1.

Record Nr.

UNINA9910466754103321

Titolo

Empirical research for software security : foundations and experience / / edited by Lotfi ben Othmane, Martin Gilje Jaatun, Edgar Weippl

Pubbl/distr/stampa

Boca Raton, FL : , : CRC Press, , [2018]

©2018

ISBN

1-351-65088-2

1-315-15485-4

1-4987-7642-6

Descrizione fisica

1 online resource (323 pages)

Collana

CRC series in security, privacy and trust

Disciplina

005.8

Soggetti

Computer security

Computer networks - Security measures

Electronic books.

Lingua di pubblicazione

Inglese

Formato

Materiale a stampa

Livello bibliografico

Monografia

Nota di bibliografia

Includes bibliographical references and index.

Nota di contenuto

chapter 1 Empirical Research on Security and Privacy by Design / Koen Yskout -- chapter 2 Guidelines for Systematic Mapping Studies in Security Engineering / Michael Felderer -- chapter 3 An Introduction to Data Analytics for Software Security -- chapter 4 Generating Software Security Knowledge Through Empirical Methods / Rene´ Noe¨l, Santiago Matalonga, Gilberto Pedraza, Herna´n Astudillo, and Eduardo B. Fernandez -- chapter 5 Visual Analytics: Foundations and Experiences in Malware Analysis / Markus Wagner -- chapter 6 Analysis of Metrics for Classification Accuracy in Intrusion Detection / Natalia Stakhanova -- chapter 7 The Building Security in Maturity Model as a Research Tool / Martin Gilje Jaatun -- chapter 8 Agile Test Automation for Web Applications — A Security Perspective / Sandra Domenique Ringmann -- chapter 9 Benchmark for Empirical Evaluation of Web Application Anomaly Detectors / Robert Bronte -- chapter 10 Threats to Validity in Empirical Software Security Research / Daniela S. Cruzes and Lotfi ben Othmane.

Sommario/riassunto

"Developing secure software requires the integration of numerous methods and tools into the development process, and software design



is based on shared expert knowledge, claims, and opinions. Empirical methods, including data analytics, allow extracting knowledge and insights from the data that organizations collect from their processes and tools, and from the opinions of the experts who practice these processes and methods. This book introduces the reader to the fundamentals of empirical research methods, and demonstrates how these methods can be used to hone a secure software development lifecycle based on empirical data and published best practices."--Provided by publisher.