ICT Systems Security and Privacy Protection

1. Front Matter

   Pages I-XVI

   PDF

2. Privacy

   1. Front Matter

      Pages 1-1

      PDF

   2. O-PSI: Delegated Private Set Intersection on Outsourced Datasets

      • Aydin Abadi, Sotirios Terzis, Changyu Dong

      Pages 3-17

   3. Flexible and Robust Privacy-Preserving Implicit Authentication

      • Josep Domingo-Ferrer, Qianhong Wu, Alberto Blanco-Justicia

      Pages 18-34

   4. Towards Relations Between the Hitting-Set Attack and the Statistical Disclosure Attack

      • Dang Vinh Pham, Dogan Kesdogan

      Pages 35-50

   5. POSN: A Personal Online Social Network

      • Esra Erdin, Eric Klukovich, Gurhan Gunduz, Mehmet Hadi Gunes

      Pages 51-66

   6. Strategic Noninterference

      • Wojciech Jamroga, Masoud Tabatabaei

      Pages 67-81

   7. Verifying Observational Determinism

      • Jaber Karimpour, Ayaz Isazadeh, Ali A. Noroozi

      Pages 82-93

3. Web Security

   1. Front Matter

      Pages 95-95

      PDF

   2. Cache Timing Attacks Revisited: Efficient and Repeatable Browser History, OS and Network Sniffing

      • Chetan Bansal, Sören Preibusch, Natasa Milic-Frayling

      Pages 97-111

   3. Enforcing Usage Constraints on Credentials for Web Applications

      • Jinwei Hu, Heiko Mantel, Sebastian Ruhleder

      Pages 112-125

   4. A Survey of Alerting Websites: Risks and Solutions

      • Amrit Kumar, Cédric Lauradoux

      Pages 126-141

4. Access Control, Trust and Identity Management

   1. Front Matter

      Pages 143-143

      PDF

   2. A Generalization of ISO/IEC 24761 to Enhance Remote Authentication with Trusted Product at Claimant

      • Asahiko Yamada

      Pages 145-158

   3. Enhancing Passwords Security Using Deceptive Covert Communication

      • Mohammed H. Almeshekah, Mikhail J. Atallah, Eugene H. Spafford

      Pages 159-173

   4. Information Sharing and User Privacy in the Third-Party Identity Management Landscape

      • Anna Vapen, Niklas Carlsson, Anirban Mahanti, Nahid Shahmehri

      Pages 174-188

   5. An Iterative Algorithm for Reputation Aggregation in Multi-dimensional and Multinomial Rating Systems

      • Mohsen Rezvani, Mohammad Allahbakhsh, Lorenzo Vigentini, Aleksandar Ignjatovic, Sanjay Jha

      Pages 189-203

   6. A Comparison of PHY-Based Fingerprinting Methods Used to Enhance Network Access Control

      • Timothy J. Carbino, Michael A. Temple, Juan Lopez Jr.

      Pages 204-217

   7. Model-Driven Integration and Analysis of Access-control Policies in Multi-layer Information Systems

      • Salvador Martínez, Joaquin Garcia-Alfaro, Frédéric Cuppens, Nora Cuppens-Boulahia, Jordi Cabot

      Pages 218-233

5. Network Security

   1. Front Matter

      Pages 235-235

      PDF

This book constitutes the refereed proceedings of the 30th IFIP TC 11 International Information Security and Privacy Conference, SEC 2015, held in Hamburg, Germany, in May 2015. The 42 revised full papers presented were carefully reviewed and selected from 212 submissions. The papers are organized in topical sections on privacy, web security, access control, trust and identity management, network security, security management and human aspects of security, software security, applied cryptography, mobile and cloud services security, and cyber-physical systems and critical infrastructures security.

• Access control
• Attack trees
• Authentication
• Cloud security
• Critical infrastructures
• Cryptography
• Cyber-physical systems
• Honey networks
• Identity management
• Mobile security
• Network security
• Password security
• Privacy enhancing technologies
• Software security
• Trust management
• Web application security

• Universität Hamburg, Hamburg, Germany

  Hannes Federrath

• Technische Universität Hamburg-Harburg, Hamburg, Germany

  Dieter Gollmann

Policies and ethics