Jan Jürjens: Publications and Talks
Hot off the Press
  • J. Jürjens, Model-based Security Engineering, 12th International School on Foundations of Security Analysis and Design (FOSAD 2012), Bertinoro, Italy, Sep. 3-8 2012
  • M. Ochoa, J. Jürjens, D. Warzecha A Sound Decision Procedure for the Compositionality of Secrecy, 4th International Symposium on Engineering Secure Software and Systems (ESSOS 2012), Springer, LNCS, 2012.
  • J. Jürjens: Den Nebel lichten: Von Compliance-Regularien zu testbaren Sicherheitsanforderungen. In: iqnite 2012, Düsseldorf, 24.-26.04.2012.
  • E. Fourneret, F. Bouquet, M. Ochoa, J. Jürjens, S. Wenzel: Vérification et Test pour des systèmes évolutifs. In: AFADL 2012, Grenoble, 11.-13.01.2012.
  • C. Wessel, T. Humberg, S. Wenzel, J. Jürjens: Frühzeitige modellbasierte Risikoanalyse für mobile, verteilte Anwendungen. In: Workshop "Zertifizierung und modellgetriebene Entwicklung sicherer Software (ZeMoSS'12)", Software Engineering Konferenz (SE'12), Berlin 2012.
  • M. Aizatulin, A.D. Gordon, J. Jürjens, Extracting and Verifying Cryptographic Models from C Protocol Code by Symbolic Execution (bibtex TODO), 18th ACM Conference on Computer and Communications Security (CCS 2011), ACM 2011
  • A. Bauer, J. Jürjens, Yijun Yu. Run-Time Security Traceability for Evolving Systems. The Computer Journal, Oxford Univ. Press, vol. 54, no. 1, 2011, pp. 58-87. (pre-publication draft, bibtex TODO)
  • F. Dupressoir, A.D. Gordon, J. Jürjens, D. Naumann: Guiding a General-Purpose C Verifier to Prove Cryptographic Protocols. 24th IEEE Computer Security Foundations Symposium (CSF 2011), IEEE 2011. ( bibtex TODO). Long version: TechReport MSR-TR-2011-50
  • K. Schneider, E. Knauss, S. Houmb, S. Islam, J. Jürjens: Enhancing Security Requirements Engineering by Organisational Learning. In: Requirements Engineering Journal (REJ) (Springer Verlag), accepted for publication (15 Nov. 2011). Special Issue on REFSQ'11. DOI: 10.1007/s00766-011-0141-0.
  • S. Islam, H. Mouratidis, J. Jürjens. A Framework to Support Alignment of Secure Software Engineering with Legal Regulations. Journal of Software and Systems Modeling (SoSyM), vol. 10, no. 3, 2011, pp. 369--394. Special Issue on Non-Functional Properties in Domain-Specific Modeling. (pre-publication draft, bibtex TODO, SpringerLink TODO)
  • F. Massacci, F. Bouquet, E. Fourneret, J. Jürjens, M.S. Lund, S. Madelenat, J.T. Mühlberg, F. Paci, S. Paul, B. Solhaug, S. Wenzel and F. Piessens: Orchestrating Security and System Engineering for Evolving Systems (Invited paper). 4th European Conference ServiceWave 2011, LNCS, Springer 2011.
  • M. Aizatulin, F. Dupressoir, A.D. Gordon, J. Jürjens: Verifying Cryptographic Code in C: Some Experience and the Csec Challenge (Invited paper). 8th International Workshop on Formal Aspects of Security & Trust (FAST2011), Leuven, Belgium, September 15-16, 2011. (paper (TODO), bibtex TODO).
  • J. Jürjens, B. Nuseibeh, Software Engineering for Secure Systems (slides (TODO)), 33rd International Conference on Software Engineering (ICSE 2011), Technical Briefing. ACM 2011.
