Secure Systems Research Group

Publications:

2006: E. B. Fernandez, M.M. Larrondo-Petrie, T. Sorgente, and M. VanHilst, "A methodology to develop secure systems using patterns", to appear in Integrating Security and Software Engineering: Advances and Future Vision, H. Moratidis and P. Giorgini (Eds), IDEA Press, 2006.

E. B. Fernandez, M. M. Larrondo-Petrie, T. Sorgente, S. Rajput, and M. VanHilst, “UML-based access control models,” under review.

E. B. Fernandez, T. Sorgente, and M. M. Larrondo-Petrie, “Even more patterns for secure operating systems,” in Proceedings of the 11 th European Conference on Pattern Languages of Programs, EuroPLoP 2006, Irsee, Bavaria, Germany, 5-9 July, 2006.

E. B. Fernandez, M. M. Larrondo-Petrie, P. Morrison, T. Sorgente, and M. VanHilst, “A methodology to develop secure distributed systems using patterns,” Secure Web Services in a Wireless Environment Report No. 3, U.S. Department of Information Security Agency, 19 July 2006, 42 pp.

E. B. Fernandez, T. Sorgente, N. Delessy and M. M. Larrondo-Petrie, “Survey of Web Services Security,” Report 2, Secure Web Services in a Wireless Environment Report No. 2, U.S. Department of Information Security Agency, May 2005, 38 pp.

E. B. Fernandez, T. Sorgente, M. VanHilst and M. M. Larrondo-Petrie, “A Methodology for Secure Software Design of Complex Applications,” Secure Web Services in a Wireless Environment Report No. 4, U.S. Department of Information Security Agency, May 2005, 34 pp.

T. Sorgente, M. M. Larrondo-Petrie, E. B. Fernandez, S. Rajput, C. Lo, A. Escobar, and A. Bretan, “Secure Integration of Web Services into a Wireless Infrastructure,” Secure Web Services in a Wireless Environment Report No. 5, U.S. Department of Information Security Agency, May 2005, 25 pp.

2005: E.B.Fernandez, and T. Sorgente, "A Pattern Language for Secure Operating Systems Architectures", in Proceedings of the Latin American Conference on Pattern Languages of Programs, SugarLoaf PLoP 2005, Campos do Jordao, Brazil, August 16 – 19, 2005. Archived: http://sugarloafplop2005.icmc.usp.br/papers/9680.pdf

E.B.Fernandez, and T. Sorgente, „Constrained Resource Assignment Description Pattern“, in Proceedings of the Nordic Conference on Pattern Languages of Programs, Viking PLoP 2005, Otaniemi, Finland, 23-25 September 2005.http://future-home.tte.erve.vtt.fi/vikingplop2005/

T. Sorgente, E.B.Fernandez, and M.M. Larrondo-Petrie, "The SOAP pattern for medical charts", in Proceedings of the 12th Pattern Languages of Programs Conference (PLoP2005), Monticello, Illinois, 7-10 September 2005. Archived: http://hillside.net/plop/2005/proceedings/PLoP2005_tsorgente0_1.pdf

E. B. Fernandez, T. Sorgente and M. M. Larrondo-Petrie, “A UML-Based Methodology for Secure Systems: The Design Stage,” in Proceedings of the 3rd International Workshop on Security in Information Systems (WOSIS’05) in the 7 th International Conference on Enterprise Information Systems ICEIS’05, Miami, Florida, USA, 24-25 May 2005, pp. 207-216. Also to appear in Lecture Notes in Computer Science Vol., Springer Verlag, 2005.Archived: http://www.iceis.org/workshops/wosis/wosis2005-cfp.html

E.B. Fernandez and T. Sorgente, "An Analysis of Modeling Flaws in HL7 and JAHIS”, Procs. of the ACM Symposium on Applied Computing (SAC’05), Santa Fe, NM, 2005. Archived: http://portal.acm.org/citation.cfm?doid=1066677.1066732

2004: T. Sorgente, E.B.Fernandez, and M.M. Larrondo-Petrie, "Analysis patterns for patient treatment", in Proceedings of the 12th Pattern Languages of Programs Conference (PLoP2004), Monticello, Illinois, 8-12 September 2005. Archived:http://hillside.net/plop/2004/papers/tsorgente0/PLoP2004_tsorgente0_0.doc

E.B.Fernandez, M.M. Larrondo-Petrie, and T. Sorgente, "Security models for medical and genetic information”, procs. of IADIS International Conference (e-society 2004), Avila, Spain, July 2004.