@conference {605,
	title = {Assurance Evaluation for OSS Adoption in a Telco Context},
	booktitle = {OSS2009: Open Source Ecosystems: Diverse Communities Interacting (IFIP 2.13)},
	series = {IFIP Advances in Information and Communication Technology },
	volume = {299/2009},
	year = {2009},
	month = {2009///},
	pages = {363 - 363},
	publisher = {Springer},
	organization = {Springer},
	chapter = {37},
	abstract = {Software Assurance (SwA) is a complex concept that involves different stages of a software development process and may be defined differently depending on its focus, as for instance software quality, security, or dependability. In Computer Science, the term assurance is referred to all activities necessary to provide enough confidence that a software product will satisfy its users{\textquoteright} functional and non-functional requirements.
},
	issn = {978-3-642-02031-5},
	doi = {http://dx.doi.org/10.1007/978-3-642-02032-2_37},
	attachments = {https://flosshub.org/sites/flosshub.org/files/Assurance\%20Evaluation\%20for\%20OSS.pdf},
	author = {Ardagna, Claudio and Banzi, Massimo and Damiani, Ernesto and El Ioini, Nabil and Frati, Fulvio}
}
@conference {669,
	title = {FOCSE: An OWA-based Evaluation Framework for OS Adoption in Critical Environments},
	booktitle = {OSS2007: Open Source Development, Adoption and Innovation (IFIP 2.13)},
	series = {IFIP International Federation for Information Processing },
	volume = {234/2007},
	year = {2007},
	pages = {3-16},
	publisher = {Springer},
	organization = {Springer},
	chapter = {1},
	abstract = {While the vast majority of European and US companies increasingly use open source software for non-key applications, a much smaller number of companies have deployed it in critical areas such as security and access control. This is partly due to residual difficulties in performing and documenting the selection process of open source solutions. In this paper we describe the FOCSE metrics framework, supporting a specific selection process for security-related open source code. FOCSE is based on a set of general purpose metrics suitable for evaluating open source frameworks in general; however, it includes some specific metrics expressing security solutions{\textquoteright} capability of responding to continuous change in threats. We show FOCSE at work in two use cases about selecting two different types of security-related open source solutions, i.e. Single Sign-On and Secure Shell applications.
 },
	issn = {978-0-387-72485-0},
	doi = {http://dx.doi.org/10.1007/978-0-387-72486-7_1},
	attachments = {https://flosshub.org/sites/flosshub.org/files/FOCSE\%20\%20an\%20\%20OWA.pdf},
	author = {Ardagna, Claudio and Damiani, Ernesto and Frati, Fulvio}
}
@conference {679,
	title = {Adopting Open Source for Mission-Critical Applications: A Case Study on Single Sign-On},
	booktitle = {OSS2006: Open Source Systems (IFIP 2.13)},
	series = {IFIP International Federation for Information Processing},
	year = {2006},
	pages = {209 - 220},
	publisher = {Springer},
	organization = {Springer},
	abstract = {In this paper, we describe a specific selection process for security-related open source code, based on a methodology aimed at evaluating open source security frameworks in general and Single-Sign-On (SSO) systems in particular. Our evaluation criteria for open source security-related software include the community{\textquoteright}s timeliness of reaction against newly discovered vulnerabilities or incidents.
},
	doi = {http://dx.doi.org/10.1007/0-387-34226-5_21},
	attachments = {https://flosshub.org/sites/flosshub.org/files/Adapting\%20OS\%20for\%20Mission-critical\%20Applications.pdf},
	author = {Ardagna, Claudio and Damiani, Ernesto and Frati, Fulvio and Reale, Salvatore}
}
