Secure systems are fiercely difficult to obtain-technical, procedural, human, and managerial aspects must be contemplated in a deep, yet holistic approach, which is a complex task even for experienced information security practitioners. Emerging information security "Assurance Cases" methodologies, such as the military NATO AEP-67, promise (time) effective practices for obtaining secure systems, making it a more reproducible process. In this paper we are the first to report the effectiveness of the Assurance Case methodology as a framework for teaching information security to both individuals and teams.

No abstract

This paper describes the design of an eUART (enhanced Universal Asynchronous Receiver and Transmitter) that has been designed as an extension module for the SPEAR processor in order to interact with a TTP/A (Time-Triggered Protocol Class A) or LIN (Local Interconnect Network) network. The eUART is able to automatically synchronize its baud rate using a synchronization pattern from the message sender. Furthermore, to enhance the robustness ofthe communication, the eUART module is equipped with a filter state-machine and provides I6fold oversampling. The intepretation of the samples can be configured in order to optimize towards fault detection or availabilitj. The paper describes the capabilities and limits of this approach and shows the advantages ofthe eUART when used~for real-time communication.