Systems Security: Publications
-
[1]
A Meta−Model for Usable Secure Requirements Engineering
Shamal Faily and Ivan Flechais
In Software Engineering for Secure Systems‚ 2010. SESS '10. ICSE Workshop on. Pages 29–35. May, 2010.
Details about A Meta−Model for Usable Secure Requirements Engineering | BibTeX data for A Meta−Model for Usable Secure Requirements Engineering | Download (pdf) of A Meta−Model for Usable Secure Requirements Engineering | DOI (10.1145/1809100.1809105)
-
[2]
A Model of Security Culture for e−Science
Shamal Faily and Ivan Flechais
In Nathan Clarke‚ Steven Furnell and Rossouw von Solms, editors, Proceedings of the South African Information Security Multi−Conference (SAISMC 2010). Pages 154–164. University of Plymouth. 2010.
Details about A Model of Security Culture for e−Science | BibTeX data for A Model of Security Culture for e−Science | Download (pdf) of A Model of Security Culture for e−Science
-
[3]
A framework for usable and secure system design
Shamal Faily
PhD Thesis University of Oxford. 2011.
Details about A framework for usable and secure system design | BibTeX data for A framework for usable and secure system design | Download (pdf) of A framework for usable and secure system design
-
[4]
Analysing Chindogu: Applying Defamiliarisation to Security Design
Shamal Faily
In CHI 2012 Workshop on Defamiliarisation in Innovation and Usability. 2012.
Details about Analysing Chindogu: Applying Defamiliarisation to Security Design | BibTeX data for Analysing Chindogu: Applying Defamiliarisation to Security Design | Download (pdf) of Analysing Chindogu: Applying Defamiliarisation to Security Design
-
[5]
Analysing and Visualising Security and Usability in IRIS
Shamal Faily and Ivan Flechais
In Availability‚ Reliability and Security‚ 2010. ARES 10. Fifth International Conference on. February, 2010.
Details about Analysing and Visualising Security and Usability in IRIS | BibTeX data for Analysing and Visualising Security and Usability in IRIS | Download (pdf) of Analysing and Visualising Security and Usability in IRIS | DOI (10.1109/ARES.2010.28)
-
[6]
Barry is not the weakest link: Eliciting Secure System Requirements with Personas
Shamal Faily and Ivan Flechais
In Proceedings of the 24th British HCI Group Annual Conference on People and Computers: Play is a Serious Business. Pages 113–120. British Computer Society. 2010.
Details about Barry is not the weakest link: Eliciting Secure System Requirements with Personas | BibTeX data for Barry is not the weakest link: Eliciting Secure System Requirements with Personas | Download (pdf) of Barry is not the weakest link: Eliciting Secure System Requirements with Personas
-
[7]
BottleCap: a Credential Manager for Capability Systems
Justin King−Lacroix and Andrew Martin
In Proceedings of The Seventh ACM Workshop on Scalable Trusted Computing. 2012.
To appear
Details about BottleCap: a Credential Manager for Capability Systems | BibTeX data for BottleCap: a Credential Manager for Capability Systems
-
[8]
Bridging User−Centered Design and Requirements Engineering with GRL and Persona Cases
Shamal Faily
In Proceedings of the 5th International i* Workshop. Pages 114–119. 2011.
Details about Bridging User−Centered Design and Requirements Engineering with GRL and Persona Cases | BibTeX data for Bridging User−Centered Design and Requirements Engineering with GRL and Persona Cases | Download (pdf) of Bridging User−Centered Design and Requirements Engineering with GRL and Persona Cases
-
[9]
Challenges for Provenance in Cloud Computing
Imad M. Abbadi and John Lyle
In TaPP 2011: Proceedings of the Third USENIX Workshop on the Theory and Practice of Provenance. USENIX. 2011.
Details about Challenges for Provenance in Cloud Computing | BibTeX data for Challenges for Provenance in Cloud Computing | Download (pdf) of Challenges for Provenance in Cloud Computing
-
[10]
Characteristic−Based Security Analysis for the Personal Network
Andrew J. Paverd‚ Fadi El−Moussa and Ian Brown
In HomeSys Workshop at ACM UbiComp. 2014.
