Computer Security -- ESORICS 2015: 20th European Symposium on Research in Computer Security, Vienna, Austria, September 21-25, 2015, Proceedings, Part II (Lecture Notes in Computer Science Book 9327)

The two-volume set, LNCS 9326 and LNCS 9327 constitutes the refereed proceedings of the 20th European Symposium on Research in Computer Security, ESORICS 2015, held in Vienna, Austria, in September 2015. The 59 revised full papers presented were carefully reviewed and selected from 298 submissions. The papers address issues such as networks and Web security; system security; crypto application and attacks; risk analysis; privacy; cloud security; protocols and attribute-based encryption; code analysis and side-channels; detection and monitoring; authentication; policies; and applied security. Front Matter....Pages - Front Matter....Pages 1-1 FP-Block: Usable Web Privacy by Controlling Browser Fingerprinting....Pages 3-19 Mind-Reading: Privacy Attacks Exploiting Cross-App KeyEvent Injections....Pages 20-39 Enabling Privacy-Assured Similarity Retrieval over Millions of Encrypted Records....Pages 40-60 Privacy-Preserving Link Prediction in Decentralized Online Social Networks....Pages 61-80 Privacy-Preserving Observation in Public Spaces....Pages 81-100 Privacy-Preserving Context-Aware Recommender Systems: Analysis and New Solutions....Pages 101-119 Front Matter....Pages 121-121 Rich Queries on Encrypted Data: Beyond Exact Matches....Pages 123-145 Extended Proxy-Assisted Approach: Achieving Revocable Fine-Grained Encryption of Cloud Data....Pages 146-166 Batch Verifiable Computation of Polynomials on Outsourced Data....Pages 167-185 CloudBI: Practical Privacy-Preserving Outsourcing of Biometric Identification in the Cloud....Pages 186-205 Front Matter....Pages 207-207 Typing and Compositionality for Security Protocols: A Generalization to the Geometric Fragment....Pages 209-229 Checking Trace Equivalence: How to Get Rid of Nonces?....Pages 230-251 Attribute Based Broadcast Encryption with Short Ciphertext and Decryption Key....Pages 252-269 Accountable Authority Ciphertext-Policy Attribute-Based Encryption with White-Box Traceability and Public Auditing in the Cloud....Pages 270-289 Front Matter....Pages 291-291 DexHunter: Toward Extracting Hidden Code from Packed Android Applications....Pages 293-311 Identifying Arbitrary Memory Access Vulnerabilities in Privilege-Separated Software....Pages 312-331 vBox: Proactively Establishing Secure Channels Between Wireless Devices Without Prior Knowledge....Pages 332-351 Front Matter....Pages 353-353 Accurate Specification for Robust Detection of Malicious Behavior in Mobile Environments....Pages 355-375 A Bytecode Interpreter for Secure Program Execution in Untrusted Main Memory....Pages 376-395 Learning from Others: User Anomaly Detection Using Anomalous Samples from Other Users....Pages 396-414 Front Matter....Pages 415-415 Towards Attack-Resistant Peer-Assisted Indoor Localization....Pages 417-437 Leveraging Real-Life Facts to Make Random Passwords More Memorable....Pages 438-455 The Emperor’s New Password Creation Policies: An Evaluation of Leading Web Services and the Effect of Role in Resisting Against Online Guessing....Pages 456-477 Front Matter....Pages 479-479 A Theory of Gray Security Policies....Pages 481-499 Factorization of Behavioral Integrity....Pages 500-519 Checking Interaction-Based Declassification Policies for Android Using Symbolic Execution....Pages 520-538 Front Matter....Pages 539-539 Enhancing Java Runtime Environment for Smart Cards Against Runtime Attacks....Pages 541-560 Making Bitcoin Exchanges Transparent....Pages 561-576 Web-to-Application Injection Attacks on Android: Characterization and Detection....Pages 577-598 All Your Voices are Belong to Us: Stealing Voices to Fool Humans and Machines....Pages 599-621 Balloon: A Forward-Secure Append-Only Persistent Authenticated Data Structure....Pages 622-641 On the Fly Design and Co-simulation of Responses Against Simultaneous Attacks....Pages 642-661 Back Matter....Pages -