|
|
Hot off the Press
- J. Jürjens, Model-based Security Engineering,
12th International School on Foundations of Security Analysis
and Design (FOSAD 2012), Bertinoro, Italy, Sep. 3-8 2012
- M. Ochoa, J. Jürjens, D. Warzecha
A Sound Decision Procedure for the Compositionality of Secrecy,
4th International Symposium on Engineering Secure Software and Systems (ESSOS 2012),
Springer, LNCS, 2012.
- J. Jürjens:
Den Nebel lichten: Von Compliance-Regularien zu testbaren Sicherheitsanforderungen.
In: iqnite 2012,
Düsseldorf, 24.-26.04.2012.
- E. Fourneret, F. Bouquet, M. Ochoa, J. Jürjens, S. Wenzel:
Vérification et Test pour des systèmes évolutifs.
In: AFADL 2012,
Grenoble, 11.-13.01.2012.
- C. Wessel, T. Humberg, S. Wenzel, J. Jürjens:
Frühzeitige modellbasierte Risikoanalyse für mobile, verteilte Anwendungen.
In: Workshop "Zertifizierung und modellgetriebene Entwicklung sicherer Software (ZeMoSS'12)",
Software Engineering Konferenz (SE'12), Berlin 2012.
- M. Aizatulin, A.D. Gordon, J. Jürjens,
Extracting and Verifying Cryptographic Models from C Protocol Code by Symbolic Execution
(bibtex TODO),
18th ACM Conference on Computer and Communications Security (CCS 2011),
ACM 2011
- A. Bauer, J. Jürjens, Yijun Yu.
Run-Time Security Traceability for Evolving Systems.
The Computer Journal, Oxford Univ. Press,
vol. 54, no. 1, 2011, pp. 58-87.
(pre-publication draft, bibtex TODO)
- F. Dupressoir, A.D. Gordon, J. Jürjens, D. Naumann:
Guiding a General-Purpose C Verifier to Prove Cryptographic Protocols.
24th IEEE Computer Security Foundations Symposium (CSF 2011),
IEEE 2011.
( bibtex TODO).
Long version: TechReport MSR-TR-2011-50
- K. Schneider, E. Knauss, S. Houmb, S. Islam, J. Jürjens:
Enhancing Security Requirements Engineering by Organisational Learning.
In: Requirements Engineering Journal (REJ) (Springer Verlag), accepted for publication (15 Nov. 2011).
Special Issue on REFSQ'11. DOI: 10.1007/s00766-011-0141-0.
- S. Islam, H. Mouratidis, J. Jürjens. A Framework to Support Alignment of Secure Software Engineering with Legal Regulations.
Journal of Software and Systems Modeling (SoSyM), vol. 10, no. 3, 2011, pp. 369--394.
Special Issue on Non-Functional Properties in Domain-Specific Modeling.
(pre-publication draft, bibtex TODO,
SpringerLink TODO)
- F. Massacci, F. Bouquet, E. Fourneret, J. Jürjens, M.S. Lund, S. Madelenat, J.T. Mühlberg, F. Paci, S. Paul, B. Solhaug, S. Wenzel and F. Piessens:
Orchestrating Security and System Engineering for Evolving Systems (Invited paper).
4th European Conference ServiceWave 2011, LNCS, Springer 2011.
- M. Aizatulin, F. Dupressoir, A.D. Gordon, J. Jürjens:
Verifying Cryptographic Code in C: Some Experience and the Csec Challenge (Invited paper).
8th International Workshop on Formal Aspects of Security & Trust (FAST2011),
Leuven, Belgium,
September 15-16, 2011.
(paper (TODO), bibtex TODO).
- J. Jürjens, B. Nuseibeh, Software Engineering for Secure Systems (slides (TODO)),
33rd International Conference on Software Engineering (ICSE 2011),
Technical Briefing. ACM 2011.
- J. Jürjens:
Automated Security Hardening for Evolving UML Models.
33rd International Conference on Software Engineering (ICSE 2011),
Research tool paper. ACM 2011.
(paper (TODO), bibtex TODO)
- H. Schmidt, J. Jürjens:
Connecting Security Requirements Analysis and Secure Design Using Patterns and UMLsec.
In: 23rd International Conference on Advanced Information System Engineering
(CAiSE 2011),
London, 20-24 June 2011.
Lecture Notes in Computer Science TBD, Springer, pp. TBD.
