A Benchmarking Process to Assess Software Requirements Documentation for Space Applications

Checklist of the software requirements documentation benchmark for space application
Finite State Machines of the On-Board Operations Scheduling Service


PRDC 2011

A Proxy to Sign Attacks and Monitor Interfaces for Evaluating and Improving Web Security Scanners


SCC 2011

Attack Signatures and Interface Monitoring to Detect Injection Vulnerabilities in Web Services

Static Analysis Security Benchmarking Resources


LADC 2011

Security Mechanisms Assessment, complete tables

List of security best practices & GAP Analysis

Mapping of security best practices into System State Goal and Mechanisms Goals


ICWS 2010 / SERVICES 2010

Tutorial: Security in Web Services - State-of-the-art and Research Opportunities


SAFECOMP 2010:

Checklist of the software requirements documentation benchmark for space application
CoFI-based checklist
PUS-based checklist


PRDC 2009:

Penetration Testing vs Static Code Analysis


LADC:

Using Web Security Scanners to Detect Vulnerabilities in Web Services - Internal Report
Web Services Vulnerabilities
Web Services Vulnerability Detection Tool


SCC 2009 - Command Injection Vulnerability Scanner for Web Services:

Attack Types
Prototype Tool
Web Services Source Code
Detailed Results


Selected TPC-DS queries and execution times:

Queries
Queries Results


DSN 2009 - Web Services Vulnerabilities
ICWS 2009
Robustness Testing Tool

DSN 2008 - DBMS Configuration Security Assessment Results.

Public Web Services testing results