3. QoP 2007: Alexandria, VA, USA

Günter Karjoth, Ketil Stølen (Eds.): Proceedings of the 3th ACM Workshop on Quality of Protection, QoP 2007, Alexandria, VA, USA, October 29, 2007. ACM 2007, ISBN 978-1-59593-885-5

Software security

Vadim Okun, William F. Guthrie, Romain Gaucher, Paul E. Black:
Effect of static analysis tools on software security: preliminary investigation. 1-5
Andy Ozment:
Improving vulnerability discovery models. 6-11
Hongxia Jin, Ginger Myles:
A technique for self-certifying tamper resistant software. 12-14
Bertrand Anckaert, Matias Madou, Bjorn De Sutter, Bruno De Bus, Koen De Bosschere, Bart Preneel:
Program obfuscation: a quantitative approach. 15-20
Shari Lawrence Pfleeger:
Measuring up: how to keep security metrics useful and realistic. 21

Business security metrics

Fabio Massacci, Artsiom Yautsiukhin:
An algorithm for the appraisal of assurance indicators for complex business processes. 22-27
Reijo Savola:
Towards a taxonomy for information security metrics. 28-30
Idongesit Mkpong-Ruffin, David A. Umphress, John Hamilton, Juan Gilbert:
Quantitative software security risk assessment model. 31-33

Network security

Daniel Boteanu, Edouard Reich, José M. Fernandez, John McHugh:
Implementing and testing dynamic timeout adjustment as a dos counter-measure. 34-39
Mohammed S. Gadelrab, Anas Abou El Kalam, Yves Deswarte:
Defining categories to select representative attack test-cases. 40-42

Risk analysis

Marco Domenico Aime, Andrea S. Atzeni, Paolo Carlo Pomi:
AMBRA: automated model-based risk analysis. 43-48
Lingyu Wang, Anoop Singhal, Sushil Jajodia:
Toward measuring network security using attack graphs. 49-54

Poster Session

Yolanta Beres, Adrian Baldwin, Simon Shiu:
Model-based assurance of security controls. 55