Engineering Secure Software and Systems
Subtitle: 5th International Symposium, ESSoS 2013, Paris, France, February 27 - March 1, 2013. Proceedings
By: edited by Jan Jürjens, Benjamin Livshits, Riccardo Scandariato
Contributors: Livshits, Benjamin; Scandariato, Riccardo; SpringerLink (Online service)
Series: Lecture Notes in Computer Science -- 7781
Publisher: Springer Berlin Heidelberg; Imprint: Springer
Published: 2013
Place of publication: Berlin, Heidelberg
Language: eng
Format: [electronic resource] :
Number of pages: 229
ISBN-13: 9783642365638
Subjects: Models and Principles; Software Engineering/Programming and Operating Systems; Cryptology and Information Theory Data Structures; Software engineering; Data structures (Computer science); Math Applications in Computer Science; Computer Communication Networks; Data Encryption; Computer science; Data encryption (Computer science)
Description: This book constitutes the refereed proceedings of the 5th International Symposium on Engineering Secure Software and Systems, ESSoS 2013, held in Paris, France, in February/March 2013. The 13 revised full papers presented together with two idea papers were carefully reviewed and selected from 62 submissions. The papers are organized in topical sections on secure programming, policies, proving, formal methods, and analyzing.
Table of contents: title: Control-Flow Integrity in Web Applications Using Security Policies to Automate Placement of Network Intrusion Prevention; title: Idea: Callee-Site Rewriting of Sealed System Libraries; title: Towards Unified Authorization for Android; title: Model-Based Usage Control Policy Derivation; title: Compositional Verification of Application-Level Security Properties; title: Towards Verifying Voter Privacy through Unlinkability; title: Confidentiality for Probabilistic Multi-threaded Programs and Its Verification; title: A Fully Homomorphic Crypto-Processor Design: Correctness of a Secret Computer; title: DKAL: Constructing Executable Specifications of Authorization Protocols; title: A Formal Approach for Inspecting Privacy and Trust in Advanced Electronic services; title: Idea: Writing Secure C Programs with SecProve; title: Anatomy of Exploit Kits: Preliminary Analysis of Exploit Kits as Software Artefacts; title: An Empirical Study on the Effectiveness of Security Code Review; title: Eliminating SQL Injection and Cross Site Scripting Using Aspect Oriented Programming.