ISSE 2009 Securing Electronic Business Processes

1. Front Matter

   Pages i-xv

   PDF

2. Microsoft Sponsoring Contribution

   1. Claims and Identity: On-Premise and Cloud Solutions

      • Vittorio Bertocci

      Pages 1-13

3. Economics of Security and Identity Management

   1. Front Matter

      Pages 15-15

      PDF

   2. Measuring Information Security: Guidelines to Build Metrics

      • Eberhard von Faber

      Pages 17-26

   3. Demystifying SAP security

      • Marc Sel, Kristof Van Der Auwera

      Pages 27-36

   4. The ISACA Business Model for Information Security: An Integrative and Innovative Approach

      • Rolf von Roessing

      Pages 37-47

   5. ICT Systems Contributing to European Secure-by-Design Critical Infrastructures

      • Fabien Cavenne

      Pages 48-62

   6. ROI, Pitfalls and Best Practices with an Enterprise Smart Card Deployment

      • Philip Hoyer

      Pages 63-71

   7. A General Quality Classification System for eIDs and e-Signatures

      • Jon Ølnes, Leif Buene, Anette Andresen, Håvard Grindheim, Jörg Apitzsch, Adriano Rossi

      Pages 72-86

   8. Second Wave of Biometric ID-documents in Europe: The Residence Permit for non-EU/EEA Nationals

      • Detlef Houdeau

      Pages 87-93

4. Security Services and Large Scale Public Applications

   1. Front Matter

      Pages 95-95

      PDF

   2. User and Access Management in Belgian e-Government

      • Jos Dumortier, Frank Robben

      Pages 97-107

   3. PKI – Crawling Out of the Grave & Into the Arms of Government

      • Phil D’Angio, Panos Vassilliadas, Phaidon Kaklamanis

      Pages 108-115

   4. Entitlement Management: Ready to Enter the IdM Mainstream

      • Gerry Gebel, Alice Wang

      Pages 116-124

   5. Secure E-Mail Communication across Company Boundaries Experiences and Architectures

      • Markus Wichmann, Guido von der Heidt, Carsten Hille, Gunnar Jacobson

      Pages 125-136

   6. Voice Biometrics as a Way to Self-service Password Reset

      • Bernd Hohgräfe, Sebastian Jacobi

      Pages 137-144

   7. Security Requirements Specification in Process-aware Information Systems

      • Michael Menzel, Ivonne Thomas, Benjamin Schüler, Maxim Schnjakin, Christoph Meinel

      Pages 145-154

5. Privacy, Data Protection and Awareness

   1. Front Matter

      Pages 155-155

      PDF

   2. Simple & Secure: Attitude and behaviour towards security and usability in internet products and services at home

      • Reinder Wolthuis, Gerben Broenink, Frank Fransen, Sven Schultz, Arnout de Vries

      Pages 157-168

   3. Social Engineering hits Social Commerce

      • Werner Degenhardt, Johannes Wiele

      Pages 169-176

This book presents the most interesting talks given at ISSE 2009 – the forum for the inter-disciplinary discussion of how to adequately secure electronic business processes.
The topics include:
- Economics of Security and Identity Management
- Security Services and Large Scale Public Applications
- Privacy and Data Protection and Awareness Raising
- Standards and Technical Solutions
- Secure Software, Trust and Assurance
Adequate information security is one of the basic requirements of all electronic business processes. It is crucial for effective solutions that the possibilities offered by security technology can be integrated with the commercial requirements of the applications. The reader may expect state-of-the-art: best papers of the Conference ISSE 2009.

Content/noch mit MS abgleichen!!
Economics of Security and Identity Management - Security Services and Large Scale Public Applications - Privacy and Data Protection and Awareness Raising - Standards and Technical Solutions - Secure Software, Trust and Assurance

Target Group:
- Developers of Electronic Business Processes
- IT Managers
- IT Security Experts
- Researchers
Wolfgang Schneider: Deputy Institute Director, Fraunhofer Institute SIT

Abouth the Editors:
Norbert Pohlmann: Professor for System and Information Security at the University of Applied Sciences in Gelsenkirchen
Helmut Reimer: Senior Consultant, TeleTrusT

• Awareness Raising
• Economics of Security
• Large Scale Public Applications
• Privacy and Data Protection
• Secure Software
• Security Services
• Standards and technical Solutions
• Trust and Assurance
• business process
• identity management
• information privacy
• information security

Norbert Pohlmann: Professor for System and Information Security at the University of Applied Sciences in Gelsenkirchen
Helmut Reimer: Senior Consultant, TeleTrusT
Wolfgang Schneider: Deputy Institute Director, Fraunhofer Institute SIT

Policies and ethics