Trust, Privacy and Security in Digital Business: 9th International Conference, Trustbus 2012, Vienna, Austria, September 3-7, 2012, Proceedings

ISBN-13: 9783642322860 / Angielski / Miękka / 2012 / 242 str.

Simone Fischer-H Bner; Sokratis Katsikas; Gerald Quirchmayr

Opis

This book constitutes the refereed proceedings of the 8th International Conference on Trust and Privacy in Digital Business, TrustBus 2012, held in Vienna, Austria, in September 2012 in conjunction with DEXA 2012. The 18 revised full papers presented together with 12 presentations of EU projects were carefully reviewed and selected from 42 submissions. The papers are organized in the following topical sections: Web security; secure management processes and procedures; access control; intrusion detection - trust; applied cryptography; secure services, databases, and data warehouses; and presentations of EU projects.

Spis treści

How Much Network Security Must Be Visible in Web Browsers.-A User-Level Authentication Scheme to Mitigate Web Session-Based Vulnerabilities.- Access Control Configuration for J2EE Web Applications: A Formal Perspective.- Cloud Separation: Stuck Inside the Cloud.- Proposed Control Procedure to Mitigate the Risks of Strategic Information Outflow in the Recruitment Process.- An Autonomous Social Web Privacy Infrastructure with Context-Aware Access Control.- A Prototype for Enforcing Usage Control Policies Based on XACML.- A Conceptual Framework for Trust Models.- Advances and Challenges in Standalone Host-Based Intrusion Detection Systems.- Encrypted Adaptive Storage Model – Analysis and Performance Tests.- Efficient Comparison of Encrypted Biometric Templates.-Short and Efficient Identity-Based Undeniable Signature Scheme.- Damage Sharing May Not Be Enough: An Analysis of an Ex-ante Regulation Policy for Data Breaches.- Flexible Regulation with Privacy Points.- On the Security of the Non-Repudiation of Forwarding Service.- Profitability and Cost Management of Trustworthy Composite Services.- Query Auditing for Protecting Max/Min Values of Sensitive Attributes in Statistical Databases.- Verification of Security Coherence in Data Warehouse Designs.- Towards the Secure Provision and Consumption in the Internet of Services.- WebSand: Server-Driven Outbound Web-Application Sandboxing.- Attribute-Based Credentials for Trust (ABC4Trust).- uTRUSTit – Usable Trust in the Internet of Things.- Challenges for Advanced Security Monitoring – The MASSIF Project.-  Decentralized, Cooperative, Secure and Privacy – Aware Monitoring for Trustworthiness.-  PASSIVE: Policy-Assessed System-Level Security of Sensitive Information rocessing in Virtualised Environments.- Policy and Security Configuration Management.- Challenges and Current Results of the TWISNet FP7 Project.- Aniketos: Challenges and Results.- Ubiquitous Participation Platform for POLicy Making (UbiPOL): Security and Identity Management Considerations.- Secure Embedded Platform with Advanced Process Isolation and Anonymity Capabilities.

A User-Level Authentication Scheme to Mitigate Web Session-Based Vulnerabilities.- Access Control Configuration for J2EE Web Applications: A Formal Perspective.- Cloud Separation: Stuck Inside the Cloud.- Proposed Control Procedure to Mitigate the Risks of Strategic Information Outflow in the Recruitment Process.- An Autonomous Social Web Privacy Infrastructure with Context-Aware Access Control.- A Prototype for Enforcing Usage Control Policies Based on XACML.- A Conceptual Framework for Trust Models.- Advances and Challenges in Standalone Host-Based Intrusion Detection Systems.- Encrypted Adaptive Storage Model – Analysis and Performance Tests.- Efficient Comparison of Encrypted Biometric Templates.-Short and Efficient Identity-Based Undeniable Signature Scheme.- Damage Sharing May Not Be Enough: An Analysis of an Ex-ante Regulation Policy for Data Breaches.- Flexible Regulation with Privacy Points.- On the Security of the Non-Repudiation of Forwarding Service.- Profitability and Cost Management of Trustworthy Composite Services.- Query Auditing for Protecting Max/Min Values of Sensitive Attributes in Statistical Databases.- Verification of Security Coherence in Data Warehouse Designs.- Towards the Secure Provision and Consumption in the Internet of Services.- WebSand: Server-Driven Outbound Web-Application Sandboxing.- Attribute-Based Credentials for Trust (ABC4Trust).- uTRUSTit – Usable Trust in the Internet of Things.- Challenges for Advanced Security Monitoring – The MASSIF Project.-  Decentralized, Cooperative, Secure and Privacy – Aware Monitoring for Trustworthiness.-  PASSIVE: Policy-Assessed System-Level Security of Sensitive Information rocessing in Virtualised Environments.- Policy and Security Configuration Management.- Challenges and Current Results of the TWISNet FP7 Project.- Aniketos: Challenges and Results.- Ubiquitous Participation Platform for POLicy Making (UbiPOL): Security and Identity Management Considerations.- Secure Embedded Platform with Advanced Process Isolation and Anonymity Capabilities.