Secure IT Systems

Name: Secure IT Systems | 20th Nordic Conference, NordSec 2015, Stockholm, Sweden, October 19-21, 2015, Proceedings
Brand: Springer
Price: 50.28 EUR
Availability: OnlineOnly

20th Nordic Conference, NordSec 2015, Stockholm, Sweden, October 19-21, 2015, Proceedings

Sonja Buchegger Mads Dam(Herausgeber*in)

Springer (Verlag)

Erschienen am 26. Oktober 2015

X, 231 Seiten

E-Book

PDF mit Wasserzeichen-DRM

Systemvoraussetzungen

978-3-319-26502-5 (ISBN)

50,28 €inkl. 7% MwSt.

Systemvoraussetzungen

für PDF mit Wasserzeichen-DRM

E-Book Einzellizenz

Als Download verfügbar

Beschreibung

Weitere Details

Weitere Ausgaben

Inhalt

Intro
Preface
Organization
Contents
Cyber-Physical Systems Security
A Conceptual Nationwide Cyber Situational Awareness Framework for Critical Infrastructures
1 Introduction
2 Related Work
3 Decision Making Hierarchy and Risk Management Perspective
4 High Level System Entities
4.1 Organizational CSA Subsystem
4.2 National CSA Subsytem
4.3 CI Honeynets Subsytem
5 Research Agenda
6 Conclusion
References
A Survey of Industrial Control System Testbeds
1 Introduction
1.1 Research Questions
1.2 Outline
2 Related Work
3 Review Protocol
4 Results
4.1 Objectives of ICS Testbeds
4.2 Implementation of ICS Testbed Components
4.3 Managing Testbed Requirements
5 Conclusions and Future Work
References
The Timed Decentralised Label Model
1 Introduction
2 Preliminaries
2.1 The Decentralised Label Model
2.2 Timed Automata
3 The Timed Decentralised Label Model
3.1 TDLM Constructs
3.2 Formal Definition
3.3 From Policies to Timed Automata
4 Smart Meters: A Case Study
4.1 Smart Meter Privacy Concerns and Access Rights
4.2 Smart Meter System Modelled with the TDLM
5 Automated Verification of Security Goals
6 Conclusion
References
Privacy
Resilient Collaborative Privacy for Location-Based Services
1 Introduction
2 Problem Statement and Related Work
2.1 System and Adversary Model
2.2 Security and Privacy Protection Requirements
2.3 Related Work
3 Our Scheme
3.1 Overview
3.2 Protocols
3.3 Optimizations for Query Processing
4 Security and Privacy Analysis
5 Performance Evaluation
6 Conclusion
References
Design of a Privacy-Preserving Document Submission and Grading System
1 Introduction
2 Related Work
3 *adss
4 Protocol Design
5 Discussion and Evaluation
6 Conclusions and Limitations
References
Towards Perfectly Secure and Deniable Communication Using an NFC-Based Key-Exchange Scheme
1 Introduction
1.1 Our Contributions
2 The System and Adversary Models
2.1 A Formal Definition of the Adversary
3 Why Alice and Bob Currently Must Forget Their Conversation
3.1 Verifying Who Sent What
3.2 Verifying Encryption Keys
3.3 How Hard Is Deniability?
4 Required Security Properties
5 Achieving Deniability Against the Surveillance State
5.1 A Protocol
5.2 The Security of the Protocol
6 Implementation and Evaluation
6.1 The Amount of Randomness Needed
6.2 The Number of Meetings and Transfer Time
6.3 The Battery Consumption
6.4 Some Extensions
7 Conclusions
7.1 Future Work
Cryptography
Faster Binary Curve Software: A Case Study
1 Introduction
2 Binary Elliptic Curves
2.1 Scalar Multiplication
2.2 Coordinate Systems
3 ECC in OpenSSL
3.1 Generic Curve Support
3.2 Binary Curve Support
3.3 Finite Field Arithmetic
3.4 Scalar Multiplication
4 Improvements
4.1 Lambda Method
4.2 Finite Field Squaring
4.3 Side-Channel Countermeasures
4.4 Timings
5 Conclusion
References
A Algorithms
B Elliptic Curves Over Prime Fields
WHIRLBOB, the Whirlpool Based Variant of STRIBOB
1 Introduction
2 WHIRLBOB
2.1 Structure of the Permutation
2.2 The S-Box
2.3 BLNK Mode
3 Implementation
3.1 Constant-Time SIMD Implementation
3.2 Generic Constant-Time Bitsliced Implementation
3.3 Implementation Summary
