TY - CHAP A1 - Herder, Jens A1 - Daemen, Jeff A1 - Haufs-Brusberg, Peter A1 - Abdel Aziz, Isis ED - Brunnett, Guido ED - Coquillart, Sabine ED - van Liere, Robert ED - Welch, Gregory ED - Váša, Libor T1 - Four Metamorphosis States in a Distributed Virtual (TV) Studio: Human, Cyborg, Avatar, and Bot - Markerless Tracking and Feedback for Realtime Animation Control T2 - Virtual Realities: International Dagstuhl Seminar, Dagstuhl Castle, Germany, June 9-14, 2013, Revised Selected Papers KW - Markeless tracking KW - virtual studio KW - Avatars KW - virtual characters KW - Interaction feedback KW - VSVR KW - Virtual (TV) Studio Y1 - 2015 UR - https://link.springer.com/chapter/10.1007/978-3-319-17043-5_2 SN - 978-3-319-17042-8 U6 - https://doi.org/10.1007/978-3-319-17043-5_2 VL - LNCS, 8844 SP - 16 EP - 32 PB - Springer CY - Cham ER - TY - CHAP A1 - Dahm, Markus T1 - MP3ergo - Usability of MP3 players T2 - proc. 10th intl conf Humans and Computers, Duesseldorf N2 - Listening to music played by small MP3-players is almost as ubiquituous as talking over mobile phones. In this paper we analyse interaction elements and usabilty of current MP3-players. To determine the usability, an empirical study based on a website that presented three simulated MP3-players was performed with over 1000 participants. The results show that, despite most marketing claims, some interaction devices are not as intuitive and really suitable for the task as they schould be. Also we found some surprising results concerning erroneous usage of navigation keys. KW - MP3 KW - usability Y1 - 2007 SP - 123 EP - 128 CY - Düsseldorf ER - TY - CHAP A1 - Dahm, Markus T1 - Broad study on the usability of mobile phones T2 - Conf. Proc. Humans and Computers HuC 2005, Aizu, Japan N2 - A mobile phone the size of a candy bar offers dozens of complex functions, a masterpiece of engineering. Unfortunately, the more functions are available, the less they are accessible to the average user. The design of the user interface suffers from a lack of suitability for the tasks, does not conform to user expectations and a suboptimal self-descriptiveness. The usability of modern mobile phones was tested in a broad survey with over 1300 participants. An internet based simulation offered tasks and an online evaluation. It could be pointed out that mobile phones are not only hard to access for novices but also those who consider themselves experts have difficulties when confronted with unknown functions or another brand of phone. Approaches to increase the usability are discussed. KW - User Interface Design KW - Usability Study KW - Mobile Phone KW - Inclusive Design Y1 - 2005 SP - 249 EP - 254 CY - Aizu ER - TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Schmidt, Holger T1 - A Security Engineering Process based on Patterns T2 - 18th International Workshop on Database and Expert Systems Applications (DEXA 2007) N2 - We present a security engineering process based on security problem frames and concretized security problem frames. Both kinds of frames constitute patterns for analyzing security problems and associated solution approaches. They are arranged in a pattern system that makes dependencies between them explicit. We describe step-by-step how the pattern system can be used to analyze a given security problem and how solution approaches can be found. Further, we introduce a new frame that focuses on the privacy requirement anonymity. KW - security engineering process KW - pattern system KW - data privacy KW - software development Y1 - 2007 UR - https://ieeexplore.ieee.org/abstract/document/4312991 SN - 978-0-7695-2932-5 U6 - https://doi.org/10.1109/DEXA.2007.36 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. SP - 734 EP - 738 PB - IEEE CY - Regensburg ER - TY - CHAP A1 - Côté, Isabelle A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Schmidt, Holger A1 - Wentzlaff, Ina T1 - A Systematic Account of Problem Frames T2 - Proceedings of the 12th European Conference on Pattern Languages of Programs (EuroPLoP '2007), Irsee, Germany, July 4-8, 2007. N2 - We give an enumeration of possible problem frames, based on domain characteristics, and comment on the usefulness of the obtained frames. In particular, we investigate problem domains and their characteristics in detail. This leads to fine-grained criteria for describing problem domains. As a result, we identify a new type of problem domain and come up with integrity conditions for developing useful