Financial Cryptography and Data Security : FC 2020 International Workshops, AsiaUSEC, CoDeFi, VOTING, and WTSC, Kota Kinabalu, Malaysia, February 14, 2020, Revised Selected Papers

This book constitutes the refereed proceedings of two workshops held at the 24th International Conference on Financial Cryptography and Data Security, FC 2020, in Kota Kinabalu, Malaysia, in February 2020. The 39 full papers and 3 short papers presented in this book were carefully reviewed and selected from 73 submissions. The papers feature four Workshops: The 1st Asian Workshop on Usable Security, AsiaUSEC 2020, the 1 st Workshop on Coordination of Decentralized Finance, CoDeFi 2020, the 5 th Workshop on Advances in Secure Electronic Voting, VOTING 2020, and the 4 th Workshop on Trusted Smart Contracts, WTSC 2020. The AsiaUSEC Workshop contributes an increase of the scientific quality of research in human factors in security and privacy. In terms of improving efficacy of secure systems, the research included an extension of graphical password authentication. Further a comparative study of SpotBugs, SonarQube, Cryptoguard and CogniCrypt identified strengths in each and refined the need for improvements in security testing tools. The CoDeFi Workshop discuss multi-disciplinary issues regarding technologies and operations of decentralized finance based on permissionless blockchain. The workshop consists of two parts; presentations by all stakeholders, and unconference style discussions. The VOTING Workshop cover topics like new methods for risk-limited audits, new ethods to increase the efficiency of mixnets, verification of security of voting schemes election auditing, voting system efficiency, voting system usability, and new technical designs for cryptographic protocols for voting systems, and new way of preventing voteselling by de-incentivising this via smart contracts. The WTSC Workshop focuses on smart contracts, i.e., self-enforcing agreements in the form of executable programs, and other decentralized applications that are deployed to and run on top of specialized blockchains. Front Matter ....Pages i-xxiv Front Matter ....Pages 1-1 Tale of Two Browsers: Understanding Users’ Web Browser Choices in South Korea (Jihye Woo, Ji Won Choi, Soyoon Jeon, Joon Kuy Han, Hyoungshick Kim, Simon S. Woo)....Pages 3-17 User-Centered Risk Communication for Safer Browsing (Sanchari Das, Jacob Abbott, Shakthidhar Gopavaram, Jim Blythe, L. Jean Camp)....Pages 18-35 Secure Email - A Usability Study (Adrian Reuter, Karima Boudaoud, Marco Winckler, Ahmed Abdelmaksoud, Wadie Lemrazzeq)....Pages 36-46 The Effects of Cue Utilization and Cognitive Load in the Detection of Phishing Emails (George Nasser, Ben W. Morrison, Piers Bayl-Smith, Ronnie Taib, Michael Gayed, Mark W. Wiggins)....Pages 47-55 Cue Utilization, Phishing Feature and Phishing Email Detection (Piers Bayl-Smith, Daniel Sturman, Mark Wiggins)....Pages 56-70 Dis-Empowerment Online: An Investigation of Privacy-Sharing Perceptions and Method Preferences (Kovila P. L. Coopamootoo)....Pages 71-83 Security and Privacy Awareness in Smart Environments – A Cross-Country Investigation (Oksana Kulyk, Benjamin Reinheimer, Lukas Aldag, Peter Mayer, Nina Gerber, Melanie Volkamer)....Pages 84-101 Understanding Perceptions of Smart Devices (Hilda Hadan, Sameer Patil)....Pages 102-121 In Our Employer We Trust: Mental Models of Office Workers’ Privacy Perceptions (Jan Tolsdorf, Florian Dehling)....Pages 122-136 Behaviour of Outsourced Employees as Sources of Information System Security Threats (David Oyebisi, Kennedy Njenga)....Pages 137-148 Exploring Effects of Auditory Stimuli on CAPTCHA Performance (Bruce Berg, Tyler Kaczmarek, Alfred Kobsa, Gene Tsudik)....Pages 149-165 PassPage: Graphical Password Authentication Scheme Based on Web Browsing Records (Xian Chu, Huiping Sun, Zhong Chen)....Pages 166-176 Empathy as a Response to Frustration in Password Choice (Kovila P. L. Coopamootoo)....Pages 