Data and Applications Security XXI: 21st Annual IFIP WG 11.3 Working Conference on Data and Applications Security, Redondo Beach, CA, USA, July 8-11, 2007, Proceedings

Title
Preface
Organization
Table of Contents
Confidentiality Policies for Controlled Query Evaluation
	Introduction
	Controlled Query Evaluation for Potential Secrets
		2.1 Declarative Framework
		2.2 An Enforcement Method with Lying and Refusal
	Generalized Confidentiality Policies
	Enforcement by Reduction
	Conclusion
	References
Provably-Secure Schemes for Basic Query Support in Outsourced Databases
	Introduction
	The Provable-Security Methodology
	Preliminaries
	Efficiently-Searchable Authenticated Encryption
	Proposed Constructions and Their Security Analyses
	Prefix-Preserving ESAE
		On Efficient Range-Query Processing
	References
Authenticated Relational Tables and Authenticated Skip Lists
	Introduction
	Background and State of the Art
	The Reference Model
	A Fine Grained Approach
	Exploiting Nested Sets
	Experimental Evaluation
	Conclusions and Future Work
	References
Location Privacy Protection Through Obfuscation-Based Techniques
	Introduction
	Related Work
	Working Assumptions
	Privacy Preferences and Location Relevance
		Location Accuracy and Measurement Quality
		User Privacy Preferences
		Relevance
	Obfuscation Techniques
		Obfuscation by Enlarging the Radius
		Obfuscation by Shifting the Center
		Obfuscation by Reducing the Radius
	Double Obfuscation
	Double Obfuscation Examples
	Conclusions and Future Work
	References
Efficient Security Policy Enforcement in a Location Based Service Environment
	Introduction
	Preliminaries
		Moving Objects
		User Profiles
	Moving Object Authorization Model
	Unified Index Scheme for Moving Objects
	User Access Request Evaluation
	Conclusions
	References
Reliable Delivery of Event Data from Sensors to Actuators in Pervasive Computing Environments
	Introduction
	Overview of Trust-Based Routing Protocol
		Cost Function
	TrustMetric
		Computing {\\em properties}
		Computing {\\em recommendation}
		Computing {\\em interaction}
		Computation of Final Trust Value
	Data Path Discovery
		Route Discovery
	Analysis
		Security Analysis
		Complexity Analysis
	Conclusion and Future Work
	References
Privacy-Preserving Schema Matching Using Mutual Information
	References
The Interval Revocation Scheme for Broadcasting Messages to Stateless Receivers
	References
Measuring the Overall Security of Network Configurations Using Attack Graphs
	Introduction
	A Framework for Defining Security Metrics Using Attack Graphs
		Attack Graph Model
		Motivating Example
	An Attack Resistance Metric
		A Generic Framework
		Attack Resistance as Real Numbers
		Attack Resistance as Sets of Initial Conditions
	Related Work
	Conclusion
	References
Enforcing Honesty in Assured Information Sharing Within a Distributed System
	Introduction
		Our Approach
		Motivating Scenario
		Related Work
		Organization of This paper
	Putting a Price on Consequence
	Equilibrium Emergence
	Simulation Construction
		Random Behavior
		Tit-for-Tat Behavior
		Dishonest
		Truthful-Punisher Behavior
		Periodic Liar Behavior
		Subtle Liar Behavior
	Experiments
		Results
	Conclusions
	References
A Privacy-Enhanced Attribute-Based Access Control System
	Introduction
	Fundamentals
		Access Control
		Privacy
	A Privacy-Enhanced ABAC System
		Outline and Goal
		Architecture
		Technical Details
	Integration into Access-eGov
	Related Work
	Conclusions
	References
A Scalable and Secure Cryptographic Service
	Introduction
	Cryptographic Preliminaries
	ModelandGoals
	Building Block: A Single Server Soft-Token Scheme
		Discussions
		Analysis
	Full-Fledged Scheme
		Analysis and Discussion
	Conclusion and Future Work
	References
gVault: A Gmail Based Cryptographic Network File System
	Introduction
	Encrypted Storage Model (ESM)
		Operations in the ESM
		Analysis
	DataIntegrity
	gVault Prototype and Evaluation
		Performance
	Related Work
	Conclusions
	References
Design and Analysis of Querying Encrypted Data in Relational Databases
	Introduction
		Threat Model
		Related Work
		Organization of the Paper
	Block Cipher Modes Suitable for Databases
		Overview of Block Cipher Modes
		Evaluating the Performance of Encryption Modes Under Different Encryption Granularity
		Performance of Encryption Modes Under Different Disk Access Patterns
		Which Mode?
	A New Approach for Storing Encrypted Data in Database Pages
		Experiments and Analyses
	Discussion
	Conclusions
	References
Dynamic Event-Based Access Control as Term Rewriting
	Introduction
	Preliminaries
	The \\emph{DEBAC} Model
		Features of \\emph{DEBAC} Models
		Distributed Term Rewriting Systems
	\\emph{DEBAC} Policy Specifications Via Rewrite Rules
		Defining \\emph{DEBAC} Policies
		Evaluating Access Requests
		Properties of the \\emph{DEBAC} Policy
	Extensions of the \\emph{DEBAC} Model
		\\emph{DEBAC} with Ordered Categories
		\\emph{DEBAC} with Constraints
	Related Work
	Conclusions and Further Work
	References
A Spatio-temporal Role-Based Access Control Model
	Introduction
	Related Work
	Representing Location and Time
		Representing Location
		Representing Time
	Relationship of Core-RBAC Entities with Time and Location
		Users
		Objects
		Roles
		Sessions
		Permissions
	Impact of Time and Location on Role-Hierarchy
	Impact of Time and Location on Static Separation of Duties
	Impact of Time and Location on Dynamic Separation of Duties
	Example Scenario
	Conclusion and Future Work
	References
Towards a Times-Based Usage Control Model
	Introduction
	Related Work
	Motivating Example
	TUCONModel
		Preliminaries
		Authorizations
		Authorization Rules
		Completeness
	Implementation of TUCON
		Administration of Authorizations
		Access Control
	Conclusion and Future Work
	References
New Paradigm of Inference Control with Trusted Computing
	Introduction
	Architecture
	Protocol
		Overview
		Steps
		Security
	Extensions
	Conclusions
	References
Security Patterns for Physical Access Control Systems
	Introduction
	Background
	Patterns
		Alarm Monitoring
		Relays
		Access Control to Physical Structures
	Related Work and Discussion
	Conclusions
	References
XACML Policies for Exclusive Resource Usage
	Introduction
	Related Work
	Use Cases, Misuse Cases and Requirements
		Use Case 1: Exclusive Access
		Use Case 2: Enforcing Dynamic Constraints
		Preventing Misuse Cases
	Enhancing the XACML Syntax
		Implemented Semantics of Syntactic Extensions
		XACML Functions
	Architectureral Enhancements Needed for Locks
		Lock Manager (LM)
		Enhancing the Context Handler
	Implementing the Enhanced Design
	Safety and Liveliness Properties
	Conclusions
	References
Author Index