Systems Security: Publications

A Meta−Model for Usable Secure Requirements Engineering

Shamal Faily and Ivan Flechais

In Software Engineering for Secure Systems‚ 2010. SESS '10. ICSE Workshop on. Pages 29–35. May, 2010.

Details about A Meta−Model for Usable Secure Requirements Engineering | BibTeX data for A Meta−Model for Usable Secure Requirements Engineering | Download  (pdf) of A Meta−Model for Usable Secure Requirements Engineering | DOI (10.1145/1809100.1809105)

A Model of Security Culture for e−Science

Shamal Faily and Ivan Flechais

In Nathan Clarke‚ Steven Furnell and Rossouw von Solms, editors, Proceedings of the South African Information Security Multi−Conference (SAISMC 2010). Pages 154–164. University of Plymouth. 2010.

Details about A Model of Security Culture for e−Science | BibTeX data for A Model of Security Culture for e−Science | Download  (pdf) of A Model of Security Culture for e−Science

A framework for usable and secure system design

Shamal Faily

PhD Thesis University of Oxford. 2011.

Details about A framework for usable and secure system design | BibTeX data for A framework for usable and secure system design | Download  (pdf) of A framework for usable and secure system design

Analysing Chindogu: Applying Defamiliarisation to Security Design

Shamal Faily

In CHI 2012 Workshop on Defamiliarisation in Innovation and Usability. 2012.

Details about Analysing Chindogu: Applying Defamiliarisation to Security Design | BibTeX data for Analysing Chindogu: Applying Defamiliarisation to Security Design | Download  (pdf) of Analysing Chindogu: Applying Defamiliarisation to Security Design

Analysing and Visualising Security and Usability in IRIS

Shamal Faily and Ivan Flechais

In Availability‚ Reliability and Security‚ 2010. ARES 10. Fifth International Conference on. February, 2010.

Details about Analysing and Visualising Security and Usability in IRIS | BibTeX data for Analysing and Visualising Security and Usability in IRIS | Download  (pdf) of Analysing and Visualising Security and Usability in IRIS | DOI (10.1109/ARES.2010.28)

Barry is not the weakest link: Eliciting Secure System Requirements with Personas

Shamal Faily and Ivan Flechais

In Proceedings of the 24th British HCI Group Annual Conference on People and Computers: Play is a Serious Business. Pages 113–120. British Computer Society. 2010.

Details about Barry is not the weakest link: Eliciting Secure System Requirements with Personas | BibTeX data for Barry is not the weakest link: Eliciting Secure System Requirements with Personas | Download  (pdf) of Barry is not the weakest link: Eliciting Secure System Requirements with Personas

BottleCap: a Credential Manager for Capability Systems

Justin King−Lacroix and Andrew Martin

In Proceedings of The Seventh ACM Workshop on Scalable Trusted Computing. 2012.

To appear

Details about BottleCap: a Credential Manager for Capability Systems | BibTeX data for BottleCap: a Credential Manager for Capability Systems

Bridging User−Centered Design and Requirements Engineering with GRL and Persona Cases

Shamal Faily

In Proceedings of the 5th International i* Workshop. Pages 114–119. 2011.

Details about Bridging User−Centered Design and Requirements Engineering with GRL and Persona Cases | BibTeX data for Bridging User−Centered Design and Requirements Engineering with GRL and Persona Cases | Download  (pdf) of Bridging User−Centered Design and Requirements Engineering with GRL and Persona Cases

Challenges for Provenance in Cloud Computing

Imad M. Abbadi and John Lyle

In TaPP 2011: Proceedings of the Third USENIX Workshop on the Theory and Practice of Provenance. USENIX. 2011.

Details about Challenges for Provenance in Cloud Computing | BibTeX data for Challenges for Provenance in Cloud Computing | Download (pdf) of Challenges for Provenance in Cloud Computing

Characteristic−Based Security Analysis for the Personal Network

Andrew J. Paverd‚ Fadi El−Moussa and Ian Brown

In HomeSys Workshop at ACM UbiComp. 2014.

