Discover the new cybersecurity landscape of the interconnected software supply chain In Software Transparency: Supply Chain Security in an Era of a Software-Driven Society, a team of veteran information security professionals delivers an expert treatment of software supply chain security. In the book, you’ll explore real-world examples and guidance on how to defend your own organization against internal and external attacks. It includes coverage of topics including the history of the software transparency movement, software bills of materials, and high assurance attestations. The authors examine the background of attack vectors that are becoming increasingly vulnerable, like mobile and social networks, retail and banking systems, and infrastructure and defense systems. You’ll also discover: Use cases and practical guidance for both software consumers and suppliers Discussions of firmware and embedded software, as well as cloud and connected APIs Strategies for understanding federal and defense software supply chain initiatives related to security An essential resource for cybersecurity and application security professionals, Software Transparency will also be of extraordinary benefit to industrial control system, cloud, and mobile security professionals.

Trillions of lines of code help us in our lives, companies, and organizations. But just a single software cybersecurity vulnerability can stop entire companies from doing business and cause billions of dollars in revenue loss and business recovery. Securing the creation and deployment of software, also known as software supply chain security, goes well beyond the software development process. This practical book gives you a comprehensive look at security risks and identifies the practical controls you need to incorporate into your end-to-end software supply chain. Author Cassie Crossley demonstrates how and why everyone involved in the supply chain needs to participate if your organization is to improve the security posture of its software, firmware, and hardware. With this book, you'll learn how to: Pinpoint the cybersecurity risks in each part of your organization's software supply chain Identify the roles that participate in the supply chain—including IT, development, operations, manufacturing, and procurement Design initiatives and controls for each part of the supply chain using existing frameworks and references Implement secure development lifecycle, source code security, software build management, and software transparency practices Evaluate third-party risk in your supply chain

This book constitutes the proceedings of the 22nd International Working Conference on Requirements Engineering – Foundation for Software Quality, REFSQ 2016, held in Gothenburg, Sweden, in March 2016. The 16 full papers and 5 short papers presented in this volume were carefully reviewed and selected from 64 submissions. The papers were organized in topical sections named: decision making in requirements engineering; open source in requirements engineering; natural language; compliance in requirements engineering; requirements engineering in the automotive domain; empirical studies in requirements engineering; requirements engineering foundations; human factors in requirements engineering; and research methodology in requirements engineering.

Computer-Generated Images (CGIs) are widely used and accepted in the world of entertainment but the use of the very same visualization techniques in academic research in the Arts and Humanities remains controversial. The techniques and conceptual perspectives on heritage visualization are a subject of an ongoing interdisciplinary debate. By demonstrating scholarly excellence and best technical practice in this area, this volume is concerned with the challenge of providing intellectual transparency and accountability in visualization-based historical research. Addressing a range of cognitive and technological challenges, the authors make a strong case for a wider recognition of three-dimensional visualization as a constructive, intellectual process and valid methodology for historical research and its communication. Intellectual transparency of visualization-based research, the pervading theme of this volume, is addressed from different perspectives reflecting the theory and practice of respective disciplines. The contributors - archaeologists, cultural historians, computer scientists and ICT practitioners - emphasize the importance of reliable tools, in particular documenting the process of interpretation of historical material and hypotheses that arise in the course of research. The discussion of this issue refers to all aspects of the intellectual content of visualization and is centred around the concept of 'paradata'. Paradata document interpretative processes so that a degree of reliability of visualization outcomes can be understood. The disadvantages of not providing this kind of intellectual transparency in the communication of historical content may result in visual products that only convey a small percentage of the knowledge that they embody, thus making research findings not susceptible to peer review and rendering them closed to further discussion. It is argued, therefore, that paradata should be recorded alongside more tangible outcomes of research, preferably as an integral part of virtual models, and sustained beyond the life-span of the technology that underpins visualization.

This book contains the proceedings of two long-running events held along with the CAiSE conference relating to the areas of enterprise, business-process and information systems modeling: * the 21st International Conference on Business Process Modeling, Development and Support, BPMDS 2020, and * the 25th International Conference on Exploring Modeling Methods for Systems Analysis and Development, EMMSAD 2020. The conferences were planned to take place in Grenoble, France, during June 8–9, 2020. They were held virtually due to the COVID-19 pandemic. For BPMDS 13 full papers and 1 short paper were carefully reviewed and selected for publication from a total of 30 submissions; for EMMSAD 11 full papers and 4 short papers were accepted from 29 submissions. The papers were organized in topical sections named as follows: BPMDS: Business process execution and monitoring, BPM applications in industry and practice, planning and scheduling in business processes, process mining, process models and visualizations EMMSAD: Requirements and method engineering, enterprise and business modeling, software-related modeling, domain-specific modeling, evaluation-related research.

"The author traces the emergence in the late 1970s and early 1980s of the belief that personal computers should be easy to use. He asks readers to consider the consequences of a computational culture grounded in the assumption that the average person does not need to know much, if anything, about the internal operations of the computers we have come to depend on"--