In software development, software quality is nowadays acknowledged to be as important as
software functionality and there exists an extensive body-of-knowledge on the topic. Yet …

Supporting a security principle, such as least privilege, in a software architecture is difficult.
Systematic rules are lacking, no guidance explains how to apply the principle in practice. As …

Security principles like least privilege and attack surface reduction play an important role in
the architectural phase of security engineering processes. However, the interplay between …

Various principles have been proposed for the design of trustworthy systems. But there is
little data about their impact on system performance. A filesystem that pervasively …

Nexus Authorization Logic (NAL) provides a principled basis for specifying and reasoning
about credentials and authorization policies. It extends prior access control logics that are …

In this report we show how to adapt the notion of “attack surface” to formally evaluate
security properties at the architectural level of design and to identify vulnerabilities in …

As the Internet of Things (IoT) becomes more interconnected, it is critical to make sure
security measures are strong. Because of the dynamic nature of IoT contexts, traditional …

Supporting security principles, like least privilege, in a software architecture is difficult due to
the lack of both a sound theory and effective secure software engineering practices. As a …

Users typically have little reason to trust that systems will protect user data against
unauthorized access. A prototype filesystem stack was implemented with a structure …

Gupta, Sandeep; Buriro, Attaullah; Crispo, Bruno: A chimerical dataset combining
physiological and behavioral biometric traits for reliable user authentication on smart …