First International Workshop on Measurability of Security in Software Architectures -- MeSSa 2010

The growing complexity of service-centric systems has increased the need for pertinent and reliable software security and trusted system solutions. Systematic approaches to measuring security in software architectures are needed in order to obtain sufficient and credible proactive evidence of the security level or performance of a system, service or product. The systematic definition of security metrics and security assurance metrics is a young field that still lacks widely accepted definitions of metrics and applicable measuring techniques for design-time and run-time security monitoring. MeSSa 2010 workshop contributes on the following issues:

• Security, trust and privacy metrics

• Security assurance metrics

• Security, trust and privacy measurement systems and associated data gathering

• Metrics for adaptive security systems

• Taxonomical and ontological research on security metrics

• Experimental results from security measurements

• Security measurability-increasing mechanisms for software architectures

• The relationship and differences between security metrics and security assurance metrics

• Trade-off analysis and decision-making at design-time and at run-time.