The International Journal of Secure Software Engineering (IJSSE) publishes original research on the security concerns that construe during the software development practice. IJSSE promotes the idea of developing security-aware software systems from the ground up. This journal examines the software security from a software engineering perspective and addresses technical, as well as managerial aspects of secure software engineering. IJSSE includes all aspects of software security in the development, deployment, and management processes of software systems.

The International Journal of Secure Software Engineering (IJSSE) publishes original research on the security concerns that construe during the software development practice. IJSSE promotes the idea of developing security-aware software systems from the ground up. This journal examines the software security from a software engineering perspective and addresses technical, as well as managerial aspects of secure software engineering. IJSSE includes all aspects of software security in the development, deployment, and management processes of software systems.

Professionals in the interdisciplinary field of computer science focus on the design, operation, and maintenance of computational systems and software. Methodologies and tools of engineering are utilized alongside computer applications to develop efficient and precise information databases. Computer Systems and Software Engineering: Concepts, Methodologies, Tools, and Applications is a comprehensive reference source for the latest scholarly material on trends, techniques, and uses of various technology applications and examines the benefits and challenges of these computational developments. Highlighting a range of pertinent topics such as utility computing, computer security, and information systems applications, this multi-volume book is ideally designed for academicians, researchers, students, web designers, software developers, and practitioners interested in computer systems and software engineering.

This volume is based on the research papers presented in the 4th Computer Science On-line Conference. The volume Software Engineering in Intelligent Systems presents new approaches and methods to real-world problems, and in particular, exploratory research that describes novel approaches in the field of Software Engineering. Particular emphasis is laid on modern trends in selected fields of interest. New algorithms or methods in a variety of fields are also presented. The Computer Science On-line Conference (CSOC 2015) is intended to provide an international forum for discussions on the latest high-quality research results in all areas related to Computer Science. The addressed topics are the theoretical aspects and applications of Computer Science, Artificial Intelligences, Cybernetics, Automation Control Theory and Software Engineering.

Developing secure software requires the integration of numerous methods and tools into the development process, and software design is based on shared expert knowledge, claims, and opinions. Empirical methods, including data analytics, allow extracting knowledge and insights from the data that organizations collect from their processes and tools, and from the opinions of the experts who practice these processes and methods. This book introduces the reader to the fundamentals of empirical research methods, and demonstrates how these methods can be used to hone a secure software development lifecycle based on empirical data and published best practices.

Security threats are a significant problem for information technology companies today. This book focuses on how to mitigate these threats by using security standards and provides ways to address associated problems faced by engineers caused by ambiguities in the standards. The security standards are analysed, fundamental concepts of the security standards presented, and the relations to the elementary concepts of security requirements engineering (SRE) methods explored. Using this knowledge, engineers can build customised methods that support the establishment of security standards. Standards such as Common Criteria or ISO 27001 are explored and several extensions are provided to well-known SRE methods such as Si*, CORAS, and UML4PF to support the establishment of these security standards. Through careful analysis of the activities demanded by the standards, for example the activities to establish an Information Security Management System (ISMS) in compliance with the ISO 27001 standard, methods are proposed which incorporate existing security requirement approaches and patterns. Understanding Pattern and Security Requirements engineering methods is important for software engineers, security analysts and other professionals that are tasked with establishing a security standard, as well as researchers who aim to investigate the problems with establishing security standards. The examples and explanations in this book are designed to be understandable by all these readers.