Computer Security – ESORICS 2011

1. Front Matter

   PDF

2. Wireless Security

   1. Secure Localization Using Dynamic Verifiers

      • Nashad A. Safa, Saikat Sarkar, Reihaneh Safavi-Naini, Majid Ghaderi

      Pages 1-20

   2. WiFiHop - Mitigating the Evil Twin Attack through Multi-hop Detection

      • Diogo Mónica, Carlos Ribeiro

      Pages 21-39

   3. Investigation of Signal and Message Manipulations on the Wireless Channel

      • Christina Pöpper, Nils Ole Tippenhauer, Boris Danev, Srdjan Capkun

      Pages 40-59

3. Web Security I

   1. Protecting Private Web Content from Embedded Scripts

      • Yuchen Zhou, David Evans

      Pages 60-79

   2. Preventing Web Application Injections with Complementary Character Coding

      • Raymond Mui, Phyllis Frankl

      Pages 80-99

   3. Automatic and Precise Client-Side Protection against CSRF Attacks

      • Philippe De Ryck, Lieven Desmet, Wouter Joosen, Frank Piessens

      Pages 100-116

4. Web Security II

   1. Timing Is Everything: The Importance of History Detection

      • Gunnar Kreitz

      Pages 117-132

   2. Reclaiming the Blogosphere, TalkBack: A Secure LinkBack Protocol for Weblogs

      • Elie Bursztein, Baptiste Gourdin, John C. Mitchell

      Pages 133-149

   3. A Systematic Analysis of XSS Sanitization in Web Application Frameworks

      • Joel Weinberger, Prateek Saxena, Devdatta Akhawe, Matthew Finifter, Richard Shin, Dawn Song

      Pages 150-171

5. Forensics, Biometrics and Software Protection

   1. Who Wrote This Code? Identifying the Authors of Program Binaries

      • Nathan Rosenblum, Xiaojin Zhu, Barton P. Miller

      Pages 172-189

   2. Secure and Efficient Protocols for Iris and Fingerprint Identification

      • Marina Blanton, Paolo Gasti

      Pages 190-209

   3. Linear Obfuscation to Combat Symbolic Execution

      • Zhi Wang, Jiang Ming, Chunfu Jia, Debin Gao

      Pages 210-226

   4. DriverGuard: A Fine-Grained Protection on I/O Flows

      • Yueqiang Cheng, Xuhua Ding, Robert H. Deng

      Pages 227-244

6. Access Control

   1. Time-Storage Trade-Offs for Cryptographically-Enforced Access Control

      • Jason Crampton

      Pages 245-261

   2. Socially Constructed Trust for Distributed Authorization

      • Steve Barker, Valerio Genovese

      Pages 262-277

   3. Fully Secure Multi-authority Ciphertext-Policy Attribute-Based Encryption without Random Oracles

      • Zhen Liu, Zhenfu Cao, Qiong Huang, Duncan S. Wong, Tsz Hon Yuen

      Pages 278-297

7. Cryptography and Protocol Analysis

   1. How to Aggregate the CL Signature Scheme

      • Dominique Schröder

      Pages 298-314

   2. Key Exchange in IPsec Revisited: Formal Analysis of IKEv1 and IKEv2

      • Cas Cremers

      Pages 315-334

   3. Adapting Helios for Provable Ballot Privacy

      • David Bernhard, Véronique Cortier, Olivier Pereira, Ben Smyth, Bogdan Warinschi

      Pages 335-354

This book constitutes the refereed proceedings of the 16th European Symposium on Computer Security, ESORICS 2011, held in Leuven, Belgium, in September 2011. The 36 papers included in the book were carefully reviewed and selected from 155 papers. The articles are organized in topical sections on wireless security; Web security; forensics, biometrics and software protection; access control; cryptography and protocol analysis; information flow, side channels, and vulnerability analysis; usability, trust, and economics of security and privacy; and privacy.

• anonymity
• elliptic curve cryptography
• malware analysis
• sandbox
• software obfuscation
• algorithm analysis and problem complexity

• MSIS Department and CIMIC, Rutgers University, Newark, USA

  Vijay Atluri

• K.U. Leuven ESAT-COSIC, Leuven-Heverlee, Belgium

  Claudia Diaz

Policies and ethics