Call for Papers
International Workshop on Secure Software Engineering in DevOps and Agile Development (SecSE 2018)
Porto, Portugal, May 25, 2018
In conjunction with XP 2018 - 19th International Conference on Agile Software Development, 21-25 May 2018 https://www.agilealliance.org/xp2018/
---------------------------------------------------------------------------------------- Contribute by either submitting a paper, experience report, or an ignite talk proposal (see details below). ----------------------------------------------------------------------------------------
Software security is about protecting information and ensuring that systems continue to function correctly even when under malicious attack. The traditional approach of securing a system has been to create defensive walls such as intrusion detection systems and firewalls around it, but there are always cracks in these walls, and thus such measures are no longer sufficient by themselves. We need to be able to build better, more robust and more "inherently secure" systems, and we should strive to achieve these qualities in all software systems, not just in the ones that "obviously" need special protection.
This workshop will focus on techniques, experiences and lessons learned for engineering secure and dependable software using the DevOps paradigm, as well as other forms of agile development.
Suggested topics include, but are not limited to:
Security in DevOps Security aspects of software deployment Security in Continuous Deployment Security Architecture in Agile Development Security testing in DevOps Container security for DevOps Security automation tools Security in agile software development Agile security requirements Risk management in software projects Agile testing for security Quantitative measurement of security properties Static and dynamic analysis for security Verification and assurance techniques for security properties Security and usability Design and deployment of secure services Secure composition and adaptation of services Teaching secure software development Experience reports on successfully attuning developers to secure software engineering Industry experience talks
Important Dates =============== March 3rd, 2018 Submission Deadline April 6th, 2018 Author Notification April 15th, 2018 Author Registration April 15th, 2018 Camera-ready versions May 21/25, 2018 Workshops
Submission Guidelines ===================== Papers can be up to 8 pages long in the ACM conference template. If you need more space, save it for the journal version!
Paper submission is done through the EasyChair system: https://easychair.org/conferences/?conf=secse2018
Submitted papers will be carefully evaluated based on originality, significance, technical soundness and clarity of exposition.
Duplicate submissions are not allowed. A submission is considered to be a duplicate submission if it is submitted to other conferences/workshops/journals or if it has been already accepted to be published in other conferences/workshops/journals. Duplicate submissions thus will be automatically rejected without reviews.
Submission of a paper implies that should the paper be accepted, at least one of the authors will register for the XP conference and present the paper in the workshop. No-show papers will be removed from the digital library after the workshop. Accepted papers will be given guidelines in preparing and submitting the final manuscript(s) together with the notification of acceptance.
Double blind review: SecSE requires anonymized submissions - please make sure that submitted paper contains no author names or obvious self-references.
Publication =========== Accepted papers will be published by ACM conference proceedings.
Journal Special Issue ===================== Distinguished papers submitted to SecSE will be invited to submit revised and extended versions for publication in the International Journal of Secure Software Engineering (ISSN 1947-3036).
Experience reports (NEW!) =========================
Do you have experiences to share? We want to hear from you! Submit proposals of an Experience Report as a Title and Abstract (500 words maximum) by email to sos-agile(at)sintef.no.
Ignite talks (NEW!) =================== We will have a session of 5-minute ignite talks (a variant of PechaKucha) as part of the workshop. An ignite talk is perfect for industrial experience reports! Ignite talks are meant to present ideas and generate discussion. Share with us your novel, ground breaking software security related message as an Ignite presentation. Tell us about tools, processes, tips, tricks, war stories, etc.
Submit proposals of an Ignite Talk as a Title and Abstract (500 words maximum) by email to sos-agile(at)sintef.no. The contributions are less scientific in their nature but should be argued in a compelling way accompanied by 20 auto-advance slides.
Organizers ==========
Martin Gilje Jaatun, SINTEF Digital, Norway Daniela S. Cruzes, SINTEF Digital, Norway
Program Committee =================
Karin Bernsmed, SINTEF Digital, Norway Sergey Bratus, Dartmouth College, USA Achim Brucker, Sheffield University, UK Estibaliz Delgado, Tecnalia, Spain Zeta Dooly, TSSG, Ireland Jörn Eichler, Fraunhofer Institute for Applied and Integrated Security (AISEC), Germany Shamail Faily, Bournemouth University, UK Christophe Feltus, LIST, Luxembourg Chad Heizenrater, DoD, USA Sami Hyrynsalmi, Tampere University of Technology, Finland Ronald Jabangwe, Maersk Mc-Kinney Moller Institute, SDU Software Engineering, University of Southern Denmark Andrea Lanzi, Universita degli studi di Milano, Italy Ville Leppänen, University of Turku, Finland Jingyue Li, NTNU, Norway Per Håkon Meland, SINTEF Digital, Norway Anh Nguyen Duc, University College of Southeast Norway Tosin Oyetoyan, SINTEF, Norway Andreas Poller, Fraunhofer SIT, Darmstadt, Germany Riccardo Scandariato, Chalmers, Sweden Hossain Shahriar, Kennesaw State University, USA Emin Tatli, Istanbul Medipol University, Turkey Stephen Wolthusen, Royal Holloway University of London, UK Hasan Yasar, Carnegie Mellon University, USA George Yee, Carleton University, Canada