{"id":"https://openalex.org/W2807851438","doi":"https://doi.org/10.1145/3183399.3183400","title":"Generative secure design, defined","display_name":"Generative secure design, defined","publication_year":2018,"publication_date":"2018-05-27","ids":{"openalex":"https://openalex.org/W2807851438","doi":"https://doi.org/10.1145/3183399.3183400","mag":"2807851438"},"language":"en","primary_location":{"id":"doi:10.1145/3183399.3183400","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3183399.3183400","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 40th International Conference on Software Engineering: New Ideas and Emerging Results","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5012313708","display_name":"Riccardo Scandariato","orcid":"https://orcid.org/0000-0003-3591-7671"},"institutions":[{"id":"https://openalex.org/I881427289","display_name":"University of Gothenburg","ror":"https://ror.org/01tm6cn81","country_code":"SE","type":"education","lineage":["https://openalex.org/I881427289"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Riccardo Scandariato","raw_affiliation_strings":["University of Gothenburg, Gothenburg, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Gothenburg, Gothenburg, Sweden","institution_ids":["https://openalex.org/I881427289"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037922561","display_name":"Jennifer Horkhoff","orcid":null},"institutions":[{"id":"https://openalex.org/I881427289","display_name":"University of Gothenburg","ror":"https://ror.org/01tm6cn81","country_code":"SE","type":"education","lineage":["https://openalex.org/I881427289"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Jennifer Horkhoff","raw_affiliation_strings":["University of Gothenburg, Gothenburg, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Gothenburg, Gothenburg, Sweden","institution_ids":["https://openalex.org/I881427289"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5063787358","display_name":"Robert Feldt","orcid":"https://orcid.org/0000-0002-5179-4205"},"institutions":[{"id":"https://openalex.org/I66862912","display_name":"Chalmers University of Technology","ror":"https://ror.org/040wg7k59","country_code":"SE","type":"education","lineage":["https://openalex.org/I66862912"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Robert Feldt","raw_affiliation_strings":["Chalmers, Gothenburg, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chalmers, Gothenburg, Sweden","institution_ids":["https://openalex.org/I66862912"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"4"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.9812999963760376,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.9812999963760376,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9767000079154968,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9678999781608582,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7164658308029175},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.570266604423523},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.5118893384933472},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5033082365989685},{"id":"https://openalex.org/keywords/order","display_name":"Order (exchange)","score":0.4892744719982147},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.441861629486084},{"id":"https://openalex.org/keywords/scale","display_name":"Scale (ratio)","score":0.4399978220462799},{"id":"https://openalex.org/keywords/security-testing","display_name":"Security testing","score":0.42799174785614014},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.421995609998703},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3988895118236542},{"id":"https://openalex.org/keywords/systems-engineering","display_name":"Systems engineering","score":0.3493010103702545},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.19008556008338928},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.1872812807559967},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.16743430495262146},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.1423509418964386},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.09450486302375793}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7164658308029175},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.570266604423523},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.5118893384933472},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5033082365989685},{"id":"https://openalex.org/C182306322","wikidata":"https://www.wikidata.org/wiki/Q1779371","display_name":"Order (exchange)","level":2,"score":0.4892744719982147},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.441861629486084},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.4399978220462799},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.42799174785614014},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.421995609998703},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3988895118236542},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.3493010103702545},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.19008556008338928},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.1872812807559967},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.16743430495262146},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.1423509418964386},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.09450486302375793},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3183399.3183400","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3183399.3183400","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 40th International Conference on Software Engineering: New Ideas and Emerging Results","raw_type":"proceedings-article"},{"id":"pmh:oai:research.chalmers.se:507270","is_oa":false,"landing_page_url":"https://research.chalmers.se/en/publication/507270","pdf_url":null,"source":{"id":"https://openalex.org/S4306402469","display_name":"Chalmers Research (Chalmers University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I66862912","host_organization_name":"Chalmers University of Technology","host_organization_lineage":["https://openalex.org/I66862912"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":null},{"id":"pmh:oai:tore.tuhh.de:11420/10261","is_oa":false,"landing_page_url":"http://hdl.handle.net/11420/10261","pdf_url":null,"source":{"id":"https://openalex.org/S4306401751","display_name":"tub.dok (Hamburg University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I884043246","host_organization_name":"Hamburg University of Technology","host_organization_lineage":["https://openalex.org/I884043246"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference Paper"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.6399999856948853}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W232406460","https://openalex.org/W1952000560","https://openalex.org/W1977321274","https://openalex.org/W2001314414","https://openalex.org/W2041943081","https://openalex.org/W2065642063","https://openalex.org/W2080227433","https://openalex.org/W2097490514","https://openalex.org/W2101872600","https://openalex.org/W2105004207","https://openalex.org/W2113544020","https://openalex.org/W2131730994","https://openalex.org/W2140352503","https://openalex.org/W2161769853","https://openalex.org/W2164589933","https://openalex.org/W2232522085","https://openalex.org/W2242274110","https://openalex.org/W2546999186","https://openalex.org/W2562461258"],"related_works":["https://openalex.org/W2380075625","https://openalex.org/W4390718435","https://openalex.org/W4390549206","https://openalex.org/W3137171911","https://openalex.org/W4379540039","https://openalex.org/W2519676117","https://openalex.org/W4237784285","https://openalex.org/W2374712251","https://openalex.org/W4383031710","https://openalex.org/W3211753092"],"abstract_inverted_index":{"In":[0],"software-intensive":[1],"industries,":[2],"companies":[3,31],"face":[4],"the":[5,20,23,44,53,66,69,86,96,117],"constant":[6],"challenge":[7],"of":[8,22,29,56,71],"not":[9],"having":[10],"enough":[11],"security":[12,87,91,103],"experts":[13],"on":[14],"staff":[15],"in":[16,38,48],"order":[17,49],"to":[18,50,68,84],"validate":[19],"design":[21,74,80,122],"high-complexity":[24],"projects":[25],"they":[26],"run.":[27],"Many":[28],"these":[30],"are":[32],"now":[33],"realizing":[34],"that":[35,62,76],"increasing":[36],"automation":[37],"their":[39],"secure":[40],"development":[41,70],"process":[42],"is":[43],"only":[45],"way":[46],"forward":[47],"cope":[51],"with":[52],"ultra-large":[54],"scale":[55],"modern":[57],"systems.":[58],"This":[59],"paper":[60],"embraces":[61],"viewpoint.":[63],"We":[64],"chart":[65],"roadmap":[67],"a":[72],"generative":[73],"tool":[75,94,118],"iteratively":[77],"produces":[78],"several":[79],"alternatives,":[81],"each":[82],"attempting":[83],"solve":[85],"goals":[88],"by":[89,99,106],"incorporating":[90,114],"mechanisms.":[92],"The":[93],"explores":[95],"possible":[97],"solutions":[98],"starting":[100],"from":[101],"well-known":[102],"techniques":[104],"and":[105,111],"creating":[107],"variations":[108],"via":[109],"mutations":[110],"crossovers.":[112],"By":[113],"user":[115],"feedback,":[116],"generates":[119],"increasingly":[120],"better":[121],"alternatives.":[123]},"counts_by_year":[{"year":2019,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}