RASEN » News

ETSI Guide EG203251 Available

rasen_adm — Wed, 13 Jan 2016 09:35:44 +0000

The European Telecommunications Standards Institute published the ETSI Guide EG203251 Methods for Testing & Specification; Risk-based Security Assessment and Testing Methodologies. The guide provides a perspective on test-based risk assessment as well as risk-based security testing and includes major contributions from the RASEN project. Furthermore, Guide EG203251 details the management of complexity in complex systems as well as providing a conceptual model for risk-based security testing.

Year 3 Project Deliverables now Available

rasen_adm — Fri, 08 Jan 2016 09:14:44 +0000

The final deliverable of the RASEN project are now available for download from our project website at http://www.rasenproject.eu/deliverables/. They include the following documents:

D2.3.2 – Use Case Evaluation (v2) - details the results of the final evaluation of RASEN scientific and technical results, undertaken by the project’s use case provider organizations.

D3.2.3 – Techniques for Compositional Test-Based Security Risk Assessment v.3 - provides the final report into compositional test-based risk assessment, which has been further developed since year 2 results.

D3.3.3, D4.3.3 – RASEN Tools for: Compositional security risk assessment and security test result aggregation v.3 and Compositional Security Risk Assessment and Security Testing v.3 - provides a brief description and installation guide for tool in WP3 and WP4

D4.2.3 – Techniques for Compositional Risk-Based Security Testing v.3 - reports on the RASEN framework for security testing guided by risk assessment.

D5.3.3 – Methodologies for Legal, Compositional, and Continuous Risk Assessment and Security Testing v.3 - documents the application of the RASEN methodology within different processes and for different domains.

D5.4.3 – A Toolbox for Security Risk Assessment and Security Testing - details the integration support for the RASEN approach to risk-based security testing and test-based security risk assessment.

Security Testing and Risk Assessment for Large-Scale Networked Systems using ARIS

rasen_adm — Tue, 24 Nov 2015 10:24:40 +0000

Current existing and conventional tools fail to support industrial needs adequately. Although requirements are very diverse there is a common set of industry generic requirements applicable to a large number of industrial software developing companies. The RASEN project is addressing those, striving to deliver a new methodology and a supportive software environment.

The following video gives a demonstration of the RASEN Pilot with focus on the security testing and risk assessment of large-scale networked systems. It does so by providing an global overview of the global risk assessment and security testing process by applying a tool combination of the risk modelling tool ARIS from Software AG and the integration with RACOMAT (Risk Assessment COMbined with Automated security Testing) developed by Fraunhofer FOKUS.

A RASEN Innovation for Security Pattern and Model-Based Vulnerability Testing

rasen_adm — Sun, 22 Nov 2015 12:51:30 +0000

The following video illustrates the PMVT innovation for security pattern and model-based vulnerability testing. More information regarding RASEN innovations is available here.

Model-Based Testing Book Close to Availability

rasen_adm — Fri, 13 Nov 2015 09:09:21 +0000

“Model-Based Testing Essentials Guide to the ISTQB Certified Model-Based Tester Foundation Level” is a new title published by Wiley Inc. Co-authored by RASEN researcher Prof. Bruno Legeard, the soon to be available for purchase title includes part of the expertise that was developed during the RASEN project and covers the essentials for gaining ISTQB certification as a model-based tester.

More information about the book, as well as purchasing options are available on the publisher website.

Special Issue of AI & Law in Honour of Prof. Jon Bing

rasen_adm — Wed, 28 Oct 2015 10:24:19 +0000

A special issue of the Artificial Intelligence and Law journal (Volume 23, Issue 3, September 2015) was published honoring late Prof. Jon Bing, a distinguished writer and law professor at the Norwegian Research Center for Computers and Law, University of Oslo. This special issue is co-edited by Dr. Tobias Mahler, researcher within the RASEN project and includes an article addressing a structured approach for compliance risk modelling – a direct result of our research in the RASEN project.

The special edition’s table of contents is available on the publisher website.

Book on Cyber-Risk Management

rasen_adm — Tue, 27 Oct 2015 09:05:06 +0000

The methodology and tools for security risk assessment developed by RASEN are highly applicable to the cyber-security domain. Much due to the RASEN project, a new book titled Cyber-Risk Management has now been published with Springer. It is authored by A. Refsdal, B. Solhaug and K. Stølen from SINTEF ICT. The book shows a strong pragmatic orientation by explaining not only what security risk assessment is, but also how to do it in practice and by making use of techniques and tools such as those developed in RASEN. See also the Springer webpage for the book, as well as the preface and the product flyer.

Author: Bjørnar Solhaug.

RASEN Talks at SASSI’15

rasen_adm — Thu, 27 Aug 2015 09:01:37 +0000

The SASSI workshop will provide a forum to discuss innovative approaches to security assessment, security testing and security certification for software-based systems. Experts from industry and academia will present and discuss their solutions to key issues like legal-risk analysis, security risk analysis, risk-based engineering, vulnerability testing, model based security testing, standardization, and certification. The workshop has a special focus on the interaction between innovations and industrial requirements, especially when security meets the demands of cost efficiency and scalability. The contributions originate from industrial practice and are complemented by industry grade research results from national and international research projects.

The event program includes the following talks from the RASEN project:

Day 1

[16:00 – 17:00] Tool-supported cyber-risk assessment

Presenter: Bjørnar Solhaug

Day 2

[09:00 – 09:45] RACOMAT – Risk-based Security testing for networked systems

Presenter: Johannes Viehmann

[15:15 – 15:45] Systematically combine security risk assessment and testing based on standards

Presenter: Jürgen Großmann

Register now for SASSI Workshop 2015

rasen_adm — Thu, 30 Jul 2015 10:27:30 +0000

The comprehensive knowledge of cyber risks and the knowledge of their potency is essential for the development and the operation of secure, networked systems. The SASSI Workshop discusses innovative methods and techniques of IT risk assessment as well as its close interaction with the development and validation of software-based systems.

Date : 15-16th September 2015
Location: Fraunhofer FOKUS in Berlin
Link : https://www.fokus.fraunhofer.de/go/sassi15

REGISTER NOW at https://de.amiando.com/sassi15.html to secure your place and avail of the early bird rate: Early Bird Registration Ends 14th August 2015

RISK 2015 workshop programme – Monday June 15th, 2015

rasen_adm — Wed, 27 May 2015 06:50:11 +0000

The 3rd edition of the RISK workshop will have the following talks from the RASEN project:

Risk Assessment

Risk Assessment and Security Testing of Large Scale Networked Systems with RACOMAT
Authors: Johannes Viehmann and Frank Werner

Combining Security Risk Assessment and Security Testing based on Standards
Authors: Juergen Grossman and Fredrik Seehusen

Security Testing Track

Using CAPEC for Risk-Based Security Testing
Author: Fredrik Seehusen

Risk-Driven Vulnerability Testing: Results from eHealth Experiments using Patterns and Model-Based Approach

Authors: Alexandre Vernotte, Bruno Legeard, Fabien Peureux, Cornel Botea and Arthur Molnar

In order to register for the event, please access this link.