4 Comparison with Other AEAD Schemes
5 Security Analysis and Design Notes
5.1 Side-Channel and Implementation Attacks
5.2 Historical Modifications to Whirlpool
5.3 Notes on the Origins of Streebog, Kuznyechik, and STRIBOBr1
6 Conclusions
References
A WHIRLBOB 1.0 ``8-bit'' Reference Implementation
An Efficient Traceable Attribute-Based Authentication Scheme with One-Time Attribute Trees
1 Introduction
1.1 Related Work
2 The Proposed ABA Scheme
2.1 Attribute Trees
2.2 Two Approaches of Attribute Key Generation
2.3 The Construction of the Proposed Scheme
3 Analysis of the Scheme
3.1 Correctness Analysis
3.2 Adversary Model
3.3 Security Analysis
3.4 Efficiency Analysis
4 Conclusions
References
Trust and Fraud
FIDO Trust Requirements
1 Introduction
2 Background and Related Work
2.1 Isolated Identity Management
2.2 Federated Online Identity Management Solution
2.3 Local Owner Device Identity Management
2.4 Fast Identity Online: FIDO
2.5 Online Identity Management Trust Requirements
3 Trust Requirements Analysis
3.1 Trust Requirements of Isolated Online Identity Management
3.2 Trust Requirements of Federated Online Identity Management
3.3 Trust Requirements of FIDO
3.4 Trust in FIDO Consortium
3.5 Trust in Service Providers
3.6 Trust in Hardware Manufacturers
3.7 Local Device Computing Platform
3.8 End Users
3.9 FIDO Protocols
4 Discussion
5 Conclusion
References
Using the RetSim Fraud Simulation Tool to Set Thresholds for Triage of Retail Fraud
1 Introduction
2 Related Work
3 RetSim: The Simulator for Retail Store Data and Fraud
4 Triage Process in a Retail Store Scenario
5 Tuning the Parameters of the Triage Set Up
6 Using the Triage Setup
7 Discussion
8 Conclusions
References
IncidentResponseSim: An Agent-Based Simulation Tool for Risk Management of Online Fraud
1 Introduction
2 Background
2.1 Online Banking
2.2 The Incident Response Process
Threats and Countermeasures.
Incident Response Trees.
Estimating the Direct Economic Consequences.
3 Model
3.1 Support for Different Types of Simulations
Simple Random Sampling of Defrauded Customers.
Simple Random Sampling of Direct Economic Consequences.
Multi-step Simulation with Direct Economic Consequences.
3.2 Data
4 Simulating Relevant Scenarios Using IncidentResponseSim
4.1 Baseline Scenario
4.2 Newly Entered Markets
4.3 Single Point of Failure
4.4 Emerging Threat Landscapes
5 Trojan Strategies Versus Transaction Limits
5.1 Max
5.2 Random
5.3 Mean Transaction
6 Estimating Return on Security Investment Using Simulation Results
6.1 Return on Security Investments (ROSI)
6.2 Simplified Example
7 Discussion
8 Conclusions
References
Network and Software Security
Challenges in Managing Firewalls
1 Introduction
2 Related Work
3 Methodology and Interview Details
3.1 Semi-structured Interviews
3.2 Respondents
4 Results and Discussion
4.1 Results of the Semi-structured Interviews
4.2 Discussion
5 Concluding Remarks
References
Multi-layer Access Control for SDN-Based Telco Clouds
1 Introduction
2 Background
3 System Design
3.1 Application Layer Access Control
3.2 Control Layer Access Control
4 Related Work
5 Conclusion
References
Guaranteeing Dependency Enforcement in Software Updates
1 Introduction
2 Related Works
3 System Model and Requirements
4 The Protocol
4.1 The Protocol: An Informal Description
4.2 A Protocol for Monotone Formulae
5 Conclusions and Open Problems
References
Electronic Citizen Identities and Strong Authentication
1 Introduction
2 Password-Based Systems
3 Smart-Card-Based Systems
4 Non-governmental Identity Providers
4.1 Post Offices
4.2 Bank Credentials
4.3 Mobile-Phone-Based Systems
5 Hybrid Systems
6 Countries Without Citizen Authentication
7 Discussion
8 Conclusion
References
Author Index

Systemvoraussetzungen

Als PDF speichern Als Link merken