Emerging Challenges for Security, Privacy and Trust 24th IFIP TC 11 International Information Security Conference, SEC 2009, Pafos, Cyprus, May 18{u2013}20, 2009. Proceedings

This book constitutes the refereed proceedings of the 24th IFIP TC 11 International Information Security Conference, SEC 2009, held in Pafos, Cyprus, in May 2009. The 38 revised full papers presented were carefully reviewed and selected from 176 submissions. The papers are organized in topical sections on identification and authentication, threats and attacks, applications of cryptography and information hiding, trusted computing, security policies, validation, verification and evaluation, privacy protection and security assessment, role mining and content protection, security protocols, access control, and internet and Web applications security. Front Matter....Pages - Flexible and Transparent User Authentication for Mobile Devices....Pages 1-12 Combining Authentication, Reputation and Classification to Make Phishing Unprofitable....Pages 13-24 Audio CAPTCHA for SIP-Based VoIP....Pages 25-38 Roving Bugnet: Distributed Surveillance Threat and Mitigation....Pages 39-50 On Robust Covert Channels Inside DNS....Pages 51-62 Discovering Application-Level Insider Attacks Using Symbolic Execution....Pages 63-75 Custom JPEG Quantization for Improved Iris Recognition Accuracy....Pages 76-86 On the IPP Properties of Reed-Solomon Codes....Pages 87-97 A Generic Authentication LoA Derivation Model....Pages 98-108 Media-Break Resistant eSignatures in eGovernment: An Austrian Experience....Pages 109-118 How to Bootstrap Security for Ad-Hoc Network: Revisited....Pages 119-131 Steganalysis of Hydan....Pages 132-142 On the Impossibility of Detecting Virtual Machine Monitors....Pages 143-151 Implementation of a Trusted Ticket System....Pages 152-163 A Policy Based Approach for the Management of Web Browser Resources to Prevent Anonymity Attacks in Tor....Pages 164-175 A Policy Language for Modelling Recommendations....Pages 176-189 On the Security Validation of Integrated Security Solutions....Pages 190-201 Verification of Security Policy Enforcement in Enterprise Systems....Pages 202-213 Optimization of the Controlled Evaluation of Closed Relational Queries....Pages 214-225 Collaborative Privacy – A Community-Based Privacy Infrastructure....Pages 226-236 Security and Privacy Improvements for the Belgian eID Technology....Pages 237-247 A Structured Security Assessment Methodology for Manufacturers of Critical Infrastructure Components....Pages 248-258 Mining Stable Roles in RBAC....Pages 259-269 Privacy-Preserving Content-Based Publish/Subscribe Networks....Pages 270-282 Broadcast Encryption for Differently Privileged....Pages 283-293 Ontology-Based Secure XML Content Distribution....Pages 294-306 NGBPA Next Generation BotNet Protocol Analysis....Pages 307-317 Non-repudiation Analysis with LySa ....Pages 318-329 A Provably Secure Secret Handshake with Dynamic Controlled Matching....Pages 330-341 Towards a Theory of White-Box Security....Pages 342-352 On a Taxonomy of Delegation....Pages 353-363 Efficient Key Management for Enforcing Access Control in Outsourced Scenarios....Pages 364-375 A Probabilistic Bound on the Basic Role Mining Problem and Its Applications....Pages 376-386 Automating Access Control Logics in Simple Type Theory with LEO-II....Pages 387-398 In Law We Trust? Trusted Computing and Legal Responsibility for Internet Security....Pages 399-409 Persona: Network Layer Anonymity and Accountability for Next Generation Internet....Pages 410-420 Jason: A Scalable Reputation System for the Semantic Web....Pages 421-431 Which Web Browsers Process SSL Certificates in a Standardized Way?....Pages 432-442 Back Matter....Pages - It was an honor and a privilege to chair the 24th IFIP International Information Se- rity Conference (SEC 2009), a 24-year-old event that has become a tradition for - formation security professionals around the world. SEC 2009 was organized by the Technical Committee 11 (TC-11) of IFIP, and took place in Pafos, Cyprus, during May 18–20, 2009. It is an indication of good fortune for a Chair to serve a conference that takes place in a country with the natural beauty of Cyprus, an island where the hospitality and frie- liness of the people have been going together, hand-in-hand, with its long history. This volume contains the papers selected for presentation at SEC 2009. In response to the call for papers, 176 papers were submitted to the conference. All of them were evaluated on the basis of their novelty and technical quality, and reviewed by at least two members of the conference Program Committee. Of the papers submitted, 39 were selected for presentation at the conference; the acceptance rate was as low as 22%, thus making the conference a highly competitive forum. It is the commitment of several people that makes international conferences pos- ble. That also holds true for SEC 2009. The list of people who volunteered their time and energy to help is really long.