Abstract:THE proliferation of computers in society has meant that organizational and personal assets are increasingly stored and manipulated by software systems. The scale of misuse of these assets has also increased because of their worldwide accessibility through the Internet and the automation of systems. Security is concerned with the prevention of such misuse. While no system can be made completely secure, understanding the context in which a system will be deployed and used, the risks and threats of its misuse, and the systematic development of its software are increasingly recognized as critical to its success. The cross-fertilization of systems development techniques from software engineering and security engineering offers opportunities to minimize duplication of research efforts in both areas and, more importantly, to bridge gaps in our knowledge of how to develop secure softwareintensive systems. The aim of this special issue is to publish novel research work that draws upon software engineering to develop secure systems more effectively. Its scope covers the processes, techniques, technology, people, and knowledge bases that have, or need, the capability to contribute to producing more secure software-intensive systems. In response to the call for papers for this special section, we received 41 submissions, regarding software engineering issues addressing the requirements, design, coding, testing, and maintenance of secure software systems. Each paper was reviewed by at least three expert referees. After two rounds of reviewing, we selected six papers which focus on requirements and design of secure software. The first two papers address both security and privacy requirements, making use of varying degrees of formalism to represent and analyze those requirements. “Analyzing Regulatory Rules for Privacy and Security Requirements” by Travis Breaux and Annie Anton addresses the often overwhelming complexity of regulatory requirements of financial, healthcare, and other software. The formalism and process presented glean enforceable security policy directly from the regulatory statutes. “Privately Finding Specifications” by Westley Weimer and Nina Mishra deals with one of the daunting realities of data sharing, the fact that it is often an all or nothing proposition. This paper describes an attempt to mitigate oversharing in the discovery of software specifications by perturbing program traces. The careful addition of noise into the traces allows specification discovery while preventing the exposure of other sensitive aspects of the program. The next three papers consider how the design of software systems can be realized through security infrastructure. “Semantics-Based Design for Secure Web Services” by Massimo Bartoletti, Pierpaolo Degano, Gian Luigi Ferrari, and Roberto Zunino considers how to develop secure Web services by formally reasoning about policy compliance over historical behaviors. In essence, Web services “contract” (compose) with those systems that respect policies of interest, thereby ensuring globally secure behavior. “Provable Protection against Web Application Vulnerabilities Related to Session Data Dependencies” by Lieven Desmet, Pierre Verbaeten, Wouter Joosen, and Frank Piessens acknowledge recent advances in secure Web application design and development that have made online systems safer. The techniques detailed in this paper prevent misuse of often loosely coupled session dependencies in and among Web applications. “WASP: Protecting Web Applications Using Positive Tainting and Syntax-Aware Evaluation” by William Halfond, Alessandro Orso, and Panagiotis Manolios presents a novel method for preventing SQL injection attacks—attacks in which the adversary inserts arbitrary database query code into an application by manipulating input strings. The paper uses language techniques to dynamically annotate ”trusted” strings, thereby avoiding any use of potentially unsafe strings. The final paper presents a method of certifying that a software system meets its security requirements. “Applying Formal Methods to a Certifiably Secure Software System” by Connie Heitmeyer, Myla Archer, Elizabeth Leonard, and John McLean adds to recent advances that are beginning to make this costly and complex process of formal verification tractable. This paper presents a novel certification method that uses formalized security models to construct a mechanized proof of security over a real-world target system. The papers in this special section demonstrate the strength of research in the area of engineering secure software. If the range and strength of the submissions to the special section are anything to go by, the area is healthy and vibrant and we fully expect many of the submissions that IEEE TRANSACTIONS ON SOFTWARE ENGINEERING, VOL. 34, NO. 1, JANUARY/FEBRUARY 2008 3

Response of Growth of Mulberry and Birch under Three Soil Types to Simulated Flooding in the Three Gorges Reservoir Region

Photosynthetic responses of the riparian plant Arundinella anomala Steud. in Three Gorges reservoir region as affected by simulated flooding

Ebola threat eases

Morphological, Physiological, and Biochemical Composition of Mulberry (Morus spp.) under Drought Stress

Assessing leaf physiological traits in response to flooding among dominant riparian herbs along the Three Gorges Dam in China

Runoff generation characteristics on three time scales for typical stands in Jinyun Mountain,Chongqing City

Soil stability characteristics of mulberry lands at hydro-fluctuation belt in the Three Gorges Reservoir area, China

Physiological and comparative transcriptome analysis of the response and adaptation mechanism of the photosynthetic function of mulberry (Morus alba L.) leaves to flooding stress

Flooding responses of eight tree species introduced from America.

Different Phenotypic, Photosynthetic, and Physiological Responses to Flooding between Q. nuttallii and Q. palustris

Morphological Responses to Different Flooding Regimes in Carex Brevicuspis

Growth Responses and Non-Structural Carbohydrates in Three Wetland Macrophyte Species Following Submergence and De-Submergence

Nutrient Inputs Alleviate Negative Effects of Early and Subsequent Flooding on Growth of Polygonum hydropiper With the Aid of Adventitious Roots

What Drives the Morphological Traits of Stress-Tolerant Plant Cynodon Dactylon in a Riparian Zone of the Three Gorges Reservoir, China

The effect of hydrological regimes on the concentrations of nonstructural carbohydrates and organic acids in the roots of Salix matsudana in the Three Gorges Reservoir, China

Influence of soil characteristics on physiological and growth responses of Cytharexyllum myrianthum Cham. (Verbenaceae) to flooding

Physiological mechanisms for plant distribution pattern: responses to flooding and drought in three wetland plants from Dongting Lake, China

Responses of leaf functional traits to different hydrological regimes and leaf economics spectrum in the water level fluctuation zone of Three Gorges Reservoir, China

Response and Environmental Adaptation of Plant Community to Periodic Flooding in the Riparian Zone of Three Gorges Reservoir, China

Guest Editors' Introduction: Special Section on Software Engineering for Secure Systems

Sizes of Mn-binding sites in spinach thylakoids.