problem frames. Taking a complete enumeration of possible problem frames (with at most three problem domains, of which only one is constrained) as a basis, we find 8 new problem frames, 7 of which we consider as useful in practical software development. KW - problem frames KW - systematic account Y1 - 2008 SP - 749 EP - 767 PB - Universitätsverlag Konstanz CY - Konstanz ER - TY - CHAP A1 - Schmidt, Holger A1 - Wentzlaff, Ina ED - Gruhn, Volker ED - Oquendo, Flavio T1 - Preserving Software Quality Characteristics from Requirements Analysis to Architectural Design T2 - Software Architecture: Third European Workshop, EWSA 2006, Nantes, France, September 4-5, 2006, Revised Selected Papers Y1 - 2006 UR - https://link.springer.com/chapter/10.1007/11966104_14 SN - 978-3-540-69271-3 U6 - https://doi.org/10.1007/11966104_14 VL - LNCS, 4344 SP - 189 EP - 203 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Schmidt, Holger ED - Müller, Günter T1 - Security Engineering Using Problem Frames T2 - Emerging Trends in Information and Communication Security: International Conference, ETRICS 2006, Freiburg, Germany, June 6-9, 2006. Proceeding KW - security requirement KW - problem frames KW - security problem KW - security engineering KW - sequence diagram Y1 - 2006 UR - https://link.springer.com/chapter/10.1007/11766155_17 SN - 978-3-540-34640-1 U6 - https://doi.org/10.1007/11766155_17 VL - LNCS, 3995 SP - 238 EP - 253 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Schmidt, Holger T1 - A Pattern System for Security Requirements Engineering T2 - The Second International Conference on Availability, Reliability and Security (ARES'07) N2 - We present a pattern system/or security requirements engineering, consisting of security problem frames and concretized security problem frames. These are special kinds of problem frames that serve to structure, characterize, analyze, and finally solve software development problems in the area of software and system security. We equip each frame with formal preconditions and postconditions. The analysis of these conditions results in a pattern system that explicitly shows the dependencies between the different frames. Moreover, we indicate related frames, which are commonly used together with the considered frame. Hence, our approach helps security engineers to avoid omissions and to cover all security requirements that are relevant for a given problem. KW - pattern system KW - system security KW - security KW - software development KW - computer security Y1 - 2007 UR - https://ieeexplore.ieee.org/abstract/document/4159824 SN - 0-7695-2775-2 U6 - https://doi.org/10.1109/ARES.2007.12 PB - IEEE CY - Vienna ER - TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Schmidt, Holger ED - Czarnecki, Krzysztof ED - Ober, Ileana ED - Bruel, Jean-Michel ED - Uhl, Axel ED - Völter, Markus T1 - A Formal Metamodel for Problem Frames T2 - Model Driven Engineering Languages and Systems: 11th International Conference, MoDELS 2008, Toulouse, France, September 28 - October 3, 2008. Proceedings N2 - Problem frames are patterns for analyzing, structuring, and characterizing software development problems. This paper presents a formal metamodel for problem frames expressed in UML class diagrams and using the formal specification notation OCL. That metamodel clarifies the nature of the different syntactical elements of problem frames, as well as the relations between them. It provides a framework for syntactical analysis and semantic validation of newly defined problem frames, and it prepares the ground for tool support for the problem frame approach. KW - object constraint language KW - problem frames KW - causal domain KW - eclipse modeling framework Y1 - 2008 UR - https://link.springer.com/chapter/10.1007/978-3-540-87875-9_5 SN - 978-3-540-87874-2 U6 - https://doi.org/10.1007/978-3-540-87875-9_5 VL - LNCS, 5301 SP - 58 EP - 82 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Schmidt, Holger T1 - Analysis and Component-based Realization of Security Requirements T2 - 2008 Third International Conference on Availability, Reliability and Security N2 - We present a process to develop secure software with an extensive pattern-based security requirements engineering phase. It supports identifying and analyzing conflicts between different security requirements. In the design phase, we proceed by selecting security software components that achieve security requirements. The process enables software