Details about Characteristic−Based Security Analysis for the Personal Network | BibTeX data for Characteristic−Based Security Analysis for the Personal Network | Download Paverd-HomeSys-2014-slides.pdf of Characteristic−Based Security Analysis for the Personal Network | Download Paverd-HomeSys-2014-v4.pdf of Characteristic−Based Security Analysis for the Personal Network | DOI (10.1145/2638728.2641549) | Link to Characteristic−Based Security Analysis for the Personal Network
-
[11]
Context−Sensitive Requirements and Risk Analysis
Shamal Faily
In Requirements Engineering Doctoral Symposium. 2009.
Details about Context−Sensitive Requirements and Risk Analysis | BibTeX data for Context−Sensitive Requirements and Risk Analysis | Download (pdf) of Context−Sensitive Requirements and Risk Analysis
-
[12]
Context−Sensitive Requirements and Risk Management with IRIS
Shamal Faily and Ivan Flechais
In International Requirements Engineering‚ 2009. RE'09. 17th IEEE. IEEE. August, 2009.
Details about Context−Sensitive Requirements and Risk Management with IRIS | BibTeX data for Context−Sensitive Requirements and Risk Management with IRIS | Download (pdf) of Context−Sensitive Requirements and Risk Management with IRIS | DOI (10.1109/RE.2009.54)
-
[13]
Cross−platform access control for mobile web applications
John Lyle‚ Salvatore Monteleone‚ Shamal Faily‚ Davide Patti and Fabio Ricciato
In Policies for Distributed Systems and Networks (POLICY)‚ 2012 IEEE International Symposium on. Pages 37–44. 2012.
Details about Cross−platform access control for mobile web applications | BibTeX data for Cross−platform access control for mobile web applications | Download (pdf) of Cross−platform access control for mobile web applications
-
[14]
Designing Interactive Secure Systems: CHI 2013 Special Interest Group
Shamal Faily‚ Lizzie Coles−Kemp‚ Paul Dunphy‚ Mike Just‚ Yoko Akama and Alexander De Luca
In CHI '13 Extended Abstracts on Human Factors in Computing Systems. ACM. 2013.
To Appear
Details about Designing Interactive Secure Systems: CHI 2013 Special Interest Group | BibTeX data for Designing Interactive Secure Systems: CHI 2013 Special Interest Group | Download (pdf) of Designing Interactive Secure Systems: CHI 2013 Special Interest Group
-
[15]
Designing and Aligning e−Science Security Culture with Design
Shamal Faily and Ivan Flechais
In Information Management & Computer Security. Vol. 18. No. 5. 2010.
Details about Designing and Aligning e−Science Security Culture with Design | BibTeX data for Designing and Aligning e−Science Security Culture with Design
-
[16]
Developing secure‚ unified multi−device and multi−domain platforms: A case study from the webinos project
Andrea Atzeni‚ John Lyle and Shamal Faily
In Architectures and Protocols for Secure Information Technology. IGI Global. 2013.
To Appear
Details about Developing secure‚ unified multi−device and multi−domain platforms: A case study from the webinos project | BibTeX data for Developing secure‚ unified multi−device and multi−domain platforms: A case study from the webinos project
-
[17]
Eliciting Policy Requirements for Critical National Infrastructure using the IRIS Framework
Shamal Faily and Ivan Flechais
In International Journal of Secure Software Engineering. Vol. 2. No. 4. Pages 1–18. 2011.
Details about Eliciting Policy Requirements for Critical National Infrastructure using the IRIS Framework | BibTeX data for Eliciting Policy Requirements for Critical National Infrastructure using the IRIS Framework
-
[18]
Eliciting Usable Security Requirements with Misusability Cases
Shamal Faily and Ivan Flechais
In Proceedings of the 19th IEEE International Requirements Engineering Conference. Pages 339–340. IEEE Computer Society. 2011.
