Security is an important quality aspect of modern open software systems. However, it is
challenging to keep such systems secure because of evolution. Security evolution can only …

Android is widely used for the development and deployment of autonomous and smart
systems, including software targeted for IoT and mobile devices. Security of such systems is …

The current security mechanisms for Android apps, both static and dynamic analysis
approaches, are insufficient for detection and prevention of the increasingly dynamic and …

Modern mobile platforms rely on a permission model to guard the system's resources and
apps. In Android, since the permissions are granted at the granularity of apps, and all …

Failing to promote the least privilege principle in administration can lead to substantial
vulnerabilities in cloud computing. A malicious insider like a compromised cloud …

Security principles are often neglected by software architects, due to the lack of precise
definitions. This results in potentially high-risk threats to systems. Our own previous work …

Adhering to the least privilege principle involves ensuring that only legitimate subjects have
access rights to objects. Sometimes, this is hard because of permission irrevocability …

Recurring solutions to software engineering problems are often captured in patterns, which
describe, in a generic but reusable manner, a specific problem and a corresponding …

This paper presents the design and implementation of a prototype tool for the extraction of
the so-called Task Execution Model directly from the source code of a software system. The …