developers to systematically identify, analyze, and finally realize security requirements using security software components. We illustrate our approach by a lawyer agency software example. KW - security requirement KW - requirements engineering KW - data security KW - computer science Y1 - 2008 UR - https://ieeexplore.ieee.org/document/4529338 SN - 978-0-7695-3102-1 U6 - https://doi.org/10.1109/ARES.2008.27 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. SP - 195 EP - 203 PB - IEEE CY - Barcelona ER - TY - CHAP A1 - Schmidt, Holger T1 - Threat- and Risk-Analysis During Early Security Requirements Engineering T2 - 2010 International Conference on Availability, Reliability and Security N2 - We present a threat and risk-driven methodology to security requirements engineering. Our approach has a strong focus on gathering, modeling, and analyzing the environment in which a secure ICT-system to be built is located. The knowledge about the environment comprises threat and risk models. This security-relevant knowledge is used to assess the adequacy of security mechanisms, which are selected to establish security requirements. KW - risk analysis KW - data security KW - security requirements engineering KW - software engineering Y1 - 2010 UR - https://ieeexplore.ieee.org/document/5438095 SN - 978-1-4244-5880-6 U6 - https://doi.org/10.1109/ARES.2010.14 SP - 188 EP - 195 PB - IEEE CY - Krakow ER - TY - CHAP A1 - Schmidt, Holger ED - Massacci, Fabio ED - Redwine Jr., Samuel T. ED - Zannone, Nicola T1 - Pattern-Based Confidentiality-Preserving Refinement T2 - Engineering Secure Software and Systems: First International Symposium ESSoS 2009, Leuven, Belgium, February 4-6, 2009. Proceedings KW - data transmission KW - security requirement KW - problem frame KW - adversary model KW - security requirement engineering Y1 - 2009 UR - https://link.springer.com/chapter/10.1007%2F978-3-642-00199-4_5 SN - 978-3-642-00198-7 U6 - https://doi.org/10.1007/978-3-642-00199-4_5 VL - LNCS, 5429 SP - 43 EP - 59 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Schwittek, Widura A1 - Schmidt, Holger A1 - Eicker, Stefan A1 - Heisel, Maritta ED - Filipe, Joaquim ED - Liu, Kecheng T1 - Towards a Common Body of Knowledge for Engineering Secure Software and Services T2 - Proceedings of the International Conference on Knowledge Management and Information Sharing N2 - Interdisciplinary communities involve people and knowledge from different disciplines in addressing a common challenge. Differing perspectives, processes, methods, tools, vocabularies, and standards are problems that arise in this context. We present an approach to support bringing together disciplines based on a common body of knowledge (CBK), in which knowledge from different disciplines is collected, integrated, and structured. The novelty of our approach is twofold: first, it introduces a CBK ontology, which allows one to semantically enrich contents in order to be able to query the CBK in a more elaborate way afterwards. Second, it heavily relies on user participation in building up a CBK, making use of the Semantic MediaWiki as a platform to support collaborative writing. The CBK ontology is backed by a conceptual framework, consisting of concepts to structure the knowledge, to provide access options to it, and to build up a common terminology. To ensure a high quality of the provided contents and to sustain the community’s commitment, we further present organizational means as part of our approach. We demonstrate our work using the example of a Network of Excellence EU project, which aims at bringing together researchers and practitioners from services computing, security and software engineering. KW - common body of knowledge KW - knowledge management KW - software engineering KW - security engineering KW - services computing Y1 - 2011 SP - 369 EP - 374 PB - SciTePress - Science and Technology Publications CY - Paris ER - TY - CHAP A1 - Côté, Isabelle A1 - Heisel, Maritta A1 - Schmidt, Holger A1 - Hatebur, Denis T1 - UML4PF — A tool for problem-oriented requirements analysis T2 - 2011 IEEE 19th International Requirements Engineering Conference N2 - We present UML4PF, a tool for requirements analysis based on problem frames. It consists of a UML profile and an Eclipse-Plugin to model and analyze problem diagrams, derive specifications, and develop architectures. KW - Unified modeling language KW - problem frames KW - tool support KW - programming KW - generators