(paper (TODO), bibtex (TODO))
- D. Hatebur, M. Heisel, J. Jürjens, H. Schmidt:
Systematic Development of UMLsec Design Models Based On Security Requirements.
In: 14th International Conference on Fundamental Approaches to Software Engineering
(FASE 2011),
Saarbrücken, Germany, 26 March - 3 April, 2011.
Lecture Notes in Computer Science TBD, Springer, pp. TBD.
(bibtex (TODO))
- J. Jürjens, L. Marchal, M. Ochoa, H. Schmidt:
Incremental Security Verication for Evolving UMLsec models.
In: Seventh European Conference on Modelling Foundations and Applications (ECMFA 2011), Birmingham 6-9 June 2011.
(paper TODO, slides TODO, bibtex TODO)
- J. Jürjens, M. Ochoa, H. Schmidt, L. Marchal, S.H. Houmb, S. Islam:
Modelling Secure Systems Evolution: Abstract and Concrete Change Specifications (invited lecture).
In: 11th School on Formal Methods (SFM 2011), Bertinoro (Italy) 13-18 June 2011.
- E. Knauss, S. Houmb, K. Schneider, S. Islam, J. Jürjens:
Supporting Requirements Engineers in Recognising Security Issues.
In: 17th International Working Conference on Requirements Engineering: Foundation for Software Quality (REFSQ 2011),
Essen, 28-30 Mar. 2011.
Lecture Notes in Computer Science TBD, Springer, pp. TBD.
(paper (TODO), bibtex (TODO))
- E. Fourneret, M. Ochoa, F. Bouquet, J. Botella, J. Jürjens, P. Yousefi:
Model-Based Security Verification and Testing for Smart-cards.
In: Sixth International Conference on Availability, Reliability and Security (AReS 2011),
Vienna, August 22-26, 2011.
- S. Taubenberger, J. Jürjens, B. Nuseibeh, Yijun Yu:
Problem Analysis of Traditional IT-Security Risk Assessment Methods - An Experience Report from the Insurance and Auditing Domain.
In: 26th IFIP International Information Security Conference (IFIP SEC 2011),
Lucerne, 7-9 June 2011.
(paper (TODO))
- S. Islam, H. Mouratidis, J. Jürjens:
A framework to support alignment of secure software engineering with legal
regulations (Keynote).
In: 8th International Workshop on Security in Information Systems (WOSIS 2011),
13th International Conference on Enterprise Information Systems (ICEIS 2011),
Beijing, June 2011
(paper (TODO))
- M.S. Sadi, M.N. Uddin, M.M.R. Khan, J. Jürjens.
Mitigating Soft Error Risks through Protecting Critical Variables and Blocks.
International Conference on Computer Science, Engineering & Applications (ICCSEA'11),
LNCS, Springer, 2011.
- J. Jürjens, S. Taubenberger:
Studie zu IT-Risikobewertungen in der Praxis.
In: D-A-CH Security 2011, Gemeinsame Arbeitskonferenz der GI, OCG, BITKOM, SI, TeleTrusT, Oldenburg 20.-21.09.2011.
(paper, slides, audio, bibtex TODO)
- M. Peschke, M. Hirsch, J. Jürjens, S. Braun:
Werkzeuggestützte Identifikation von IT-Sicherheitsrisiken.
In: D-A-CH Security 2011, Gemeinsame Arbeitskonferenz der GI, OCG, BITKOM, SI, TeleTrusT, Oldenburg 20.-21.09.2011.
(paper, slides, audio, bibtex TODO)
- J. Jürjens:
Security and Compliance in Clouds.
In: CloudConf 2011,
Munich, 21-22 Nov. 2011.
(slides, audio)
- J. Jürjens:
Security and Compliance in Clouds.
In: CloudDays 2011,
Cologne and Stuttgart, 15+17 Nov. 2011.
(slides, audio)
- J. Jürjens:
Security and Compliance in Clouds.
In: IT-Compliance 2011, 4th Pan-European Conference.
Berlin, 29.-30.06.2011.
- J. Jürjens, K. Beckers:
Security and Compliance in Clouds.
In: OOP 2011,
Munich, 24-28 Jan. 2011.
(slides, audio)
- J. Jürjens, M. Hirsch, J.-C. Küster:
Werkzeuggestützte Qualitätssicherung von Sicherheits- und Compliance-Anforderungen an den Einsatz von Cloud-Computing.
In: iqnite 2011,
Düsseldorf, 24.-26.05.2011.
(slides (TODO))
|
|
|