Digital Library

Topics: Cybersecurity Engineering, Software Assurance

Authors: Nancy R. Mead, Forrest Shull, Krishnamurthy Vemuru (University of Virginia), Ole Villadsen (Carnegie Mellon University)

Presents a hybrid method of threat modeling that attempts to meld the desirable features of three methods: Security Cards, Persona non Grata, and STRIDE.

Topics: Measurement and Analysis, Acquisition Support

Authors: Michael McLendon, Stephany Bellomo, Forrest Shull, John Stankowski (Office of the DASD for Maintenance Policy and Programs)

This technical panel focused on the DoD's software sustainment challenges and highlighted the key findings of the SEI's study of DoD software sustainment infrastructure.

Authors: Forrest Shull

The result of this work is a set of test principles that can help Programs select the most appropriate threat modeling methodologies.

Authors: Forrest Shull

Evaluation of Threat Modeling Methodologies

Authors: Forrest Shull, Harry L. Levinson, Thomas DuBois (The Boeing Company), Michael S. Bandor, Douglas Schmidt (Vanderbilt University), Michael McLendon

Panel members discussed OSA from several perspectives, including technical engineering, policy, contracting, and science and technology research.

Authors: William E. Novak, Forrest Shull

This presentation explains a set of recurring dynamics that drive the key high-level findings of independent technical assessments and provides qualitative models of each adverse behavior.

Topics: Secure Coding

Authors: Samuel M. Weber, Brad Myers, Forrest Shull, Robert C. Seacord, Michael Coblenz (Carnegie Mellon School of Computer Science), Joshua Sunshine (Institute for Software Research), David Keaton

In this presentation, the authors describe their work to develop and test API design principles.

Topics: Secure Coding

Authors: Brad Myers, Samuel M. Weber, Robert C. Seacord, Michael Coblenz (Carnegie Mellon School of Computer Science), David Keaton, Forrest Shull, Joshua Sunshine (Institute for Software Research), Robert Schiela

In this poster, the authors analyze the usability of application programming interface design.

Authors: Davide Falessi (Fraunhofer Center for Experimental Software Engineering), Michele A. Shaw (Fraunhofer Center for Experimental Software Engineering), Forrest Shull (Fraunhofer), Kathleen Mullen (Keymind), Mark Stein (Keymind)

A presentation from the Managing Technical Debt Workshop, held in May 2013 in conjunction with ICSE 2013.

Authors: Carolyn Seaman (University of Maryland Baltimore County), Forrest Shull (Fraunhofer), Rodrigo O. Spínola (Fraunhofer Project Center for Software and System Engineering at UFBA), Antonio Vetro (Fraunhofer, Politecnico di Torino), Nico Zazworka (Fraunhofer)

A presentation from the Managing Technical Debt Workshop, held in May 2013 in conjunction with ICSE 2013.

Topics: Software Architecture

Authors: Yuanfang Cai (Drexel University), Clemente Izurieta (Montana State University), Carolyn Seaman (University of Maryland Baltimore County), Forrest Shull (Fraunhofer), Nico Zazworka (Fraunhofer)

This 2012 presentation discussed how manage technical debt as part of the research agenda for the software engineering field. It was part of the Third Workshop on Managing Technical Debt, held at ICSE 2012.

Topics: Software Architecture

Authors: Yuanfang Cai (Drexel University), Yuepu Guo (University of Maryland Baltimore County), Clemente Izurieta (Montana State University), Carolyn Seaman (University of Maryland Baltimore County), Forrest Shull (Fraunhofer), Antonio Vetro (Fraunhofer, Politecnico di Torino), Nico Zazworka (Fraunhofer)

This presentation was part of the Third Workshop on Managing Technical Debt, held at ICSE 2012.

Authors: Nico Zazworka (Fraunhofer), Carolyn Seaman (University of Maryland Baltimore County), Forrest Shull (University of Maryland Baltimore County), Michele A. Shaw (Fraunhofer Center for Experimental Software Engineering)

This presentation was part of the Second International Workshop on Managing Technical Debt, held in conjunction with ICSE 2011.