Engineering Secure Future Internet Services and Systems: Current Research

✍ Scribed by Maritta Heisel, Wouter Joosen, Javier Lopez, Fabio Martinelli (eds.)

• Publisher: Springer International Publishing
• Year: 2014
• Tongue: English
• Leaves: 400
• Series: Lecture Notes in Computer Science 8431 Security and Cryptology
• Edition: 1
• Category: Library

✦ Synopsis

This State-of-the-Art Survey contains a selection of papers representing state-of-the-art results in the engineering of secure software-based Future Internet services and systems, produced by the NESSoS project researchers. The engineering approach of the Network of Excellence NESSoS, funded by the European Commission, is based on the principle of addressing security concerns from the very beginning in all software development phases, thus contributing to reduce the amount of software vulnerabilities and enabling the systematic treatment of security needs through the engineering process. The 15 papers included in this volume deal with the main NESSoS research areas: security requirements for Future Internet services; creating secure service architectures and secure service design; supporting programming environments for secure and composable services; enabling security assurance and integrating former results in a risk-aware and cost-aware software life-cycle.

✦ Table of Contents

Front Matter....Pages -
A Structured Comparison of Security Standards....Pages 1-34
Empirical Assessment of Security Requirements and Architecture: Lessons Learned....Pages 35-64
STS-Tool: Security Requirements Engineering for Socio-Technical Systems....Pages 65-96
Model-Driven Development of a Secure eHealth Application....Pages 97-118
Modeling Security Features of Web Applications....Pages 119-139
On the Synthesis of Secure Services Composition....Pages 140-159
Privacy and Access Control in Federated Social Networks....Pages 160-179
Engineering Trust-Awareness and Self-adaptability in Services and Systems....Pages 180-209
Validation of Access Control Systems....Pages 210-233
Evaluation of Engineering Approaches in the Secure Software Development Life Cycle....Pages 234-265
A Toolchain for Designing and Testing Access Control Policies....Pages 266-286
Verification of Authorization Policies Modified by Delegation....Pages 287-314
ISMS-CORAS: A Structured Method for Establishing an ISO 27001 Compliant Information Security Management System....Pages 315-344
Divide and Conquer – Towards a Notion of Risk Model Encapsulation....Pages 345-365
Preserving Data Privacy in e-Health....Pages 366-392
Back Matter....Pages -

✦ Subjects

Systems and Data Security; Software Engineering; Management of Computing and Information Systems; Logics and Meanings of Programs; Information Systems Applications (incl. Internet); Data Encryption