Engineering Secure Software and Systems

1. Front Matter

   PDF

2. Application-Replay Attack on Java Cards: When the Garbage Collector Gets Confused

   • Guillaume Barbu, Philippe Hoogvorst, Guillaume Duc

   Pages 1-13

3. Supporting the Development and Documentation of ISO 27001 Information Security Management Systems through Security Requirements Engineering Approaches

   • Kristian Beckers, Stephan Faßbender, Maritta Heisel, Jan-Christoph Küster, Holger Schmidt

   Pages 14-21

4. Typed Assembler for a RISC Crypto-Processor

   • Peter T. Breuer, Jonathan P. Bowen

   Pages 22-29

5. Transversal Policy Conflict Detection

   • Matteo Maria Casalino, Henrik Plate, Slim Trabelsi

   Pages 30-37

6. Challenges in Implementing an End-to-End Secure Protocol for Java ME-Based Mobile Data Collection in Low-Budget Settings

   • Samson Gejibo, Federico Mancini, Khalid A. Mughal, Remi Valvik, Jørn Klungsøyr

   Pages 38-45

7. Runtime Enforcement of Information Flow Security in Tree Manipulating Processes

   • Máté Kovács, Helmut Seidl

   Pages 46-59

8. Formalisation and Implementation of the XACML Access Control Mechanism

   • Massimiliano Masi, Rosario Pugliese, Francesco Tiezzi

   Pages 60-74

9. A Task Ordering Approach for Automatic Trust Establishment

   • Francisco Moyano, Carmen Fernandez-Gago, Isaac Agudo, Javier Lopez

   Pages 75-88

10. An Idea of an Independent Validation of Vulnerability Discovery Models

    • Viet Hung Nguyen, Fabio Massacci

    Pages 89-96

11. A Sound Decision Procedure for the Compositionality of Secrecy

    • Martín Ochoa, Jan Jürjens, Daniel Warzecha

    Pages 97-105

12. Plagiarizing Smartphone Applications: Attack Strategies and Defense Techniques

    • Rahul Potharaju, Andrew Newell, Cristina Nita-Rotaru, Xiangyu Zhang

    Pages 106-120

13. Design of Adaptive Security Mechanisms for Real-Time Embedded Systems

    • Mehrdad Saadatmand, Antonio Cicchetti, Mikael Sjödin

    Pages 121-134

14. Hunting Application-Level Logical Errors

    • George Stergiopoulos, Bill Tsoumas, Dimitris Gritzalis

    Pages 135-142

15. Optimal Trust Mining and Computing on Keyed MapReduce

    • Huafei Zhu, Hong Xiao

    Pages 143-150

16. Back Matter

    PDF

This book constitutes the refereed proceedings of the 4th International Symposium on Engineering Secure Software and Systems, ESSoS 2012, held in Eindhoven, The Netherlands, in February 2012. The 7 revised full papers presented together with 7 idea papers were carefully reviewed and selected from 53 submissions. The full papers present new research results in the field of engineering secure software and systems, whereas the idea papers give crisp expositions of interesting, novel ideas in the early stages of development.

• error detection
• formal semantics
• mobile security
• real-time embedded systems
• trust computing

Policies and ethics