Formal Aspects of Security and Trust : 8th International Workshop, FAST 2011, Leuven, Belgium, September 12-14, 2011. Revised Selected Papers

by Barthe, Gilles; Datta, Anupam; Etalle, Sandro

• ISBN13: 9783642294198
• ISBN10: 3642294197
• Edition: Revised
• Format: Paperback
• Copyright: 2012-07-01
• Publisher: Springer-Verlag New York Inc

Summary

This book constitutes the thoroughly refereed post-conference proceedings of the 8th International Workshop on Formal Aspects of Security and Trust, FAST 2011, held in conjunction with the 16th European Symposium on Research in Computer Security, ESORICS 2011, in Leuven, Belgium in September 2011. The 15 revised full papers presented together with 2 invited papers were carefully reviewed and selected from 42 submissions. The papers focus on security and trust policy models; security protocol design and analysis; formal models of trust and reputation; logics for security and trust; distributed trust management systems; trust-based reasoning; digital assets protection; data protection; privacy and ID issues; information flow analysis; language-based security; security and trust aspects of ubiquitous computing; validation/analysis tools; web service security/trust/privacy; grid security; security risk assessment; and case studies.

Table of Contents

Verifying Cryptographic Code in C: Some Experience and the Csec Challenge	p. 1
Better Security and Privacy for Web Browsers: A Survey of Techniques, and a New Implementation	p. 21
Differential Privacy: On the Trade-Off between Utility and Information Leakage	p. 39
On-the-Fly Inlining of Dynamic Dependency Monitors for Secure Information Flow	p. 55
Min-Entropy Leakage of Channels in Cascade	p. 70
Secure Recharge of Disposable RFID Tickets	p. 85
Avoiding Delegation Subterfuge Using Linked Local Permission Names	p. 100
Verifiable Control Flow Policies for Java Bytecode	p. 115
Concepts and Proofs for Configuring PKCS#11	p. 131
Service Automata	p. 148
Analysing Applications Layered on Unilaterally Authenticating Protocols	p. 164
Type-Based Enforcement of Secure Programming Guidelines û Code Injection Prevention at SAP	p. 182
TBA: A Hybrid of Logic and Extensional Access Control Systems	p. 198
Diffie-Hellman without Difficulty	p. 214
Is Cryptyc Able to Detect Insider Attacks?	p. 230
Formal Analysis of Anonymity in ECC-Based Direct Anonymous Attestation Schemes	p. 245
Risk Balance in Optimistic Non-repudiation Protocols	p. 263
Author Index	p. 279
Table of Contents provided by Ingram. All Rights Reserved.