Pre−print available at http://www.cs.ox.ac.uk/files/4125/PID1921187.pdf
Details about Eliciting Usable Security Requirements with Misusability Cases | BibTeX data for Eliciting Usable Security Requirements with Misusability Cases | Download (pdf) of Eliciting Usable Security Requirements with Misusability Cases | DOI (10.1109/RE.2011.6051665)
-
[19]
Engineering Attestable Services (short paper)
John Lyle and Andrew Martin
In Ahmad−Reza Acquisti Alessandro; Smith Sean W.; Sadeghi, editor, Proceedings of the 3rd International Conference on Trust and Trustworthy Computing. Pages 257–264. Springer. June, 2010.
Details about Engineering Attestable Services (short paper) | BibTeX data for Engineering Attestable Services (short paper) | Download (pdf) of Engineering Attestable Services (short paper) | DOI (10.1007/978-3-642-13869-0) | Link to Engineering Attestable Services (short paper)
-
[20]
Exploring the use of Intel SGX for Secure Many−Party Applications
K.A. Küçük‚ A. Paverd‚ A. Martin‚ N. Asokan‚ A. Simpson and R. Ankele
In Proceedings of the 1st Workshop on System Software for Trusted Execution (SysTEX '16). New York‚ NY‚ USA. 2016. ACM.
The theoretical construct of a Trusted Third Party (TTP) has the potential to solve many security and privacy challenges. In particular‚ a TTP is an ideal way to achieve secure multiparty computation—a privacy−enhancing technique in which mutually distrusting participants jointly compute a function over their private inputs without revealing these inputs. Although there exist cryptographic protocols to achieve this‚ their performance often limits them to the two−party case‚ or to a small number of participants. However‚ many real−world applications involve thousands or tens of thousands of participants. Examples of this type of many−party application include privacy−preserving energy metering‚ location−based services‚ and mobile network roaming. Challenging the notion that a trustworthy TTP does not exist‚ recent research has shown how trusted hardware and remote attestation can be used to establish a sufficient level of assurance in a real system such that it can serve as a trustworthy remote entity (TRE). We explore the use of Intel SGX‚ the most recent and arguably most promising trusted hardware technology‚ as the basis for a TRE for many−party applications. Using privacy−preserving energy metering as a case study‚ we design and implement a prototype TRE using SGX‚ and compare its performance to a previous system based on the Trusted Platform Module (TPM). Our results show that even without specialized optimizations‚ SGX provides comparable performance to the optimized TPM system‚ and therefore has significant potential for large−scale many−party applications.
Details about Exploring the use of Intel SGX for Secure Many−Party Applications | BibTeX data for Exploring the use of Intel SGX for Secure Many−Party Applications | DOI (10.1145/3007788.3007793) | Link to Exploring the use of Intel SGX for Secure Many−Party Applications
-
[21]
Formal Evaluation of Persona Trustworthiness with EUSTACE (Extended Abstract)
Shamal Faily‚ David Power‚ Philip Armstrong and Ivan Flechais
In Trust and Trustworthy Computing‚ 6th International Conference‚ TRUST 2013. 2013.
To Appear
Details about Formal Evaluation of Persona Trustworthiness with EUSTACE (Extended Abstract) | BibTeX data for Formal Evaluation of Persona Trustworthiness with EUSTACE (Extended Abstract)
-
[22]
Guidelines for Integrating Personas into Software Engineering Tools
Shamal Faily and John Lyle
In Proceedings of the 5th ACM SIGCHI symposium on Engineering interactive computing systems. Pages 69–74. 2013.
Details about Guidelines for Integrating Personas into Software Engineering Tools | BibTeX data for Guidelines for Integrating Personas into Software Engineering Tools
-
[23]
Hardware Security for Device Authentication in the Smart Grid
Andrew Paverd and Andrew Martin
In First Open EIT ICT Labs Workshop on Smart Grid Security − SmartGridSec12. Berlin‚ Germany. 2012.
Details about Hardware Security for Device Authentication in the Smart Grid | BibTeX data for Hardware Security for Device Authentication in the Smart Grid | Download (pdf) of Hardware Security for Device Authentication in the Smart Grid | Link to Hardware Security for Device Authentication in the Smart Grid
-
[24]
Here's Johnny: a Methodology for Developing Attacker Personas
Andrea Atzeni‚ Shamal Faily‚ John Lyle‚ Cesare Cameroni and Ivan Flechais
In Proceedings of the 6th International Conference on Availability‚ Reliability and Security. Pages 722–727. 2011.
