118
Voted
ICSE
2009
IEEE-ACM
15 years 15 days ago
2009
IEEE-ACM
Abstract--Security evaluation according to ISO 15408 (Common Criteria) is a resource and time demanding activity, as well as being costly. For this reason, only few companies take ...
107
Voted
WSC
2004
15 years 4 months ago
2004
Traditional approaches to security evaluation have been based on penetration testing of real systems, or analysis of formal models of such systems. The former suffer from the prob...
116
Voted
FSKD
2006
Springer
15 years 6 months ago
2006
Springer
Information security evaluation of software-intensive systems typically relies heavily on the experience of the security professionals. Obviously, automated approaches are needed ...