Fourth International Workshop on Secure Software Engineering (SecSE 2010)

In conjunction with ARES 2010http://www.ares-conference.eu/conf/

Software is an integral part of everyday life, and we expect and depend upon software systems to perform correctly. Software security is about ensuring that systems continue to function correctly also under malicious attack. As most systems now are web-enabled, the number of attackers with access to the system increases dramatically and thus the threat scenario changes. The traditional approach to secure a system includes putting up defence mechanisms like IDS and firewalls, but such measures are no longer sufficient by
... see full description»

In conjunction with ARES 2010http://www.ares-conference.eu/conf/

Software is an integral part of everyday life, and we expect and depend upon software systems to perform correctly. Software security is about ensuring that systems continue to function correctly also under malicious attack. As most systems now are web-enabled, the number of attackers with access to the system increases dramatically and thus the threat scenario changes. The traditional approach to secure a system includes putting up defence mechanisms like IDS and firewalls, but such measures are no longer sufficient by themselves. We need to be able to build better, more robust and more secure systems. Even more importantly, however, we should strive to achieve these qualities in all software systems, not just the ones that need special protection. This workshop will focus on techniques, experiences and lessons learned for building secure and dependable software.

Suggested topics include, but are not limited to:- Secure architecture and design- Security in agile software development- Aspect-oriented software development for secure software- Security requirements- Risk management in software projects- Secure implementation- Secure deployment- Testing for security- Quantitative measurement of security properties- Static and dynamic analysis for security- Verification and assurance techniques for security properties- Lessons learned- Security and usability- Teaching secure software development- Experience reports on successfully attuning developers to secure software engineering

Important dates:- Submission Deadline: September 30th 2009- Author Notification: November 1st 2009- Author Registration: November 11th 2009- Proceedings Version: November 11th 2009- Conference/ Workshop: February, 15th - 18th 2010