Details about Here's Johnny: a Methodology for Developing Attacker Personas | BibTeX data for Here's Johnny: a Methodology for Developing Attacker Personas | Download (pdf) of Here's Johnny: a Methodology for Developing Attacker Personas
-
[25]
Improving Secure Systems Design with Security Culture
Shamal Faily and Ivan Flechais
In Poster at: Human Factors in Information Security. February, 2010.
Details about Improving Secure Systems Design with Security Culture | BibTeX data for Improving Secure Systems Design with Security Culture | Download (pdf) of Improving Secure Systems Design with Security Culture
-
[26]
Information Leakage from Optical Emanations
Joe Loughry and David A. Umphress
In ACM Transactions on Information and Systems Security. Vol. 5. No. 3. Pages 262–289. August, 2002.
Details about Information Leakage from Optical Emanations | BibTeX data for Information Leakage from Optical Emanations
-
[27]
Making the invisible visible: a theory of security culture for secure and usable grids
Shamal Faily and Ivan Flechais
In UK e−Science All Hands Conference 2008‚ Edinburgh‚ UK (Oral Presentation). 2008.
Details about Making the invisible visible: a theory of security culture for secure and usable grids | BibTeX data for Making the invisible visible: a theory of security culture for secure and usable grids | Download (pdf) of Making the invisible visible: a theory of security culture for secure and usable grids
-
[28]
Managing application whitelists in trusted distributed systems
Jun Ho Huh‚ John Lyle‚ Cornelius Namiluko and Andrew Martin
In Future Generation Computer Systems. Vol. In Press‚ Accepted Manuscript. 2010.
Details about Managing application whitelists in trusted distributed systems | BibTeX data for Managing application whitelists in trusted distributed systems | DOI (DOI: 10.1016/j.future.2010.08.014) | Link to Managing application whitelists in trusted distributed systems
-
[29]
Model−driven architectural risk analysis using architectural and contextualised attack patterns
Shamal Faily‚ John Lyle‚ Cornelius Namiluko‚ Andrea Atzeni and Cesare Cameroni
In Proceedings of the Workshop on Model−Driven Security. Pages 3:1–3:6. ACM. 2012.
Details about Model−driven architectural risk analysis using architectural and contextualised attack patterns | BibTeX data for Model−driven architectural risk analysis using architectural and contextualised attack patterns | Download (pdf) of Model−driven architectural risk analysis using architectural and contextualised attack patterns
-
[30]
On formalising and normalising role−based access control systems
D. J. Power M. A. Slaymaker and A. C. Simpson
In The Computer Journal. Vol. 52. No. 3. Pages 305−325. 2009.
Details about On formalising and normalising role−based access control systems | BibTeX data for On formalising and normalising role−based access control systems | DOI (doi:10.1093/comjnl/bxn016)
-
[31]
On the Feasibility of Remote Attestation for Web Services
John Lyle and Andrew Martin
In SecureCom09: Proceedings of the International Symposium on Secure Computing. Pages 283−288. IEEE. 2009.
Details about On the Feasibility of Remote Attestation for Web Services | BibTeX data for On the Feasibility of Remote Attestation for Web Services | Download PublicationFile of On the Feasibility of Remote Attestation for Web Services | Download feasibility-ieee.pdf of On the Feasibility of Remote Attestation for Web Services | Link to On the Feasibility of Remote Attestation for Web Services
-
[32]
On the design and development of webinos: a distributed mobile application middleware
John Lyle‚ Shamal Faily‚ Ivan Flechais‚ Andre Paul‚ Ayse Goker‚ Hans Myrhaug‚ Heiko Desruelle and Andrew Martin
In Proceedings of the 12th IFIP WG 6.1 international conference on Distributed applications and interoperable systems. Pages 140–147. 2012.
