Computer Security - ESORICS 2008: 13th European Symposium on Research in Computer Security, Málaga, Spain, October 6-8, 2008. Proceedings

Front Matter....Pages -
Multiprimary Support for the Availability of Cluster-Based Stateful Firewalls Using FT-FW....Pages 1-17
Identifying Critical Attack Assets in Dependency Attack Graphs....Pages 18-34
Online Risk Assessment of Intrusion Scenarios Using D-S Evidence Theory....Pages 35-48
Strongly-Resilient and Non-interactive Hierarchical Key-Agreement in MANETs....Pages 49-65
Efficient Handling of Adversary Attacks in Aggregation Applications....Pages 66-81
Symmetric Key Approaches to Securing BGP – A Little Bit Trust Is Enough....Pages 82-96
Dismantling MIFARE Classic....Pages 97-114
A Browser-Based Kerberos Authentication Scheme....Pages 115-129
CROO: A Universal Infrastructure and Protocol to Detect Identity Fraud....Pages 130-145
Disclosure Analysis and Control in Statistical Databases....Pages 146-160
TRACE: Zero-Down-Time Database Damage Tracking, Quarantine, and Cleansing with Negligible Run-Time Overhead....Pages 161-176
Access Control Friendly Query Verification for Outsourced Data Publishing....Pages 177-191
Sharemind: A Framework for Fast Privacy-Preserving Computations....Pages 192-206
Modeling Privacy Insurance Contracts and Their Utilization in Risk Management for ICT Firms....Pages 207-222
Remote Integrity Check with Dishonest Storage Server....Pages 223-237
A Low-Variance Random-Walk Procedure to Provide Anonymity in Overlay Networks....Pages 238-250
RFID Privacy Models Revisited....Pages 251-266
A New Formal Proof Model for RFID Location Privacy....Pages 267-281
Distributed Authorization by Multiparty Trust Negotiation....Pages 282-299
Compositional Refinement of Policies in UML – Exemplified for Access Control....Pages 300-316
On the Security of Delegation in Access Control Systems....Pages 317-332
Termination-Insensitive Noninterference Leaks More Than Just a Bit....Pages 333-348
Security Provisioning in Pervasive Environments Using Multi-objective Optimization....Pages 349-363
Improved Security Notions and Protocols for Non-transferable Identification....Pages 364-378
Human Readable Paper Verification of Prêt à Voter....Pages 379-395
A Distributed Implementation of the Certified Information Access Service....Pages 396-410
Exploring User Reactions to New Browser Cues for Extended Validation Certificates....Pages 411-427
A Framework for the Analysis of Mix-Based Steganographic File Systems....Pages 428-445
An Adaptive Policy-Based Approach to SPIT Management....Pages 446-460
Structured Peer-to-Peer Overlay Networks: Ideal Botnets Command and Control Infrastructures?....Pages 461-480
Eureka: A Framework for Enabling Static Malware Analysis....Pages 481-500
New Considerations about the Correct Design of Turbo Fingerprinting Codes....Pages 501-516
Formally Bounding the Side-Channel Leakage in Unknown-Message Attacks....Pages 517-532
Cryptographic Protocol Explication and End-Point Projection....Pages 533-547
State Space Reduction in the Maude-NRL Protocol Analyzer....Pages 548-562
Code-Carrying Authorization....Pages 563-579
CPU Bugs, CPU Backdoors and Consequences on Security....Pages 580-599
Back Matter....Pages -