{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T05:02:52Z","timestamp":1750309372652,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":59,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,10,27]],"date-time":"2024-10-27T00:00:00Z","timestamp":1729987200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"EPSRC","award":["EP\/X037274\/"],"award-info":[{"award-number":["EP\/X037274\/"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,10,27]]},"DOI":"10.1145\/3691620.3695499","type":"proceedings-article","created":{"date-parts":[[2024,10,18]],"date-time":"2024-10-18T15:39:19Z","timestamp":1729265959000},"page":"1232-1244","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Compositional Security Analysis of Dynamic Component-based Systems"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0377-5595","authenticated-orcid":false,"given":"Narges","family":"Khakpour","sequence":"first","affiliation":[{"name":"Newcastle University, Newcastle upon Tyne, United Kingdom"},{"name":"Linnaeus University, Vaxjo, Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5057-2790","authenticated-orcid":false,"given":"Charilaos","family":"Skandylas","sequence":"additional","affiliation":[{"name":"Link\u00f6ping University, Link\u00f6ping, Sweden"},{"name":"Linnaeus University, Vaxjo, Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,10,27]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"A framework for compositional verification of security protocols. Inf. Comput., 206(2--4):425--459","author":"Andova Suzana","year":"2008","unstructured":"Suzana Andova, Cas Cremers, Kristian Gj\u00f8steen, Sjouke Mauw, Stig Fr. Mj\u00f8lsnes, and Sasa Radomirovic. A framework for compositional verification of security protocols. Inf. Comput., 206(2--4):425--459, 2008."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.17705\/1CAIS.01246"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-63166-6_14"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ic.2005.03.001"},{"key":"e_1_3_2_1_5_1","first-page":"23","volume-title":"15th ACM Symposium on Access Control Models and Technologies, SACMAT 2010, Pittsburgh, Pennsylvania, USA, June 9--11, 2010","author":"Basin David A.","year":"2010","unstructured":"David A. Basin, Felix Klaedtke, and Samuel M\u00fcller. Monitoring security policies with metric first-order temporal logic. In James B. D. Joshi and Barbara Carminati, editors, 15th ACM Symposium on Access Control Models and Technologies, SACMAT 2010, Pittsburgh, Pennsylvania, USA, June 9--11, 2010, Proceedings, pages 23--34. ACM, 2010."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"crossref","unstructured":"Andreas Bauer Jan-Christoph K\u00fcster and Gil Vegliach. Runtime verification meets android security. In Alwyn Goodloe and Suzette Person editors NASA Formal Methods - 4th International Symposium NFM 2012 Norfolk VA USA April 3--5 2012. Proceedings volume 7226 of Lecture Notes in Computer Science pages 174--180. Springer 2012.","DOI":"10.1007\/978-3-642-28891-3_18"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSCI51800.2020.00318"},{"key":"e_1_3_2_1_8_1","series-title":"Lecture Notes in Computer Science","first-page":"87","volume-title":"Lectures on Concurrency and Petri Nets, Advances in Petri Nets [This tutorial","author":"Bengtsson Johan","year":"2003","unstructured":"Johan Bengtsson and Wang Yi. Timed automata: Semantics, algorithms and tools. In J\u00f6rg Desel, Wolfgang Reisig, and Grzegorz Rozenberg, editors, Lectures on Concurrency and Petri Nets, Advances in Petri Nets [This tutorial volume originates from the 4th Advanced Course on Petri Nets, ACPN 2003, held in Eichst\u00e4tt, Germany in September 2003. In addition to lectures given at ACPN 2003, additional chapters have been commissioned], volume 3098 of Lecture Notes in Computer Science, pages 87--124. Springer, 2003."