Details about Characteristic−Based Security Analysis for the Personal Network | BibTeX data for Characteristic−Based Security Analysis for the Personal Network | Download Paverd-HomeSys-2014-slides.pdf of Characteristic−Based Security Analysis for the Personal Network | Download Paverd-HomeSys-2014-v4.pdf of Characteristic−Based Security Analysis for the Personal Network | DOI (10.1145/2638728.2641549) | Link to Characteristic−Based Security Analysis for the Personal Network

Context−Sensitive Requirements and Risk Analysis

Shamal Faily

In Requirements Engineering Doctoral Symposium. 2009.

Details about Context−Sensitive Requirements and Risk Analysis | BibTeX data for Context−Sensitive Requirements and Risk Analysis | Download  (pdf) of Context−Sensitive Requirements and Risk Analysis

Context−Sensitive Requirements and Risk Management with IRIS

Shamal Faily and Ivan Flechais

In International Requirements Engineering‚ 2009. RE'09. 17th IEEE. IEEE. August, 2009.

Details about Context−Sensitive Requirements and Risk Management with IRIS | BibTeX data for Context−Sensitive Requirements and Risk Management with IRIS | Download  (pdf) of Context−Sensitive Requirements and Risk Management with IRIS | DOI (10.1109/RE.2009.54)

Cross−platform access control for mobile web applications

John Lyle‚ Salvatore Monteleone‚ Shamal Faily‚ Davide Patti and Fabio Ricciato

In Policies for Distributed Systems and Networks (POLICY)‚ 2012 IEEE International Symposium on. Pages 37–44. 2012.

Details about Cross−platform access control for mobile web applications | BibTeX data for Cross−platform access control for mobile web applications | Download  (pdf) of Cross−platform access control for mobile web applications

Designing Interactive Secure Systems: CHI 2013 Special Interest Group

Shamal Faily‚ Lizzie Coles−Kemp‚ Paul Dunphy‚ Mike Just‚ Yoko Akama and Alexander De Luca

In CHI '13 Extended Abstracts on Human Factors in Computing Systems. ACM. 2013.

To Appear

Details about Designing Interactive Secure Systems: CHI 2013 Special Interest Group | BibTeX data for Designing Interactive Secure Systems: CHI 2013 Special Interest Group | Download  (pdf) of Designing Interactive Secure Systems: CHI 2013 Special Interest Group

Designing and Aligning e−Science Security Culture with Design

Shamal Faily and Ivan Flechais

In Information Management & Computer Security. Vol. 18. No. 5. 2010.

Details about Designing and Aligning e−Science Security Culture with Design | BibTeX data for Designing and Aligning e−Science Security Culture with Design

Developing secure‚ unified multi−device and multi−domain platforms: A case study from the webinos project

Andrea Atzeni‚ John Lyle and Shamal Faily

In Architectures and Protocols for Secure Information Technology. IGI Global. 2013.

To Appear

Details about Developing secure‚ unified multi−device and multi−domain platforms: A case study from the webinos project | BibTeX data for Developing secure‚ unified multi−device and multi−domain platforms: A case study from the webinos project

Eliciting Policy Requirements for Critical National Infrastructure using the IRIS Framework

Shamal Faily and Ivan Flechais

In International Journal of Secure Software Engineering. Vol. 2. No. 4. Pages 1–18. 2011.

Details about Eliciting Policy Requirements for Critical National Infrastructure using the IRIS Framework | BibTeX data for Eliciting Policy Requirements for Critical National Infrastructure using the IRIS Framework

Eliciting Usable Security Requirements with Misusability Cases

Shamal Faily and Ivan Flechais

In Proceedings of the 19th IEEE International Requirements Engineering Conference. Pages 339–340. IEEE Computer Society. 2011.

