Future Challenges in Security and Privacy for Academia and Industry : 26th IFIP TC 11 International Information Security Conference, SEC 2011, Lucerne, Switzerland, June 7-9, 2011, Proceedings

by Camenisch, Jan; Fischer-habner, Simone; Murayama, Yuko; Portmann, Armand; Rieder, Carlos

• ISBN13: 9783642214233
• ISBN10: 3642214231
• Edition: 1st
• Format: Hardcover
• Copyright: 2011-06-21
• Publisher: Springer-Verlag New York Inc

Summary

This book constitutes the refereed proceedings of the 26th IFIP TC 11 International Information Security Conference, SEC 2011, held in Lucerne, Switzerland, in June 2011. The 24 revised full papers presented together with a keynote talk were carefully reviewed and selected from 100 submissions. The papers are organized in topical sections on malware, information flow and DoS attacks, authentication, network security and security protocols, software security, policy compliance and obligations, privacy attacks and privacy-enhancing technologies, risk analysis and security metrics, and intrusion detection.

Table of Contents

Kristian Beckman Award Keynote
Patience, Persistence, Faith: Evolving the Gold Standard in Privacy and Data Protection	p. 1
Malware, Information Flow and DoS Attacks
iSAM: An iPhone Stealth Airborne Malware	p. 17
TCP Ack Storm DoS Attacks	p. 29
Detecting Hidden Storage Side Channel Vulnerabilities in Networked Applications	p. 41
Authentication
Breaking reCAPTCHA: A Holistic Approach via Shape Recognition	p. 56
From Multiple Credentials to Browser-Based Single Sign-On: Are We More Secure?	p. 68
Quantifying the Effect of Graphical Password Guidelines for Better Security	p. 80
Network Security and Security Protocols
A Case Study in Practical Security of Cable Networks	p. 92
Ceremony Analysis: Strengths and Weaknesses	p. 104
Preventing Board Flooding Attacks in Coercion-Resistant Electronic Voting Schemes	p. 116
Piracy Protection for Streaming Content in Home Networks	p. 128
Software Security
JITDefende: A Defense against JIT Spraying Attacks	p. 142
Retrofitting Security in COTS Software with Binary Rewriting	p. 154
Generating Optimised and Formally Checked Packet Parsing Code	p. 173
Policy Compliance and Obligations
Organizational Power and Information Security Rule Compliance	p. 185
Delegation of Obligations and Responsibility	p. 197
Distributed Security Policy Conformance	p. 210
Privacy Attacks and Privacy-Enhancing Technologies
Scalable Privacy-Preserving Data Mining with Asynchronously Partitioned Datasets	p. 223
Privacy-Enhanced Web-Based Event Scheduling with Majority Agreement	p. 235
Analyzing Key-Click Patterns of PIN Input for Recognizing VoIP Users	p. 247
Risk Analysis and Security Metrics
Problem Analysis of Traditional IT-Security Risk Assessment Methods - An Experience Report from the Insurance and Auditing Domain	p. 259
On Computing Enterprise IT Risk Metrics	p. 271
A Kolmogorov Complexity Approach for Measuring Attack Path Complexity	p. 281
Intrusion Detection
Extending LSCs for Behavioral Signature Modeling	p. 293
Detecting Illegal System Calls Using a Data-Oriented Detection Model	p. 305
Appendix
IFIP Technical Committee 11: Security and Privacy Protection in Information Processing Systems	p. 317
Author Index	p. 327
Table of Contents provided by Ingram. All Rights Reserved.