Security Testing for Complex Software SystemsSECUTE 2024
Aim of the workshop
In the past two decades, the complexity of modern IT systems has surged due to technologies like AI, cloud computing, and microservices. Ensuring security in these systems is challenging. Software security is critical for practitioners to prevent incidents such as data breaches. As complex systems evolve, robust methods to test their security become imperative. Many testing techniques exist, including model-based and code-based security testing, penetration testing, and security regression testing. Despite these methods, some vulnerabilities are still inadequately tested. Current solutions mainly focus on traditional systems, leaving unconventional architectures like Virtual Reality or IoT systems largely unaddressed. Further research is essential to develop standardized techniques for both traditional and complex domains.
SECUTE is a workshop focusing on empirical methods for testing the security of complex software systems to understand the support they provide to practitioners in dealing with security, particularly in unconventional domains. SECUTE aims to foster a community for sharing ideas and initiating collaborations among researchers in this field.
Please see the details via this link: https://secute-ws.github.io
Fri 21 JunDisplayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change
14:00 - 15:30 | |||
14:00 10mDay opening | Welcome SECUTE | ||
14:10 65mKeynote | A Tale of Vulnerability Prediction SECUTE Mike Papadakis University of Luxembourg | ||
15:15 15mTalk | Security Risk Assessment on Cloud: A Systematic Mapping Study SECUTE Giusy Annunziata University of Salerno, Alexandra Sheykina University of Salerno, Gemma Catolino University of Salerno, Fabio Palomba University of Salerno, Andrea De Lucia University of Salerno, Filomena Ferrucci University of Salerno Pre-print |
15:30 - 16:00 | Coffee BreakCatering | ||
16:00 - 17:30 | |||
16:00 15mTalk | Semgrep*: Improving the Limited Performance of Static Application Security Testing (SAST) Tools SECUTE Gareth Bennett Lancaster University, Tracy Hall Lancaster University, Emily Winter Lancaster University, Steve Counsell Brunel University London | ||
16:15 10mTalk | Toward a Search-Based Approach to Support the Design of Security Tests for Malicious Network Traffic SECUTE Davide La Gamba University of Salerno, Gerardo Iuliano University of Salerno, Gilberto Recupito University of Salerno, Giammaria Giordano University of Salerno, Filomena Ferrucci University of Salerno, Dario Di Nucci University of Salerno, Fabio Palomba University of Salerno | ||
16:25 10mTalk | LLM Security Guard for Code SECUTE Arya Kavian University of Science and Technology of Mazandaran, Mohammad Mehdi Pourhashem Kallehbasti University of Science and Technology of Mazandaran, Sajjad Kazemi University of Science and Technology of Mazandaran, Ehsan Firouzi TU Clausthal, Mohammad Ghafari TU Clausthal | ||
16:35 55mPanel | Open Discussion + Closing SECUTE |
Accepted Papers
Call for Papers
More details are available at: https://secute-ws.github.io/call_for_papers.html