Publications

Book Chapters

• Fabio Massacci, John Mylopoulos, and Nicola Zannone. An Ontology for Secure Socio-Technical Systems. In Handbook of Ontologies for Business Interaction. Idea Group, 2007. To appear. [Pdf] [bibtex-entry]
• F. Massacci and N. Zannone. Detecting Conflicts between Functional and Security Requirements with Secure Tropos: John Rusnak and the Allied Irish Bank. In Social Modeling for Requirements Engineering. MIT Press, 2006. To appear. [Pdf] [bibtex-entry]
• P. Giorgini, H. Mouratidis, and N. Zannone. Modelling Security and Trust with Secure Tropos. In Integrating Security and Software Engineering: Advances and Future Vision, pages 160-189. Idea Group, 2006. [Pdf] [bibtex-entry]
• P. Giorgini, F. Massacci and N. Zannone. Security and Trust Requirements Engineering. In Foundations of Security Analysis and Design III - Tutorial Lectures, LNCS 3655, pages 237-272. Springer-Verlag GmbH, 2005. [Pdf] [bibtex-entry]

International Journals

• F. Massacci, J. Mylopoulos and N. Zannone. Computer-Aided Support for Secure Tropos. Automated Software Engineering. 2007. To appear. [Pdf] [bibtex-entry]
• F. Massacci, J. Mylopoulos and N. Zannone. From Hippocratic Databases to Secure Tropos: a Computer-Aided Re-Engineering Approach. International Journal of Software Engineering and Knowledge Engineering, 17(2):265-284. 2007. [Pdf] [bibtex-entry]
• P. Giorgini, F. Massacci, J. Mylopoulos and N. Zannone. Requirements Engineering for Trust Management: Model, Methodology, and Reasoning. The International Journal of Information Security, 5(4):257-274, 2006. [Pdf], [bibtex-entry].
• F. Massacci, J. Mylopoulos and N. Zannone. Hierarchical Hippocratic Databases with Minimal Disclosure for Virtual Organizations. The VLDB Journal, 15(4):370-387, 2006. [Pdf] [bibtex-entry]
• F. Massacci, M. Prest and N. Zannone. Using a Security Requirements Engineering Methodology in Practice: the compliance with the Italian Data Protection Legislation. Computer Standards & Interfaces, 27(5):445-455, 2005. [Pdf] [bibtex-entry]

