Data and Applications Security and Privacy XXVI: 26th Annual IFIP WG 11.3 Conference, DBSec 2012, Paris, France, July 11-13, 2012, Proceedings (Lecture Notes in Computer Science, 7371)

This book constitutes the refereed proceedings of the 26th IFIP WG 11.3 International Conference on Data and Applications Security and Privacy, DBSec 2012, held in Paris, France in July 2012. The 17 revised full and 15 short papers presented together with 1 invited paper were carefully reviewed and selected from 49 submissions. The papers are organized in topical sections on access control, confidentiality and privacy, smart cards security, privacy-preserving technologies, data management, intrusion and malware, probabilistic attacks and protection, and cloud computing. Logics for Security and Privacy /Leendert van der Torre --A User-to-User Relationship-Based Access Control Model for Online Social Networks /Yuan Cheng, Jaehong Park and Ravi Sandhu --Automated and Efficient Analysis of Role-Based Access Control with Attributes /Alessandro Armando and Silvio Ranise --A Unified Attribute-Based Access Control Model Covering DAC, MAC and RBAC /Xin Jin, Ram Krishnan and Ravi Sandhu --Signature-Based Inference-Usability Confinement for Relational Databases under Functional and Join Dependencies /Joachim Biskup, Sven Hartmann, Sebastian Link, Jan-Hendrik Lochner and Torsten Schlotmann --Privacy Consensus in Anonymization Systems via Game Theory /Rosa Karimi Adl, Mina Askari, Ken Barker and Reihaneh Safavi-Naini --Uniform Obfuscation for Location Privacy /Gianluca Dini and Pericle Perazzo --Security Vulnerabilities of User Authentication Scheme Using Smart Card /Ravi Singh Pippal, Jaidhar C.D. and Shashikala Tapaswi --Secure Password-Based Remote User Authentication Scheme with Non-tamper Resistant Smart Cards /Ding Wang, Chun-guang Ma and Peng Wu --A Friendly Framework for Hidding fault enabled virus for Java Based Smartcard /Tiana Razafindralambo, Guillaume Bouffard and Jean-Louis Lanet --Approximate Privacy-Preserving Data Mining on Vertically Partitioned Data /Robert Nix, Murat Kantarcioglu and Keesook J. Han --Security Limitations of Using Secret Sharing for Data Outsourcing /Jonathan L. Dautrich and Chinya V. Ravishankar --Privacy-Preserving Subgraph Discovery /Danish Mehmood, Basit Shafiq, Jaideep Vaidya, Yuan Hong and Nabil Adam, et al. --Decentralized Semantic Threat Graphs /Simon N. Foley and William M. Fitzgerald --Code Type Revealing Using Experiments Framework /Rami Sharon and Ehud Gudes --From MDM to DB2: A Case Study of Security Enforcement Migration /Nikolay Yakovets, Jarek Gryz, Stephanie Hazlewood and Paul van Run --XSS-Dec: A Hybrid Solution to Mitigate Cross-Site Scripting Attacks /Smitha Sundareswaran and Anna Cinzia Squicciarini --Randomizing Smartphone Malware Profiles against Statistical Mining Techniques /Abhijith Shastry, Murat Kantarcioglu, Yan Zhou and Bhavani Thuraisingham --Layered Security Architecture for Masquerade Attack Detection /Hamed Saljooghinejad and Wilson Naik Bhukya --k-Anonymity-Based Horizontal Fragmentation to Preserve Privacy in Data Outsourcing /Abbas Taheri Soodejani, Mohammad Ali Hadavi and Rasool Jalili --Reconstruction Attack through Classifier Analysis /Sébastien Gambs, Ahmed Gmati and Michel Hurfin --Distributed Data Federation without Disclosure of User Existence /Takao Takenouchi, Takahiro Kawamura and Akihiko Ohsuga --Improving Virtualization Security by Splitting Hypervisor into Smaller Components /Wuqiong Pan, Yulong Zhang, Meng Yu and Jiwu Jing --Enforcing Subscription-Based Authorization Policies in Cloud Scenarios /Sabrina De Capitani di Vimercati, Sara Foresti, Sushil Jajodia and Giovanni Livraga Front Matter....Pages - Logics for Security and Privacy....Pages 1-7 A User-to-User Relationship-Based Access Control Model for Online Social Networks....Pages 8-24 Automated and Efficient Analysis of Role-Based Access Control with Attributes....Pages 25-40 A Unified Attribute-Based Access Control Model Covering DAC, MAC and RBAC....Pages 41-55 Signature-Based Inference-Usability Confinement for Relational Databases under Functional and Join Dependencies....Pages 56-73 Privacy Consensus in Anonymization Systems via Game Theory....Pages 74-89 Uniform Obfuscation for Location Privacy....Pages 90-105 Security Vulnerabilities of User Authentication Scheme Using Smart Card....Pages 106-113 Secure Password-Based Remote User Authentication Scheme with Non-tamper Resistant Smart Cards....Pages 114-121 A Friendly Framework for Hidding fault enabled virus for Java Based Smartcard....Pages 122-128 Approximate Privacy-Preserving Data Mining on Vertically Partitioned Data....Pages 129-144 Security Limitations of Using Secret Sharing for Data Outsourcing....Pages 145-160 Privacy-Preserving Subgraph Discovery....Pages 161-176 Decentralized Semantic Threat Graphs....Pages 177-192 Code Type Revealing Using Experiments Framework....Pages 193-206 From MDM to DB2: A Case Study of Security Enforcement Migration....Pages 207-222 XSS-Dec: A Hybrid Solution to Mitigate Cross-Site Scripting Attacks....Pages 223-238 Randomizing Smartphone Malware Profiles against Statistical Mining Techniques....Pages 239-254 Layered Security Architecture for Masquerade Attack Detection....Pages 255-262 k -Anonymity-Based Horizontal Fragmentation to Preserve Privacy in Data Outsourcing....Pages 263-273 Reconstruction Attack through Classifier Analysis....Pages 274-281 Distributed Data Federation without Disclosure of User Existence....Pages 282-297 Improving Virtualization Security by Splitting Hypervisor into Smaller Components....Pages 298-313 Enforcing Subscription-Based Authorization Policies in Cloud Scenarios....Pages 314-329 Back Matter....Pages -