2014 IEEE 1st International Workshop on Evolving Security and Privacy Requirements Engineering (ESPRE)

Frontmatter

Leveraging Expertise
Mon, Aug 25, 09:00 - 18:00

Semiautomatic Security Requirements Engineering and Evolution using Decision Documentation, Heuristics, and User Monitoring
Tom-Michael Hesse, Stefan Gärtner, Tobias Roehm, Barbara Paech, Kurt Schneider, and Bernd Bruegge
(University of Heidelberg, Germany; Leibniz Universität Hannover, Germany; TU München, Germany)

@InProceedings{ESPRE14p1, author = {Tom-Michael Hesse and Stefan Gärtner and Tobias Roehm and Barbara Paech and Kurt Schneider and Bernd Bruegge}, title = {Semiautomatic Security Requirements Engineering and Evolution using Decision Documentation, Heuristics, and User Monitoring}, booktitle = {Proc.\ ESPRE}, publisher = {IEEE}, pages = {1-0}, doi = {}, year = {2014}, } Article: rews14espremain-espreid3-p (type: Full Paper (6 pages)) doi:

Argumentation-Based Security Requirements Elicitation: The Next Round
Dan Ionita, Jan-Willem Bullee, and Roel J. Wieringa
(University of Twente, Netherlands)

@InProceedings{ESPRE14p7, author = {Dan Ionita and Jan-Willem Bullee and Roel J. Wieringa}, title = {Argumentation-Based Security Requirements Elicitation: The Next Round}, booktitle = {Proc.\ ESPRE}, publisher = {IEEE}, pages = {7-6}, doi = {}, year = {2014}, } Article: rews14espremain-espreid4-p (type: Full Paper (6 pages)) doi:

Towards a Framework to Measure Security Expertise in Requirements Analysis
Hanan Hibshi, Travis D. Breaux, Maria Riaz, and Laurie Williams
(Carnegie Mellon University, USA; King Abdul-Aziz University, Saudi Arabia; North Carolina State University, USA)

@InProceedings{ESPRE14p13, author = {Hanan Hibshi and Travis D. Breaux and Maria Riaz and Laurie Williams}, title = {Towards a Framework to Measure Security Expertise in Requirements Analysis}, booktitle = {Proc.\ ESPRE}, publisher = {IEEE}, pages = {13-12}, doi = {}, year = {2014}, } Article: rews14espremain-espreid8-p (type: Full Paper (6 pages)) doi:

Private, Legal (and Secure) by Design
Mon, Aug 25, 09:00 - 18:00

Engineering Privacy Requirements: Valuable Lessons from Another Realm
Yod-Samuel Martín, Jose M. del Alamo, and Juan C. Yelmo
(Universidad Politécnica de Madrid, Spain)

@InProceedings{ESPRE14p19, author = {Yod-Samuel Martín and Jose M. del Alamo and Juan C. Yelmo}, title = {Engineering Privacy Requirements: Valuable Lessons from Another Realm}, booktitle = {Proc.\ ESPRE}, publisher = {IEEE}, pages = {19-18}, doi = {}, year = {2014}, } Article: rews14espremain-espreid6-p (type: Full Paper (6 pages)) doi:

L-SQUARE: Preliminary Extension of the SQUARE Methodology to Address Legal Compliance
Aaron Alva and Lisa Young
(SEI, USA)

@InProceedings{ESPRE14p25, author = {Aaron Alva and Lisa Young}, title = {L-SQUARE: Preliminary Extension of the SQUARE Methodology to Address Legal Compliance}, booktitle = {Proc.\ ESPRE}, publisher = {IEEE}, pages = {25-24}, doi = {}, year = {2014}, } Article: rews14espremain-espreid7-p (type: Full Paper (6 pages)) doi:

Evolving Security Requirements Engineering
Mon, Aug 25, 09:00 - 18:00

Supporting Evolving Security Models for an Agile Security Evaluation
Wolfgang Raschke, Massimiliano Zilli, Philip Baumgartner, Johannes Loinig, Christian Steger, and Christian Kreiner
(Graz University of Technology, Austria; NXP Semiconductors, Austria)

@InProceedings{ESPRE14p31, author = {Wolfgang Raschke and Massimiliano Zilli and Philip Baumgartner and Johannes Loinig and Christian Steger and Christian Kreiner}, title = {Supporting Evolving Security Models for an Agile Security Evaluation}, booktitle = {Proc.\ ESPRE}, publisher = {IEEE}, pages = {31-30}, doi = {}, year = {2014}, } Article: rews14espremain-espreid1-p (type: Full Paper (6 pages)) doi:

Using Malware Analysis to Improve Security Requirements on Future Systems
Nancy R. Mead and Jose Andre Morales
(Carnegie Mellon University, USA)

@InProceedings{ESPRE14p37, author = {Nancy R. Mead and Jose Andre Morales}, title = {Using Malware Analysis to Improve Security Requirements on Future Systems}, booktitle = {Proc.\ ESPRE}, publisher = {IEEE}, pages = {37-36}, doi = {}, year = {2014}, } Article: rews14espremain-espreid2-p (type: Full Paper (6 pages)) doi:

Pattern-Based and ISO 27001 Compliant Risk Analysis for Cloud Systems
Azadeh Alebrahim, Denis Hatebur, and Ludger Goeke
(University of Duisburg-Essen, Germany; ITESYS, Germany)

@InProceedings{ESPRE14p43, author = {Azadeh Alebrahim and Denis Hatebur and Ludger Goeke}, title = {Pattern-Based and ISO 27001 Compliant Risk Analysis for Cloud Systems}, booktitle = {Proc.\ ESPRE}, publisher = {IEEE}, pages = {43-42}, doi = {}, year = {2014}, } Article: rews14espremain-espreid5-p (type: Full Paper (6 pages)) doi:

proc time: 0.01