EuroSec Bibliography

@article{VMMF00,
       author = {John Viega and Gary McGraw and Tom Mutdosch and Edward W. Felten},
       title = {Statically Scanning Java Code: Finding Security Vulnerabilities},
       journal = {IEEE Softw.},
       volume = {17},
       number = {5},
       year = {2000},
       issn = {0740-7459},
       pages = {68--74},
       doi = {http://dx.doi.org/10.1109/52.877869},        
       publisher = {IEEE Computer Society Press},
       address = {Los Alamitos, CA, USA},
 }

@inproceedings{LL05,
       author = {V. Benjamin Livshits and Monica S. Lam},
       title = {Finding security vulnerabilities in java applications with static analysis},
       booktitle = {SSYM'05: Proceedings of the 14th conference on USENIX Security Symposium},
       year = {2005},
       pages = {18--18},
       location = {Baltimore, MD},
       publisher = {USENIX Association},
       address = {Berkeley, CA, USA},
 }

@inproceedings{VBKM00,
	author = {J. Viega and J. T. Bloch and Y. Kohno and G. McGraw},
	title = {ITS4: A static vulnerability scanner for C and C++ code},
	booktitle = {ACSAC '00: Proceedings of the 16th Annual Computer Security Applications Conference},
	year = {2000},
	isbn = {0-7695-0859-6},
	pages = {257},
	publisher = {IEEE Computer Society},
	address = {Washington, DC, USA},
}

@article{TCM05,
	author = {Katrina Tsipenyuk and Brian Chess and Gary McGraw},
	title = {Seven Pernicious Kingdoms: A Taxonomy of Software Security Errors},
	journal = {IEEE Security and Privacy},
	volume = {3},
	number = {6},
 	year = {2005},
	issn = {1540-7993},
	pages = {81--84},
	doi = {http://dx.doi.org/83900927-3F85-4A31-B0A7-5EDD585CF7F3},
	publisher = {IEEE Educational Activities Department},
	address = {Piscataway, NJ, USA},
}

@inproceedings{BART07,
	author = {Anil Bazaz and James D. Arthur},
	title = {Towards a Taxonomy of Vulnerabilities},
	booktitle = {HICSS '07: Proceedings of the 40th Annual Hawaii International Conference on System Sciences},
	year = {2007},
	isbn = {0-7695-2755-8},
	pages = {163a},
	doi = {http://dx.doi.org/10.1109/HICSS.2007.566},
	publisher = {IEEE Computer Society},
	address = {Washington, DC, USA},
}