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10270-014-0410-8"},{"key":"e_1_3_2_1_10_1","unstructured":"Sergey Berezin S\u00e9rgio Vale Aguiar Campos and Edmund M. Clarke. Compositional reasoning in model checking. In Willem P. de Roever Hans Langmaack and Amir Pnueli editors Compositionality: The Significant Difference International Symposium COMPOS'97 Bad Malente Germany September 8--12 1997. Revised Lectures volume 1536 of Lecture Notes in Computer Science pages 81--102. Springer 1997."},{"key":"e_1_3_2_1_11_1","volume-title":"2nd IEEE International Conference on Engineering of Complex Computer Systems (ICECCS '96)","author":"Alan","year":"1996","unstructured":"Alan W. Brown and Kurt C. Wallnau. Engineering of component-based systems. In 2nd IEEE International Conference on Engineering of Complex Computer Systems (ICECCS '96), 21--25 October 1996, Montreal, Canada, pages 414--422. IEEE Computer Society, 1996."},{"key":"e_1_3_2_1_12_1","volume-title":"The state of exposure management","author":"Cyber XM","year":"2023","unstructured":"XM Cyber. The state of exposure management in 2023, 2023. https:\/\/info.xmcyber.com\/hubfs\/The%20State%20of%20Exposure%20Management%202023%20-%20XM%20Cyber%20-%20Research%20Report.pdf."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-31862-0_21"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/360051.360056"},{"key":"e_1_3_2_1_15_1","series-title":"Lecture Notes in Computer Science","first-page":"115","volume-title":"Farhad Arbab and Peter Csaba \u00d6lveczky","author":"Dormoy Julien","year":"2011","unstructured":"Julien Dormoy, Olga Kouchnarenko, and Arnaud Lanoix. Runtime verification of temporal patterns for dynamic reconfigurations of components. In Farhad Arbab and Peter Csaba \u00d6lveczky, editors, Formal Aspects of Component Software - 8th International Symposium, FACS 2011, Oslo, Norway, September 14--16, 2011, Revised Selected Papers, volume 7253 of Lecture Notes in Computer Science, pages 115--132. Springer, 2011."},{"key":"e_1_3_2_1_16_1","volume-title":"Runtime verification of linux kernel security module. CoRR, abs\/2001.01442","author":"Efremov Denis","year":"2020","unstructured":"Denis Efremov and Ilya V. Shchepetkov. Runtime verification of linux kernel security module. CoRR, abs\/2001.01442, 2020."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3009748"},{"key":"e_1_3_2_1_18_1","first-page":"01","article-title":"Just Enough Software Architecture: A Risk-Driven Approach. Boulder, CO","author":"Fairbanks G.","year":"2010","unstructured":"G. Fairbanks and David Garlan. Just Enough Software Architecture: A Risk-Driven Approach. Boulder, CO : Marshall & Brainerd, 01 2010.","journal-title":"Marshall & Brainerd"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-04694-0_4"},{"key":"e_1_3_2_1_20_1","series-title":"NATO Science for Peace and Security Series","first-page":"141","volume-title":"Engineering Dependable Software Systems","author":"Falcone Yli\u00e8s","year":"2013","unstructured":"Yli\u00e8s Falcone, Klaus Havelund, and Giles Reger. A tutorial on runtime verification. In Manfred Broy, Doron A. Peled, and Georg Kalus, editors, Engineering Dependable Software Systems, volume 34 of NATO Science for Peace and Security Series, D: Information and Communication Security, pages 141--175. IOS Press, 2013."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10270-013-0323-y"},{"key":"e_1_3_2_1_22_1","first-page":"341","volume-title":"2011 33rd International Conference on Software Engineering (ICSE)","author":"Filieri Antonio","year":"2011","unstructured":"Antonio Filieri, Carlo Ghezzi, and Giordano Tamburrelli. Runtime efficient probabilistic model checking. In 2011 33rd International Conference on Software Engineering (ICSE), pages 341--350, 2011."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-36249-1_2"},{"key":"e_1_3_2_1_24_1","volume-title":"Acme: Architectural description of component-based systems. Foundations of component-based systems, 68:47--68","author":"Garlan David","year":"2000","unstructured":"David Garlan, Robert T Monroe, and David Wile. Acme: Architectural description of component-based systems. Foundations of component-based systems, 68:47--68, 2000."