Engineering Secure Future Internet Services and Systems : Current Research / edited by Maritta Heisel, Wouter Joosen, Javier López, Fabio Martinelli.

Format:

Book

Contributor:

Heisel, Maritta, editor.

Joosen, Wouter, editor.

Lopez, Javier, editor.

Martinelli, Fabio, 1969- editor.

SpringerLink (Online service)

Series:

Computer Science (Springer-11645)

LNCS sublibrary. Security and cryptology ; SL 4, 8431.

Security and Cryptology ; 8431

Language:

English

Subjects (All):

Computer security.

Software engineering.

Management information systems.

Computer science.

Computer logic.

Application software.

Data encryption (Computer science).

Systems and Data Security.

Software Engineering.

Management of Computing and Information Systems.

Logics and Meanings of Programs.

Information Systems Applications (incl. Internet).

Cryptology.

Local Subjects:

Systems and Data Security.

Software Engineering.

Management of Computing and Information Systems.

Logics and Meanings of Programs.

Information Systems Applications (incl. Internet).

Cryptology.

Physical Description:

1 online resource (VIII, 393 pages) : 131 illustrations.

Edition:

First edition 2014.

Contained In:

Springer eBooks

Place of Publication:

Cham : Springer International Publishing : Imprint: Springer, 2014.

System Details:

text file PDF

Summary:

This State-of-the-Art Survey contains a selection of papers representing state-of-the-art results in the engineering of secure software-based Future Internet services and systems, produced by the NESSoS project researchers. The engineering approach of the Network of Excellence NESSoS, funded by the European Commission, is based on the principle of addressing security concerns from the very beginning in all software development phases, thus contributing to reduce the amount of software vulnerabilities and enabling the systematic treatment of security needs through the engineering process. The 15 papers included in this volume deal with the main NESSoS research areas: security requirements for Future Internet services; creating secure service architectures and secure service design; supporting programming environments for secure and composable services; enabling security assurance and integrating former results in a risk-aware and cost-aware software life-cycle.

Contents:

A Structured Comparison of Security Standards

Empirical Assessment of Security Requirements and Architecture: Lessons Learned

STS-Tool: Security Requirements Engineering for Socio-Technical Systems

Model-Driven Development of a Secure eHealth Application

Modeling Security Features of Web Applications

On the Synthesis of Secure Services Composition

Privacy and Access Control in Federated Social Networks

Engineering Trust-Awareness and Self-adaptability in Services and Systems

Validation of Access Control Systems

Evaluation of Engineering Approaches in the Secure Software Development Life Cycle

A Toolchain for Designing and Testing Access Control Policies

Verification of Authorization Policies Modified by Delegation

ISMS-CORAS: A Structured Method for Establishing an ISO 27001 Compliant Information Security Management System

Divide and Conquer - Towards a Notion of Risk Model Encapsulation

Preserving Data Privacy in e-Health.

Other Format:

Printed edition:

ISBN:

978-3-319-07452-8

9783319074528

Access Restriction:

Restricted for use by site license.