From the Ground Up: The DIMACS Software Security Workshop

Authors:
Gary McGraw
Affiliations:
-
Venue:
IEEE Security and Privacy
Year:
2003

Citing 9
Cited 6

LCLint: a tool for using specifications to check code

SIGSOFT '94 Proceedings of the 2nd ACM SIGSOFT symposium on Foundations of software engineering
Securing Java: getting down to business with mobile code

Securing Java: getting down to business with mobile code
A static analyzer for finding dynamic programming errors

Software—Practice & Experience
Security Engineering: A Guide to Building Dependable Distributed Systems

Security Engineering: A Guide to Building Dependable Distributed Systems
Writing Secure Code

Writing Secure Code
Attacking Malicious Code: A Report to the Infosec Research Council

IEEE Software
Statically Scanning Java Code: Finding Security Vulnerabilities

IEEE Software
ITS4: A static vulnerability scanner for C and C++ code

ACSAC '00 Proceedings of the 16th Annual Computer Security Applications Conference
Checking system rules using system-specific, programmer-written compiler extensions

OSDI'00 Proceedings of the 4th conference on Symposium on Operating System Design & Implementation - Volume 4

Processes for Producing Secure Software: Summary of US National Cybersecurity Summit Subgroup Report

IEEE Security and Privacy
Secure Software Engineering: Learning from the Past to Address Future Challenges

Information Security Journal: A Global Perspective
Impact of inheritance on vulnerability propagation at design phase

ACM SIGSOFT Software Engineering Notes
Research on software design level security vulnerabilities

ACM SIGSOFT Software Engineering Notes
Security vulnerabilities in software systems: a quantitative perspective

DBSec'05 Proceedings of the 19th annual IFIP WG 11.3 working conference on Data and Applications Security
OO Vulnerability: Measuring the vulnerability of an object-oriented design

Network Security

Quantified Score

Hi-index	0.00

Visualization

Abstract

The recent DIMACS Software Security Workshop explored issues such as security engineering, architecture and implementation risks, security analysis, mobile and malicious code, education and training, and open research issues. Many promising techniques have grown from connections between computer security, programming languages, and software engineering, and one workshop goal was to bring these communities closer together to crystallize the software security subfield. The author reports the workshop's results in this article.