Details about On the design and development of webinos: a distributed mobile application middleware | BibTeX data for On the design and development of webinos: a distributed mobile application middleware | Download (pdf) of On the design and development of webinos: a distributed mobile application middleware
-
[33]
On the facilitation of fine−grained access to distributed healthcare data
D. Russell M. A. Slaymaker D. J. Power and A. C. Simpson
In Proceedings of Secure Data Management 2008. 2008.
Details about On the facilitation of fine−grained access to distributed healthcare data | BibTeX data for On the facilitation of fine−grained access to distributed healthcare data
-
[34]
Persona Cases: A Technique for grounding Personas
Shamal Faily and Ivan Flechais
In CHI '11: Proceedings of the 29th International conference on Human factors in computing systems. Pages 2267−2270. Vancouver‚ BC‚ Canada. 2011. ACM.
Details about Persona Cases: A Technique for grounding Personas | BibTeX data for Persona Cases: A Technique for grounding Personas
-
[35]
Personal PKI for the smart device era
John Lyle‚ Andrew Paverd‚ Justin King−Lacroix‚ Andrea Atzeni‚ Habib Virji‚ Ivan Flechais and Shamal Faily
In 9th European PKI Workshop: Research and Applications. 2012.
Details about Personal PKI for the smart device era | BibTeX data for Personal PKI for the smart device era | Download (pdf) of Personal PKI for the smart device era
-
[36]
Policies in Context: Factors Influencing the Elicitation and Categorisation of Context−Sensitive Security Policies
Shamal Faily‚ John Lyle‚ Ivan Flechais‚ Andrea Atzeni‚ Cesare Cameroni‚ Hans Myrhaug‚ Ayse Goker and Robert Kleinfeld
In Proceedings of the Workshop on Home Usable Privacy and Security. 2013.
Details about Policies in Context: Factors Influencing the Elicitation and Categorisation of Context−Sensitive Security Policies | BibTeX data for Policies in Context: Factors Influencing the Elicitation and Categorisation of Context−Sensitive Security Policies
-
[37]
Privacy−Enhanced Bi−Directional Communication in the Smart Grid using Trusted Computing
Andrew J Paverd‚ Andrew P Martin and Ian Brown
In Fifth IEEE International Conference on Smart Grid Communications (SmartGridComm 2014). 2014.
Details about Privacy−Enhanced Bi−Directional Communication in the Smart Grid using Trusted Computing | BibTeX data for Privacy−Enhanced Bi−Directional Communication in the Smart Grid using Trusted Computing | Download Paverd-SmartGridComm-2014.pdf of Privacy−Enhanced Bi−Directional Communication in the Smart Grid using Trusted Computing | Download Paverd-SmartGridComm-2014-slides.pdf of Privacy−Enhanced Bi−Directional Communication in the Smart Grid using Trusted Computing | DOI (10.1109/SmartGridComm.2014.7007758) | Link to Privacy−Enhanced Bi−Directional Communication in the Smart Grid using Trusted Computing
-
[38]
Provenance as a Security Control
Andrew Martin‚ John Lyle and Cornelius Namiluko
In Proceedings of TaPP'12: the 4th USENIX Workshop on the Theory and Practice of Provenance. USENIX. 2012.
Details about Provenance as a Security Control | BibTeX data for Provenance as a Security Control | Link to Provenance as a Security Control
-
[39]
Requirements Sensemaking using Concept Maps
Shamal Faily‚ John Lyle‚ Andre Paul‚ Andrea Atzeni‚ Dieter Blomme‚ Heiko Desruelle and Krishna Bangalore
In HCSE'2012: Proceedings of the 4th International Conference on Human−Centered Software Engineering. Pages 217–232. Springer. 2012.
Details about Requirements Sensemaking using Concept Maps | BibTeX data for Requirements Sensemaking using Concept Maps | Download (pdf) of Requirements Sensemaking using Concept Maps
-
[40]
Secure System? Challenge Accepted: Finding and Resolving Security Failures Using Security Premortems
Shamal Faily‚ John Lyle and Simon Parkin
In Proceedings of BCS HCI 2012 Workshops: Designing Interactive Secure Systems. Pages 5:1–5:4. 2012.
