Engineering Secure Software and Systems

1. Front Matter

   PDF

2. Formal Methods

   1. Formal Verification of Liferay RBAC

      • Stefano Calzavara, Alvise Rabitti, Michele Bugliesi

      Pages 1-16

   2. Formal Verification of Privacy Properties in Electric Vehicle Charging

      • Marouane Fazouane, Henning Kopp, Rens W. van der Heijden, Daniel Le Métayer, Frank Kargl

      Pages 17-33

   3. Idea: Unwinding Based Model-Checking and Testing for Non-Interference on EFSMs

      • Martín Ochoa, Jorge Cuéllar, Alexander Pretschner, Per Hallgren

      Pages 34-42

   4. Idea: State-Continuous Transfer of State in Protected-Module Architectures

      • Raoul Strackx, Niels Lambrigts

      Pages 43-50

3. Machine Learning

   1. Are Your Training Datasets Yet Relevant?

      • Kevin Allix, Tegawendé F. Bissyandé, Jacques Klein, Yves Le Traon

      Pages 51-67

   2. Learning How to Prevent Return-Oriented Programming Efficiently

      • David Pfaff, Sebastian Hack, Christian Hammer

      Pages 68-85

4. Cloud and Passwords

   1. Re-thinking Kernelized MLS Database Architectures in the Context of Cloud-Scale Data Stores

      • Thuy D. Nguyen, Mark Gondree, Jean Khosalim, Cynthia Irvine

      Pages 86-101

   2. Idea: Optimising Multi-Cloud Deployments with Security Controls as Constraints

      • Philippe Massonet, Jesus Luna, Alain Pannetrat, Ruben Trapero

      Pages 102-110

   3. Idea: Towards an Inverted Cloud

      • Raoul Strackx, Pieter Philippaerts, Frédéric Vogels

      Pages 111-118

   4. OMEN: Faster Password Guessing Using an Ordered Markov Enumerator

      • Markus Dürmuth, Fabian Angelstorf, Claude Castelluccia, Daniele Perito, Abdelberi Chaabane

      Pages 119-132

5. Measurements and Ontologies

   1. The Heavy Tails of Vulnerability Exploitation

      • Luca Allodi

      Pages 133-148

   2. Idea: Benchmarking Indistinguishability Obfuscation – A Candidate Implementation

      • Sebastian Banescu, Martín Ochoa, Nils Kunze, Alexander Pretschner

      Pages 149-156

   3. A Security Ontology for Security Requirements Elicitation

      • Amina Souag, Camille Salinesi, Raúl Mazo, Isabelle Comyn-Wattiau

      Pages 157-177

6. Access Control

   1. Producing Hook Placements to Enforce Expected Access Control Policies

      • Divya Muthukumaran, Nirupama Talele, Trent Jaeger, Gang Tan

      Pages 178-195

   2. Improving Reuse of Attribute-Based Access Control Policies Using Policy Templates

      • Maarten Decat, Jasper Moeys, Bert Lagaisse, Wouter Joosen

      Pages 196-210

   3. Monitoring Database Access Constraints with an RBAC Metamodel: A Feasibility Study

      • Lars Hamann, Karsten Sohr, Martin Gogolla

      Pages 211-226

7. Back Matter

   PDF

This book constitutes the refereed proceedings of the 7th International Symposium on Engineering Secure Software and Systems, ESSoS 2015, held in Milan, Italy, in March 2015. The 11 full papers presented together with 5 short papers were carefully reviewed and selected from 41 submissions. The symposium features the following topics: formal methods; cloud passwords; machine learning; measurements ontologies; and access control.

• model checking for security
• secure architecture and design
• security requirements and policies
• security testing
• threat modeling and analysis of vulnerabilities
• verification techniques for security properties
• algorithm analysis and problem complexity

• iMinds-DistriNet, KU Leuven, Belgium

  Frank Piessens

• IMDEA Software Institute, Pozuelo de Alarcón, Spain

  Juan Caballero

• Inria Sophia Antipolis – Mediterranee, Sophia Antipolis Cedex, France

  Nataliia Bielova

Policies and ethics