Engineering Secure Future Internet Services and Systems

Current Research

Maritta Heisel, Wouter Joosen, Javier López, Fabio Martinelli (Herausgeber)

Buch | Softcover

VIII, 393 Seiten

2014
Springer International Publishing (Verlag)
978-3-319-07451-1 (ISBN)

Artikel merken

This State-of-the-Art Survey contains a selection of papers representing state-of-the-art results in the engineering of secure software-based Future Internet services and systems, produced by the NESSoS project researchers. The engineering approach of the Network of Excellence NESSoS, funded by the European Commission, is based on the principle of addressing security concerns from the very beginning in all software development phases, thus contributing to reduce the amount of software vulnerabilities and enabling the systematic treatment of security needs through the engineering process. The 15 papers included in this volume deal with the main NESSoS research areas: security requirements for Future Internet services; creating secure service architectures and secure service design; supporting programming environments for secure and composable services; enabling security assurance and integrating former results in a risk-aware and cost-aware software life-cycle.

A Structured Comparison of Security Standards.- Empirical Assessment of Security Requirements and Architecture: Lessons Learned.- STS-Tool: Security Requirements Engineering for Socio-Technical Systems.- Model-Driven Development of a Secure eHealth Application.- Modeling Security Features of Web Applications.- On the Synthesis of Secure Services Composition.- Privacy and Access Control in Federated Social Networks.- Engineering Trust-Awareness and Self-adaptability in Services and Systems.- Validation of Access Control Systems.- Evaluation of Engineering Approaches in the Secure Software Development Life Cycle.- A Toolchain for Designing and Testing Access Control Policies.- Verification of Authorization Policies Modified by Delegation.- ISMS-CORAS: A Structured Method for Establishing an ISO 27001 Compliant Information Security Management System.- Divide and Conquer - Towards a Notion of Risk Model Encapsulation.- Preserving Data Privacy in e-Health.

Erscheint lt. Verlag	21.5.2014
Reihe/Serie	Lecture Notes in Computer Science
Reihe/Serie	Security and Cryptology
Zusatzinfo	VIII, 393 p. 131 illus.
Verlagsort	Cham
Sprache	englisch
Maße	155 x 235 mm
Gewicht	609 g
Themenwelt	Informatik ► Netzwerke ► Sicherheit / Firewall
Schlagworte	Access Control • Empirical Research • Model Checking • Risk Management • Social Network Security and Privacy • software architecture • unified modeling language (UML) • web applications • Web protocol security
ISBN-10	3-319-07451-2 / 3319074512
ISBN-13	978-3-319-07451-1 / 9783319074511
Zustand	Neuware