Data and Applications Security and Privacy XXXI : 31st Annual IFIP WG 11.3 Conference, DBSec 2017, Philadelphia, PA, USA, July 19-21, 2017, Proceedings

This book constitutes the refereed proceedings of the 31st Annual IFIP WG 11.3 International Working Conference on Data and Applications Security and Privacy, DBSec 2017, held in Philadelphia, PA, USA, in July 2017. The 21 full papers and 9 short papers presented were carefully reviewed and selected from 59 submissions. The papers are organized in topical sections on access control, privacy, cloud security, secure storage in the cloud, secure systems, and security in networks and Web. Front Matter....Pages I-XIII Front Matter....Pages 1-1 Cryptographically Enforced Role-Based Access Control for NoSQL Distributed Databases....Pages 3-19 Resilient Reference Monitor for Distributed Access Control via Moving Target Defense....Pages 20-40 Preventing Unauthorized Data Flows....Pages 41-62 Object-Tagged RBAC Model for the Hadoop Ecosystem....Pages 63-81 Identification of Access Control Policy Sentences from Natural Language Policy Documents....Pages 82-100 Fast Distributed Evaluation of Stateful Attribute-Based Access Control Policies....Pages 101-119 Front Matter....Pages 121-121 Gaussian Mixture Models for Classification and Hypothesis Tests Under Differential Privacy....Pages 123-141 Differentially Private K-Skyband Query Answering Through Adaptive Spatial Decomposition....Pages 142-163 Mutually Private Location Proximity Detection with Access Control....Pages 164-184 Privacy-Preserving Elastic Net for Data Encrypted by Different Keys - With an Application on Biomarker Discovery....Pages 185-204 Privacy-Preserving Community-Aware Trending Topic Detection in Online Social Media....Pages 205-224 Privacy-Preserving Outlier Detection for Data Streams....Pages 225-238 Undoing of Privacy Policies on Facebook....Pages 239-255 Front Matter....Pages 257-257 Towards Actionable Mission Impact Assessment in the Context of Cloud Computing....Pages 259-274 Reducing Security Risks of Clouds Through Virtual Machine Placement....Pages 275-292 Firewall Policies Provisioning Through SDN in the Cloud....Pages 293-310 Budget-Constrained Result Integrity Verification of Outsourced Data Mining Computations....Pages 311-324 Searchable Encryption to Reduce Encryption Degradation in Adjustably Encrypted Databases....Pages 325-336 Efficient Protocols for Private Database Queries....Pages 337-348 Toward Group-Based User-Attribute Policies in Azure-Like Access Control Systems....Pages 349-361 Front Matter....Pages 363-363 High-Speed High-Security Public Key Encryption with Keyword Search....Pages 365-385 HardIDX: Practical and Secure Index with SGX....Pages 386-408 A Novel Cryptographic Framework for Cloud File Systems and CryFS, a Provably-Secure Construction....Pages 409-429 Front Matter....Pages 431-431 Keylogger Detection Using a Decoy Keyboard....Pages 433-452 The Fallout of Key Compromise in a Proxy-Mediated Key Agreement Protocol....Pages 453-472 Improving Resilience of Behaviometric Based Continuous Authentication with Multiple Accelerometers....Pages 473-485 Front Matter....Pages 487-487 A Content-Aware Trust Index for Online Review Spam Detection....Pages 489-508 Securing Networks Against Unpatchable and Unknown Vulnerabilities Using Heterogeneous Hardening Options....Pages 509-528 A Distributed Mechanism to Protect Against DDoS Attacks....Pages 529-540 Securing Web Applications with Predicate Access Control....Pages 541-554 Back Matter....Pages 555-556