Y1 - 2011 UR - https://ieeexplore.ieee.org/document/6051670 SN - 978-1-4577-0924-1 U6 - https://doi.org/10.1109/RE.2011.6051670 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. SP - 349 EP - 350 PB - IEEE CY - Trento ER - TY - CHAP A1 - Beckers, Kristian A1 - Schmidt, Holger A1 - Küster, Jan-Christoph A1 - Faßbender, Stephan T1 - Pattern-Based Support for Context Establishment and Asset Identification of the ISO 27000 in the Field of Cloud Computing T2 - 2011 Sixth International Conference on Availability, Reliability and Security N2 - The ISO 27000 is a well-established series of information security standards. The scope for applying these standards can be an organisation as a whole, single business processes or even an IT application or IT infrastructure. The context establishment and the asset identification are among the first steps to be performed. The quality of the results produced when performing these steps has a crucial influence on the subsequent steps such as identifying loss, vulnerabilities, possible attacks and defining countermeasures. Thus, a context analysis to gather all necessary information in the initial steps is important, but is not offered in the standard. In this paper, we focus on the scope of cloud computing systems and present a way to support the context establishment and the asset identification described in ISO 27005. A cloud system analysis pattern and different kinds of stakeholder templates serve to understand and describe a given cloud development problem, i.e. the envisaged IT systems and the relevant parts of the operational environment. We illustrate our support using an online banking cloud scenario. KW - security standards KW - IT infrastructure KW - ISO27005 KW - Cloud computing KW - risk management Y1 - 2011 UR - https://ieeexplore.ieee.org/document/6045958 SN - 978-1-4577-0979-1 U6 - https://doi.org/10.1109/ARES.2011.55 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. SP - 327 EP - 333 PB - IEEE CY - Vienna ER - TY - CHAP A1 - Schmidt, Holger A1 - Jürjens, Jan ED - Mouratidis, Haralambos ED - Rolland, Colette T1 - Connecting Security Requirements Analysis and Secure Design Using Patterns and UMLsec T2 - Advanced Information Systems Engineering: 23rd International Conference, CAiSE 2011, London, UK, June 20-24, 2011. Proceedings KW - security requirement KW - secure design KW - architectual pattern Y1 - 2011 UR - https://link.springer.com/chapter/10.1007/978-3-642-21640-4_28 SN - 978-3-642-21639-8 U6 - https://doi.org/10.1007/978-3-642-21640-4_28 VL - LNCS, 6741 SP - 367 EP - 382 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Jürjens, Jan A1 - Marchal, Loïc A1 - Ochoa, Martín A1 - Schmidt, Holger ED - France, Robert B. ED - Kuester, Jochen M. ED - Bordbar, Behzad ED - Paige, Richard F. T1 - Incremental Security Verification for Evolving UMLsec models T2 - Modelling Foundations and Applications: 7th European Conference, ECMFA 2011, Birmingham, UK, June 6 - 9, 2011 Proceedings KW - model element KW - security requirement KW - class diagram KW - evolution path KW - security property Y1 - 2011 UR - https://link.springer.com/chapter/10.1007/978-3-642-21470-7_5 SN - 978-3-642-21469-1 U6 - https://doi.org/10.1007/978-3-642-21470-7_5 VL - LNCS, 6698 SP - 52 EP - 68 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Jürjens, Jan A1 - Schmidt, Holger ED - Giannakopoulou, Dimitra ED - Orejas, Fernando T1 - Systematic Development of UMLsec Design Models Based on Security Requirements T2 - Fundamental Approaches to Software Engineering: 14th International Conference, FASE 2011, Held as Part of the Joint European Conferences on Theory and Practice of Software, ETAPS 2011, Saarbrücken, Germany, March 26–April 3, 2011. Proceedings KW - security requirement KW - secquence diagram KW - eclipse modeling framework KW - patient monitoring system KW - security requirement engineering Y1 - 2011 UR - https://link.springer.com/chapter/10.1007/978-3-642-19811-3_17 SN - 978-3-642-19810-6 U6 - https://doi.org/10.1007/978-3-642-19811-3_17 VL - LNCS, 6603 SP - 232 EP - 246 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Heyman, Thomas A1 - Yskout, Koen A1 - Scandariato, Riccardo A1 - Schmidt, Holger A1 - Yu, Yijun ED - Erlingsson, Úlfar ED - Wieringa, Roel ED - Zannone, Nicola T1 - The Security Twin Peaks T2 - Engineering Secure Software and Systems: Third International Symposium, ESSoS 2011, Madrid, Spain, February 9-10, 2011. Proceedings KW - security KW - software architecture KW - requirements KW - patterns Y1 - 2011 UR - https://link.springer.com/book/10.1007/978-3-642-19125-1 SN - 978-3-642-19124-4 U6 - https://doi.org/10.1007/978-3-642-19125-1_13 VL - LNCS IS - 6542 SP - 167 EP - 180 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Jürjens, Jan A1 - Ochoa, Martín A1 - Schmidt, Holger A1 - Marchal, Loïc A1 - Houmb, Siv Hilde A1 - Islam, Shareeful ED - Bernardo, Marco ED - Issarny, Valérie T1 - Modelling Secure Systems Evolution: Abstract and Concrete Change Specifications T2 - Formal Methods for Eternal Networked Software Systems: 11th International School on Formal Methods for the Design of Computer, Communication and Software Systems, SFM 2011, Bertinoro, Italy, June 13-18, 2011. Advanced Lectures N2 - Developing security-critical systems is difficult, and there are many well-known examples of vulnerabilities exploited in practice. In fact, there has recently been a lot of work on methods, techniques, and tools to improve this situation already at the system specification and design. However, security-critical systems are increasingly long-living and undergo evolution throughout their lifetime. Therefore, a secure software development approach that supports maintaining the needed levels of security even through later software evolution is highly desirable. In this chapter, we recall the UMLsec approach to model-based security and discuss on tools and techniques to model and verify evolution of UMLsec models. KW - software evolution KW - UMLsec KW - UMLseCH KW - security Y1 - 2011 UR - https://link.springer.com/chapter/10.1007/978-3-642-21455-4_15 SN - 978-3-642-21455-4 U6 - https://doi.org/10.1007/978-3-642-21455-4_15 VL - LNCS, 6659 SP - 504 EP - 526 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Beckers, Kristian A1 - Faßbender, Stephan A1 - Schmidt, Holger T1 - An Integrated Method for Pattern-Based Elicitation of Legal Requirements Applied to a Cloud Computing Example T2 - 2012 Seventh International Conference on Availability, Reliability and Security N2 - Considering legal aspects during software development is a challenging problem, due to the cross-disciplinary expertise required. The problem is even more complex for cloud computing systems, because of the international distribution, huge amounts of processed data, and a large number of stakeholders that own or process the data. Approaches exist to deal with parts of the problem, but they are isolated from each other. We present an integrated method for elicitation of legal requirements. A cloud computing online banking scenario illustrates the application of our methods. The running example deals with the problem of storing personal information in the cloud and based upon the BDSG (German Federal Data Protection Act). We describe the structure of the online banking cloud system using an existing pattern-based approach. The elicited information is further refined and processed into functional requirements for software development. Moreover, our method covers the analysis of security-relevant concepts such as assets and attackers particularly with regard to laws. The requirements artifacts then serve as inputs for existing patterns for the identification of laws relevant for the online banking cloud system. Finally, our method helps to systematically derive functional as well as security requirements that realize the previously identified laws. KW - law KW - security KW - requirements engineering KW - software architecture Y1 - 2012 UR - https://ieeexplore.ieee.org/document/6329218 SN - 978-0-7695-4775-6 U6 - https://doi.org/10.1109/ARES.2012.25 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. SP - 463 EP - 472 PB - IEEE CY - Prague ER - TY - CHAP A1 - Schwittek, Widura A1 - Schmidt, Holger A1 - Beckers, Kristian A1 - Eicker, Stefan A1 - Faßbender, Stephan A1 - Heisel, Maritta T1 - A Common Body of Knowledge for Engineering Secure Software and Services T2 - 2012 Seventh International Conference on Availability, Reliability and Security N2 - The discipline of engineering secure software and services brings together researchers and practitioners from software, services, and security engineering. This interdisciplinary community is fairly new, it is still not well integrated and is therefore confronted with differing perspectives, processes, methods, tools, vocabularies, and standards. We present a Common Body of Knowledge (CBK) to overcome the aforementioned problems. We capture