Modeling Security Workshop

Workshop Program

• 9.00-9.10: Welcome
• 9.10-9.50: Invited talk: Neil Cooke, University of Surrey, Information Assurance Challenges in Software Engineering (abstract)
• 9.50-10.30: Invited talk: Ketil Stølen, Chief Scientist and Group Leader at SINTEF, A reductionistic approach to security analysis (abstract)

• 10.30-11.00: coffee

• 11.00-12.30: Paper presentations (15 mins + 5 mins discussion)
• Mukhtiar Memon, Michael Hafner and Ruth Breu. SECTISSIMO: A Platform-independent Framework for Security Services
• Karine Peralta and Avelino Zorzo. Specifying Security Aspects in UML Models
• Koen Yskout, Bart De Win and Wouter Joosen. Transforming security audit requirements into a software architecture
• Tejeddine Mouelhi, Franck Fleurey, Benoit Baudry and Yves Le Traon. Mutating DAC And MAC Security Policies: A Generic Metamodel Based Approach

• 12.30-14.00: lunch

• 14.00-15.30: Paper presentations (15 mins + 5 mins discussion)
• Adam Shostack. Experiences Threat Modeling at Microsoft
• Motoshi Saeki and Haruhiko Kaiya. Using Common Criteria as Reusable Knowledge in Security Requirements Elicitation
• Haralambos Mouratidis. Curriculum for Modelling Security: Experiences and Lessons Learned

• 15.30-16.00: coffee

• 16.00-17.30: Breakout groups

Poster Presentations

• Alan Shaffer, Mikhail Auguston, Cynthia Irvine and Tim Levin. A Security Domain Model for Implementing Trusted Subject Behaviors
• Alain Beaulieu, Greg Phillips and Sandra Smith. Modeling Security Protocols Using UML2
• Jonas Hallberg, Johan Bengtsson and Niklas Hallberg. Modeling and Assessment of Systems Security
• Ulrich Lang and Rudolf Schreiner. Model Driven Security Management: Making Security Management Manageable in Complex Distributed Systems
• Jordi Cabot and Nicola Zannone. Towards an Integrated Framework for Model-driven Security Engineering
• Shareeful Islam and Jan Jürjens. Tracing Security Requirements from Legal Regulations to Design Using UMLsec
• Stefan Taubenberger and Jan Jürjens. IT Security Risk Analysis based on Business Process Models enhanced with Security Requirements
• Nicolas Mayer, Eric Dubois, Raimundas Matulevicius and Patrick Heymans. Towards a Measurement Framework for Security Risk Management
• Trajce Dimkov, Qiang Tang and Pieter Hartel. On the inability of existing security models to cope with data mobility in dynamic organizations
• Andreas Ganser, Stefan Hurtz and Horst Lichter. A Server Side SOA Meta Model for Assigning Aspect Services
• Kleber Trevisani and Rogério Garcia. SPML: A Visual Approach for Modeling Firewall Configurations
• Carlos Blanco, Ignacio García, Eduardo Fernandez-Medina, Juan Trujillo and Mario Piattini. Automatic generation of secure multidimensional code for Data Warehouses by using QVT transformations: an MDA approach