Financial Cryptography and Data Security: 14th International Conference, FC 2010, Tenerife, Canary Islands, January 25-28, 2010, Revised Selected Pape

ISBN-13: 9783642145766 / Angielski / Miękka / 2010 / 432 str.

Radu Sion

Opis

This volume contains the main proceedings of the 14th Financial Cryptograpy and Data Security International Conference 2010, held in Tenerife, Canary - lands, Spain, January 25 28, 2010. FinancialCryptographyandData Securityis a majorinternationalforumfor research, advanced development, education, exploration, and debate regarding information assurance, with a speci?c focus on commercial contexts. The c- ference covers all aspects of securing transactions and systems and especially encourages original works focusing on both fundamental and applied real-world deployments on all aspects surrounding commerce security. Despite the dire economic climate as well as strong competition from other top-tier related security conferences, the ProgramCommittee received 130 hi- quality submissions and accepted 19 full-length papers (14.6% acceptance rate), 15 short papers (26.1% acceptance rate), 7 posters and 1 panel. Three workshops were co-located with FC 2010: the Workshop on Real-Life CryptographicProtocolsandStandardization(RLCPS), theWorkshoponEthics in Computer Security Research (WECSR), and the Workshop on Lightweight Cryptography for Resource-Constrained Devices (WLC). Intimateandcolorfulbytradition, thehigh-qualityprogramwasnottheonly attraction of FC. In the past, FC conferences have been held in highly resear- synergisticlocationssuchasTobago, Anguilla, Dominica, KeyWest, Guadelupe, Bermuda, the GrandCayman, and CozumelMexico.2010wasthe?rst yearthat the conference was held on European soil, on the Spanish Canary Islands, in Atlantic waters, a few miles across from Morocco. Over 100 researchers from more than 20 countries were in attend

Spis treści

Constructive Cryptography – A Primer.- Security Mechanisms with Selfish Players in Wireless Networks.- Users Do the Darndest Things: True Stories from the CyLab Usable Privacy and Security Laboratory.- Multichannel Protocols to Prevent Relay Attacks.- A Traceability Attack against e-Passports.- Secure Computation with Fixed-Point Numbers.- Implementing a High-Assurance Smart-Card OS.- Unlinkable Priced Oblivious Transfer with Rechargeable Wallets.- Multiple Denominations in E-cash with Compact Transaction Data.- What’s in a Name?.- Cryptographic Protocol Analysis of AN.ON.- A CDH-Based Ring Signature Scheme with Short Signatures and Public Keys.- Practical Private Set Intersection Protocols with Linear Complexity.- Design and Implementation of a Key-Lifecycle Management System.- Measuring the Perpetrators and Funders of Typosquatting.- A Learning-Based Approach to Reactive Security.- Embedded SFE: Offloading Server and Network Using Hardware Tokens.- The Phish-Market Protocol: Securely Sharing Attack Data between Competitors.- Building Incentives into Tor.- Tree-Homomorphic Encryption and Scalable Hierarchical Secret-Ballot Elections.- Automatically Preparing Safe SQL Queries.- PKI Layer Cake: New Collision Attacks against the Global X.509 Infrastructure.- Three-Round Abuse-Free Optimistic Contract Signing with Everlasting Secrecy.- Designing for Audit: A Voting Machine with a Tiny TCB.- Attacking of SmartCard-Based Banking Applications with JavaScript-Based Rootkits.- Security Applications of Diodes with Unique Current-Voltage Characteristics.- Verified by Visa and MasterCard SecureCode: Or, How Not to Design Authentication.- All You Can Eat or Breaking a Real-World Contactless Payment System.- Shoulder-Surfing Safe Login in a Partially Observable Attacker Model.- Using Sphinx to Improve Onion Routing Circuit Construction.- Secure Multiparty AES.- Modulo Reduction for Paillier Encryptions and Application to Secure Statistical Analysis.- On Robust Key Agreement Based on Public Key Authentication.- A Formal Approach for Automated Reasoning about Off-Line and Undetectable On-Line Guessing.- Signatures of Reputation.- Intention-Disguised Algorithmic Trading.- When Information Improves Information Security.- BetterThanPin: Empowering Users to Fight Phishing (Poster).- Certification Intermediaries and the Alternative (Poster).- SeDiCi: An Authentication Service Taking Advantage of Zero-Knowledge Proofs.- Poster Abstract: Security in Commercial Applications of Vehicular Ad-Hoc Networks.- Domain Engineering for Automatic Analysis of Financial Applications of Cryptographic Protocols.- hPIN/hTAN: Low-Cost e-Banking Secure against Untrusted Computers.