Details about Secure System? Challenge Accepted: Finding and Resolving Security Failures Using Security Premortems | BibTeX data for Secure System? Challenge Accepted: Finding and Resolving Security Failures Using Security Premortems | Download (pdf) of Secure System? Challenge Accepted: Finding and Resolving Security Failures Using Security Premortems
-
[41]
Securing web services for deployment in health grids
D. J. Power‚ E. A. Politou‚ M. A. Slaymaker and A. C. Simpson
In Future Generation Computer Systems. Vol. 22. No. 5. Pages 547–570. 2006.
Details about Securing web services for deployment in health grids | BibTeX data for Securing web services for deployment in health grids
-
[42]
Security Patterns Considered Harmful?
Shamal Faily
In Proceedings of The Second International Workshop on Cyberpatterns: Unifying Design Patterns with Security‚ Attack and Forensic Patterns. 2013.
To Appear
Details about Security Patterns Considered Harmful? | BibTeX data for Security Patterns Considered Harmful?
-
[43]
Security and Privacy in Smart Grid Demand Response Systems
Andrew J Paverd‚ Andrew P Martin and Ian Brown
In Jorge Cuellar, editor, Smart Grid Security. Pages 1−15. Springer International Publishing. 2014.
Details about Security and Privacy in Smart Grid Demand Response Systems | BibTeX data for Security and Privacy in Smart Grid Demand Response Systems | Download (pdf) of Security and Privacy in Smart Grid Demand Response Systems | DOI (10.1007/978-3-319-10329-7_1) | Link to Security and Privacy in Smart Grid Demand Response Systems
-
[44]
Security and Privacy in Smart Grid Demand Response Systems
Andrew Paverd‚ Andrew Martin and Ian Brown
In Second Open EIT ICT Labs Workshop on Smart Grid Security − SmartGridSec14. 2014.
Details about Security and Privacy in Smart Grid Demand Response Systems | BibTeX data for Security and Privacy in Smart Grid Demand Response Systems | Download (pdf) of Security and Privacy in Smart Grid Demand Response Systems
-
[45]
Security and Usability: Analysis and Evaluation
A. W. Roscoe Ronald Kainda Ivan Flechais
2010.
Details about Security and Usability: Analysis and Evaluation | BibTeX data for Security and Usability: Analysis and Evaluation
-
[46]
Security and Usability: Searching for the philosopher's stone
Ivan Flechais and Shamal Faily
In Workshop on the development of EuroSOUPS (European Symposium on Usable Privacy and Security). 2010.
Details about Security and Usability: Searching for the philosopher's stone | BibTeX data for Security and Usability: Searching for the philosopher's stone | Download (pdf) of Security and Usability: Searching for the philosopher's stone
-
[47]
Security goes to ground: on the applicability of Security Entrepreneurship to Grassroot Activism
Shamal Faily
In CHI Workshop on HCI‚ Politics and the City: Engaging with Urban Grassroots Movements for Reflection and Action. 2011.
Details about Security goes to ground: on the applicability of Security Entrepreneurship to Grassroot Activism | BibTeX data for Security goes to ground: on the applicability of Security Entrepreneurship to Grassroot Activism
-
[48]
Security through Usability: a user−centered approach for balanced security policy requirements
Shamal Faily and Ivan Flechais
In Poster at: Annual Computer Security Applications Conference. 2010.
Details about Security through Usability: a user−centered approach for balanced security policy requirements | BibTeX data for Security through Usability: a user−centered approach for balanced security policy requirements | Download (pdf) of Security through Usability: a user−centered approach for balanced security policy requirements
-
[49]
Software for Interactive Secure Systems Design: Lessons Learned Developing and Applying CAIRIS
Shamal Faily and Ivan Flechais
In Proceedings of BCS HCI 2012 Workshops: Designing Interactive Secure Systems. Pages 3:1–3:4. 2012.
Details about Software for Interactive Secure Systems Design: Lessons Learned Developing and Applying CAIRIS | BibTeX data for Software for Interactive Secure Systems Design: Lessons Learned Developing and Applying CAIRIS | Download (pdf) of Software for Interactive Secure Systems Design: Lessons Learned Developing and Applying CAIRIS
-
[50]
Stakeholder involvement‚ motivation‚ responsibility‚ communication: How to design usable security in e−Science
I. Flechais and M. A. Sasse
Vol. 67. No. 4. Pages 281−296. 2009.
