Foundations and Practice of Security: 13th International Symposium, FPS 2020, Montreal, QC, Canada, December 1–3, 2020, Revised Selected Papers (Lecture Notes in Computer Science, 12637)

Preface
Organization
Contents
Analysis and Detection
New Wrapper Feature Selection Algorithm for Anomaly-Based Intrusion Detection Systems
	1 Introduction
	2 Related Works
	3 Problem Statement
	4 New Wrapper Method for Feature Selection
		4.1 Search Phase
		4.2 Evaluation Phase
		4.3 Complexity
	5 Experiments
		5.1 Datasets
		5.2 Preprocessing
		5.3 Result Analysis
	6 Conclusion
	References
Network Security for Home IoT Devices Must Involve the User: A Position Paper
	1 Introduction
	2 Background
		2.1 Assumptions and Threat Model
		2.2 Related Work
	3 The Case for Involving the User
	4 Proposed Architecture and Challenges
		4.1 Architecture
		4.2 Scenarios
		4.3 Challenges and Opportunities
	5 A Testbed for Evaluating IoT Security Warnings
	6 A Preliminary User Study
		6.1 Experiment Design
		6.2 Results
		6.3 Discussion
	7 Conclusion
	References
A Quantitative Security Risk Analysis Framework for Modelling and Analyzing Advanced Persistent Threats
	1 Introduction
	2 Description of the Framework
		2.1 Step 1. Modelling with Cyber-Kill Chains
		2.2 Step 2: Analytic Model with Stochastic Timed Automata
	3 Case Study
	4 Conclusion
	References
An Analysis of the Use of CVEs by IoT Malware
	1 Introduction
	2 Description of the Data
	3 Research Question 1
	4 Research Question 2
	5 Research Question 3
	6 Threats to Validity
	7 Related Works
	8 Conclusions
	References
Prevention and Efficiency
A Priority-Based Domain Type Enforcement for Exception Management
	1 Introduction
	2 Motivation
	3 Related Work
	4 Background
		4.1 Domain Type Enforcement (DTE)
		4.2 Exception
	5 Issue Related to the Policy Deployment in DTE
		5.1 Access Control Policy and Exception
		5.2 Exception Management in DTE
	6 Priority-Based DTE
	7 Experimental Results
	8 Conclusion
	References
Developer-Proof Prevention of SQL Injections
	1 Introduction
	2 From Strings to Trees
	3 Compiling Trees to Strings
		3.1 Principle
		3.2 Examples
	4 SQL Injections Prevented by Our Approach
		4.1 Attack Mechanisms
		4.2 Known Attacks
		4.3 Attack Intents
	5 Implementation
		5.1 Features
		5.2 Organization
		5.3 Auditability
	6 Related Works
		6.1 Prevention-Related Works
		6.2 Detection-Related Works
	7 Conclusion
	References
A Survey of Advanced Encryption for Database Security: Primitives, Schemes, and Attacks
	1 Introduction
	2 Terminology and Definitions
		2.1 Threats and Adversaries
		2.2 Provable Security
	3 Security Primitives
		3.1 Property Preserving Encryptions (PPE)
		3.2 Oblivious RAM
		3.3 Enclaves
	4 Secure Database Schemes
		4.1 Encrypted Conventional Databases
		4.2 Privacy Preserving Data Structure Based Schemes
		4.3 Trusted Hardware Based Schemes
	5 Discussion
		5.1 Performance
		5.2 Attacks and Security
		5.3 Future Research Directions
	6 Conclusions
	References
Fast Short and Fast Linear Cramer-Shoup
	1 Introduction
	2 Preliminaries
		2.1 Original Cramer-Shoup Scheme
		2.2 Linear Cramer-Shoup Scheme
		2.3 Short Cramer-Shoup Scheme
	3 Fast Short Cramer-Shoup
	4 Fast Linear Cramer-Shoup
	5 Performances Evaluation
		5.1 Short and Fast Short Cramer-Shoup
		5.2 Linear and Fast Linear Cramer-Shoup
	6 Conclusion
	References
Anonymous Proof-of-Asset Transactions Using Designated Blind Signatures
	1 Introduction
	2 Related Work
	3 Preliminaries
	4 Proposed Construction
		4.1 Security Analysis
		4.2 Performance Estimation
	5 Conclusion
	A  Identity-Based Cryptography Preliminaries
	References
Privacy by Design
Modeling Attacks and Efficient Countermeasures on Interpose PUF
	1 Introduction
	2 Related Work
	3 Background: APUF, XAPUF and IPUF
		3.1 XAPUF
		3.2 Interpose PUF (IPUF)
	4 Analysis of Modeling Attack on IPUF and Its Components
		4.1 Modeling Attacks on Arbiter PUF
		4.2 Modeling Attacks on XOR Arbiter PUF
		4.3 Modeling Attacks on Interpose PUF
	5 Countermeasures for Thwarting Modeling Attacks on the Interpose PUF
		5.1 OBCIPUF
		5.2 LROBIPUF
	6 Conclusion
	References
Error-Free Lattice-Based Key Encapsulation Mechanism Based on Ring-LWE
	1 Introduction
	2 Preliminaries
	3 Cyclotomic Polynomials
	4 Error-Free LPR Encryption (ER-LPRPKE)
	5 CCA2-Secure Key Encapsulation Mechanism (ER-LPRKEM)
	6 ER-LPRKEM Parameters
	7 Conclusion
	References
Pisces: A New Zero-Knowledge Protocol for Blockchain Privacy
	1 Introduction
		1.1 General Model of zkSNARK Based Protocols
		1.2 Approaches for the Design of zkSNARKs with Trusted Setup
		1.3 Approaches for the Design of zkSNARKs Without Trusted Setup
		1.4 Our Results
	2 Preliminaries
	3 Pisces: A New Zero-Knowledge Argument for Arithmetic Circuit-SAT
		3.1 Interleaved RS Codes
		3.2 The Fast Fourier Transform
		3.3 Interleaved Linear Check
		3.4 Interleaved Quadratic Check
		3.5 Proximity Test of RS Codewords
		3.6 Zero-Knowledge IPCP Protocol for Arithmetic Circuit-SAT
		3.7 The Non-interactive Variant
	4 Evaluation
	5 Conclusions
	References
Author Index