  • J. Jürjens: Automated Security Hardening for Evolving UML Models. 33rd International Conference on Software Engineering (ICSE 2011), Research tool paper. ACM 2011. (paper (TODO), bibtex TODO)
  • H. Schmidt, J. Jürjens: Connecting Security Requirements Analysis and Secure Design Using Patterns and UMLsec. In: 23rd International Conference on Advanced Information System Engineering (CAiSE 2011), London, 20-24 June 2011. Lecture Notes in Computer Science TBD, Springer, pp. TBD. (paper (TODO), bibtex (TODO))
  • D. Hatebur, M. Heisel, J. Jürjens, H. Schmidt: Systematic Development of UMLsec Design Models Based On Security Requirements. In: 14th International Conference on Fundamental Approaches to Software Engineering (FASE 2011), Saarbrücken, Germany, 26 March - 3 April, 2011. Lecture Notes in Computer Science TBD, Springer, pp. TBD. (bibtex (TODO))
  • J. Jürjens, L. Marchal, M. Ochoa, H. Schmidt: Incremental Security Verication for Evolving UMLsec models. In: Seventh European Conference on Modelling Foundations and Applications (ECMFA 2011), Birmingham 6-9 June 2011. (paper TODO, slides TODO, bibtex TODO)
  • J. Jürjens, M. Ochoa, H. Schmidt, L. Marchal, S.H. Houmb, S. Islam: Modelling Secure Systems Evolution: Abstract and Concrete Change Specifications (invited lecture). In: 11th School on Formal Methods (SFM 2011), Bertinoro (Italy) 13-18 June 2011.
  • E. Knauss, S. Houmb, K. Schneider, S. Islam, J. Jürjens: Supporting Requirements Engineers in Recognising Security Issues. In: 17th International Working Conference on Requirements Engineering: Foundation for Software Quality (REFSQ 2011), Essen, 28-30 Mar. 2011. Lecture Notes in Computer Science TBD, Springer, pp. TBD. (paper (TODO), bibtex (TODO))
  • E. Fourneret, M. Ochoa, F. Bouquet, J. Botella, J. Jürjens, P. Yousefi: Model-Based Security Verification and Testing for Smart-cards. In: Sixth International Conference on Availability, Reliability and Security (AReS 2011), Vienna, August 22-26, 2011.
  • S. Taubenberger, J. Jürjens, B. Nuseibeh, Yijun Yu: Problem Analysis of Traditional IT-Security Risk Assessment Methods - An Experience Report from the Insurance and Auditing Domain. In: 26th IFIP International Information Security Conference (IFIP SEC 2011), Lucerne, 7-9 June 2011. (paper (TODO))
  • S. Islam, H. Mouratidis, J. Jürjens: A framework to support alignment of secure software engineering with legal regulations (Keynote). In: 8th International Workshop on Security in Information Systems (WOSIS 2011), 13th International Conference on Enterprise Information Systems (ICEIS 2011), Beijing, June 2011 (paper (TODO))
  • M.S. Sadi, M.N. Uddin, M.M.R. Khan, J. Jürjens. Mitigating Soft Error Risks through Protecting Critical Variables and Blocks. International Conference on Computer Science, Engineering & Applications (ICCSEA'11), LNCS, Springer, 2011.
  • J. Jürjens, S. Taubenberger: Studie zu IT-Risikobewertungen in der Praxis. In: D-A-CH Security 2011, Gemeinsame Arbeitskonferenz der GI, OCG, BITKOM, SI, TeleTrusT, Oldenburg 20.-21.09.2011. (paper, slides, audio, bibtex TODO)
  • M. Peschke, M. Hirsch, J. Jürjens, S. Braun: Werkzeuggestützte Identifikation von IT-Sicherheitsrisiken. In: D-A-CH Security 2011, Gemeinsame Arbeitskonferenz der GI, OCG, BITKOM, SI, TeleTrusT, Oldenburg 20.-21.09.2011. (paper, slides, audio, bibtex TODO)
  • J. Jürjens: Security and Compliance in Clouds. In: CloudConf 2011, Munich, 21-22 Nov. 2011. (slides, audio)
  • J. Jürjens: Security and Compliance in Clouds. In: CloudDays 2011, Cologne and Stuttgart, 15+17 Nov. 2011. (slides, audio)
  • J. Jürjens: Security and Compliance in Clouds. In: IT-Compliance 2011, 4th Pan-European Conference. Berlin, 29.-30.06.2011.
  • J. Jürjens, K. Beckers: Security and Compliance in Clouds. In: OOP 2011, Munich, 24-28 Jan. 2011. (slides, audio)
  • J. Jürjens, M. Hirsch, J.-C. Küster: Werkzeuggestützte Qualitätssicherung von Sicherheits- und Compliance-Anforderungen an den Einsatz von Cloud-Computing. In: iqnite 2011, Düsseldorf, 24.-26.05.2011. (slides (TODO))