A Methodological Approach to Evaluate Security Requirements Engineering Methodologies: Application to the IREHDO2 Project Context

Autor: Romain Laborde, Sravani Teja Bulusu, Ahmad Samer Wazan, Arnaud Oglaza, Abdelmalek Benzekri

Publikováno v: Journal of Cybersecurity and Privacy, Vol 1, Iss 3, Pp 422-452 (2021)

An effective network security requirement engineering is needed to help organizations in capturing cost-effective security solutions that protect networks against malicious attacks while meeting the business requirements. The diversity of currently a

Externí odkaz: https://doaj.org/article/0ef8b20917bb4def8606297c11802048

A Methodological Approach to Evaluate Security Requirements Engineering Methodologies: Application to the IREHDO2 Project Context

Autor: Ahmad Samer Wazan, Abdelmalek Benzekri, Arnaud Oglaza, Romain Laborde, Sravani Teja Bulusu

Publikováno v: Journal of Cybersecurity and Privacy, Vol 1, Iss 22, Pp 422-452 (2021)
Journal of Cybersecurity and Privacy
Journal of Cybersecurity and Privacy, MDPI, 2021, 1 (3), pp.422-452. ⟨10.3390/jcp1030022⟩
Volume 1
Issue 3
Pages 22-452

International audience; An effective network security requirement engineering is needed to help organizations in capturing cost-effective security solutions that protect networks against malicious attacks while meeting the business requirements. The

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_dedup___::76f7b57a9e5f8d3948dbade2d2330498
https://www.mdpi.com/2624-800X/1/3/22

RootAsRole: Towards a Secure Alternative to sudo/su Commands for Home Users and SME Administrators

Autor: Rémi Venant, Romain Laborde, David W. Chadwick, Abdelmalek Benzekri, Ahmad Samer Wazan

Publikováno v: SEC 2021: ICT Systems Security and Privacy Protection
36th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC 2021)
36th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC 2021), IFIP : International Federation for Information Processing, Jun 2021, Oslo, Norway. pp.196-209, ⟨10.1007/978-3-030-78120-0_13⟩
ICT Systems Security and Privacy Protection ISBN: 9783030781194
SEC
ICT Systems Security and Privacy Protection: 36th IFIP TC 11 International Conference, SEC 2021, Oslo, Norway, June 22–24, 2021, Proceedings ; ISBN 978-3-030-78119-4
36th International Conference on ICT Systems Security and Privacy Protection (IFIP SEC 2021)
36th International Conference on ICT Systems Security and Privacy Protection (IFIP SEC 2021), Jun 2021, Oslo, Norway. pp.196-209, ⟨10.1007/978-3-030-78120-0_13⟩

Part 4: Application and System Security; International audience; The typical way to run an administrative task on Linux is to execute it in the context of a super user. This breaks the principle of least privilege on access control. Other solutions,

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_dedup___::44c74d50c06c86c6c763e57174713264
https://ifip.hal.science/hal-03345757/file/512098_1_En_13_Chapter.pdf

IoT Security threats and risk analysis

Autor: Abdelmalek Benzekri, Romain Laborde, Arnaud Oglaza, François Barrère, Sravani Teja Bulusu, Afonso Ferreira, Ahmad Samer Wazan

Publikováno v: Handbook of Internet of Things
Handbook of Internet of Things, Springer, In press
HAL

International audience; The increasing use of Industrial IOT (IIOT) solutions has led to an equal increase in the security risks associated with the connecteddevices. Security requirements engineering (SRE) aims at reducing these risks by implementin

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=dedup_wf_001::5e77a7c17fb15ffda9d6ac8dafb43ac2
https://hal.archives-ouvertes.fr/hal-03417339

Should We Rush to Implement Password-less Single Factor FIDO2 based Authentication?

Autor: Fatima Alqubaisi, David W. Chadwick, Ahmad Samer Wazan, Liza Ahmad

Publikováno v: 2020 12th Annual Undergraduate Research Conference on Applied Computing (URC).

Fast Identity Online (FIDO) Alliance and W3C have defined a set of specifications (called FIDO2) that allows a user to replace the password based authentication system. However, none of the high profile web sites have implemented FIDO2 yet as passwor

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_________::949465233cbae14004e2156f0732d865
https://doi.org/10.1109/urc49805.2020.9099190