Pre−print available at http://www.cs.ox.ac.uk/files/4125/PID1921187.pdf

Details about Eliciting Usable Security Requirements with Misusability Cases | BibTeX data for Eliciting Usable Security Requirements with Misusability Cases | Download  (pdf) of Eliciting Usable Security Requirements with Misusability Cases | DOI (10.1109/RE.2011.6051665)

Engineering Attestable Services (short paper)

John Lyle and Andrew Martin

In Ahmad−Reza Acquisti Alessandro; Smith Sean W.; Sadeghi, editor, Proceedings of the 3rd International Conference on Trust and Trustworthy Computing. Pages 257–264. Springer. June, 2010.

Details about Engineering Attestable Services (short paper) | BibTeX data for Engineering Attestable Services (short paper) | Download  (pdf) of Engineering Attestable Services (short paper) | DOI (10.1007/978-3-642-13869-0) | Link to Engineering Attestable Services (short paper)

Exploring the use of Intel SGX for Secure Many−Party Applications

K.A. Küçük‚ A. Paverd‚ A. Martin‚ N. Asokan‚ A. Simpson and R. Ankele

In Proceedings of the 1st Workshop on System Software for Trusted Execution (SysTEX '16). New York‚ NY‚ USA. 2016. ACM.

The theoretical construct of a Trusted Third Party (TTP) has the potential to solve many security and privacy challenges. In particular‚ a TTP is an ideal way to achieve secure multiparty computation—a privacy−enhancing technique in which mutually distrusting participants jointly compute a function over their private inputs without revealing these inputs. Although there exist cryptographic protocols to achieve this‚ their performance often limits them to the two−party case‚ or to a small number of participants. However‚ many real−world applications involve thousands or tens of thousands of participants. Examples of this type of many−party application include privacy−preserving energy metering‚ location−based services‚ and mobile network roaming. Challenging the notion that a trustworthy TTP does not exist‚ recent research has shown how trusted hardware and remote attestation can be used to establish a sufficient level of assurance in a real system such that it can serve as a trustworthy remote entity (TRE). We explore the use of Intel SGX‚ the most recent and arguably most promising trusted hardware technology‚ as the basis for a TRE for many−party applications. Using privacy−preserving energy metering as a case study‚ we design and implement a prototype TRE using SGX‚ and compare its performance to a previous system based on the Trusted Platform Module (TPM). Our results show that even without specialized optimizations‚ SGX provides comparable performance to the optimized TPM system‚ and therefore has significant potential for large−scale many−party applications.

Details about Exploring the use of Intel SGX for Secure Many−Party Applications | BibTeX data for Exploring the use of Intel SGX for Secure Many−Party Applications | DOI (10.1145/3007788.3007793) | Link to Exploring the use of Intel SGX for Secure Many−Party Applications

Formal Evaluation of Persona Trustworthiness with EUSTACE (Extended Abstract)

Shamal Faily‚ David Power‚ Philip Armstrong and Ivan Flechais

In Trust and Trustworthy Computing‚ 6th International Conference‚ TRUST 2013. 2013.

To Appear

Details about Formal Evaluation of Persona Trustworthiness with EUSTACE (Extended Abstract) | BibTeX data for Formal Evaluation of Persona Trustworthiness with EUSTACE (Extended Abstract)

Guidelines for Integrating Personas into Software Engineering Tools

Shamal Faily and John Lyle

In Proceedings of the 5th ACM SIGCHI symposium on Engineering interactive computing systems. Pages 69–74. 2013.

Details about Guidelines for Integrating Personas into Software Engineering Tools | BibTeX data for Guidelines for Integrating Personas into Software Engineering Tools

Hardware Security for Device Authentication in the Smart Grid

Andrew Paverd and Andrew Martin

In First Open EIT ICT Labs Workshop on Smart Grid Security − SmartGridSec12. Berlin‚ Germany. 2012.

Details about Hardware Security for Device Authentication in the Smart Grid | BibTeX data for Hardware Security for Device Authentication in the Smart Grid | Download  (pdf) of Hardware Security for Device Authentication in the Smart Grid | Link to Hardware Security for Device Authentication in the Smart Grid

Here's Johnny: a Methodology for Developing Attacker Personas

Andrea Atzeni‚ Shamal Faily‚ John Lyle‚ Cesare Cameroni and Ivan Flechais

In Proceedings of the 6th International Conference on Availability‚ Reliability and Security. Pages 722–727. 2011.

