam. Finding Application Errors and Security Flaws Using PQL: a Program Query Language. In 20th Annual ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications, San Diego, California, USA, 2005.
8. National Institute of Standards and Technology. National Vulnerability Database, 2007.
9. OASIS. Reference Model for Service Oriented Architecture 1.0, 2006.
10. Object Management Group (OMG). Business Process Modeling Notation (BPMN), 2006.
11. Xinming Ou, Wayne F. Boyer, and Miles A. McQueen. A Scalable Approach to Attack Graph Generation. In Proceedings of the Conference on Computer and Communications Security, Alexandria, Virginia, USA, 2006. ACM.
12. Open Web Application Security Project (OWASP). VulnXML, 2002.
13. Open Source Vulnerability Database (OSVDB). Open Source Vulnerability Database (OS-VDB), 2007.
14. Organization for the Advancement of Structured Information Standards (OASIS). Application Vulnerability Description Language (AVDL), 2004.
15. Organization for the Advancement of Structured Information Standards (OASIS). Business Process Execution Language (BPEL), 2007.
16. Forum Of Incident Response and Security Teams (FIRST). Common Vulnerability Scoring System, 2007.
17. SecurityFocus. SecurityFocus Vulnerability Database, 2007.
18. Sam Weber, Paul A. Karger, and Amit Paradkar. A Software Flaw Taxonomy: Aiming Tools At Security. In Software Engineering for Secure Systems, St. Louis, Missouri, USA, 2005. ACM.
19. IBM Internet Security Systems X-Force. Alerts and Advisories, 2007.