Information Security Technology for Applications

Name: Information Security Technology for Applications | 15th Nordic Conference on Secure IT Systems, NordSec 2010, Espoo, Finland, October 27-29, 2010, Revised Selected Papers
Brand: Springer
Price: 53.49 EUR
Availability: OnlineOnly

15th Nordic Conference on Secure IT Systems, NordSec 2010, Espoo, Finland, October 27-29, 2010, Revised Selected Papers

Tuomas Aura Kimmo Järvinen Kaisa Nyberg(Herausgeber*in)

Springer (Verlag)

Erschienen am 25. April 2012

X, 289 Seiten

E-Book

PDF mit Wasserzeichen-DRM

Systemvoraussetzungen

978-3-642-27937-9 (ISBN)

53,49 €inkl. 7% MwSt.

Systemvoraussetzungen

für PDF mit Wasserzeichen-DRM

E-Book Einzellizenz

Als Download verfügbar

Beschreibung

Weitere Details

Weitere Ausgaben

Inhalt

Title Page
Preface
Organization
Table of Contents
Network Security
BloomCasting: Security in Bloom Filter Based Multicast
Introduction
Security Issues in Bloom Filter Based Multicast
Forwarding with in-Packet Bloom Filters
Threat Model and Existing Attacks
Chain Reaction Attacks.
Target Path Attack.
BloomCasting
Group Membership Management
Multicast Forwarding
Connecting Intra-domain Multicast with BloomCasting
Security Techniques in Bloom Filter Based Forwarding
Security Evaluation
Related Work
Conclusions
References
Authentication Session Migration
Introduction
Related Work on Session Migration
Federated Identity Systems and Web Session Cookies
Design
Firefox Implementation
Porting to Other Browsers and Operating Systems
Experimental Evaluation
Discussion
Conclusion
References
Mitigation of Unsolicited Traffic across Domains with Host Identities and Puzzles
Introduction
HostIdentityProtocol
SystemModel
Basic Architecture for Spam Mitigation
Deployment Considerations
Pushing Puzzles to Spam Relays
Re-generating a Host Identity
Switching Identities
CostModel
Preliminaries
Cost Model
A Comparison of HIP with Constant Puzzle Cost to the Scenario without HIP
A Comparison of HIP with Exponential Puzzle Cost the Scenario without HIP
Optimal Strategies for a Spam Relay
Optimal Strategies for an Inbound Server
Experimental Evaluation
Setup
Results
Conclusions
References
Experimental Analysis of the Femtocell Location Verification Techniques
Introduction
HNB Security Architecture
Goals of the Location Locking Methods
Location Locking Methods and Attacks
IP Address of the Broadband Access Device
Information of Neighboring Macro-cells
UE Information
GPS Information
Discussion and Conclusion
References
Invited Talk
"Why Wasn't I Notified?": Information Security Incident Reporting Demystified
Introduction
Methodology
Outlining the Disconnect between the Theory and the Practice
Linear Model of the Incident Reporting Process
Cases of Real-Life Incidents
Theory and Practice of the Incident Reporting Process
Incident Discovery
Identifying Points of Contacts
Information Exchange
Report Validation
Case Summaries
Compromised Web Servers
Data Breach
Denial of Service Attack
Conclusion
Incidents Can Be Detected by Outside Parties
Finding Correct Incident Reporting Contacts Is Challenging
Incident Reporting Not Fully Understood in Standards Literature
Automation Not Fully Exploited in Incident Reporting
References
Monitoring and Reputation
Use of Ratings from Personalized Communities for Trustworthy Application Installation
Introduction
What Is Inappropriate Software?
Software Certification and Its Limitations
Our Contribution
Designing a Trustworthy Installation Process
Cognition during Application Installation
Information Flow and Risk Signaling
Design Guidelines
Web-Based Survey
System Architecture and Prototype
User Evaluation
Related Work
Discussion and Future Work
Conclusions
References
Practical Private Information Aggregation in Large Networks
Introduction
Our Contributions
Related Work
Organization of This Paper
Model and Definitions
Adversary Structures
Security Definition
Homomorphic Cryptosystems
Computing Sums
A Computationally Secure Protocol for Disjunction
Privacy
Computing the Maximum
General Composition
Conclusion
References
Tracking Malicious Hosts on a 10Gbps Backbone Link
Introduction
Description of the Data Collection
Measurement Setup
Description of the Collected Data: Unidirectional Flows
Measurement Bias and Errors
Overall Data Characteristics
Finding Malicious Hosts
Analysis of Malicious Host Behavior
Characteristics of Malicious Flows
The Ubiquitous Malicious Hosts
