Lecture Notes in Computer Science 8203

Size: px

Start display at page:

Download "Lecture Notes in Computer Science 8203"

Rhoda Morton
5 years ago
Views:

1 Lecture Notes in Computer Science 8203 Commenced Publication in 1973 Founding and Former Series Editors: Gerhard Goos, Juris Hartmanis, and Jan van Leeuwen Editorial Board David Hutchison Lancaster University, UK Takeo Kanade Carnegie Mellon University, Pittsburgh, PA, USA Josef Kittler University of Surrey, Guildford, UK Jon M. Kleinberg Cornell University, Ithaca, NY, USA Alfred Kobsa University of California, Irvine, CA, USA Friedemann Mattern ETH Zurich, Switzerland John C. Mitchell Stanford University, CA, USA Moni Naor Weizmann Institute of Science, Rehovot, Israel Oscar Nierstrasz University of Bern, Switzerland C. Pandu Rangan Indian Institute of Technology, Madras, India Bernhard Steffen TU Dortmund University, Germany Madhu Sudan Microsoft Research, Cambridge, MA, USA Demetri Terzopoulos University of California, Los Angeles, CA, USA Doug Tygar University of California, Berkeley, CA, USA Gerhard Weikum Max Planck Institute for Informatics, Saarbruecken, Germany

2 Rafael Accorsi Silvio Ranise (Eds.) Security andtrust Management 9th International Workshop, STM 2013 Egham, UK, September 12-13, 2013 Proceedings 13

3 Volume Editors Rafael Accorsi University of Freiburg Department of Telematics Friedrichstraße Freiburg, Germany Silvio Ranise Fondazione Bruno Kessler (FBK) Centre for Information Technology Via Sommarive Trento, Italy ISSN e-issn ISBN e-isbn DOI / Springer Heidelberg New York Dordrecht London Library of Congress Control Number: CR Subject Classification (1998): K.6.5, K.4.4, E.3, D.4.6, C.2, J.1 LNCS Sublibrary: SL 4 Security and Cryptology Springer-Verlag Berlin Heidelberg 2013 This work is subject to copyright. All rights are reserved by the Publisher, whether the whole or part of the material is concerned, specifically the rights of translation, reprinting, reuse of illustrations, recitation, broadcasting, reproduction on microfilms or in any other physical way, and transmission or information storage and retrieval, electronic adaptation, computer software, or by similar or dissimilar methodology now known or hereafter developed. Exempted from this legal reservation are brief excerpts in connection with reviews or scholarly analysis or material supplied specifically for the purpose of being entered and executed on a computer system, for exclusive use by the purchaser of the work. Duplication of this publication or parts thereof is permitted only under the provisions of the Copyright Law of the Publisher s location, in its current version, and permission for use must always be obtained from Springer. Permissions for use may be obtained through RightsLink at the Copyright Clearance Center. Violations are liable to prosecution under the respective Copyright Law. The use of general descriptive names, registered names, trademarks, service marks, etc. in this publication does not imply, even in the absence of a specific statement, that such names are exempt from the relevant protective laws and regulations and therefore free for general use. While the advice and information in this book are believed to be true and accurate at the date of publication, neither the authors nor the editors nor the publisher can accept any legal responsibility for any errors or omissions that may be made. The publisher makes no warranty, express or implied, with respect to the material contained herein. Typesetting: Camera-ready by author, data conversion by Scientific Publishing Services, Chennai, India Printed on acid-free paper Springer is part of Springer Science+Business Media (