Details about Stakeholder involvement‚ motivation‚ responsibility‚ communication: How to design usable security in e−Science | BibTeX data for Stakeholder involvement‚ motivation‚ responsibility‚ communication: How to design usable security in e−Science | Download (pdf) of Stakeholder involvement‚ motivation‚ responsibility‚ communication: How to design usable security in e−Science | DOI (10.1016/j.ijhcs.2007.10.002) | Link to Stakeholder involvement‚ motivation‚ responsibility‚ communication: How to design usable security in e−Science
-
[51]
The Secret Lives of Assumptions: Developing and Refining Assumption Personas for Secure System Design
Shamal Faily and Ivan Flechais
In HCSE'2010: Proceedings of the 3rd Conference on Human−Centered Software Engineering. Pages 111–118. Springer. 2010.
Details about The Secret Lives of Assumptions: Developing and Refining Assumption Personas for Secure System Design | BibTeX data for The Secret Lives of Assumptions: Developing and Refining Assumption Personas for Secure System Design | Download (pdf) of The Secret Lives of Assumptions: Developing and Refining Assumption Personas for Secure System Design
-
[52]
The Ten Page Introduction to Trusted Computing
Andrew Martin
No. RR−08−11. OUCL. December, 2008.
Details about The Ten Page Introduction to Trusted Computing | BibTeX data for The Ten Page Introduction to Trusted Computing | Download of The Ten Page Introduction to Trusted Computing
-
[53]
The webinos project
Christian Fuhrhop‚ John Lyle and Shamal Faily
In Proceedings of the 21st international conference companion on World Wide Web. Pages 259–262. ACM. 2012.
Details about The webinos project | BibTeX data for The webinos project | Download (pdf) of The webinos project
-
[54]
To boldly go where invention isn't secure: applying Security Entrepreneurship to secure systems design
Shamal Faily and Ivan Flechais
In NSPW '10: Proceedings of the 2010 New Security Paradigms Workshop. Pages 73–84. New York‚ NY‚ USA. 2010. ACM.
Details about To boldly go where invention isn't secure: applying Security Entrepreneurship to secure systems design | BibTeX data for To boldly go where invention isn't secure: applying Security Entrepreneurship to secure systems design | Download (pdf) of To boldly go where invention isn't secure: applying Security Entrepreneurship to secure systems design
-
[55]
Tool−support Premortems with Attack and Security Patterns
Shamal Faily‚ John Lyle and Simon Parkin
In First International Workshop on Cyberpatterns: Unifying Design Patterns with Security‚ Attack and Forensic Patterns. Pages 10–11. 2012.
Details about Tool−support Premortems with Attack and Security Patterns | BibTeX data for Tool−support Premortems with Attack and Security Patterns
-
[56]
Towards a Secure‚ Tamper−Proof Grid Platform.
Andrew Cooper and Andrew Martin
In Sixth IEEE International Symposium on Cluster Computing and the Grid (CCGrid 2006)‚ 16−19 May 2006‚ Singapore. Pages 373−380. IEEE Computer Society. 2006.
Details about Towards a Secure‚ Tamper−Proof Grid Platform. | BibTeX data for Towards a Secure‚ Tamper−Proof Grid Platform.
-
[57]
Towards tool−support for Usable Secure Requirements Engineering with CAIRIS
Shamal Faily and Ivan Flechais
In International Journal of Secure Software Engineering. Vol. 1. No. 3. Pages 56–70. 2010.
Details about Towards tool−support for Usable Secure Requirements Engineering with CAIRIS | BibTeX data for Towards tool−support for Usable Secure Requirements Engineering with CAIRIS | DOI (10.4018/ijsse.2010070104)
-
[58]
Trustable Remote Verification of Web Services
John Lyle
In Liqun Chen‚ Chris J. Mitchell and Andrew Martin, editors, TRUST. Pages 153−168. Springer. April, 2009.