Details about Here's Johnny: a Methodology for Developing Attacker Personas | BibTeX data for Here's Johnny: a Methodology for Developing Attacker Personas | Download  (pdf) of Here's Johnny: a Methodology for Developing Attacker Personas

Improving Secure Systems Design with Security Culture

Shamal Faily and Ivan Flechais

In Poster at: Human Factors in Information Security. February, 2010.

Details about Improving Secure Systems Design with Security Culture | BibTeX data for Improving Secure Systems Design with Security Culture | Download  (pdf) of Improving Secure Systems Design with Security Culture

Information Leakage from Optical Emanations

Joe Loughry and David A. Umphress

In ACM Transactions on Information and Systems Security. Vol. 5. No. 3. Pages 262–289. August, 2002.

Details about Information Leakage from Optical Emanations | BibTeX data for Information Leakage from Optical Emanations

Making the invisible visible: a theory of security culture for secure and usable grids

Shamal Faily and Ivan Flechais

In UK e−Science All Hands Conference 2008‚ Edinburgh‚ UK (Oral Presentation). 2008.

Details about Making the invisible visible: a theory of security culture for secure and usable grids | BibTeX data for Making the invisible visible: a theory of security culture for secure and usable grids | Download  (pdf) of Making the invisible visible: a theory of security culture for secure and usable grids

Managing application whitelists in trusted distributed systems

Jun Ho Huh‚ John Lyle‚ Cornelius Namiluko and Andrew Martin

In Future Generation Computer Systems. Vol. In Press‚ Accepted Manuscript. 2010.

Details about Managing application whitelists in trusted distributed systems | BibTeX data for Managing application whitelists in trusted distributed systems | DOI (DOI: 10.1016/j.future.2010.08.014) | Link to Managing application whitelists in trusted distributed systems

Model−driven architectural risk analysis using architectural and contextualised attack patterns

Shamal Faily‚ John Lyle‚ Cornelius Namiluko‚ Andrea Atzeni and Cesare Cameroni

In Proceedings of the Workshop on Model−Driven Security. Pages 3:1–3:6. ACM. 2012.

Details about Model−driven architectural risk analysis using architectural and contextualised attack patterns | BibTeX data for Model−driven architectural risk analysis using architectural and contextualised attack patterns | Download  (pdf) of Model−driven architectural risk analysis using architectural and contextualised attack patterns

On formalising and normalising role−based access control systems

D. J. Power M. A. Slaymaker and A. C. Simpson

In The Computer Journal. Vol. 52. No. 3. Pages 305−325. 2009.

Details about On formalising and normalising role−based access control systems | BibTeX data for On formalising and normalising role−based access control systems | DOI (doi:10.1093/comjnl/bxn016)

On the Feasibility of Remote Attestation for Web Services

John Lyle and Andrew Martin

In SecureCom09: Proceedings of the International Symposium on Secure Computing. Pages 283−288. IEEE. 2009.

Details about On the Feasibility of Remote Attestation for Web Services | BibTeX data for On the Feasibility of Remote Attestation for Web Services | Download PublicationFile of On the Feasibility of Remote Attestation for Web Services | Download feasibility-ieee.pdf of On the Feasibility of Remote Attestation for Web Services | Link to On the Feasibility of Remote Attestation for Web Services

On the design and development of webinos: a distributed mobile application middleware

John Lyle‚ Shamal Faily‚ Ivan Flechais‚ Andre Paul‚ Ayse Goker‚ Hans Myrhaug‚ Heiko Desruelle and Andrew Martin

In Proceedings of the 12th IFIP WG 6.1 international conference on Distributed applications and interoperable systems. Pages 140–147. 2012.

