New Approaches for Security, Privacy and Trust in Complex Environments

1. Front Matter

   Pages I-XV

   PDF

2. Digital Forensics

   1. FORSIGS: Forensic Signature Analysis of the Hard Drive for Multimedia File Fingerprints

      • John Haggerty, Mark Taylor

      Pages 1-12

   2. Digital Forensic Readiness as a Component of Information Security Best Practice

      • C P Grobler, C P Louwrens

      Pages 13-24

3. Human-Computer Interaction I

   1. Value creation and Return On Security Investments (ROSI)

      • Christer Magnusson, Josef Molvidsson, Sven Zetterqvist

      Pages 25-35

   2. Usability and Security of Personal Firewalls

      • Almut Herzog, Nahid Shahmehri

      Pages 37-48

4. Computer-Based Trust

   1. Trusted Ticket Systems and Applications

      • Nicolai Kuntze, Andreas U. Schmidt

      Pages 49-60

   2. Trust Evaluation for Web Applications based on Behavioral Analysis

      • Luiz Fernando Rust C. Carmo, Breno G. de Oliveira, Augusto C. Braga

      Pages 61-72

5. Information Security Management I

   1. Improving the Information Security Model by using TFI

      • Rose-Mharie Åhlfeldt, Paolo Spagnoletti, Guttorm Sindre

      Pages 73-84

   2. Ontological Mapping of Common Criteria’s Security Assurance Requirements

      • Andreas Ekclhart, Stefan Fenz, Gernot Goluch, Edgar Weippl

      Pages 85-95

6. Network Security I

   1. Management of Exceptions on Access Control Policies

      • J. G. Alfaro, F. Cuppens, N. Cuppens-Boulahia

      Pages 97-108

   2. Security Analysis of Two Ultra-Lightweight RFID Authentication Protocols

      • Ticyan Li, Guilin Wang

      Pages 109-120

7. Information Security Management II

   1. Exploratory survey on an Evaluation Model for a Sense of Security

      • Natsuko Hikage, Yuko Murayama, Carl Hauser

      Pages 121-132

   2. Employees’ Adherence to Information Security Policies: An Empirical Study

      • Mikko Siponen, Seppo Pahnila, Adam Mahmood

      Pages 133-144

8. Network Security II

   1. Phishing in the Wireless: Implementation and Analysis

      • Ivan Martinovic, Frank A. Zdarsky, Adam Bachorek, Christian Jung, Jens B. Schmitt

      Pages 145-156

   2. Secure Path-Key Revocation for Symmetric Key Pre-distribution Schemes in Sensor Networks

      • Tyler Moore, Jolyon Clulow

      Pages 157-168

9. Access Control I

   1. A Credential-Based System for the Anonymous Delegation of Rights

      • Liesje Demuynck, Bart De Decker, Wouter Joosen

      Pages 169-180

   2. Development and Application of a Proxy Server for Transparently, Digitally Signing E-Learning Content

      • Christian J. Eibl, S H Basie von Solms, Sigrid Schubert

      Pages 181-192

10. Human-Computer Interaction II

    1. Identity Theft — Empirical evidence from a Phishing Exercise

       • T Steyn, H A Kruger, L Drevin

       Pages 193-203

    2. A Practical Usability Evaluation of Security Features in End-User Applications

       • S. M. Furnell, D. Katsabas, P. S. Dowland, F. Reid

       Pages 205-216

11. Intrusion Detection Systems

    1. Personal Anomaly-based Intrusion Detection Smart Card Using Behavioural Analysis

       • A. M. Rossudowski, H. S. Venter, J. H. P. Eloff

       Pages 217-228

This book contains the Proceedings of the 22nd IFIP TC-11 International Information Security Conference (IFIP/SEC 2007) on "New Approaches for Security, Privacy and Trust in Complex Environments" held in Sandton, South Africa from 14 to 16 May 2007. The IFIP/SEC conferences are the flagship events of TC-11. In May 1995 South Africa for the first time hosted an IFIP/SEC conference in Cape Town. Now, twelve years later, we are very pleased to have succeeded in our bid to once again present the IFIP/SEC conference in South Africa. The current IT environment deals with novel, complex approaches such as information privacy, trust, digital forensics, management, and human aspects. This modem environment challenges the whole information security research community to focus on interdisciplinary and holistic approaches, whilst retaining the benefit of previous research efforts. Papers offering research contributions that focus both on access control in complex environments and on other aspects of computer security and privacy were solicited for submission to IFIP/SEC 2007. A total of 107 submissions were received, which were all reviewed by at least three members of the international programme committee.

• Access Control
• Computer-Based Trust
• Digital Forensics
• Firewall
• Human Computer Interaction
• Information Security Management
• Intrusion Detection Systems
• Network Security
• Radio-Frequency Identification (RFID)
• data security
• identity management
• networks
• privacy

• University of Pretoria, South Africa

  Hein Venter, Jan Eloff

• University of South Africa, South Africa

  Mariki Eloff

• University of Johannesburg, South Africa

  Les Labuschagne

• Nelson Mandela Metropolitan University, South Africa

  Rossouw Solms

Policies and ethics