{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,8]],"date-time":"2024-09-08T11:17:13Z","timestamp":1725794233819},"publisher-location":"Cham","reference-count":40,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319074511"},{"type":"electronic","value":"9783319074528"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2014]]},"DOI":"10.1007\/978-3-319-07452-8_10","type":"book-chapter","created":{"date-parts":[[2014,5,22]],"date-time":"2014-05-22T01:53:43Z","timestamp":1400723623000},"page":"234-265","source":"Crossref","is-referenced-by-count":3,"title":["Evaluation of Engineering Approaches in the Secure Software Development Life Cycle"],"prefix":"10.1007","author":[{"given":"Marianne","family":"Busch","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nora","family":"Koch","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Martin","family":"Wirsing","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"10_CR1","unstructured":"CBK: Common Body of Knowledge (2013), http:\/\/nessos-project.eu\/cbk"},{"key":"10_CR2","unstructured":"NESSoS: Network of Excellence on Engineering Secure Future Internet Software Services and Systems (2014), http:\/\/nessos-project.eu\/"},{"key":"10_CR3","unstructured":"Busch, M., Koch, N., Wirsing, M.: SecEval: An Evaluation Framework for Engineering Secure Systems. In: MoK 2014 (2014)"},{"key":"10_CR4","unstructured":"Busch, M., Koch, N.: NESSoS Deliverable D2.4 \u2013 Second release of Method and Tool Evaluation (2013)"},{"key":"10_CR5","unstructured":"OWASP Foundation: OWASP Risk Rating Methodology (2013), https:\/\/www.owasp.org\/index.php\/OWASP_Risk_Rating_Methodology"},{"key":"10_CR6","unstructured":"Moody, D.L.: The method evaluation model: A theoretical model for validating information systems design methods. In: Ciborra, C.U., Mercurio, R., de Marco, M., Martinez, M., Carignani, A. (eds.) ECIS, pp. 1327\u20131336 (2003)"},{"key":"10_CR7","unstructured":"Lipner, S., Howard, M.: The Trustworthy Computing Security Development Lifecycle. Developer Network - Microsoft (2005), http:\/\/msdn.microsoft.com\/en-us\/library\/ms995349.aspx#sdl2_topic2_5"},{"key":"10_CR8","unstructured":"ISO\/IEC: 27001: Information technology \u2013 Security techniques \u2013 Information security management systems \u2013 Requirements. Technical report, International Organization for Standardization (ISO) and International Electrotechnical Commission, IEC (2013)"},{"key":"10_CR9","unstructured":"OWASP Foundation: OWASP Top 10 \u2013 2013 (2013), http:\/\/owasptop10.googlecode.com\/files\/OWASPTop10-2013.pdf"},{"key":"10_CR10","unstructured":"Kitchenham, B., Charters, S.: Guidelines for performing Systematic Literature Reviews in Software Engineering. Technical Report EBSE 2007-001, Keele University and Durham University Joint Report (2007)"},{"key":"10_CR11","unstructured":"Beckers, K., Eicker, S., Heisel, M. (UDE), W.S.: NESSoS Deliverable D5.2 \u2013 Identification of Research Gaps in the Common Body of Knowledge (2012)"},{"key":"10_CR12","unstructured":"Becker, P., Papa, F., Olsina, L.: Enhancing the Conceptual Framework Capability for a Measurement and Evaluation Strategy. In: 4th International Workshop on Quality in Web Engineering (6360), pp. 1\u201312 (2013)"},{"key":"10_CR13","unstructured":"RWTH\u00a0Aachen\u00a0University: i* notation, http:\/\/istar.rwth-aachen.de\/"},{"issue":"1","key":"10_CR14","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1007\/s00766-009-0090-z","volume":"15","author":"G. Elahi","year":"2010","unstructured":"Elahi, G., Yu, E., Zannone, N.: A vulnerability-centric requirements engineering framework: analyzing security attacks, countermeasures, and requirements based on vulnerabilities. Requirements Engineering\u00a015(1), 41\u201362 (2010)","journal-title":"Requirements