Related Work
Discussions and Conclusions
References
Privacy
Service Users' Requirements for Tools to Support Effective On-line Privacy and Consent Practices
Introduction
The Privacy Dialogue
Positioning of Our Work
Privacy Protection Practice Literature
Dialogue System Literature
Research Method
User Study - UK Online Centres
Results
Privacy Practice
Privacy Dialogue
User Preference for Online Privacy and Consent
Conclusion
References
Analyzing Characteristic Host Access Patterns for Re-identification of Web User Sessions
Introduction
Related Work
Re-identification Methodology
Modelling the Web User Re-identification Problem
Multinomial Naïve Bayes (MNB)
Vector Transformations
DataAcquisition
Evaluation Methodology and Results
Attacker's View
Simulations
Linkability Metric
Countermeasures
Discussion
Conclusion
References
Policy Enforcement
A Framework for the Modular Specification and Orchestration of Authorization Policies
Introduction
Authorization Using Trees
APOL: A Typed, Modular Policy Language
Discussion
Conclusions
References
Credential Disabling from Trusted Execution Environments
Introduction
Assumptions and Requirements
Assumptions
Attacker Model
Requirements
Straightforward Solutions
Credential Disabling with Passwords
Credential Disabling with Removable Element
Credential Disabling with Embedded Secure Counter
Credential Disabling with Personal Element Presence
Credential Disabling with Semi-trusted Server
Definitions
Initialization
Credential Disabling
Credential Recovery
Implementation
Analysis
Credential Disabling with Personal Element Presence
Credential Disabling with Semi-Trusted Server
Comparison of Different Solutions
Related Work
Conclusions
References
Java Card Architecture for Autonomous Yet Secure Evolution of Smart Cards Applications
Introduction
Security-by-Contract Smart Card Architecture
Policy Checker Implementation
Related Works and Conclusions
References
Implementing Erasure Policies Using Taint Analysis
Introduction
The Erasure Library
Delegation
The Primitive erasure_source
Taint Analysis
Erasing Data
Extended Example
LazyErasure
The Lazy Erasure API
Lazy Erasure Examples
Related Work
Conclusions and Future Work
References
Selected OWASP AppSec Research 2010 Papers
A Taint Mode for Python via a Library
Introduction
A Motivating Example
A Library for Taint Analysis
Using the Library
Hardening email.py
Implementation
Generating Taint-aware Classes
Decorators
Taint-aware Functions
Scope of the Library
Related Work
Conclusions
References
Security of Web Mashups: A Survey
Introduction
Problems with Mashup Security
Separation and Interaction
Subspace
Fragment Identifier Messaging
PostMessage
Module Tag
Sandbox Attribute
MashupOS
OMash
Script Isolation
ADsafe
Facebook JavaScript
Caja
Communication
XMLHttpRequest Proxies
Script Communication
Using Browser Plugins
Cross-Origin Resource Sharing
Advanced Fine-Grained Control
Policy Enforcement Techniques for JavaScript
Mediating Access to Objects
Information Flow Control for JavaScript
Discussion
References
Safe Wrappers and Sane Policies for Self Protecting JavaScript
Introduction
The Wrapper Landscape
Self Protecting JavaScript
Breaking and Fixing the Wrapping Code
Function and Object Subversion
Global Setter Subversion
Issues Concerning Aliases of Built-ins
Abusing the Caller-Chain
Browser Specific Issues
Other Lightweight AOP Libraries
Declarative Policies
Object and Function Subversion in Policies
Non Declarative Arguments
Related Work
Future Work
References
Cryptography and Protocols
Protocol Implementation Generator
Introduction
The Protocol Implementation Generator
A Practical Realisation of PiG
LySa and the LySatool
ANTLR
Retargeting the PiG
Related Work
Conclusions and Future Work
References
Secure and Fast Implementations of Two Involution Ciphers
Introduction
Cipher Descriptions
The Anubis Cipher
The Khazad Cipher
Implementations
Vector Operations
Implementing Anubis
Implementing Khazad
Results
Conclusion
References
The PASSERINE Public Key Encryption and Authentication Mechanism
Introduction
PreviousWork
The PASSERINE Randomized Rabin Cryptosystem
Shamir's Randomized Variant
Arithmetic Modulo a Set of Coprime Numbers
Carrying Payload Data in the RandomizationMask
Implementing PASSERINE Public Key Operation on a Low-Resource Platform
PASSERINE Private Key Operation and Decryption
Further Work
References
Author Index

Systemvoraussetzungen

Als PDF speichern Als Link merken