1. ESSoS 2009: Leuven, Belgium

Policy Verification and Enforcement

• Christian Wolter, Philip Miseldine, Christoph Meinel:
  Verification of Business Process Entailment Constraints Using SPIN. 1-15
  Electronic Edition (link) BibTeX
• Slim Kallel, Anis Charfi, Mira Mezini, Mohamed Jmaiel, Karl Klose:
  From Formal Access Control Policies to Runtime Enforcement Aspects. 16-31
  Electronic Edition (link) BibTeX
• Timothy E. Levin, Cynthia E. Irvine, Terry Benzel, Thuy D. Nguyen, Paul C. Clark, Ganesha Bhaskara:
  Idea: Trusted Emergency Management. 32-36
  Electronic Edition (link) BibTeX

Model Refinement and Program Transformation

• Fabio Martinelli, Ilaria Matteucci:
  Idea: Action Refinement for Security Properties Enforcement. 37-42
  Electronic Edition (link) BibTeX
• Holger Schmidt:
  Pattern-Based Confidentiality-Preserving Refinement. 43-59
  Electronic Edition (link) BibTeX
• Ron van der Meyden:
  Architectural Refinement and Notions of Intransitive Noninterference. 60-74
  Electronic Edition (link) BibTeX
• Munawar Hafiz, Paul Adamczyk, Ralph Johnson:
  Systematically Eradicating Data Injection Attacks Using Security-Oriented Program Transformations. 75-90
  Electronic Edition (link) BibTeX

Secure System Development

• Pratyusa K. Manadhata, Yücel Karabulut, Jeannette M. Wing:
  Report: Measuring the Attack Surfaces of Enterprise Software. 91-100
  Electronic Edition (link) BibTeX
• Pieter Philippaerts, Cédric Boon, Frank Piessens:
  Report: Extensibility and Implementation Independence of the .NET Cryptographic API. 101-110
  Electronic Edition (link) BibTeX
• Robin Sharp:
  Report: CC-Based Design of Secure Application Systems. 111-121
  Electronic Edition (link) BibTeX
• Laurie Williams, Michael Gegick, Andrew Meneely:
  Protection Poker: Structuring Software Security Risk Assessment and Knowledge Transfer. 122-134
  Electronic Edition (link) BibTeX

Attack Analysis and Prevention

• Michael Gegick, Pete Rotella, Laurie Williams:
  Toward Non-security Failures as a Predictor of Security Faults and Failures. 135-149
  Electronic Edition (link) BibTeX
• Feng Chen, Jinshu Su, Yi Zhang:
  A Scalable Approach to Full Attack Graphs Generation. 150-163
  Electronic Edition (link) BibTeX
• Jason Hiser, Clark L. Coleman, Michele Co, Jack W. Davidson:
  MEDS: The Memory Error Detection System. 164-179
  Electronic Edition (link) BibTeX

Testing and Assurance

• Thanh-Binh Dao, Etsuya Shibayama:
  Idea: Automatic Security Testing for Web Applications. 180-184
  Electronic Edition (link) BibTeX
• Albin Zuccato, Clemens Kögler:
  Report: Functional Security Testing Closing the Software - Security Testing Gap: A Case from a Telecom Provider. 185-194
  Electronic Edition (link) BibTeX
• James Walden, Adam Messer, Alex Kuhl:
  Idea: Measuring the Effect of Code Complexity on Static Analysis Results. 195-199
  Electronic Edition (link) BibTeX