Details about On the design and development of webinos: a distributed mobile application middleware | BibTeX data for On the design and development of webinos: a distributed mobile application middleware | Download  (pdf) of On the design and development of webinos: a distributed mobile application middleware

On the facilitation of fine−grained access to distributed healthcare data

D. Russell M. A. Slaymaker D. J. Power and A. C. Simpson

In Proceedings of Secure Data Management 2008. 2008.

Details about On the facilitation of fine−grained access to distributed healthcare data | BibTeX data for On the facilitation of fine−grained access to distributed healthcare data

Persona Cases: A Technique for grounding Personas

Shamal Faily and Ivan Flechais

In CHI '11: Proceedings of the 29th International conference on Human factors in computing systems. Pages 2267−2270. Vancouver‚ BC‚ Canada. 2011. ACM.

Details about Persona Cases: A Technique for grounding Personas | BibTeX data for Persona Cases: A Technique for grounding Personas

Personal PKI for the smart device era

John Lyle‚ Andrew Paverd‚ Justin King−Lacroix‚ Andrea Atzeni‚ Habib Virji‚ Ivan Flechais and Shamal Faily

In 9th European PKI Workshop: Research and Applications. 2012.

Details about Personal PKI for the smart device era | BibTeX data for Personal PKI for the smart device era | Download  (pdf) of Personal PKI for the smart device era

Policies in Context: Factors Influencing the Elicitation and Categorisation of Context−Sensitive Security Policies

Shamal Faily‚ John Lyle‚ Ivan Flechais‚ Andrea Atzeni‚ Cesare Cameroni‚ Hans Myrhaug‚ Ayse Goker and Robert Kleinfeld

In Proceedings of the Workshop on Home Usable Privacy and Security. 2013.

Details about Policies in Context: Factors Influencing the Elicitation and Categorisation of Context−Sensitive Security Policies | BibTeX data for Policies in Context: Factors Influencing the Elicitation and Categorisation of Context−Sensitive Security Policies

Privacy−Enhanced Bi−Directional Communication in the Smart Grid using Trusted Computing

Andrew J Paverd‚ Andrew P Martin and Ian Brown

In Fifth IEEE International Conference on Smart Grid Communications (SmartGridComm 2014). 2014.

Details about Privacy−Enhanced Bi−Directional Communication in the Smart Grid using Trusted Computing | BibTeX data for Privacy−Enhanced Bi−Directional Communication in the Smart Grid using Trusted Computing | Download Paverd-SmartGridComm-2014.pdf of Privacy−Enhanced Bi−Directional Communication in the Smart Grid using Trusted Computing | Download Paverd-SmartGridComm-2014-slides.pdf of Privacy−Enhanced Bi−Directional Communication in the Smart Grid using Trusted Computing | DOI (10.1109/SmartGridComm.2014.7007758) | Link to Privacy−Enhanced Bi−Directional Communication in the Smart Grid using Trusted Computing

Provenance as a Security Control

Andrew Martin‚ John Lyle and Cornelius Namiluko

In Proceedings of TaPP'12: the 4th USENIX Workshop on the Theory and Practice of Provenance. USENIX. 2012.

Details about Provenance as a Security Control | BibTeX data for Provenance as a Security Control | Link to Provenance as a Security Control

Requirements Sensemaking using Concept Maps

Shamal Faily‚ John Lyle‚ Andre Paul‚ Andrea Atzeni‚ Dieter Blomme‚ Heiko Desruelle and Krishna Bangalore

In HCSE'2012: Proceedings of the 4th International Conference on Human−Centered Software Engineering. Pages 217–232. Springer. 2012.

Details about Requirements Sensemaking using Concept Maps | BibTeX data for Requirements Sensemaking using Concept Maps | Download  (pdf) of Requirements Sensemaking using Concept Maps

Secure System? Challenge Accepted: Finding and Resolving Security Failures Using Security Premortems

Shamal Faily‚ John Lyle and Simon Parkin

In Proceedings of BCS HCI 2012 Workshops: Designing Interactive Secure Systems. Pages 5:1–5:4. 2012.