use cases from research and practice to derive requirements for the CBK. Our CBK collects, integrates, and structures knowledge from the different disciplines based on an ontology that allows one to semantically enrich content to be able to query the CBK. The CBK heavily relies on user participation, making use of the Semantic MediaWiki as a platform to support collaborative writing. The ontology is complemented by a conceptual framework, consisting of concepts to structure the knowledge and to provide access to it, and a means to build a common terminology. We also present organizational factors covering dissemination and quality assurance. KW - software engineering KW - security engineering KW - services computing KW - common body of knowledge KW - interdisciplinary Y1 - 2012 UR - https://ieeexplore.ieee.org/document/6329223 SN - 978-1-4673-2244-7 U6 - https://doi.org/10.1109/ARES.2012.31 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. VL - NESSoS, ICT-2009.1.4 Trustworthy ICT, Grant No. 25698 SP - 499 EP - 506 PB - IEEE CY - Prague ER - TY - CHAP A1 - Beckers, Kristian A1 - Faßbender, Stephan A1 - Küster, Jan-Christoph A1 - Schmidt, Holger ED - Regnell, Björn ED - Damian, Daniela T1 - A Pattern-Based Method for Identifying and Analyzing Laws T2 - Requirements Engineering: Foundation for Software Quality: 18th International Working Conference, REFSQ 2012, Essen, Germany, March 19-22, 2012. Proceedings KW - compliance KW - law Y1 - 2012 UR - https://link.springer.com/chapter/10.1007/978-3-642-28714-5_23 SN - 978-3-642-28713-8 U6 - https://doi.org/10.1007/978-3-642-28714-5_23 VL - LNCS, 7195 SP - 256 EP - 262 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Beckers, Kristian A1 - Faßbender, Stephan A1 - Heisel, Maritta A1 - Küster, Jan-Christoph A1 - Schmidt, Holger ED - Barthe, Gilles ED - Livshits, Benjamin ED - Scandariato, Riccardo T1 - Supporting the Development and Documentation of ISO 27001 Information Security Management Systems through Security Requirements Engineering Approaches T2 - Engineering Secure Software and Systems: 4th International Symposium, ESSoS 2012, Eindhoven, The Netherlands, February, 16-17, 2012. Proceedings KW - Security standards KW - requirements engineering KW - ISO27000 KW - ISO27001 KW - security Y1 - 2012 UR - https://link.springer.com/chapter/10.1007/978-3-642-28166-2_2 SN - 978-3-642-28165-5 U6 - https://doi.org/10.1007/978-3-642-28166-2_2 VL - LNCS, 7159 SP - 14 EP - 21 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Beckers, Kristian A1 - Faßbender, Stephan A1 - Heisel, Maritta A1 - Schmidt, Holger T1 - Using Security Requirements Engineering Approaches to Support ISO 27001 Information Security Management Systems Development and Documentation T2 - 2012 Seventh International Conference on Availability, Reliability and Security N2 - An ISO 27001 compliant information security management system is difficult to create, due to the the limited support for system development and documentation provided in the standard. We present a structured analysis of the documentation and development requirements in the ISO 27001 standard. Moreover, we investigate to what extent existing security requirements engineering approaches fulfill these requirements. We developed relations between these approaches and the ISO 27001 standard using a conceptual framework originally developed for comparing security requirements engineering methods. The relations include comparisons of important terms, techniques, and documentation artifacts. In addition, we show practical applications of our results. Y1 - 2012 UR - https://ieeexplore.ieee.org/document/6329189 SN - 978-1-4673-2244-7 U6 - https://doi.org/10.1109/ARES.2012.35 SP - 242 EP - 248 PB - IEEE CY - Prague ER - TY - CHAP A1 - Beckers, Kristian A1 - Eicker, Stefan A1 - Faßbender, Stephan A1 - Heisel, Maritta A1 - Schmidt, Holger A1 - Schwittek, Widura ED - Quirchmayr, Gerald ED - Basl, Josef ED - You, Ilsun ED - Xu, Lida ED - Weippl, Edgar T1 - Ontology-Based Identification of Research Gaps and Immature Research Areas T2 - Multidisciplinary Research and Practice for Information Systems: IFIP WG 8.4, 8.9/TC 5 International Cross-Domain Conference and Workshop on Availability, Reliability, and Security, CD-ARES 2012, Prague, Czech Republic, August 20-24, 2012. Proceedings KW - business applications KW - data encryption KW - recommender systems KW - software security KW - semantic web Y1 - 2012 UR - https://link.springer.com/chapter/10.1007/978-3-642-32498-7_1 SN - 978-3-642-32497-0 U6 - https://doi.org/10.1007/978-3-642-32498-7_1 SN - 1611-3349 VL - LNCS, 7465 SP - 1 EP - 16 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Herder, Jens T1 - Tools and widgets for spatial sound authoring T2 - CompuGraphics ' 97, Sixth International Conference on Computational Graphics and Visualization Techniques: Graphics in the Internet Age, Vilamoura, Portugal N2 - Broader use of virtual reality environments and sophisticated animations spawn a need for spatial sound. Until now, spatial sound design has been based very much on experience and trial and error. Most effects are hand-crafted, because good design tools for spatial sound do not exist. This paper discusses spatial sound authoring and its applications, including shared virtual reality environments based on VRML. New utilities introduced by this research are an inspector for sound sources, an interactive resource manager, and a visual soundscape manipulator. The tools are part of a sound spatialization framework and allow a designer/author of multimedia content to monitor and debug sound events. Resource constraints like limited sound spatialization channels can also be simulated. KW - spatial sound KW - virtual reality environments KW - multimedia KW - spatialization KW - spatial media KW - vizualization KW - user interface design KW - man-machine interfaces Y1 - 1997 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:hbz:due62-opus-896 UR - http://vsvr.medien.hs-duesseldorf.de/publications/cg97-tawfssa/welcome.html SN - 972-8342-02-0 N1 - Zugriff auf die Konferenzveröffentlichung über den angegebene URL conference paper available via URL SP - 87 EP - 95 CY - Portugal ER - TY - CHAP A1 - Herder, Jens T1 - Sound Spatialization Framework: An Audio Toolkit for Virtual Environments T2 - First International Conference on Human and Computer, Aizu-Wakamatsu, September 1998 N2 - The Sound Spatialization Framework is a C++ toolkit and development environment for providing advanced sound spatialization for virtual reality and multimedia applications. The Sound Spatialization Framework provides many powerful display and user-interface features not found in other sound spatialization software packages. It provides facilities that go beyond simple sound source spatialization: visualization and editing of the soundscape, multiple sinks, clustering of sound sources, monitoring and controlling resource management, support for various spatialization backends, and classes for MIDI animation and handling. KW - sound spatialization KW - resource management KW - virtual environments KW - spatial sound authoring KW - user interface design KW - human-machine interfaces Y1 - 1998 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:hbz:due62-opus-788 CY - Aizu ER - TY - CHAP A1 - Herder, Jens T1 - Cooperative Tools for Teaching : an Impact of a Network Environment T2 - Annual Report of the Information Systems and Technology Center, University of Aizu, October 1997 N2 - Education at the University of Aizu is focussed upon computer science. Besides being the subject matter of many courses, however, the computer also plays a vital role in the educational process itself, both in the distribution of instructional media, and in providing students with valuable practical experience. All students have unlimited access (24-hours-a-day) to individual networked workstations, most of which are multimedia-capable (even video capture is possible in two exercise rooms). Without software and content tailored for computer-aided instruction, the hardware becomes an expensive decoration. In any case, there is a need to better educate the instructors and students in the use of the equipment. In the interest of facilitating effective, collaborative use of network-based computers in teaching, this article explores the impact that a network environment can have on such activities. First, as a general overview, and to examine the motivation for the use of a network environment in teaching, this article reviews a range of different styles of collaboration. Then the article shows what kind of tools are available for use, within the context of what has come to be called Computer-Supported Cooperative Work (CSCW). KW - CAI KW - CAT KW - computer education KW - collaborative work KW - CSCW KW - groupware KW - FHD Y1 - 1997 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:hbz:due62-opus-827 SP - 3 EP - 8 CY - Aizu ER -