@article{JRC33466, address = {New York (United States of America)}, year = {2006}, author = {Masera M and Bloomfield R and Guerra S and Miller A and Weinstock C}, abstract = {The paper presents the constitution and results of an international working group on Assurance Cases for Security. The need to understand risks isn’t just a safety issue: organizations must know their risks and be able to communicate and address them for multiple stakeholders, from the boardroom to the back office and beyond. To address these additional sources of risk, researchers are generalizing the ideas behind the safety case into the assurance case. An international community has begun to form around this issue and the challenge of moving from rhetoric to reality. In this article, it is outlined what the international group of experts, spanning various disciplines in safety, security, reliability, and critical infrastructure, been doing with the International Working Group on Assurance Cases (for Security), what it hopes to achieve, and where it will go next. }, title = {International Working Group on Assurance Cases (for Security)}, type = {}, url = {}, volume = {4}, number = {3}, journal = {IEEE SECURITY & PRIVACY}, pages = {64-66}, issn = {}, publisher = {IEEE COMPUTER SOC}, doi = {} }