4 Preface The Security and Trust Management (STM) group is a Working Group (WG) of the European Research Consortium in Informatics and Mathematics (ERCIM) established in 2005 to provide a platform for researchers to present and discuss their ideas and foster cooperation. One of the means to achieve these goals is the organization of a yearly workshop. These proceedings contain the papers selected for presentation at the 9th International Workshop on Security and Trust Management (STM 2013) held September 12 13, 2013 in conjunction with the 18th European Symposium on Research in Computer Security (ESORICS 2013) in Egham, U.K. The STM 2013 workshop received 47 submissions that were evaluated on the basis of their significance, novelty, technical quality, and appropriateness to the STM audience. After intensive reviewing and electronic discussions, 15 papers were selected for presentation at the workshop, giving an acceptance rate of less than 32%. The workshop program includes two invited talks by Michael Huth (Imperial College, London, UK) entitled Verifiable Numerical Aggregation of Trust Evidence for Policy-Based Access Control and Claire Vishik (Intel Corporation, UK) entitled Building Trusted Systems: Lessons of the First Generation of Trusted Computing. As in previous editions, the program of the STM 13 workshop also features the talk by Pouyan Sepehrdad (École Polytechnique Fédérale de Lausanne, Switzerland), recipient of the 2013 ERCIM WG STM Best PhD Award for the thesis entitled Statistical and Algebraic Cryptanalysis of Lightweight and Ultra-Lightweight Symmetric Primitives. We would like to thank all the people who volunteered their time and energy to make this year s workshop happen. In particular, we thank the authors for submitting their manuscripts to the workshop and all the attendees for contributing to the workshop discussions. We are also grateful to the members of the Program Committee and the external reviewers for their work in reviewing and discussing the submissions, and their commitment to meeting the strict deadlines. Last but not least, our thanks also go to all the people who played a role in the organization of the event: Pierangela Samarati (chair of the STM working group) for her energy, support, and the many useful pieces of advice; Keith Mayes (general chair of ESORICS 2013) together with Jason Crampton and Sushil Jajodia (program chairs of ESORICS 2013) for their support; and Giovanni Livraga for taking care of the publicity of the workshop.

5 VI Preface We hope that the papers collected in these proceedings will be a source of inspiration for your work. September 2013 Rafael Accorsi Silvio Ranise

6 Organization Program Committee Program Chairs Rafael Accorsi Silvio Ranise University of Freiburg, Germany Fondazione Bruno Kessler, Trento, Italy Publicity Chair Giovanni Livraga Members Benjamin Aziz Liqun Chen Mauro Conti Jorge Cuellar Frédéric Cuppens Nora Cuppens-Boulahia Roberto Di Pietro Wenliang Du Isao Echizen Carmen Fernández-Gago Sara Foresti Joaquin Garcia-Alfaro Xinyi Huang Meiko Jensen Jan Jürjens Dimitris Karagiannis Florian Kerschbaum Doğan Kesdoğan Felix Klaedtke Adam J. Lee Giovanni Livraga Patricia Longstaff Javier Lopez Fabio Martinelli Raimundas Matulevicius Catherine Meadows Charles Morisset Indrakshi Ray University of Portsmouth, UK Hewlett Packard Labs, UK University of Padua, Italy Siemens, Germany Télécom Bretagne, France Télécom Bretagne, France Università diromatre,italy Syracuse University, USA National Institute of Informatics, Japan University of Malaga, Spain Télécom SudParis, France Fujian Normal University, China Independent Centre for Privacy and Data Protection Schleswig-Holstein, Germany TU Dortmund and Fraunhofer ISST, Germany University of Vienna, Austria SAP Research, Germany Universität Regensburg, Germany ETH Zurich, Switzerland University of Pittsburgh, USA Syracuse Universtiy, USA University of Malaga, Spain IIT-CNR, Italy University of Tartu, Estonia NRL, USA Newcastle University, UK Colorado State University, USA

