Data and Applications Security XXII: 22nd Annual Ifip Wg 11.3 Working Conference on Data and Applications Security London, Uk, July 13-16, 2008, Proceedings

by Atluri, Vijay

• ISBN13: 9783540705666
• ISBN10: 354070566X
• Format: Paperback
• Copyright: 2008-08-03
• Publisher: Springer-Verlag New York Inc

Summary

This book constitutes the refereed proceedings of the 22nd Annual IFIP WG 11.3 Working Conference on Data and Applications Security held in London, UK, in July 2008.The 22 revised full papers presented together with 1 keynote lecture and 1 invited talk were carefully reviewed and selected from 56 submissions. The papers are organized in topical sections on access control, audit and logging, privacy, systems security, certificate management, trusted computing platforms, security policies and metrics, as well as Web and pervasive systems.

Table of Contents

Dynamic Meta-level Access Control in SQL	p. 1
On the Formal Analysis of a Spatio-temporal Role-Based Access Control Model	p. 17
A Unified Audit Expression Model for Auditing SQL Queries	p. 33
A New Approach to Secure Logging	p. 48
Security, Functionality and Scale?	p. 64
P4A: A New Privacy Model for XML	p. 65
Privacy-Aware Collaborative Access Control in Web-Based Social Networks	p. 81
A Privacy-Preserving Ticketing System	p. 97
The Analysis of Windows Vista Disk Encryption Algorithm	p. 113
Shared and Searchable Encrypted Data for Untrusted Servers	p. 127
Secure Construction of Contingency Tables from Distributed Data	p. 144
Web Services Security: Techniques and Challenges	p. 158
Empirical Analysis of Certificate Revocation Lists	p. 159
Using New Tools for Certificate Repositories Generation in MANETs	p. 175
Exclusive Strategy for Generalization Algorithms in Micro-data Disclosure	p. 190
Protecting the Publishing Identity in Multiple Tuples	p. 205
Panel Session: What Are the Key Challenges in Distributed Security?	p. 219
On the Applicability of Trusted Computing in Distributed Authorization Using Web Services	p. 222
Sharing but Protecting Content Against Internal Leakage for Organisations	p. 238
Regulating Exceptions in Healthcare Using Policy Spaces	p. 254
Towards Automation of Testing High-Level Security Properties	p. 268
An Attack Graph-Based Probabilistic Security Metric	p. 283
An Opinion Model for Evaluating Malicious Activities in Pervasive Computing Systems	p. 297
DIWeDa - Detecting Intrusions in Web Databases	p. 313
Securing Workflows with XACML, RDF and BPEL	p. 330
Author Index	p. 347
Table of Contents provided by Blackwell. All Rights Reserved.