Sixth International Workshop on Secure Software Engineering (SecSE 2012) http://www.sintef.org/secse In conjunction with ARES 2012 20-24 August 2012 Prague, Czech Republic http://www.ares-conference.eu/conf/ Call for Papers Software security is about protecting information and ensuring that systems continue to function correctly even when under malicious attack. The traditional approach of securing a system has been to create defensive walls such as intrusion detection systems and firewalls around it, but there are always cracks in these walls, and thus such measures are no longer sufficient by themselves. We need to be able to build better, more robust and more "inherently secure" systems, and we should strive to achieve these qualities in all software systems, not just in the ones that "obviously" need special protection. This workshop will focus on techniques, experiences and lessons learned for building secure and dependable software. Topics ====== Suggested topics include, but are not limited to: - Secure architecture and design - Security in agile software development - Aspect-oriented software development for secure software - Security requirements - Risk management in software projects - Secure implementation - Secure deployment - Testing for security - Quantitative measurement of security properties - Static/dynamic analysis for security - Verification and assurance techniques for security properties - Security and usability - Design and deployment of secure services - Secure composition and adaptation of services - Teaching secure software development - Experience reports on successfully attuning developers to secure software engineering - Lessons learned Important dates: - Submission Deadline: March 30th, 2012 - Author Notification: May 7th 2012 - Author Registration: June 1st 2012 - Proceedings Version: June 1st 2012 - Conference/ Workshop: August 20-24th 2012 Submission Guidelines ===================== Authors are invited to submit papers in Conference Publishing Services (CPS) Proceedings Manuscripts style (two columns, single-spaced, including figures and references, using 10 pt fonts, and number each page). Please consult the Author Guidelines at the following web page: http://www2.computer.org/portal/web/cscps/formatting We solicit the submission of research papers (8 pages) representing original, previously unpublished work. Submitted papers will be evaluated based on originality, significance, technical soundness, and clarity of exposition. Duplicate submissions are not allowed. A submission is considered to be a duplicate submission if it has been submitted to (or if it has been already accepted to be published in) other conferences/workshops/journals. Duplicate submissions thus will be automatically rejected without review. Contact author must provide the following information: Paper title, authors' names, affiliations, postal address, phone, fax, and e-mail address of the author(s), about 200-250 word abstract, and about five keywords. Paper registration and submission is done through the ARES Paper Management System at the following address: https://confdriver.ifs.tuwien.ac.at/ares2012 Submission of a paper implies that should the paper be accepted, at least one of the authors will register for the ARES conference and present the paper in the workshop. Guidelines in preparing and submitting the final manuscript(s) will be given after the notification of acceptance. ARES and SecSE now require anonymized submissions, so please remove all author names and obvious self references from your submission. Publication =========== All accepted papers will be published as ISBN proceedings by Conference Publishing Services (CPS), and will be available online through IEEE Xplore (EI indexing). Journal special issue: Distinguished papers submitted to SecSE will be invited for possible publication in the International Journal of Secure Software Engineering (ISSN 1947-3036 - http://www.igi-global.com/ijsse). Organizing committee ==================== Martin Gilje Jaatun, SINTEF ICT, Norway Lillian Røstad, Norwegian University of Science and Technology (NTNU) Riccardo Scandariato, KU Leuven, Belgium Enquiries to the organizing committee may be sent to: SecSE "replace with at-character" sislab.no Program committee ================= Rubén Alonso, Visual Tools, Spain Sergey Bratus, Dartmouth College, USA Ana Cavalli, GET/INT, France Estibaliz Delgado, Tecnalia, Spain Zeta Dooly, TSSG, Ireland Christophe Feltus, Centre de Recherche Public Henri Tudor, Luxembourg Ivan Flechais, University of Oxford, UK Khaled M. Khan, Qatar University, Qatar Andrea Lanzi, Institute Eurecom, France Gary McGraw, Cigital, USA Per Håkon Meland, SINTEF ICT, Norway Khalid Mughal, University of Bergen, Norway Jong Hyuk Park, Kyungnam University, Korea Pierre Parrend, Proxiad, France Holger Peine, FH Hannover, Germany Chunming Rong, University of Stavanger, Norway Lillian Røstad, NTNU, Norway Riccardo Scandariato, KU Leuven, Belgium Christoph Schuba, Sun Microsystems Inc., USA Nahid Shahmehri, Linköping University, Sweden Torbjørn Skramstad, NTNU, Norway Emin Tatli, IBM, Germany Panagiotis Trimintzios, ENISA, EU Bart De Win, Ascure, Belgium Stephen Wolthusen, Royal Holloway University of London, UK George Yee, Carleton University, Canada Gansen Zhao, South China Normal University, China Mohammad Zulkernine, Queens University, Canada