Principles of Security and Trust

1. Front Matter

   Pages 1-11

   PDF

2. Invited Contribution

   1. Front Matter

      Pages 1-1

      PDF

   2. Quantitative Approaches to the Protection of Private Information: State of the Art and Some Open Challenges

      • Catuscia Palamidessi

      Pages 3-7

3. Information Flow and Security Types

   1. Front Matter

      Pages 9-9

      PDF

   2. IFC Inside: Retrofitting Languages with Dynamic Information Flow Control

      • Stefan Heule, Deian Stefan, Edward Z. Yang, John C. Mitchell, Alejandro Russo

      Pages 11-31

   3. Very Static Enforcement of Dynamic Policies

      • Bart van Delft, Sebastian Hunt, David Sands

      Pages 32-52

   4. The Foundational Cryptography Framework

      • Adam Petcher, Greg Morrisett

      Pages 53-72

   5. On the Flow of Data, Information, and Time

      • Martín Abadi, Michael Isard

      Pages 73-92

4. Risk Assessment and Security Policies

   1. Front Matter

      Pages 93-93

      PDF

   2. Pareto Efficient Solutions of Attack-Defence Trees

      • Zaruhi Aslanyan, Flemming Nielson

      Pages 95-114

   3. Analysis of XACML Policies with SMT

      • Fatih Turkmen, Jerry den Hartog, Silvio Ranise, Nicola Zannone

      Pages 115-134

5. Protocols

   1. Front Matter

      Pages 135-135

      PDF

   2. Automatically Checking Commitment Protocols in ProVerif without False Attacks

      • Tom Chothia, Ben Smyth, Chris Staite

      Pages 137-155

   3. Generalizing Multi-party Contract Signing

      • Sjouke Mauw, Saša Radomirović

      Pages 156-175

   4. Leakiness is Decidable for Well-Founded Protocols

      • Sibylle Fröschle

      Pages 176-195

   5. Abstractions for Security Protocol Verification

      • Binh Thanh Nguyen, Christoph Sprenger

      Pages 196-215

6. Hardware and Physical Security

   1. Front Matter

      Pages 217-217

      PDF

   2. Automated Backward Analysis of PKCS#11 v2.20

      • Robert Künnemann

      Pages 219-238

   3. A Safe Update Mechanism for Smart Cards

      • Kristian Beilke, Volker Roth

      Pages 239-258

   4. Discrete vs. Dense Times in the Analysis of Cyber-Physical Security Protocols

      • Max Kanovich, Tajana Ban Kirigin, Vivek Nigam, Andre Scedrov, Carolyn Talcott

      Pages 259-279

This book constitutes the refereed proceedings of the 4th International Conference on Principles of Security and Trust, POST 2015, held as part of the European Joint Conferences on Theory and Practice of Software, ETAPS 2015, in London, UK, in April 2015. The 17 regular papers presented in this volume were carefully reviewed and selected from 57 submissions. In addition, one invited talk is included. The papers have been organized in topical sections on information flow and security types, risk assessment and security policies, protocols, hardware and physical security and privacy and voting.

• Access Control
• Anonymity
• Authentication
• Availability
• Cloud Security
• Confidentiality
• Crypto Foundations
• Formal Security Models
• Information Flow
• Languages For Security
• Malicious Code
• Models and Policies
• Privacy
• Provenance
• Reputation and Trust
• Risk Assessment
• Security Architectures
• Security Protocols
• Trust Management
• Web Security

• Ca' Foscari University, Venice, Italy

  Riccardo Focardi

• Cornell University, Ithaca, USA

  Andrew Myers

Policies and ethics