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-24730-2_18"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2016.25"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66197-1_19"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1007\/BF01211866"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1007\/11691372_29"},{"key":"e_1_3_2_1_30_1","first-page":"1","volume-title":"43rd Annual IEEE\/IFIP Conference on Dependable Systems and Networks Workshop, DSN Workshops 2013","author":"Jin","year":"2013","unstructured":"Jin B. Hong and Dong Seong Kim. Scalable security analysis in hierarchical attack representation model using centrality measures. In 43rd Annual IEEE\/IFIP Conference on Dependable Systems and Networks Workshop, DSN Workshops 2013, Budapest, Hungary, June 24--27, 2013, pages 1--8. IEEE Computer Society, 2013."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2010.43"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/2465449.2465456"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-65831-5_8"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102349"},{"key":"e_1_3_2_1_35_1","first-page":"114","volume-title":"Proceedings of the 14th International Symposium on Software Engineering for Adaptive and Self-Managing Systems, SEAMS@ICSE 2019","author":"Khakpour Narges","year":"2019","unstructured":"Narges Khakpour, Charilaos Skandylas, Goran Saman Nariman, and Danny Weyns. Towards secure architecture-based adaptations. In Marin Litoiu, Siobh\u00e1n Clarke, and Kenji Tei, editors, Proceedings of the 14th International Symposium on Software Engineering for Adaptive and Self-Managing Systems, SEAMS@ICSE 2019, Montreal, QC, Canada, May 25--31, 2019, pages 114--125. ACM, 2019."},{"key":"e_1_3_2_1_36_1","first-page":"73","volume-title":"Probabilistic Model Checking: Advances and Applications","author":"Kwiatkowska Marta","year":"2018","unstructured":"Marta Kwiatkowska, Gethin Norman, and David Parker. Probabilistic Model Checking: Advances and Applications, pages 73--121. Springer International Publishing, Cham, 2018."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-12002-2_3"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/2304736.2304746"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jlap.2008.08.004"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jlamp.2020.100618"},{"key":"e_1_3_2_1_41_1","first-page":"0","volume-title":"Conference: 23rd Systems and Software Technology Conference (SSTC)","author":"Martin Robert","year":"2011","unstructured":"Robert Martin and Sean Barnum. Software security knowledge: Cwe. knowing what could make software vulnerable to attack. In Conference: 23rd Systems and Software Technology Conference (SSTC), pages 0--62, 05 2011."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3081742"},{"key":"e_1_3_2_1_43_1","first-page":"336","volume-title":"Proceedings of the 13th ACM Conference on Computer and Communications Security, CCS 2006","author":"Ou Xinming","year":"2006","unstructured":"Xinming Ou, Wayne F. Boyer, and Miles A. McQueen. A scalable approach to attack graph generation. In Ari Juels, Rebecca N. Wright, and Sabrina De Capitani di Vimercati, editors, Proceedings of the 13th ACM Conference on Computer and Communications Security, CCS 2006, Alexandria, VA, USA, October 30 - November 3, 2006, pages 336--345. ACM, 2006."},{"key":"e_1_3_2_1_44_1","volume-title":"Proceedings of the 14th USENIX Security Symposium","author":"Ou Xinming","year":"2005","unstructured":"Xinming Ou, Sudhakar Govindavajhala, and Andrew W. Appel. Mulval: A logic-based network security analyzer. In Patrick D. McDaniel, editor, Proceedings of the 14th USENIX Security Symposium, Baltimore, MD, USA, July 31 - August 5, 2005. USENIX Association, 2005."