Engineering"},{"key":"10_CR15","doi-asserted-by":"crossref","unstructured":"Wang, J.A., Guo, M.: Security data mining in an ontology for vulnerability management. In: International Joint Conference on Bioinformatics, Systems Biology and Intelligent Computing, IJCBS 2009, pp. 597\u2013603 (2009)","DOI":"10.1109\/IJCBS.2009.13"},{"key":"10_CR16","unstructured":"RWTH Aachen University: SWRL: A Semantic Web Rule Language Combining OWL and RuleML (2004), http:\/\/www.w3.org\/Submission\/SWRL\/"},{"key":"10_CR17","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"93","DOI":"10.1007\/978-3-642-32287-7_8","volume-title":"Trust, Privacy and Security in Digital Business","author":"F. Moyano","year":"2012","unstructured":"Moyano, F., Fernandez-Gago, C., Lopez, J.: A conceptual framework for trust models. In: Fischer-H\u00fcbner, S., Katsikas, S., Quirchmayr, G. (eds.) TrustBus 2012. LNCS, vol.\u00a07449, pp. 93\u2013104. Springer, Heidelberg (2012)"},{"key":"10_CR18","unstructured":"Fernandez, C., Lopez, J., Moyano, F.: NESSoS Deliverable D4.2 \u2013 Engineering Secure Future Internet Services: A Research Manifesto and Agenda from the NESSoS Community (2012)"},{"key":"10_CR19","series-title":"LNCS","doi-asserted-by":"crossref","first-page":"266","DOI":"10.1007\/978-3-319-07452-8_11","volume-title":"Engineering Secure Future Internet Services","author":"A. Bertolino","year":"2014","unstructured":"Bertolino, A., Busch, M., Daoudagh, S., Lonetti, F., Marchetti, E.: A Toolchain for Designing and Testing Access Control Policies. In: Heisel, M., Joosen, W., Lopez, J., Martinelli, F. (eds.) Engineering Secure Future Internet Services. LNCS, vol.\u00a08431, pp. 266\u2013286. Springer, Heidelberg (2014)"},{"key":"10_CR20","doi-asserted-by":"crossref","unstructured":"Giorgini, P., Mouratidis, H., Zannone, N.: Modelling Security and Trust with Secure Tropos. In: Integrating Security and Software Engineering: Advances and Future Vision (2006)","DOI":"10.4018\/978-1-59904-147-6"},{"key":"10_CR21","doi-asserted-by":"crossref","unstructured":"Dardenne, A., Fickas, S., Van Lamsweerde, A.: Goal-directed Requirements Acquisition 20(1-2), 3\u201350 (1993)","DOI":"10.1016\/0167-6423(93)90021-G"},{"issue":"3","key":"10_CR22","doi-asserted-by":"publisher","first-page":"203","DOI":"10.1023\/B:AGNT.0000018806.20944.ef","volume":"8","author":"P. Bresciani","year":"2004","unstructured":"Bresciani, P., Perini, A., Giorgini, P., Giunchiglia, F., Mylopoulos, J.: Tropos: An agent-oriented software development methodology. Autonomous Agents and Multi-Agent Systems\u00a08(3), 203\u2013236 (2004)","journal-title":"Autonomous Agents and Multi-Agent Systems"},{"key":"10_CR23","doi-asserted-by":"crossref","unstructured":"Gedik, B., Liu, L.: Protecting Location Privacy with Personalized k-anonymity: Architecture and Algorithms 7(1), 1\u201318 (2008)","DOI":"10.1109\/TMC.2007.1062"},{"key":"10_CR24","unstructured":"J\u00fcrjens, J.: Secure Systems Development with UML. Springer (2004)"},{"issue":"1","key":"10_CR25","doi-asserted-by":"publisher","first-page":"39","DOI":"10.1145\/1125808.1125810","volume":"15","author":"D. Basin","year":"2006","unstructured":"Basin, D., Doser, J., Lodderstedt, T.: Model Driven security: From UML Models to Access Control Infrastructures. ACM Trans. Softw. Eng. Methodol.\u00a015(1), 39\u201391 (2006)","journal-title":"ACM Trans. Softw. Eng. Methodol."},{"key":"10_CR26","doi-asserted-by":"crossref","unstructured":"Basin, D., Clavel, M., Egea, M., Garcia de Dios, M., Dania, C.: A model-driven methodology for developing secure data-management applications. IEEE Transactions on Software Engineering\u00a0PP(99), 1 (2014)","DOI":"10.1109\/TSE.2013.2297116"},{"key":"10_CR27","series-title":"LNCS","doi-asserted-by":"crossref","first-page":"97","DOI":"10.1007\/978-3-319-07452-8_4","volume-title":"Engineering Secure Future Internet Services","author":"M.A.G. Dios de","year":"2014","unstructured":"de Dios, M.A.G., Dania, C., Basin, D., Clavel, M.: Model-driven Development of a Secure eHealth Application. In: Heisel, M., Joosen, W., Lopez, J., Martinelli, F. (eds.) Engineering Secure Future Internet Services. LNCS, vol.