Details about Trustable Remote Verification of Web Services | BibTeX data for Trustable Remote Verification of Web Services | Download (pdf) of Trustable Remote Verification of Web Services | Link to Trustable Remote Verification of Web Services
-
[59]
Trusted Computing and Provenance: Better Together
John Lyle and Andrew Martin
In Proceedings of the 2nd Workshop on the Theory and Practice of Provenance. Usenix. 2010.
Details about Trusted Computing and Provenance: Better Together | BibTeX data for Trusted Computing and Provenance: Better Together | Download (pdf) of Trusted Computing and Provenance: Better Together | Download (pdf) of Trusted Computing and Provenance: Better Together
-
[60]
Trustworthy Log Reconciliation for Distributed Virtual Organisations
Jun Ho Huh and John Lyle
In Liqun Chen‚ Chris J. Mitchell and Andrew Martin, editors, Trust '09: Proceedings of the 2nd International Conference on Trusted Computing. Pages 169−182. Berlin‚ Heidelberg. April, 2009. Springer−Verlag.
Details about Trustworthy Log Reconciliation for Distributed Virtual Organisations | BibTeX data for Trustworthy Log Reconciliation for Distributed Virtual Organisations | DOI (10.1007/978-3-642-00587-9_11)
-
[61]
Trustworthy Remote Entities in the Smart Grid
Andrew Paverd
In 28th ACM Symposium On Applied Computing − SAC2013. Coimbra‚ Portugal. 2013.
Student Research Competition Finalist
Details about Trustworthy Remote Entities in the Smart Grid | BibTeX data for Trustworthy Remote Entities in the Smart Grid | Download (pdf) of Trustworthy Remote Entities in the Smart Grid | Link to Trustworthy Remote Entities in the Smart Grid
-
[62]
Trustworthy Services Through Attestation
John Lyle
PhD Thesis Department of Computer Science‚ University of Oxford. 2011.
Details about Trustworthy Services Through Attestation | BibTeX data for Trustworthy Services Through Attestation | Download (pdf) of Trustworthy Services Through Attestation
-
[63]
Two Heads are Better Than One: Security and Usability of Device Associations in Group Scenarios
A. W. Roscoe Ronald Kainda Ivan Flechais
In Proceedings of the 2010 Symposium on Usable Privacy and Security (SOUPS 2010). 2010.
Details about Two Heads are Better Than One: Security and Usability of Device Associations in Group Scenarios | BibTeX data for Two Heads are Better Than One: Security and Usability of Device Associations in Group Scenarios
-
[64]
Two Requirements for Usable and Secure Software Engineering
Shamal Faily
In 1st Software and Usable Security Aligned for Good Engineering (SAUSAGE) Workshop. 2011.
Details about Two Requirements for Usable and Secure Software Engineering | BibTeX data for Two Requirements for Usable and Secure Software Engineering | Download (pdf) of Two Requirements for Usable and Secure Software Engineering
-
[65]
Unsteady Ground: Certification to Unstable Criteria
Joe Loughry
In Proceedings of the Second International Conference on Advances in System Testing and Validation Life Cycle. Nice‚ France. 2010.
Details about Unsteady Ground: Certification to Unstable Criteria | BibTeX data for Unsteady Ground: Certification to Unstable Criteria
-
[66]
Usability and Security of Out−Of−Band Channels in Secure Device Pairing Protocols
A. W. Roscoe Ronald Kainda Ivan Flechais
In SOUPS '09: Proceedings of the 5th Symposium on Usable Privacy and Security. 2009.
Details about Usability and Security of Out−Of−Band Channels in Secure Device Pairing Protocols | BibTeX data for Usability and Security of Out−Of−Band Channels in Secure Device Pairing Protocols
-
[67]
User−Centered Information Security Policy Development in a Post−Stuxnet World
Shamal Faily and Ivan Flechais
In Proceedings of the 6th International Conference on Availability‚ Reliability and Security. Pages 716–721. 2011.
Details about User−Centered Information Security Policy Development in a Post−Stuxnet World | BibTeX data for User−Centered Information Security Policy Development in a Post−Stuxnet World | Download (pdf) of User−Centered Information Security Policy Development in a Post−Stuxnet World