International Conferences and Workshops

• Hugo A. Lopez and Fabio Massacci and Nicola Zannone. Goal-Equivalent Secure Business Process Re-engineering for E-Health. In Proceedings of the 1st International Workshop on Model-Based Trustworthy Health Information Systems (MOTHIS'07), 2007. [Pdf] [bibtex-entry]
• Hugo A. Lopez and Fabio Massacci and Nicola Zannone. Goal-Equivalent Secure Business Process Re-engineering. In Proceedings of the 2nd International Workshop on Business Oriented Aspects concerning Semantics and Methodologies in Service-oriented Computing (SeMSoC'07), 2007. [Pdf] [bibtex-entry]
• V. Bryl, P. Mello, M. Montali, P. Torroni, and N. Zannone. B-Tropos: Agent-oriented requirements engineering meets computational logic for declarative business process modeling and verification. In Proceedings of the 8th Workshop on Computational Logic in Multi-Agent Systems (CLIMA-VIII), 2007. [Pdf] [bibtex-entry]
• P. Guarda, F. Massacci, and N. Zannone. E-Government and On-line Services: Security and Legal Patterns. In Proceedings of the 1st International Conference on Methodologies, Technologies and Tools enabling e-Government (MeTTeG07), 2007. [Pdf] [bibtex-entry]
• L. Compagna, P. El Khoury, F. Massacci, R. Thomas, and N. Zannone. How to capture, model, and verify the knowledge of legal, security, and privacy experts: a pattern-based approach. In Proceedings of the 11th International Conference on Artificial Intelligence and Law (ICAIL 2007), 2007. To appear. [Pdf] [bibtex-entry]
• Y. Asnar, P. Giorgini, and N. Zannone. Reasoning about Risk in Agent's Deliberation Process: a Jadex Implementation. In Proceedings of the 8th International Workshop on Agent Oriented Software Engineering (AOSE'07), 2007. To appear. [Pdf] [bibtex-entry]
• Y. Asnar, P. Giorgini, F. Massacci, and N. Zannone. From Trust to Dependability through Risk Analysis. In Proceedings of the Second International Conference on Availability, Reliability and Security (ARES'07), pages 19-26. IEEE Computer Society Press, 2007. [Pdf] [bibtex-entry]
• F. Massacci, J. Mylopoulos and N. Zannone. A Privacy Model to Support Minimal Disclosure in Virtual Organizations. In Proceedings of the W3C Workshop on Languages for Privacy Policy Negotiation and Semantics-Driven Enforcement, 2006. [Pdf] [bibtex-entry]
• P. Giorgini, F. Massacci, J. Mylopoulos and N. Zannone. Detecting Conflicts of Interest. In Proceedings of the 14th IEEE International Requirements Engineering Conference (RE'06), pages 315-318. IEEE Computer Society Press, 2006. [Pdf] [bibtex-entry] [Slides]
• V. Bryl, F. Massacci, J. Mylopoulos and N. Zannone. Designing Security Requirements Models through Planning. In Proceedings of the 4th International Workshop on AI for Service Composition, pages 28-35, 2006. [Pdf] [bibtex-entry]
• N. Zannone, S. Jajodia, and D. Wijesekera. Creating Objects in the Flexible Authorization Framework. In Proceedings of the 20th Annual IFIP WG 11.3 Working Conference on Data and Applications Security (DBSec 2006), LNCS 4127, pages 1-14, Springer-Verlag GmbH, 2006. [Pdf] [bibtex-entry] [Slides]
• V. Bryl, F. Massacci, J. Mylopoulos and N. Zannone. Designing Security Requirements Models through Planning. In Proceedings of the 18th Conference on Advanced Information Systems Engineering (CAiSE'06), LNCS 4001, pages 33-47, Springer-Verlag GmbH, 2006. [Pdf] [bibtex-entry] [Slides]
• N. Zannone, S. Jajodia, F. Massacci and D. Wijesekera. Maintaining Privacy on Derived Objects. In Proceedings of Workshop on Privacy in the Electronic Society (WPES'05), pages 10-19. ACM Press, 2005. [Pdf] [bibtex-entry] [Slides]
• F. Massacci, J. Mylopoulos and N. Zannone. Minimal Disclosure in Hierarchical Hippocratic Databases with Delegation. In Proceedings of the 10th European Symposium on Research in Computer Security (ESORICS 2005), LNCS 3679, pages 438-454, Springer-Verlag GmbH, 2005. [Pdf] [bibtex-entry] [Slides]
• P. Giorgini, F. Massacci, J. Mylopoulos and N. Zannone. Modeling Security Requirements Through Ownership, Permission and Delegation. In Proceedings of the 13th IEEE International Requirements Engineering Conference (RE'05), pages 167-176. IEEE Computer Society Press, 2005. [Pdf] [bibtex-entry]
• P. Giorgini, F. Massacci, J. Mylopoulos and N. Zannone. ST-Tool: A CASE Tool for Security Requirements Engineering. In Proceedings of the 13th IEEE International Requirements Engineering Conference (RE'05), pages 451-452. IEEE Computer Society Press, 2005. [Pdf] [bibtex-entry] [Slides] [Poster] [DemoL,DemoM,DemoS]
• P. Giorgini, F. Massacci, J. Mylopoulos and N. Zannone. Modeling Social and Individual Trust in Requirements Engineering Methodologies. In Proceedings of the Third International Conference on Trust Management (iTrust 2005), LNCS 3477, pages 161-176. Springer-Verlag GmbH, 2005. [Pdf] [bibtex-entry]
• P. Giorgini, F. Massacci, J. Mylopoulos, A. Siena and N. Zannone. ST-Tool: A CASE Tool for Modeling and Analyzing Trust Requirements. In Proceedings of the Third International Conference on Trust Management (iTrust 2005), LNCS 3477, pages 415-419. Springer-Verlag GmbH, 2005. [Pdf] [bibtex-entry]
• P. Giorgini, F. Massacci, J. Mylopoulos and N. Zannone. Filling the gap between Requirements Engineering and Public Key/Trust Management Infrastructures. In Proceedings of the 1st European PKI Workshop: Research and Applications (1st EuroPKI), LNCS 3093, pages 98-111. Springer-Verlag GmbH, 2004. [Pdf] [bibtex-entry] [Slides]
• F. Massacci and N. Zannone. Privacy is Linking Permission to Purpose. In Proceedings of the Twelfth International Workshop on Security Protocols, LNCS 3957, pages 179-191. Springer-Verlag GmbH, 2004. [Pdf] [bibtex-entry] [Slides]
• P. Giorgini, F. Massacci, J. Mylopoulos and N. Zannone. Requirements Engineering meets Trust Management: Model, Methodology, and Reasoning. In Proceedings of the Second International Conference on Trust Management (iTrust 2004), LNCS 2995, pages 176-190. Springer-Verlag GmbH, 2004. [Pdf] [bibtex-entry] [Slides]
• C. Bodei, P. Degano, C. Priami and N. Zannone. An Enhanced CFA for Security Policies. In Proceedings of the Workshop on Issues on the Theory of Security (WITS'03), pages 131-145, 2003. [PostScript] [bibtex-entry]

National Conferences and Workshops

• V. Bryl, P. Mello, M. Montali, P. Torroni and N. Zannone. Extending Agent-oriented Requirements with Declarative Business Processes: a Computational Logic-based Approach. In Proceedings of the 22nd Convegno Italiano di Logica Computazionale (CILC'07), 2007. [Pdf] [bibtex-entry]

Poster

• N. Zannone. A Methodology for Security Requirements Engineering. In Proceedings of 2K* symposium - 2005 edition, 2005. [Pdf]

Others

• N. Zannone. A Requirements Engineering Methodology for Trust, Security, and Privacy. PhD Thesis. Department of Information and Communication Technology, University of Trento, March 2007.[bibtex-entry]
• N. Zannone. Un'Analisi Simbolica per la Verifica di Protocolli di Autenticazione a Stati Infiniti. Master Thesis. Dipartimento di Informatica, Università di Verona, Marzo 2003. [Pdf]