7 VIII Organization Pierangela Samarati George Spanoudakis Mark Strembeck Willy Susilo Mahesh Tripunitara Michael Waidner Nicola Zannone Additional Reviewers Yousra Aafer Wafa Ben Jaballah Phillipa Bennett Eyüp Canlar Jannik Dreier Ezzaldeen Edwan Nicholas Farnan William Garrison Fuchun Guo Nabil Hachem Jinguang Han Isabelle Hang Hao Hao Marcel Heupel Anh-Tu Hoang Marek Jawurek Lukas Kalabis Fatih Karatas Aliaksandr Lazouski City University London, UK Vienna University of Economics and BA, Austria University of Wollongong, Australia The University of Waterloo, Canada Fraunhofer SIT, Germany Eindhoven University of Technology, The Netherlands Huajian Liu Tongbo Luo John Mace Srdjan Marinovic Hoang-Quoc Nguyen-Son Federica Paci Paul Ratazzi Ruben Rios Andrea Saracino Sigrid Schefer-Wenzl Axel Schroepfer Martin Stopczynski Meilof Veeningen Antonio Villani Waldemar Berchtold Wei Wu Artsiom Yautsiukhin Xiao Zhang Yuexin Zhang STM Steering Committee Theo Dimitrakos Sjouke Mauw Stig F. Mjølsnes Babak Sadighi Pierangela Samarati (Chair) Ulrich Ultes-Nitsche British Telecom, UK University of Luxembourg, Luxembourg Norwegian University of Science and Technology, Norway SICS, Sweden University of Fribourg, Switzerland

8 Table of Contents Privacy On Enhancement of Share The Secret Scheme for Location Privacy... 1 Costas Delakouridis and Christos Anagnostopoulos New Attacks against Transformation-Based Privacy-Preserving Linear Programming Peeter Laud and Alisa Pankova Maintaining Database Anonymity in the Presence of Queries Ryan Riley, Chris Clifton, and Qutaibah Malluhi Network, Web, and Mobile Security A Probabilistic Framework for Distributed Localization of Attackers in MANETs Alessandra De Benedictis, Behzad Koosha, Massimiliano Albanese, and Valentina Casola MITHYS: Mind The Hand You Shake - Protecting Mobile Devices from SSL Usage Vulnerabilities Mauro Conti, Nicola Dragoni, and Sebastiano Gottardo Evaluating the Manageability of Web Browsers Controls Alexios Mylonas, Nikolaos Tsalis, and Dimitris Gritzalis Security Protocols Using Interpolation for the Verification of Security Protocols Marco Rocchetto, Luca Viganò, Marco Volpe, and Giacomo Dalle Vedove RDAS: A Symmetric Key Scheme for Authenticated Query Processing in Outsourced Databases Lil María Rodríguez-Henríquez and Debrup Chakraborty Security Policies and Trust Management Socio-Technical Study on the Effect of Trust and Context When Choosing WiFi Names Ana Ferreira, Jean-Louis Huynen, Vincent Koenig, Gabriele Lenzini, and Salvador Rivas

9 X Table of Contents Probabilistic Cost Enforcement of Security Policies Yannis Mallios, Lujo Bauer, Dilsun Kaynar, Fabio Martinelli, and Charles Morisset Selective Disclosure in Datalog-Based Trust Management Nik Sultana, Moritz Y. Becker, and Markulf Kohlweiss Business Process Security Towards a Detective Approach to Business Process-Centered Resilience Thomas Koslowski and Christian Zimmermann IF-Net: A Meta-Model for Security-Oriented Process Specification Thomas Stocker and Frank Böhr Watermarking for Security Authenticity Control of Relational Databases by Means of Lossless Watermarking Based on Circular Histogram Modulation Javier Franco-Contreras, Gouenou Coatrieux, Nora Cuppens-Boulahia, Fréderic Cuppens, and Christian Roux Weighted-Sum Fragile Watermarking in the Karhunen-Loève Domain Marco Botta, Davide Cavagnino, and Victor Pomponiu Author Index

Lecture Notes in Computer Science 7007

Lecture Notes in Computer Science 7007 Commenced Publication in 1973 Founding and Former Series Editors: Gerhard Goos, Juris Hartmanis, and Jan van Leeuwen Editorial Board David Hutchison Lancaster University,