Annual Report FY 2005

> > F Y 2 0 0 5

Publications

SEI in the Community

Journal Articles

Allen, J.

"Change and Patch Management Controls: Critical for Organizational Success Global Technology Audit Guide," published by the Institute of Internal Auditors, July 2005.

series of articles for Cutter Consortium, specifically their Enterprise Risk Management and Governance Resource Center

Bachmann, F.; Bass, L.; Klein, M.; & Shelton, C.
"Designing Software Architectures to Achieve Quality Attribute Requirements," IEE Proceedings on Software, pp 153-165, August 2005.

Cappelli, D.; Moore, A.; & Shimeall, T.
“Common Sense Guide to Prevention and Detection of Insider Threats.” Proceedings of the 2005 CyLab Corporate Partners Conference. Pittsburgh, PA, April 13-15, 2005.

Chaki, S.; Clarke, E.; Jha, S.; & Veith, H.
"An Iterative Framework for Simulation Conformance,"Journal of Logic and Computation (JLC), 15, 4 (August 2005): 465-488.

Cheng, S.; Nord, R.; & Stafford, J.
"WICSA Wiki WAN Party: Capturing Experience in Software Architecture Best Practices," ACM SIGSOFT Software Engineering Notes, 30, 1 (January 2005).

Clements, P.; Jones, L.; McGregor, J.; & Northrop, L.
"Project Management in a Software Product Line Organization," IEEE Software 22, 5 (September/October 2005): 54-62.

Dicdican, R. & Haimes, Y.
Relating Multiobjective Decision Trees to the Multiobjective Risk Impact Analysis Method," Systems Engineering, 8, 2 (2005).

El Emam, K. & Carleton, A.
"Applications of Statistics in Software Engineering," The Journal of Systems and Software 73, 2, (October 2004): 181-182.

Fung, C.; Hung, P.; Wang, G.; Linger, R.; & Walton, G.
“A Study of Service Composition with QoS Management,” 2005 IEEE International Conference on Web Services (ICWS’05). Orlando, Florida, July 11-15, 2005. Los Alamitos, CA: IEEE Computer Society Press, 2005.

Garcia, S.
"How Standards Enable Adoption of Project Management Practice," IEEE Software 22, 5 (September/October 2005): 22-29.

"Standards as an Enabler to Adoption of Project Management Practice," IEEE Software 22, 5 (September/October 2005).

Gates, C. & Becknel, D.
“Host Anomalies from Network Data,” 325-332. Proceedings from the Sixth Annual IEEE Systems, Man and Cybernetics Information Assurance Workshop. West Point, New York, June 15-17, 2005. Los Alamitos, CA: IEEE Computer Society Press, 2005.

Hazzan, O. & Tomayko, J.
"Reflection and Abstraction in Learning Software Engineering's Human Aspects," IEEE Computer 38, 6 (June 2005): 39-45.

Humphrey, W.
"Acquiring Quality Software," Crosstalk 18, 12 (December, 2005): 19 -23.

Levine, L.; Baskerville, R.; Pries-Heje, J.; Levine, L.; & Ramesh, B.
"The high speed balancing game: How software companies cope with Internet Speed." Scandinavian Journal of Information Systems 16 (December 2004): 11-54.

Levine, L. & Saunders, K.
"Better, Faster, Cheaper—Later: What Happens When Technologies are Suppressed. Michigan Telecommunications and Technology Law Review vII (1) (Fall 2004): 23-70.

Lipson, Howard & van Wyk, Ken.
Integrating Business Applications into Your IT Security Infrastructure—Creating and Maintaining a Secure Application Environment: Topic 1: Application Firewalls and Proxies – Introduction and Concept of Operations (2005).

Mead, N.
"Outsourcing and Information Security: What are the Risks?" Cutter IT Journal, (October 2004): 30-35.

Mead, N. & McGraw, G.
"A Portal for Software Security," IEEE Security & Privacy 2 4 (July-August 2005): 75-79.

Mead, N.; Weiringa, R.; Maiden, N.; & Rolland, C.
"Requirements Engineering Paper Classification and Evaluation Criteria: A Proposal and a Discussion," Requirements Engineering Journal (2006) 11 (2006): 102-107.

Moore, A. & Cappelli, D.
“Analyzing Organizational Cyber Threat Dynamics.” Proceedings of the Workshop on System Dynamics of Physical and Social Systems for National Security. April 21-22, 2005.

Nord, R.; Hofmeister, C.; & Soni, D.
"Global Analysis: Moving from Software Requirements Specification to Structural Views of the Software Architecture," IEEE Proceedings–Software. Special Issue on Relating Software Requirements and Architecture (August 2005): 141-208.

Rich, E.; Martinez-Moyano, I.; Conrad, S.; Cappelli, D.; Moore, A.; Shimeall, T.; Andersen, D.; Gonzalez, J.; Ellison, R.; Lipson, H.; Mundie, D.; Sarriegi, J.; Sawicka, A.; Stewart, T.; Torres, J.; Wiik J.; & Weaver, E.
“Simulating Insider Cyber-Threat Risks: A Model-Based Case and a Case-Based Model.” Proceedings of the 23rd International Conference of the System Dynamics Society (ISDC-2005). Boston, MA, July 17-21, 2005.

Walton, G. H.; Daly, T.; Pleszkoch, M.G.; & Prowell, S. J.
“Next-Generation Software Engineering: Science and Technology Strategies” (invited position paper). Next-Generation Software Engineering: Transformation to a Computational Engineering Discipline, Workshop for the 39th Annual Hawaii International Conference on System Sciences (HICSS-39). Kauai, Hawaii, January 4-7, 2006. Los Alamitos, CA: IEEE Computer Society Press, 2006.