Details about Secure System? Challenge Accepted: Finding and Resolving Security Failures Using Security Premortems | BibTeX data for Secure System? Challenge Accepted: Finding and Resolving Security Failures Using Security Premortems | Download  (pdf) of Secure System? Challenge Accepted: Finding and Resolving Security Failures Using Security Premortems

Securing web services for deployment in health grids

D. J. Power‚ E. A. Politou‚ M. A. Slaymaker and A. C. Simpson

In Future Generation Computer Systems. Vol. 22. No. 5. Pages 547–570. 2006.

Details about Securing web services for deployment in health grids | BibTeX data for Securing web services for deployment in health grids

Security Patterns Considered Harmful?

Shamal Faily

In Proceedings of The Second International Workshop on Cyberpatterns: Unifying Design Patterns with Security‚ Attack and Forensic Patterns. 2013.

To Appear

Details about Security Patterns Considered Harmful? | BibTeX data for Security Patterns Considered Harmful?

Security and Privacy in Smart Grid Demand Response Systems

Andrew J Paverd‚ Andrew P Martin and Ian Brown

In Jorge Cuellar, editor, Smart Grid Security. Pages 1−15. Springer International Publishing. 2014.

Details about Security and Privacy in Smart Grid Demand Response Systems | BibTeX data for Security and Privacy in Smart Grid Demand Response Systems | Download  (pdf) of Security and Privacy in Smart Grid Demand Response Systems | DOI (10.1007/978-3-319-10329-7_1) | Link to Security and Privacy in Smart Grid Demand Response Systems

Security and Privacy in Smart Grid Demand Response Systems

Andrew Paverd‚ Andrew Martin and Ian Brown

In Second Open EIT ICT Labs Workshop on Smart Grid Security − SmartGridSec14. 2014.

Details about Security and Privacy in Smart Grid Demand Response Systems | BibTeX data for Security and Privacy in Smart Grid Demand Response Systems | Download  (pdf) of Security and Privacy in Smart Grid Demand Response Systems

Security and Usability: Analysis and Evaluation

A. W. Roscoe Ronald Kainda Ivan Flechais

2010.

Details about Security and Usability: Analysis and Evaluation | BibTeX data for Security and Usability: Analysis and Evaluation

Security and Usability: Searching for the philosopher's stone

Ivan Flechais and Shamal Faily

In Workshop on the development of EuroSOUPS (European Symposium on Usable Privacy and Security). 2010.

Details about Security and Usability: Searching for the philosopher's stone | BibTeX data for Security and Usability: Searching for the philosopher's stone | Download  (pdf) of Security and Usability: Searching for the philosopher's stone

Security goes to ground: on the applicability of Security Entrepreneurship to Grassroot Activism

Shamal Faily

In CHI Workshop on HCI‚ Politics and the City: Engaging with Urban Grassroots Movements for Reflection and Action. 2011.

Details about Security goes to ground: on the applicability of Security Entrepreneurship to Grassroot Activism | BibTeX data for Security goes to ground: on the applicability of Security Entrepreneurship to Grassroot Activism

Security through Usability: a user−centered approach for balanced security policy requirements

Shamal Faily and Ivan Flechais

In Poster at: Annual Computer Security Applications Conference. 2010.

Details about Security through Usability: a user−centered approach for balanced security policy requirements | BibTeX data for Security through Usability: a user−centered approach for balanced security policy requirements | Download  (pdf) of Security through Usability: a user−centered approach for balanced security policy requirements

Software for Interactive Secure Systems Design: Lessons Learned Developing and Applying CAIRIS

Shamal Faily and Ivan Flechais

In Proceedings of BCS HCI 2012 Workshops: Designing Interactive Secure Systems. Pages 3:1–3:4. 2012.

Details about Software for Interactive Secure Systems Design: Lessons Learned Developing and Applying CAIRIS | BibTeX data for Software for Interactive Secure Systems Design: Lessons Learned Developing and Applying CAIRIS | Download  (pdf) of Software for Interactive Secure Systems Design: Lessons Learned Developing and Applying CAIRIS

Stakeholder involvement‚ motivation‚ responsibility‚ communication: How to design usable security in e−Science

I. Flechais and M. A. Sasse

Vol. 67. No. 4. Pages 281−296. 2009.

