| Vol-965 urn:nbn:de:0074-965-4 Copyright © 2013 for the individual papers by the papers' authors. Copying permitted only for private and academic purposes. This volume is published and copyrighted by its editors.

# ESSOS-DS 2013
Doctoral Symposium of ESSoS 2013

### Proceedings of the Doctoral Symposium at the International Symposium on Engineering Secure Software and Systems (ESSoS-DS 2013)
Rocquencort, Paris, France, February 27 - March 01, 2013.

Organised by

Network of Excellence on Engineering Secure Future Internet Software Services and Systems

Edited by

### Maritta Heisel *
Eda Marchetti **

* University of Duisburg-Essen, Software Engineering, 47057 Duisburg, Germany
**Istituto di Scienza e Tecnologie dell'Informazione "A. Faedo", 56124 Pisa, Italy

## Table of Contents

Proceedings
Preface
- A Trust and Reputation Framework 7-12
  Francisco Moyano, Carmen Fernandez-Gago, Javier Lopez
- Towards Purpose-Driven Virtual Machines 13-19
  Naod Duga Jebessa, Guido van 'T Noordende, Cees de Laat
- Memory Segmentation to Support Secure Applications 20-24
  Jonathan Woodru, Simon Moore, Robert Watson
- Towards a Systematic Identification of Security Tests Based on Security Risk Analysis 25-30
  Jan Stijohann, Jorge Cuellar
- Penetration Test Tool for XML-based Web Services 31-35
  Christian Mainka, Vladislav Mladenov, Juraj Somorovsky, Jörg Schwenk
- How do we effectively monitor for slow suspicious activities? 36-40
  Harsha Kalutarage, Siraj A. Shaikh, Qin Zhou, Anne E. James
- Global Design for Secure Socio-Technical Systems 41-47
  Tong Li
- Towards a Systematic Literature Review on Secure Software Design 48-54
  Alexander van Den Berghe, Riccardo Scandariato, Wouter Joosen
- Empirical Validation of Security Methods 55-61
  Katsiaryna Labunets

22-Feb-2013: submitted by Maritta Heisel
22-Feb-2013: published on CEUR-WS.org