Information Systems Security

1. Front Matter

   PDF

2. Invited Talks

   1. Adversarial and Uncertain Reasoning for Adaptive Cyber Defense: Building the Scientific Foundation

      • George Cybenko, Sushil Jajodia, Michael P. Wellman, Peng Liu

      Pages 1-8

   2. SNIPS: A Software-Defined Approach for Scaling Intrusion Prevention Systems via Offloading

      • Victor Heorhiadi, Seyed Kaveh Fayaz, Michael K. Reiter, Vyas Sekar

      Pages 9-29

3. Contributed Papers

   1. Security Inferences

      1. Inference-Proof Data Publishing by Minimally Weakening a Database Instance

         • Joachim Biskup, Marcel Preuß

         Pages 30-49

      2. Extending Dolev-Yao with Assertions

         • R. Ramanujam, Vaishnavi Sundararajan, S. P. Suresh

         Pages 50-68

      3. Inferring Accountability from Trust Perceptions

         • Koen Decroix, Denis Butin, Joachim Jansen, Vincent Naessens

         Pages 69-88

      4. Client Side Web Session Integrity as a Non-interference Property

         • Wilayat Khan, Stefano Calzavara, Michele Bugliesi, Willem De Groef, Frank Piessens

         Pages 89-108

   2. Security Policies

      1. Impact of Multiple <i>t</i>-<i>t</i> SMER Constraints on Minimum User Requirement in RBAC

         • Arindam Roy, Shamik Sural, Arun Kumar Majumdar

         Pages 109-128

      2. Temporal RBAC Security Analysis Using Logic Programming in the Presence of Administrative Policies

         • Sadhana Jha, Shamik Sural, Jaideep Vaidya, Vijayalakshmi Atluri

         Pages 129-148

      3. A Formal Methodology for Modeling Threats to Enterprise Assets

         • Jaya Bhattacharjee, Anirban Sengupta, Chandan Mazumdar

         Pages 149-166

      4. A Novel Approach for Searchable CP-ABE with Hidden Ciphertext-Policy

         • Mukti Padhya, Devesh Jinwala

         Pages 167-184

   3. Security User Interfaces

      1. Towards a More Democratic Mining in Bitcoins

         • Goutam Paul, Pratik Sarkar, Sarbajit Mukherjee

         Pages 185-203

      2. Authentication Schemes - Comparison and Effective Password Spaces

         • Peter Mayer, Melanie Volkamer, Michaela Kauer

         Pages 204-225

      3. A Security Extension Providing User Anonymity and Relaxed Trust Requirement in Non-3GPP Access to the EPS

         • Hiten Choudhury, Basav Roychoudhury, Dilip kr. Saikia

         Pages 226-244

      4. A Usage-Pattern Perspective for Privacy Ranking of Android Apps

         • Xiaolei Li, Xinshu Dong, Zhenkai Liang

         Pages 245-256

   4. Security Attacks

      1. Privacy Leakage Attacks in Browsers by Colluding Extensions

         • Anil Saini, Manoj Singh Gaur, Vijay Laxmi, Tushar Singhal, Mauro Conti

         Pages 257-276

      2. CORP: A Browser Policy to Mitigate Web Infiltration Attacks

         • Krishna Chaitanya Telikicherla, Venkatesh Choppella, Bruhadeshwar Bezawada

         Pages 277-297

      3. An Improved Methodology towards Providing Immunity against Weak Shoulder Surfing Attack

         • Nilesh Chakraborty, Samrat Mondal

         Pages 298-317

      4. Catching Classical and Hijack-Based Phishing Attacks

         • Tanmay Thakur, Rakesh Verma

         Pages 318-337

   5. Malware Detection

      1. PMDS: Permission-Based Malware Detection System

         • Paolo Rovelli, Ýmir Vigfússon

         Pages 338-357

This book constitutes the refereed proceedings of the 10th International Conference on Information Systems Security, ICISS 2014, held in Hyderabad, India, in December 2014. The 20 revised full papers and 5 short papers presented together with 3 invited papers were carefully reviewed and selected from 129 submissions. The papers address the following topics: security inferences; security policies; security user interfaces; security attacks; malware detection; forensics; and location based security services.

• JPEG compression
• Web security
• authentication
• biometrics
• bitcoins
• browser vulnerabilities
• cyber attacks
• data mining
• electronic cash system
• encryption
• extension-based attacks
• formal model
• image authentication
• machine learning
• malware detection system
• network security
• obfuscation
• outsourcing
• trust
• usable security

• Department of EECS, University of Michigan, Ann Arbor, USA

  Atul Prakash

• Faculty of Technology and Computer Science, Tata Institute of Fundamental Research, Mumbai, India

  Rudrapatna Shyamasundar

Policies and ethics