},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-16-8012-0_2"},{"key":"e_1_3_2_1_46_1","series-title":"NATO ASI Series","first-page":"123","volume-title":"transition from global to modular temporal reasoning about programs","author":"Pnueli Amir","year":"1984","unstructured":"Amir Pnueli. In transition from global to modular temporal reasoning about programs. In Krzysztof R. Apt, editor, Logics and Models of Concurrent Systems - Conference proceedings, Collesur-Loup (near Nice), France, 8--19 October 1984, volume 13 of NATO ASI Series, pages 123--144. Springer, 1984."},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-73721-8_20"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2023.111633"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-54848-2_1"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/1851340.1851351"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-31980-1_12"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2020.09.005"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/1244002.1244327"},{"key":"e_1_3_2_1_55_1","series-title":"Lecture Notes in Computer Science","first-page":"108","volume-title":"Basil Becker, Gabor Karsai, Serge Mankovski, Mauro Pezz\u00e8, Wilhelm Sch\u00e4fer, Ladan Tahvildari, and Kenny Wong. Towards practical runtime verification and validation of self-adaptive software systems","author":"Tamura Gabriel","year":"2010","unstructured":"Gabriel Tamura, Norha M. Villegas, Hausi A. M\u00fcller, Jo\u00e3o Pedro Sousa, Basil Becker, Gabor Karsai, Serge Mankovski, Mauro Pezz\u00e8, Wilhelm Sch\u00e4fer, Ladan Tahvildari, and Kenny Wong. Towards practical runtime verification and validation of self-adaptive software systems. In Rog\u00e9rio de Lemos, Holger Giese, Hausi A. M\u00fcller, and Mary Shaw, editors, Software Engineering for Self-Adaptive Systems II - International Seminar, Dagstuhl Castle, Germany, October 24--29, 2010 Revised Selected and Invited Papers, volume 7475 of Lecture Notes in Computer Science, pages 108--132. Springer, 2010."},{"volume-title":"Unveiling the state of software security in the public sector","year":"2023","key":"e_1_3_2_1_56_1","unstructured":"Veracode. Unveiling the state of software security in the public sector, 2023. https:\/\/www.veracode.com\/sites\/default\/files\/pdf\/resources\/reports\/veracode-state-of-software-security-2023-public-sector.pdf."},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/3078505.3078524"},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-15-3418-8_3"},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1109\/AICCSA47632.2019.9035367"},{"key":"e_1_3_2_1_60_1","first-page":"161","volume-title":"Proceedings of the 8th International Conference on Aspect-Oriented Software Development, AOSD 2009","author":"Zhang Ji","year":"2009","unstructured":"Ji Zhang, Heather Goldsby, and Betty H. C. Cheng. Modular verification of dynamically adaptive systems. In Kevin J. Sullivan, Ana Moreira, Christa Schwanninger, and Jeff Gray, editors, Proceedings of the 8th International Conference on Aspect-Oriented Software Development, AOSD 2009, Charlottesville, Virginia, USA, March 2--6, 2009, pages 161--172. ACM, 2009."}],"event":{"name":"ASE '24: 39th IEEE\/ACM International Conference on Automated Software Engineering","sponsor":["SIGAI ACM Special Interest Group on Artificial Intelligence","SIGSOFT ACM Special Interest Group on Software Engineering","IEEE CS"],"location":"Sacramento CA USA","acronym":"ASE '24"},"container-title":["Proceedings of the 39th IEEE\/ACM International Conference on Automated Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3691620.3695499","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3691620.3695499","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T00:06:19Z","timestamp":1750291579000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3691620.3695499"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,10,27]]},"references-count":59,"alternative-id":["10.1145\/3691620.3695499","10.1145\/3691620"],"URL":"https:\/\/doi.org\/10.1145\/3691620.3695499","relation":{},"subject":[],"published":{"date-parts":[[2024,10,27]]},"assertion":[{"value":"2024-10-27","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}