Data and applications security XVII : status and prospects : IFIP TC11/WG11.3 Seventeenth Annual Working Conference on Data and Applications Security, August 4-6, 2003, Estes Park, Colorado, USA

security And Privacy Are Paramount Concerns In Information Processing Systems, Which Are Vital To Business, Government And Military Operations And, Indeed, Society Itself. Meanwhile, The Expansion Of The Internet And Its Convergence With Telecommunication Networks Are Providing Incredible Connectivity, Myriad Applications And, Of Course, New Threats. data And Applications Security Xvii: Status And Prospects Describes Original Research Results, Practical Experiences And Innovative Ideas, All Focused On Maintaining Security And Privacy In Information Processing Systems And Applications That Pervade Cyberspace. The Areas Of Coverage Include: -information Warfare, -information Assurance, -security And Privacy, -authorization And Access Control In Distributed Systems, -security Technologies For The Internet, -access Control Models And Technologies, -digital Forensics. this Book Is The Seventeenth Volume In The Series Produced By The International Federation For Information Processing (ifip) Working Group 11.3 On Data And Applications Security. It Presents A Selection Of Twenty-six Updated And Edited Papers From The Seventeenth Annual Ifip Tc11 / Wg11.3 Working Conference On Data And Applications Security Held At Estes Park, Colorado, Usa In August 2003, Together With A Report On The Conference Keynote Speech And A Summary Of The Conference Panel. The Contents Demonstrate The Richness And Vitality Of The Discipline, And Other Directions For Future Research In Data And Applications Security. data And Applications Security Xvii: Status And Prospects Is An Invaluable Resource For Information Assurance Researchers, Faculty Members And Graduate Students, As Well As For Individuals Engaged In Research And Development In The Information Technology Sector. Team DDU......Page 1 Table Of Content......Page 6 Contributing Authors......Page 10 Preface......Page 22 Conference Committees......Page 24 PART ONE Information Warfare......Page 26 Remote Computer Fingerprinting for Cyber Crime Investigations......Page 28 Improving Damage Assessment Efficacy in case of Frequent Attacks on Databases......Page 41 PART TWO Information Assurance......Page 56 Delivering Services with Integrity Guarantees in Survivable Database Systems......Page 58 Certifying Data from Multiple Sources......Page 72 Ensuring the Integrity of Encrypted Databases in the Database-as-a-Service Model......Page 86 Adapting Query Optimization Techniques for Efficient Alert Correlation......Page 100 PART THREE Security and Privacy......Page 114 Collaborative Privacy Preserving Frequent Item Set Mining in Vertically Partitioned Databases......Page 116 Privacy under Conditions of Concurrent Interaction with Multiple Parties......Page 130 Correlated Data Inference......Page 144 Anti-Tamper Databases: Querying Encrypted Databases......Page 158 PART FOUR Authorization and Access Control in Distributed Systems Administration Rights in the SDSD-System......Page 174 Secure Authorisation for Web Services......Page 188 A Decentralized Approach for Controlled Sharing of Resources in Virtual Communities......Page 201 Supporting Delegation in Secure Workflow Management Systems......Page 215 PART FIVE Security Technologies for the Internet......Page 228 Modifying LDAP to Support PKI......Page 230 ECPV: Efficient Certificate Path Validation in Public-key Infrastructure......Page 240 Semantics-Aware Perimeter Protection......Page 254 Systematic Development of a Family of Fair Exchange Protocols......Page 268 PART SIX Access Control Models and Technologies......Page 284 High-speed Access Control for XML Documents......Page 286 Chinese Wall Security Policy Models: Information Flows and Confining Trojan Horses......Page 300 RBAC Policy Implementation for SQL Databases......Page 313 An Administrative Model for Role Graphs......Page 327 Safety and Liveness for an RBAC/MAC Security Model......Page 341 Schema Based XML Security: RBAC Approach......Page 355 Persistent versus Dynamic Role Membership......Page 369 FlexFlow: A Flexible Flow Control Policy Specification Framework......Page 383 PART SEVEN Key Note......Page 398 Data and Applications Security: Past, Present and the Future......Page 400 PART EIGHT Panel......Page 416 Digital Forensics: Operational, Legal, and Research Issues......Page 418 "Data and Applications Security XVII: Status and Prospects describes original research results, practical experiences and innovative ideas, all focused on maintaining security and privacy in information processing systems and applications that pervade cyberspace." "Data and Applications Security XVII: Status and Prospects is an invaluable resource for information assurance researchers, faculty members and graduate students, as well as for individuals engaged in research and development in the information technology sector."--Jacket The goals of a criminal investigation are to acquire evidence of illegal activity and to conclusively establish the role of the suspect.