Details about Stakeholder involvement‚ motivation‚ responsibility‚ communication: How to design usable security in e−Science | BibTeX data for Stakeholder involvement‚ motivation‚ responsibility‚ communication: How to design usable security in e−Science | Download  (pdf) of Stakeholder involvement‚ motivation‚ responsibility‚ communication: How to design usable security in e−Science | DOI (10.1016/j.ijhcs.2007.10.002) | Link to Stakeholder involvement‚ motivation‚ responsibility‚ communication: How to design usable security in e−Science

The Secret Lives of Assumptions: Developing and Refining Assumption Personas for Secure System Design

Shamal Faily and Ivan Flechais

In HCSE'2010: Proceedings of the 3rd Conference on Human−Centered Software Engineering. Pages 111–118. Springer. 2010.

Details about The Secret Lives of Assumptions: Developing and Refining Assumption Personas for Secure System Design | BibTeX data for The Secret Lives of Assumptions: Developing and Refining Assumption Personas for Secure System Design | Download  (pdf) of The Secret Lives of Assumptions: Developing and Refining Assumption Personas for Secure System Design

The Ten Page Introduction to Trusted Computing

Andrew Martin

No. RR−08−11. OUCL. December, 2008.

Details about The Ten Page Introduction to Trusted Computing | BibTeX data for The Ten Page Introduction to Trusted Computing | Download of The Ten Page Introduction to Trusted Computing

The webinos project

Christian Fuhrhop‚ John Lyle and Shamal Faily

In Proceedings of the 21st international conference companion on World Wide Web. Pages 259–262. ACM. 2012.

Details about The webinos project | BibTeX data for The webinos project | Download  (pdf) of The webinos project

To boldly go where invention isn't secure: applying Security Entrepreneurship to secure systems design

Shamal Faily and Ivan Flechais

In NSPW '10: Proceedings of the 2010 New Security Paradigms Workshop. Pages 73–84. New York‚ NY‚ USA. 2010. ACM.

Details about To boldly go where invention isn't secure: applying Security Entrepreneurship to secure systems design | BibTeX data for To boldly go where invention isn't secure: applying Security Entrepreneurship to secure systems design | Download  (pdf) of To boldly go where invention isn't secure: applying Security Entrepreneurship to secure systems design

Tool−support Premortems with Attack and Security Patterns

Shamal Faily‚ John Lyle and Simon Parkin

In First International Workshop on Cyberpatterns: Unifying Design Patterns with Security‚ Attack and Forensic Patterns. Pages 10–11. 2012.

Details about Tool−support Premortems with Attack and Security Patterns | BibTeX data for Tool−support Premortems with Attack and Security Patterns

Towards a Secure‚ Tamper−Proof Grid Platform.

Andrew Cooper and Andrew Martin

In Sixth IEEE International Symposium on Cluster Computing and the Grid (CCGrid 2006)‚ 16−19 May 2006‚ Singapore. Pages 373−380. IEEE Computer Society. 2006.

Details about Towards a Secure‚ Tamper−Proof Grid Platform. | BibTeX data for Towards a Secure‚ Tamper−Proof Grid Platform.

Towards tool−support for Usable Secure Requirements Engineering with CAIRIS

Shamal Faily and Ivan Flechais

In International Journal of Secure Software Engineering. Vol. 1. No. 3. Pages 56–70. 2010.

Details about Towards tool−support for Usable Secure Requirements Engineering with CAIRIS | BibTeX data for Towards tool−support for Usable Secure Requirements Engineering with CAIRIS | DOI (10.4018/ijsse.2010070104)

Trustable Remote Verification of Web Services

John Lyle

In Liqun Chen‚ Chris J. Mitchell and Andrew Martin, editors, TRUST. Pages 153−168. Springer. April, 2009.