\u00a08431, pp. 97\u2013118. Springer, Heidelberg (2014)"},{"key":"10_CR28","series-title":"LNBIP","doi-asserted-by":"publisher","first-page":"239","DOI":"10.1007\/978-3-642-24511-4_19","volume-title":"Perspectives in Business Informatics Research","author":"M. Busch","year":"2011","unstructured":"Busch, M., Knapp, A., Koch, N.: Modeling Secure Navigation in Web Information Systems. In: Grabis, J., Kirikova, M. (eds.) BIR 2011. LNBIP, vol.\u00a090, pp. 239\u2013253. Springer, Heidelberg (2011)"},{"key":"10_CR29","series-title":"LNCS","doi-asserted-by":"crossref","first-page":"119","DOI":"10.1007\/978-3-319-07452-8_5","volume-title":"Engineering Secure Future Internet Services","author":"M. Busch","year":"2014","unstructured":"Busch, M., Koch, N., Suppan, S.: Modeling Security Features of Web Applications. In: Engineering Secure Future Internet Services. LNCS, vol.\u00a08431, pp. 119\u2013139. Springer, Heidelberg (2014)"},{"key":"10_CR30","doi-asserted-by":"crossref","unstructured":"Goldstein, A., Frank, U.: Augmented Enterprise Models as a Foundation for Generating Security-related Software: Requirements and Prospects. In: Model-Driven Security Workshop in Conjunction with MoDELS 2012 (MDsec 2012). ACM Digital Library (2012)","DOI":"10.1145\/2422498.2422506"},{"key":"10_CR31","doi-asserted-by":"crossref","unstructured":"Busch, M., Koch, N., Masi, M., Pugliese, R., Tiezzi, F.: Towards Model-Driven Development of Access Control Policies for Web Applications. In: Model-Driven Security Workshop in Conjunction with MoDELS 2012 (MDsec 2012). ACM Digital Library (2012)","DOI":"10.1145\/2422498.2422502"},{"key":"10_CR32","unstructured":"Microsoft: Dafny (2014), https:\/\/research.microsoft.com\/en-us\/projects\/dafny\/"},{"key":"10_CR33","unstructured":"Jacobs, B., Smans, J., Piessens, F.: VeriFast (2013), http:\/\/www.cs.kuleuven.be\/~bartj\/verifast\/"},{"key":"10_CR34","unstructured":"CORAS method: CORAS tool (2013), http:\/\/coras.sourceforge.net\/"},{"key":"10_CR35","unstructured":"Busch, M., Koch, N.: NESSoS Deliverable D2.1 \u2013 First release of Method and Tool Evaluation (2011)"},{"key":"10_CR36","unstructured":"Busch, M.: SecEval \u2013 Further Information (2014), http:\/\/www.pst.ifi.lmu.de\/~busch\/SecEval"},{"key":"10_CR37","unstructured":"Bishop, M.: Computer Security: Art and Science, 1st edn. Addison-Wesley Professional (2002)"},{"key":"10_CR38","unstructured":"Schreiner, S.: Comparison of Security-related Tools and Methods for Testing Software, Bachelor Thesis (2013)"},{"key":"10_CR39","unstructured":"Lacek, C.: In-depth Comparison and Integration of Tools for Testing Security features of Web Applications, Bachelor Thesis (2013)"},{"key":"10_CR40","unstructured":"Busch, M., Koch, N.: NESSoS Deliverable D2.3 \u2013 Second Release of the SDE for Security-Related Tools (2012)"}],"container-title":["Lecture Notes in Computer Science","Engineering Secure Future Internet Services and Systems"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-07452-8_10","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,4]],"date-time":"2022-04-04T00:08:46Z","timestamp":1649030926000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-07452-8_10"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014]]},"ISBN":["9783319074511","9783319074528"],"references-count":40,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-07452-8_10","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2014]]}}}