2021 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)最新文献_第9页

Aging and Rejuvenation Models of Load Changing Attacks in Micro-Grids 微电网负荷变化攻击的老化与恢复模型

2021 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW) Pub Date : 2021-10-01 DOI: 10.1109/ISSREW53611.2021.00039

R. Czekster, Alberto Avritzer, D. Menasché

{"title":"Aging and Rejuvenation Models of Load Changing Attacks in Micro-Grids","authors":"R. Czekster, Alberto Avritzer, D. Menasché","doi":"10.1109/ISSREW53611.2021.00039","DOIUrl":"https://doi.org/10.1109/ISSREW53611.2021.00039","url":null,"abstract":"Recent cyber-attacks in critical infrastructures have highlighted the importance of investigating how to improve Smart-Grids (SG) resiliency. In the future, it is envisioned that grid connected micro-grids would have the ability of operating in 'islanded mode’ in the event of a grid-level failure. In this work, we propose a method for unfolding aging and rejuvenation models into their sequential counterparts to enable the computation of transient state probabilities in the proposed models. We have applied our methodology to one specific security attack scenario and four large campus micro-grids case studies. We have shown how to convert the software aging and rejuvenation, with cycles, to its unfolded counterpart. We then used the unfolded counterpart to support the survivability computation. We were able to analytically evaluate the transient failure probability and the associated Instantaneous Expected Energy Not Supplied metric, for each of the four case studies, from one specific attack. We envision several practical applications of the proposed methodology. First, because the micro-grid model is solved analytically, the approach can be used to support micro-grid engineering optimizations accounting for security intrusions. Second, micro-grid engineers could use the approach to detect security attacks by monitoring for unexpected deviations of the Energy Not Supplied metric.","PeriodicalId":385392,"journal":{"name":"2021 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)","volume":"21 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114387803","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Targeted Code Inspection based on Human Errors 基于人为错误的目标代码检查

2021 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW) Pub Date : 2021-10-01 DOI: 10.1109/ISSREW53611.2021.00076

Fuqun Huang, H. Madeira

引用次数: 1

How Far Have We Come in Fault Tolerance for Distributed Graph Processing: A Quantitative Assessment of Fault Tolerance Effectiveness 我们在分布式图处理的容错方面已经走了多远:容错有效性的定量评估

2021 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW) Pub Date : 2021-10-01 DOI: 10.1109/ISSREW53611.2021.00114

Chengbo Zhang, Ying Li, Yong Yang, Tong Jia, Zhirong Hou

引用次数: 0

ReSwitcher: Automatically Refactoring Java Programs for Switch Expression ReSwitcher:自动重构Java程序的开关表达式

2021 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW) Pub Date : 2021-10-01 DOI: 10.1109/ISSREW53611.2021.00108

Yang Zhang, Chaoshuai Li, Shuai Shao

引用次数: 3

Information Hiding using Bucket Steganography 使用桶隐写的信息隐藏

2021 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW) Pub Date : 2021-10-01 DOI: 10.1109/ISSREW53611.2021.00085

Katarzyna Koptyra, M. Ogiela

引用次数: 0

Rustpi: A Rust-powered Reliable Micro-kernel Operating System 一个由rust驱动的可靠微内核操作系统

2021 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW) Pub Date : 2021-10-01 DOI: 10.1109/ISSREW53611.2021.00075

Yuanzhi Liang, Lei Wang, Siran Li, Bo Jiang

引用次数: 1

From Application Security Verification Standard (ASVS) to Regulation Compliance: A Case Study in Financial Services Sector 从应用安全验证标准(ASVS)到法规遵从:金融服务行业的案例研究

2021 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW) Pub Date : 2021-10-01 DOI: 10.1109/ISSREW53611.2021.00046

V. Tan, C. Cheh, Binbin Chen

{"title":"From Application Security Verification Standard (ASVS) to Regulation Compliance: A Case Study in Financial Services Sector","authors":"V. Tan, C. Cheh, Binbin Chen","doi":"10.1109/ISSREW53611.2021.00046","DOIUrl":"https://doi.org/10.1109/ISSREW53611.2021.00046","url":null,"abstract":"The OWASP Application Security Verification Standard (ASVS) is a widely used web application development guideline regarding the technical security controls and secure development requirements. While software development teams refer to ASVS to secure their applications and development process, they also need to ensure the compliance of various security related regulations, including sector-specific ones. In this work, we study the synergy of these two activities, i.e., by following ASVS, how does a development team position their developed applications in meeting those regulation requirements. We take the highly regulated financial services sector as a case study. In particular, we look at two recent guidelines published by Monetary Authority of Singapore (MAS) - the Technology Risk Management (TRM) guidelines and Notice 655 Cyber Hygiene. We developed a systematic approach to map ASVS to those two sector-specific regulations. Our results show that by adopting ASVS, a development team can achieve a high degree of regulatory compliance (38.6 % for the MAS TRM guidelines and 47.6% for the MAS Notice 655, respectively). That demonstrates the viability of using international standards (like ASVS) to support compliance with the two sector-specific regulations. In addition, our mapping approach can be useful for organizations to support their compliance efforts.","PeriodicalId":385392,"journal":{"name":"2021 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)","volume":"34 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127965880","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1