Research Directions in Data and Applications Security: Ifip Tc11 / Wg11.3 Sixteenth Annual Conference on Data and Applications Security July 28-31, 20

ISBN-13: 9781402075414 / Angielski / Twarda / 2003 / 350 str.

Ehud Gudes; Sujeet Shenoi; Ehud Gudes

Opis

Security and privacy are paramount concerns in database systems, which are vital to business, government and military operations and, indeed, society itself. Meanwhile, the expansion of the Internet and its convergence with telecommunications networks are providing incredible connectivity, myriad applications and, of course, new threats.
Research Directions in Data and Applications Security describes original research results and innovative practical developments, all focused on maintaining security and privacy in database systems and applications that pervade cyberspace. The areas of coverage include: -Role-Based Access Control;
-Database Security;
-XML Security;
-Data Mining and Inference;
-Multimedia System Security;
-Network Security;
-Public Key Infrastructure;
-Formal Methods and Protocols;
-Security and Privacy. This book is the sixteenth volume in the series produced by the International Federation for Information Processing (IFIP) Working Group 11.3 on Data and Application Security. It presents a selection of twenty-five updated and edited papers from the Sixteenth Annual IFIP WG 11.3 Conference on Data and Application Security, held at King's College, Cambridge, U.K. in July 2002. The papers demonstrate the richness and vitality of the discipline, and offer directions for future research efforts in data and applications security.
Research Directions in Data and Applications Security is an invaluable resource for information assurance researchers, faculty members and graduate students, as well as for individuals engaged in research and development in the information technology sector.

Spis treści

Contributing Authors. Preface. I: Role-Based Access Control. 1. Shielding RBAC Infrastructures from Cyberterrorism; A. Belokosztolszki, D. Eyers. 2. Privelege Administration for the Role Graph Model; C. Ionita, S. Osborn. 3. Implementing RBAC Policies; S. Barker, et al. 4. Role Delegation for a Resource-Based Security Model; M. Liebrand, et al. 5. Using X.509 Attribute Certificates for Role-Based EAM; Dongwan Shin, et al. 6. Implementing Workflow Systems; L. Dreyer, M. Olivier. II: Database Security. 7. Multiphase Damage Confinement System for Databases; Peng Liu, Ying Wang. 8. Analyzing Transaction Logs for Effective Damage Assessment; P. Ragothaman, B. Panda. 9. Deductive Database Security; S. Baker. III: XML Security. 10. Towards Secure XML Federations; Lingyu Wang, et al. 11. Secure XML Views; A. Stoica, C. Farkas. 12. Distributed Cooperative Updates of XML Documents; E. Bertino, et al. IV: Data Mining and Inference. 13. On Security and Privacy Risks in Association Mining Algorithms; T. Johnsten, et al. 14. Mining Malicious Corruption of Data with Hidden Markov Models; D. Barbará, et al. 15. A Study of Inference Problems in Distributed Databases; LiWu Chang, I. Moskowitz. V: Multimedia System Security. 16. Uniform Indexing for Geospatial Data and Authorizations; V. Atluri, P. Mazzoleni. 17. Access Control of SVG Documents; E. Damiani, et al. VI: Network Security. 18. On Modeling Computer Networks for VulnerabilityAnalysis; C. Campbell, et al. 19. On-Line Intrusion Protection by Detecting Attacks with Diversity; J. Reynolds, et al. VII: Public Key Infrastructure. 20. Recertification: A Technique to Improve Services in PKI; R. Mukkamala, et al. 21. A Hybrid PKI Model: Application to Secure Mediation; J. Biskup, Y. Karabulut. VIII: Formal Methods and Protocols. 22. Implementation and Verification of Programmable Security; S. Magill, et al. 23. A Process Algebraic Approach to Security Policies; P. Ryan, R. Ryvold Arnesen. 24. Anonymous and Secure Multicast Subscription; Indrajit Ray, Indrakshi Ray. IX: Security and Privacy. 25.Privacy and Civil Liberties. D. Chadwick, et al.