New Approaches for Security, Privacy and Trust in Complex Environments

by Venter, Hein; Eloff, Mariki; Labuschagne, Les; Eloff, Jan; Von Solms, Rossouw

• ISBN13: 9780387723662
• ISBN10: 0387723668
• Format: Hardcover
• Copyright: 2007-05-11
• Publisher: Springer-Verlag New York Inc

Summary

The current IT environment deals with novel, complex approaches such as information privacy, trust, digital forensics, management, and human aspects. This modern environment challenges the whole information security research community to focus on interdisciplinary and holistic approaches, while retaining the benefit of previous research efforts. This volume includes papers offering research contributions that focus both on access control in complex environments as well as other aspecs of computer security and privacy.

Table of Contents

Digital Forensics
FORSIGS: Forensic Signature Analysis of the Hard Drive for Multimedia File Fingerprints	p. 1
Digital Forensic Readiness as a Component of Information Security Best Practice	p. 13
Human-Computer Interaction I
Value creation and Return on Security Investments (ROSI)	p. 25
Usability and Security of Personal Firewalls	p. 37
Computer-Based Trust
Trusted Ticket Systems and Applications	p. 49
Trust Evaluation for Web Applications based on Behavioral Analysis	p. 61
Information Security Management I
Improving the Information Security Model by using TFI	p. 73
Ontological Mapping of Common Criteria's Security Assurance Requirements	p. 85
Network Security I
Management of Exceptions on Access Control Policies	p. 97
Security Analysis of Two Ultra-Lightweight RFID Authentication Protocols	p. 109
Information Security Management II
Exploratory Survey on an Evaluation Model for a Sense of Security	p. 121
Employees' Adherence to Information Security Policies: An Empirical Study	p. 133
Network Security II
Phishing in the Wireless: Implementation and Analysis	p. 145
Secure Path-Key Revocation for Symmetric Key Pre-distribution Schemes in Sensor Networks	p. 157
Access Control I
A Credential-Based System for the Anonymous Delegation of Rights	p. 169
Development and Application of a Proxy Server for Transparently, Digitally Signing E-Learning Content	p. 181
Human-Computer Interaction II
Identity Theft - Empirical Evidence from a Phishing Exercise	p. 193
A Practical Usability Evaluation of Security Features in End-User Applications	p. 205
Intrusion Detection Systems
Personal Anomaly-based Intrusion Detection Smart Card Using Behavioural Analysis	p. 217
A Survey of Bots Used for Distributed Denial of Service Attacks	p. 229
Access Control II
A Hybrid PKI-IBC Based Ephemerizer System	p. 241
Keystroke Analysis for Thumb-based Keyboards on Mobile Devices	p. 253
Information Privacy I
Security Remarks on a Convertible Nominative Signature Scheme	p. 265
Using Payment Gateways to Maintain Privacy in Secure Electronic Transactions	p. 277
Access Control III
A Role-Based Architecture for Seamless Identity Management and Effective Task Separation	p. 289
Extending Role Based Access Control Model for Distributed Multidomain Applications	p. 301
Information Privacy II
A Middleware Architecture for Integrating Privacy Preferences and Location Accuracy	p. 313
Enabling Privacy of Real-Life LBS: A Platform for Flexible Mobile Service Provisioning	p. 325
Access Control IV
Crafting Web Counters into Covert Channels	p. 337
OPA: Onion Policy Administration Model - Another approach to manage rights in DRM	p. 349
Security Services
Non-Repudiation in Internet Telephony	p. 361
FirePatch: Secure and Time-Critical Dissemination of Software Patches	p. 373
Access Control V
An Experimental Evaluation of Multi-Key Strategies for Data Outsourcing	p. 385
Building a Distributed Semantic-aware Security Architecture	p. 397
Trust and Intrusion Detection Systems
Using Trust to Resist Censorship in the Presence of Collusion	p. 409
Evaluating the Effects of Model Generalization on Intrusion Detection Performance	p. 421
Keynote paper
Modernising MAC: New Forms for Mandatory Access Control in an Era of DRM	p. 433
IFIP WG 9.6/11.7 - IT Misuse and the Law & the NoE "Future of Identity in the Information Society" (FIDIS) - Workshop on Security and Control of Identity in Society
Covert Identity Information in Direct Anonymous Attestation (DAA)	p. 443
Safeguarding Personal Data using Rights Management in Distributed Applications	p. 449
Identification Now and in the Future: Social Grant Distribution Process in South Africa	p. 457
Hard-drive Disposal and Identity Fraud	p. 461
An analysis of security and privacy issues relating to RFID enabled ePassports	p. 467
IFIP WG 11.1/11.8 Workshop on Fostering Knowledge and Skills for Manageable Information Security
Toward User Evaluation of IT Security Certification Schemes: A Preliminary Framework	p. 473
Teaching of Information Security in the "Health Care and Nursing" Postgraduate program	p. 479
Remote Virtual Information Assurance Network	p. 485
Certifying the Computer Security Professional Using the Project Management Institute's PMP Model	p. 491
Author Index	p. 497
Table of Contents provided by Ingram. All Rights Reserved.