Integrity and Internal Control in Information Systems VI

1. Front Matter

   Pages i-ix

   PDF

2. Refereed papers

   1. Remote Integrity Checking

      • Yves Deswarte, Jean-Jacques Quisquater, Ayda Saïdane

      Pages 1-11

   2. Automated Checking of SAP Security Permisisons

      • Sebastian Höhn, Jan Jürjens

      Pages 13-30

   3. A Formal Analysis of a Digital Signature Architecture

      • David Basin, Kunihiko Miyazaki, Kazuo Takaragi

      Pages 31-47

   4. Using Parameterized UML to Specify and Compose Access Control Models

      • Indrakshi Ray, Na Li, Dae-Kyoo Kim, Robert France

      Pages 49-65

   5. Enforcing Integrity in Multimedia Surveillance

      • Naren B. Kodali, Csilla Farkas, Duminda Wijesekera

      Pages 67-81

   6. A Learning-based Approach to Information Release Control

      • Claudio Bettini, X. Sean Wang, Sushil Jajodia

      Pages 83-105

   7. Information Security Governance using ISO 17799 and COBIT

      • Elmari Pretorius, Basie von Solms

      Pages 107-113

   8. Tracing Attacks and Restoring Integrity with Lascar

      • Alexandre Aellig, Philippe Oechslin

      Pages 115-124

   9. A Secure Multi-Sited Version Control System

      • Indrajit Ray, Junxing Zhang

      Pages 125-141

   10. Integration of Integrity Constraints in Database Federations

       • Herman Balsters, Bert de Brock

       Pages 143-158

   11. Reducing Disruption in Time-Tabled Condition Monitoring

       • Binling Jin, Suzanne M. Embury

       Pages 159-176

   12. A Service Oriented System Based Information Flow Model for Damage Assessment

       • Yanjun Zuo, Brajendra Panda

       Pages 177-194

   13. An Efficient OODB Model for Ensuring the Integrity of User-Defined Constraints

       • Belal Zaqaibeh, Hamidah Ibrahim, Ali Mamat, Md Nasir Sulaiman

       Pages 195-208

3. Invited papers

   1. From Security Culture to Effective E-Security Solutions

      • Solange Ghernaouti-Hélie

      Pages 209-218

   2. Consistent Query Answering

      • Jan Chomicki

      Pages 219-239

   3. Role of Certification in Meeting Organisation Security Requirements

      • William List

      Pages 241-248

4. Panel session

   1. Grand Challenges in Data Integrity and Quality: Panel Discussion

      • Bhavani Thuraisingham

      Pages 249-253

5. Back Matter

   Pages 255-257

   PDF

The development and integration of integrity and internal control mechanisms into information system infrastructures is a challenge for researchers, IT personnel and auditors. Since its beginning in 1997, the IICIS international working conference has focused on the following questions: what precisely do business managers need in order to have confidence in the integrity of their information systems and their data and what are the challenges IT industry is facing in ensuring this integrity; what are the status and directions of research and development in the area of integrity and internal control; where are the gaps between business needs on the one hand and research / development on the other; what needs to be done to bridge these gaps. This sixth volume of IICIS papers, like the previous ones, contains interesting and valuable contributions to finding the answers to the above questions. We want to recommend this book to security specialists, IT auditors and researchers who want to learn more about the business concerns related to integrity. Those same security specialists, IT auditors and researchers will also value this book for the papers presenting research into new techniques and methods for obtaining the desired level of integrity.

• Audit
• COBIT
• Processing
• SAP
• Unified Modeling Language (UML)
• computer science
• data security
• information processing
• information security
• information system
• object oriented design
• organization
• security

• George Mason University, Fairfax, USA

  Sushil Jajodia

• De Nederlandsche Bank NV, Amsterdam, The Netherlands

  Leon Strous

Dr. Sushil Jajodia is Professor and Chairman of the Dept. of Information and Software Engineering, and Director of the Center for Secure Information Systems at the George Mason University, Fairfax, Virginia, USA

Policies and ethics