Details about Trustable Remote Verification of Web Services | BibTeX data for Trustable Remote Verification of Web Services | Download  (pdf) of Trustable Remote Verification of Web Services | Link to Trustable Remote Verification of Web Services

Trusted Computing and Provenance: Better Together

John Lyle and Andrew Martin

In Proceedings of the 2nd Workshop on the Theory and Practice of Provenance. Usenix. 2010.

Details about Trusted Computing and Provenance: Better Together | BibTeX data for Trusted Computing and Provenance: Better Together | Download  (pdf) of Trusted Computing and Provenance: Better Together | Download (pdf) of Trusted Computing and Provenance: Better Together

Trustworthy Log Reconciliation for Distributed Virtual Organisations

Jun Ho Huh and John Lyle

In Liqun Chen‚ Chris J. Mitchell and Andrew Martin, editors, Trust '09: Proceedings of the 2nd International Conference on Trusted Computing. Pages 169−182. Berlin‚ Heidelberg. April, 2009. Springer−Verlag.

Details about Trustworthy Log Reconciliation for Distributed Virtual Organisations | BibTeX data for Trustworthy Log Reconciliation for Distributed Virtual Organisations | DOI (10.1007/978-3-642-00587-9_11)

Trustworthy Remote Entities in the Smart Grid

Andrew Paverd

In 28th ACM Symposium On Applied Computing − SAC2013. Coimbra‚ Portugal. 2013.

Student Research Competition Finalist

Details about Trustworthy Remote Entities in the Smart Grid | BibTeX data for Trustworthy Remote Entities in the Smart Grid | Download  (pdf) of Trustworthy Remote Entities in the Smart Grid | Link to Trustworthy Remote Entities in the Smart Grid

Trustworthy Services Through Attestation

John Lyle

PhD Thesis Department of Computer Science‚ University of Oxford. 2011.

Details about Trustworthy Services Through Attestation | BibTeX data for Trustworthy Services Through Attestation | Download (pdf) of Trustworthy Services Through Attestation

Two Heads are Better Than One: Security and Usability of Device Associations in Group Scenarios

A. W. Roscoe Ronald Kainda Ivan Flechais

In Proceedings of the 2010 Symposium on Usable Privacy and Security (SOUPS 2010). 2010.

Details about Two Heads are Better Than One: Security and Usability of Device Associations in Group Scenarios | BibTeX data for Two Heads are Better Than One: Security and Usability of Device Associations in Group Scenarios

Two Requirements for Usable and Secure Software Engineering

Shamal Faily

In 1st Software and Usable Security Aligned for Good Engineering (SAUSAGE) Workshop. 2011.

Details about Two Requirements for Usable and Secure Software Engineering | BibTeX data for Two Requirements for Usable and Secure Software Engineering | Download  (pdf) of Two Requirements for Usable and Secure Software Engineering

Unsteady Ground: Certification to Unstable Criteria

Joe Loughry

In Proceedings of the Second International Conference on Advances in System Testing and Validation Life Cycle. Nice‚ France. 2010.

Details about Unsteady Ground: Certification to Unstable Criteria | BibTeX data for Unsteady Ground: Certification to Unstable Criteria

Usability and Security of Out−Of−Band Channels in Secure Device Pairing Protocols

A. W. Roscoe Ronald Kainda Ivan Flechais

In SOUPS '09: Proceedings of the 5th Symposium on Usable Privacy and Security. 2009.

Details about Usability and Security of Out−Of−Band Channels in Secure Device Pairing Protocols | BibTeX data for Usability and Security of Out−Of−Band Channels in Secure Device Pairing Protocols

User−Centered Information Security Policy Development in a Post−Stuxnet World

Shamal Faily and Ivan Flechais

In Proceedings of the 6th International Conference on Availability‚ Reliability and Security. Pages 716–721. 2011.

Details about User−Centered Information Security Policy Development in a Post−Stuxnet World | BibTeX data for User−Centered Information Security Policy Development in a Post−Stuxnet World | Download  (pdf) of User−Centered Information Security Policy Development in a Post−Stuxnet World