An integrated security verification and security solution design trade-off analysis approach

Integrating Security and Software Engineering: Advances and Future Visions

Volumn , Issue , 2006, Pages 190-219

  Houmb, S H ^a   Georg, G ^b   Jurjens J ^c   France, R ^b  

^a NORWEGIAN UNIVERSITY OF SCIENCE AND TECHNOLOGY   (Norway)

^b Department of Environmental and Radiological Health Sciences   (United States)

^c TECHNICAL UNIVERSITY OF MUNICH   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 84899177670     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.4018/978-1-59904-147-6.ch009     Document Type: Chapter

References (33)

1. ACTIVE. (2001). EP-27046-ACTIVE, Final Prototype and User Manual. Version 2.0. Deliverable 4.2.2.
2. AS/NZS 4360. (2004). AS/NZS 4360:2004: Australian/New Zealand Standard for Risk Management. Standards Australia, Strathfield.
3. Börger, E., Cavarra, A., & Riccobene, E. (2000). Modeling the dynamics of UML state machines. In Y. Gurevich, P. Kutter, M. Odersky, & L. Thiele (Eds.), Abstract state machines: Theory and applications (Vol. 1019, pp. 223-241). LNCS, Springer.
4. Clarke, S. (2002). Extending standard UML with model composition semantics. Science of Computer Programming, 44(1), 71-100.
5. Clarke, S., & Banaissad, E. (2005). Aspect-oriented analysis and design. Reading, MA: Addison-Wesley Professional.
6. CORAS Platform. (2005). CORAS risk assessment platform, version 2.0. Retrieved September 26, 2005, from http://sourceforge.net/project/showfiles.php?group_id=88350&package_id=133388&release_id=276903
7. CORAS Project. (2005). IST-2000-25031 CORAS: A platform for risk analysis of security critical systems. Retrieved October 28, 2005, from http://coras.sourceforge.net/
8. nd IFIP Conference on E-Commerce, E-Business, E-Government (I3E 2002) (pp. 159-175). Volume 233 of IFIP Conference Proceedings, Kluwer.
9. France, R. B., Kim, D. K., Ghosh, S., & Song, E. (2004a). A UML-based pattern specification technique. IEEE Transactions on Software Engineering, 30(3), 193-206. IEEE Computer Society.
10. France, R. B., Ray, I., Georg, G., & Ghosh, S. (2004b). An aspect-oriented approach to design modeling. IEE Proceedings on Software, Special Issue on Early Aspects: Aspect-Oriented Requirements Engineering and Architecture Design, 151(4), 173-185. IEEE Computer Society.
11. Gran, B. A. (2002). The use of Bayesian Belief Networks for combining disparate sources of information in the safety assessment of software based systems. Doctoral of engineering thesis 2002:35, Department of Mathematical Science, Norwegian University of Science and Technology.
12. th World Multi-Conference on Systemics, Cybernetics and Informatics (SCI 2005) (Vol. 1, pp. 228-235), Orlando, Florida.
13. th World Multi-Conference on Systemics, Cybernetics and Informatics (SCI 2005), Orlando, Florida.
14. Houmb, S. H., & Georg, G. (2005a). The Aspect-Oriented Risk-Driven Development (AORDD) Framework. In O. Benediktsson, P. Abrahamsen, D. Dalcher, E. T. Hannberg, R. O'Connor, & H. Thorbergsson. (Eds.), Proceedings of the International Conference on Software Development (SWDC/REX) (pp. 81-91), Reykjavik, Iceland. Gutenberg.
15. th IEEE International Conference on Engineering of Complex Computer Systems (ICECCS 2005) (pp. 185-195). Shanghai, China.
16. ™, ver. 6.3. Alborg, Denmark. Retrieved August 24, 2005, from http://www.hugin.dk
17. ISO 15408. (1999). ISO 15408 Common Criteria for Information Technology Security Evaluation. Retrieved from http://www.commoncriteria.org/
18. ISO/IEC 13335. (2001). IGuidelines for management of IT Security-Part 1: Concepts and models. Retrieved from http://www.iso.org
19. Jacobson, I. (2003a. October). Case for aspects-Part I. Software Development Magazine, 32-37. Retrieved from http://www.jaczone.com/papers/10sd.Jacobson32-37.pdf
20. Jacobson, I. (2003b, November). Case for aspects-Part II. Software Development Magazine, 42-48. Retrieved from http://www.jaczone.com/papers/11sd.Jacobson44-48.pdf
21. Jensen, F. (1996). An introduction to Bayesian Network. London: UCL Press.
22. Jürjens, J. (2004). Secure systems development with UML. Berlin Heidelberg, New York: Springer-Verlag.
23. Jürjens, J. (2005). UMLsec-Webinterface: Tool-support for security verification using UMLsec. Retrieved November 8, 2005, from http://www4.in.tum.de/~umlsec/csduml/interface/
24. th International Conference on Model Driven Engineering Languages and Systems (MoDELS 2005) (pp. 142-155). Montego Bay, Jamaica.
25. Kasman, R., Asundi, J., & Klein, M. (2002). Making architecture design decisions: An economic approach. Technical report CMU/SEI-2002-TR-035. Retrieved from http://www.sei.cmu.edu/pub/documents/02.reports/pdf/02tr035.pdf
26. Kazman, R., Klein M., & Clements, P. (2000). ATAM: Method for architecture evaluation. Technical report CMU/SEI-2000-TR-004. Retrieved from http://www.sei.cmu.edu/pub/documents/00.reports/pdf/00tr004.pdf
27. Kiczales, G., Hilsdale, E., Hugunin, J., Kersten, M., Palm, J., & Griswold, W. (2001). Getting started with AspectJ. Communications of the ACM, 10(44), 59-65. ACM.
28. Littlewood, B., Brocklehurst, S., Fenton, N., Mellor, P., Page, S., Wright, D., Dobson, J., McDermid J., & Gollmann, D. (1993). Towards operational measures of computer security. Journal of Computer Security, 2(2/3), 211-229.
29. Object Management Group. (2003). OMG MDA guide. OMG. Version 1.0.1. Retrieved from http://www.omg.org
30. Pearl, J. (1988). Probabilistic reasoning in intelligent systems: Network for plausible inference. Cambridge, UK: Cambridge University Press.
31. SERENE Project. (1999). SERENE: Safety and Risk Evaluation using Bayesian Nets. ESPIRIT Framework IV no 22187. Retrieved October 30, 2005, from http://www.hugin.dk/serene/
32. Stølen, K., den Braber, F., Dimitrakos, T., Fredriksen, R., Gran, B. A., Houmb, S. H., Stamatiou, Y. C., & Aagedal, J. Ø. (2002). Model-based risk assessment in a component-based software engineering process: The CORAS approach to identify security risks. In F. Barbier (Ed.), Business component-based software engineering (pp. 189-207). Kluwer.
33. th International Conference on UML (pp. 84-97). Volume 3273 of LNCS. Springer-Verlag.