Table of Contents

• BuBBle: A Javascript Engine Level Countermeasure against Heap-Spraying AttacksFrancesco Gadaleta, Yves Younan, Wouter Joosen. 1-17 [doi]
• CsFire: Transparent Client-Side Mitigation of Malicious Cross-Domain RequestsPhilippe De Ryck, Lieven Desmet, Thomas Heyman, Frank Piessens, Wouter Joosen. 18-34 [doi]
• Idea: Opcode-Sequence-Based Malware DetectionIgor Santos, Felix Brezo, Javier Nieves, Yoseba K. Penya, Borja Sanz, Carlos Laorden, Pablo Garcia Bringas. 35-43 [doi]
• Experiences with PDG-Based IFCChristian Hammer. 44-60 [doi]
• Idea: Java vs. PHP: Security Implications of Language Choice for Web ApplicationsJames Walden, Maureen Doyle, Robert Lenhof, John Murray. 61-69 [doi]
• Idea: Towards Architecture-Centric Security Analysis of SoftwareKarsten Sohr, Bernhard Berger. 70-78 [doi]
• Formally-Based Black-Box Monitoring of Security ProtocolsAlfredo Pironti, Jan Jürjens. 79-95 [doi]
• Secure Code Generation for Web ApplicationsMartin Johns, Christian Beyerlein, Rosemaria Giesecke, Joachim Posegga. 96-113 [doi]
• Idea: Reusability of Threat Models - Two Approaches with an Experimental EvaluationPer HÃ¥kon Meland, Inger Anne Tøndel, Jostein Jensen. 114-122 [doi]
• Model-Driven Security Policy Deployment: Property Oriented ApproachStere Preda, Nora Cuppens-Boulahia, Frédéric Cuppens, Joaquín García-Alfaro, Laurent Toutain. 123-139 [doi]
• Category-Based Authorisation Models: Operational Semantics and Expressive PowerClara Bertolissi, Maribel Fernández. 140-156 [doi]
• Idea: Efficient Evaluation of Access Control ConstraintsAchim D. Brucker, Helmut Petritsch. 157-165 [doi]
• Formal Verification of Application-Specific Security Properties in a Model-Driven ApproachNina Moebius, Kurt Stenzel, Wolfgang Reif. 166-181 [doi]
• Idea: Enforcing Consumer-Specified Security Properties for Modular SoftwareGiacomo A. Galilei, Vincenzo Gervasi. 182-191 [doi]
• Idea: Using System Level Testing for Revealing SQL Injection-Related Error Message Information LeaksBen H. Smith, Laurie Williams, Andrew Austin. 192-200 [doi]
• Automatic Generation of Smart, Security-Aware GUI ModelsDavid A. Basin, Manuel Clavel, Marina Egea, Michael Schläpfer. 201-217 [doi]
• Report: Modular Safeguards to Create Holistic Security Requirement Specifications for System of SystemsAlbin Zuccato, Nils Daniels, Cheevarat Jampathom, Mikael Nilson. 218-230 [doi]
• Idea: A Feasibility Study in Model Based Prediction of Impact of Changes on System QualityAida Omerovic, Anette Andresen, HÃ¥vard Grindheim, Per Myrseth, Atle Refsdal, Ketil Stølen, Jon Ølnes. 231-240 [doi]