Formal Aspects in Security and Trust

1. Front Matter

   PDF

2. Formal Certification of ElGamal Encryption

   • Gilles Barthe, Benjamin Grégoire, Sylvain Heraud, Santiago Zanella Béguelin

   Pages 1-19

3. Secure Information Flow as a Safety Property

   • Gérard Boudol

   Pages 20-34

4. Who Can Declassify?

   • Alexander Lux, Heiko Mantel

   Pages 35-49

5. Non-Interference for Deterministic Interactive Programs

   • David Clark, Sebastian Hunt

   Pages 50-66

6. Information-Theoretic Modeling and Analysis of Interrupt-Related Covert Channels

   • Heiko Mantel, Henning Sudbrock

   Pages 67-81

7. Causality and Accountability

   • Dominic Duggan, Ye Wu

   Pages 82-96

8. Dynamics, Robustness and Fragility of Trust

   • Dusko Pavlovic

   Pages 97-113

9. Trust within the Context of Organizations: A Formal Approach

   • Emiliano Lorini, Rino Falcone, Cristiano Castelfranchi

   Pages 114-128

10. Know What You Trust

    • Fred Spiessens, Jerry den Hartog, Sandro Etalle

    Pages 129-142

11. Privacy-Friendly Electronic Traffic Pricing via Commits

    • Wiebren de Jonge, Bart Jacobs

    Pages 143-161

12. A Formal Privacy Management Framework

    • Daniel Le Métayer

    Pages 162-176

13. Parameterised Anonymity

    • Jan Friso Groote, Simona Orzan

    Pages 177-191

14. Automatic Methods for Analyzing Non-repudiation Protocols with an Active Intruder

    • Francis Klay, Laurent Vigneron

    Pages 192-209

15. Petri Net Security Checker: Structural Non-interference at Work

    • Simone Frau, Roberto Gorrieri, Carlo Ferigato

    Pages 210-225

16. Verifying Multi-party Authentication Using Rank Functions and PVS

    • Rob Verhoeven, Francien Dechesne

    Pages 226-241

17. The Append-Only Web Bulletin Board

    • James Heather, David Lundin

    Pages 242-256

18. Secure Broadcast Ambients

    • Elsa L. Gunter, Ayesha Yasmeen

    Pages 257-271

19. Extending Anticipation Games with Location, Penalty and Timeline

    • Elie Bursztein

    Pages 272-286

20. Do You Really Mean What You Actually Enforced?

    • Nataliia Bielova, Fabio Massacci

    Pages 287-301

The present volume contains the proceedings of the 5th International Workshop on Formal Aspects in Security and Trust (FAST 2008), held in Malaga, Spain, October 9-10, 2008. FAST is an event a?liated with the 13th European Sym- sium on Research in Computer Security (ESORICS 2008). FAST 2008 was held under the auspices of the IFIP WG 1.7 on Foundations of Security Analysis and Design. The 5th International Workshop on Formal Aspects in Security and Trust (FAST 2008) aimed at continuing the successful e?ort of the previous three FAST workshop editions for fostering the cooperation among researchers in the areas of security and trust. As computing and network infrastructures become increasingly pervasive, and as they carry increasing economic activity, society needs well-matched security and trust mechanisms. These interactions incre- ingly span several enterprises and involve loosely structured communities of - dividuals. Participants in these activities must control interactions with their partners based on trust policies and business logic. Trust-based decisions - fectively determine the security goals for shared information and for access to sensitive or valuable resources. FAST sought for original papers focusing on formal aspects in: security and trust policy models; security protocol design and analysis; formal models of trustand reputation;logicsfor security andtrust;distributed trust management systems;trust-basedreasoning;digitalassetsprotection;dataprotection;privacy and ID issues; information ?ow analysis; language-based security; security and trust aspects in ubiquitous computing; validation/analysis tools; Web service security/trust/privacy; GRID security; security risk assessment; case studies.

• computer security
• information
• privacy
• security
• tools
• trust
• ubiquitous computing

• Dipartimento di Informatica, Università di Pisa, Largo Bruno, Pisa, Italy

  Pierpaolo Degano

• The MITRE Corporation, Bedford, USA

  Joshua Guttman

• Istituto di Informatica e Telematica - IIT Consiglio Nazionale delle Ricerche, C.N.R., Pisa Research Area, Pisa, Italy

  Fabio Martinelli

Policies and ethics