177-191 Fixing the Fixes: Assessing the Solutions of SAST Tools for Securing Password Storage (Harshal Tupsamudre, Monika Sahu, Kumar Vidhani, Sachin Lodha)....Pages 192-206 Incorporating Psychology into Cyber Security Education: A Pedagogical Approach (Jacqui Taylor-Jackson, John McAlaney, Jeffrey L. Foster, Abubakar Bello, Alana Maurushat, John Dale)....Pages 207-217 Front Matter ....Pages 219-219 Effectiveness of Multi-stakeholder Discussions for Decentralized Finance: A Conference Report of CoDeFi 2020 (Shin’ichiro Matsuo)....Pages 221-229 Multistakeholder Governance for the Internet (Shigeya Suzuki)....Pages 230-241 Future of Finance (Yuta Takanashi)....Pages 242-253 Securing Cryptocurrency Exchange: Building up Standard from Huge Failures (Yuji Suga, Masaki Shimaoka, Masashi Sato, Hirotaka Nakajima)....Pages 254-270 Front Matter ....Pages 271-271 Origami Voting: A Non-cryptographic Approach to Transparent Ballot Verification (Enka Blanchard, Ted Selker)....Pages 273-290 Towards Improving the Efficacy of Code-Based Verification in Internet Voting (Oksana Kulyk, Melanie Volkamer, Monika Müller, Karen Renaud)....Pages 291-309 Short Paper: Mechanized Proofs of Verifiability and Privacy in a Paper-Based E-Voting Scheme (Marie-Laure Zollinger, Peter B. Rønne, Peter Y. A. Ryan)....Pages 310-318 Sets of Half-Average Nulls Generate Risk-Limiting Audits: SHANGRLA (Philip B. Stark)....Pages 319-336 A Note on Risk-Limiting Bayesian Polling Audits for Two-Candidate Elections (Sarah Morin, Grant McClearn, Neal McBurnett, Poorvi L. Vora, Filip Zagórski)....Pages 337-344 Vote Selling Resistant Voting (Colin Boyd, Thomas Haines, Peter B. Rønne)....Pages 345-359 Short Paper: An Update on Marked Mix-Nets: An Attack, a Fix and PQ Possibilities (Thomas Haines, Olivier Pereira, Peter B. Rønne)....Pages 360-368 Performance of Shuffling: Taking It to the Limits (Rolf Haenni, Philipp Locher)....Pages 369-385 Front Matter ....Pages 387-387 Characterizing Types of Smart Contracts in the Ethereum Landscape (Monika di Angelo, Gernot Salzer)....Pages 389-404 Smart Contract Development from the Perspective of Developers: Topics and Issues Discussed on Social Media (Afiya Ayman, Shanto Roy, Amin Alipour, Aron Laszka)....Pages 405-422 Bypassing Non-Outsourceable Proof-of-Work Schemes Using Collateralized Smart Contracts (Alexander Chepurnoy, Amitabh Saxena)....Pages 423-435 Scalable Open-Vote Network on Ethereum (Mohamed Seifelnasr, Hisham S. Galal, Amr M. Youssef)....Pages 436-450 How to Dynamically Incentivize Sufficient Level of IoT Security (Jianan Su, Michael Bartholic, Andrew Stange, Ryosuke Ushida, Shin’ichiro Matsuo)....Pages 451-465 Confidential and Auditable Payments (Tatsuo Mitani, Akira Otsuka)....Pages 466-480 MAPPCN: Multi-hop Anonymous and Privacy-Preserving Payment Channel Network (Somanath Tripathy, Susil Kumar Mohanty)....Pages 481-495 Marlowe: Implementing and Analysing Financial Contracts on Blockchain (Pablo Lamela Seijas, Alexander Nemish, David Smith, Simon Thompson)....Pages 496-511 Load Balancing for Sharded Blockchains (Naoya Okanami, Ryuya Nakamura, Takashi Nishide)....Pages 512-524 The Extended UTXO Model (Manuel M. T. Chakravarty, James Chapman, Kenneth MacKenzie, Orestis Melkonian, Michael Peyton Jones, Philip Wadler)....Pages 525-539 Privacy-Preserving Cross-Chain Atomic Swaps (Apoorvaa Deshpande, Maurice Herlihy)....Pages 540-549 A Blockchain Based Approach to Resource Sharing in Smart Neighbourhoods (Kumaramangalam Muni Venkateswarlu, Sepideh Avizheh, Reihaneh Safavi-Naini)....Pages 550-567 Enforcing Determinism of Java Smart Contracts (Fausto Spoto)....Pages 568-583 Albert, An Intermediate Smart-Contract Language for the Tezos Blockchain (Bruno Bernardo, Raphaël Cauderlier, Basile Pesin, Julien Tesson)....Pages 584-598 A Formally Verified Static Analysis Framework for Compositional Contracts (Fritz Henglein, Christian Kjær Larsen, Agata Murawska)....Pages 599-619 Back Matter ....Pages 621-622