===========================================================================

CALL FOR PAPERS

MeSSa 2014
2nd International Workshop on
Measurability of Security in Software Architectures

http://messa2014.vtt.fi

Vienna, Austria, August 25, 2014

Co-located with
The 8th European Conference on Software Architecture (ECSA 2014)

===========================================================================

TOPICS

Concerns about security have got a lot of new attention, both in a research field and public debate, after the 1st MeSSa workshop. Systematic approaches to measure security are needed in order to build secure software systems and to offer security evidence for users. On one hand, security measuring from software architectures is needed to produce sufficient evidence of security level as early as a software design phase. Consequently, design-time security measuring supports security-by-design approach. On the other hand, software architectures have to support runtime security measuring to obtain up-to-date security information from an online software system or service. Security measuring is exploited in situation-awareness and self-adaptive security. The systematic definition of security metrics and security assurance metrics is a young field that still lacks widely accepted definitions of metrics and applicable measuring techniques for design-time and runtime security monitoring.

The workshop will provide a forum for dissemination, demonstration and discussion of original scientific and experimental results of security measurement topics.

MeSSa 2014 solicits contributions on the following issues (but not limited to):

* Security, trust and privacy metrics
* Risk-driven security effectiveness analysis
* Security assurance metrics
* Metrics for threats and risks in software systems
* Security, trust and privacy measurement systems and associated data gathering
* Security measuring from software architectures
* Metrics for self-adaptive security
* Taxonomies and ontologies on security metrics
* Experimental results from security measurements
* Security measurability-increasing mechanisms for software architectures
* Tradeoff analysis and decision-making at design-time and at runtime
* Security measuring in real-time software systems
* Evolutionary techniques for developing adaptive security metrics
* Visualizing security metrics


IMPORTANT DATES

Submission of papers (extended): June 15, 2014
Author notification (extended): June 25, 2014
Submission of camera-ready paper (extended): July 4, 2014


SUBMISSION AND PUBLICATION

Authors should submit a workshop paper no longer than eight pages. The authors should use the ACM template (http://www.acm.org/sigs/publications/proceedings-templates) for the paper.

The paper should be supplied in MS Word or PDF format to messa2014@vtt.fi.

The accepted workshop papers will be published in an ACM digital library. At least one author of all accepted papers must present the paper at the workshop.


WORKSHOP CO-CHAIRS

Reijo Savola, VTT Technical Research Centre of Finland (Finland)
Habtamu Abie, Norwegian Computing Centre (Norway)
Antti Evesti, VTT Technical Research Centre of Finland (Finland)


PROGRAM COMMITTEE

Jennifer Bayuk, Stevens Institute of Technology, USA
Marijke Coetzee, University of Johannesburg, South Africa
Carmen Fernandez, University of Malaga, Spain
Katrin Franke, Gjøvik University College, Norway
Tapio Frantti, University of Oulu, Finland
Mohamed Hamdi, School of Communication Engineering, Tunisia
Jerry den Hartog, Eindhoven Technical University, Netherlands
Marina Krotofil, Hamburg University of Technology, Germany
Martti Lehto, University of Jyväskylä, Finland
Fabio Martinelli, Institute of Informatics and Telematics, Italy
Mohammad Mozumdar, California State University, Long Beach, USA
Josef Noll, University of Oslo, Norway
Eila Ovaska, VTT Technical Research Centre of Finland, Finland
Ebenezer Paintsil, Point, Norway
Stefan Poslad, Queen Mary University of London, UK
Juha Röning, University of Oulu, Finland
Pekka Savolainen, VTT Technical Research Centre of Finland, Finland
Riccardo Scandariato, Katholieke Universiteit Leuven, Belgium
Einar Snekkenes, Gjøvik University College, Norway
Denis Treck, University of Ljubljana, Slovenia


ORGANISING PROJECTS
ASSET (asset.nr.no)
SASER-SIEGFRIED