English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Tools annual

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Tools monthly

Global: Zendy Plus monthly

Presents the access of premium content as premium feature

Premium Content

Global: Zendy Plus annual

Global: Zendy Free Plan

The last years have seen an increase of Man-at-the-End (MATE) attacks againstsoftware applications, both in number and severity. However, MATE softwareprotections are dominated by fuzzy concepts and techniques, withsecurity-through-obscurity omnipresent in the field. This paper presents arationale for adopting and standardizing the protection of software as a riskmanagement process according to the NIST SP800-39 approach. We examine therelevant aspects of formalizing and automating the activities in this processin the context of MATE software protection. We highlight the open issues thatthe research community still has to address. We discuss the benefits that suchan approach can bring to all stakeholders. In addition, we present a Proof ofConcept (PoC) of a decision support system that automates many activities inthe risk analysis methodology towards the protection of software applications.Despite still being a prototype, the PoC validation with industry expertsindicated that several aspects of the proposed risk management process canalready be formalized and automated with our existing toolbox, and that it canactually assist decision making in industrially relevant settings

Man-at-the-End Software Protection as a Risk Analysis Process