Formal aspects in security and trust : IFIP TC1 WG1.7 Workshop on Formal Aspects in Security and Trust (FAST), World Computer Congress, August 22-27, 2004, Toulouse, France

International Federation for Information Processing The IFIP series publishes state-of-the-art results in the sciences and technologies of information and communication. The scope of the series includes: foundations of computer science; software theory and practice; education; computer applications in technology; communication systems; systems modeling and optimization; information systems; computers and society; computer systems technology; security and protection in information processing systems; artificial intelligence; and human-computer interaction. Proceedings and post-proceedings of referred international conferences in computer science and interdisciplinary fields are featured. These results often precede journal publication and represent the most current research. The principal aim of the IFIP series is to encourage education and the dissemination and exchange of information about all aspects of computing. For more information about the 300 other books in the IFIP series, please visit www.springeronline.com. For more information about IFIP, please visit www.ifip.or.at. Second International Workshop On Formal Aspects In Security And Trust Is An Essential Reference For Both Academic And Professional Researchers In The Field Of Security And Trust. Because Of The Complexity And Scale Of Deployment Of Emerging Ict Systems Based On Web Service And Grid Computing Concepts, We Also Need To Develop New, Scalable, And More Flexible Foundational Models Of Pervasive Security Enforcement Across Organizational Borders And In Situations Where There Is High Uncertainty About The Identity And Trustworthiness Of The Participating Networked Entites. On The Other Hand, The Increasingly Complex Set Of Building Activities Sharing Different Resources But Managed With Different Policies Calls For New And Business-enabling Models Of Trust Between Members Of Virtual Organizations And Communities That Span The Boundaries Of Physical Enterprises And Loosely Structured Groups Of Individuals. The Papers Presented In This Volume Address The Challenges Posed By Ambient Intelligence Space As A Future Paradigm And The Need For A Set Of Concepts, Tools And Methodologies To Enable The User's Trust And Confidence In The Underlying Computing Infrastructure. This State-of-the-art Volume Presents Selected Papers From The 2nd International Workshop On Formal Aspects In Security And Trust, Held In Conjuuctions With The 18th Ifip World Computer Congress, August 2004, In Toulouse, France. The Collection Will Be Important Not Only For Computer Security Experts And Researchers But Also For Teachers And Adminstrators Interested In Security Methodologies And Research. Security Issues in the Tuple-Space Coordination Model....Pages 1-12 Information Flow Analysis for Probabilistic Timed Automata....Pages 13-26 Dynamic Security Labels and Noninterference (Extended Abstract)....Pages 27-40 Formal Analysis of a Fair Payment Protocol....Pages 41-54 Pattern-Matching Spi-Calculus....Pages 55-70 Decidability of Opacity with Non-Atomic Keys....Pages 71-84 Virtual Analysis and Reduction of Side-Channel Vulnerabilities of Smartcards....Pages 85-98 Family Secrets....Pages 99-114 An Interactive Trust Management and Negotiation Scheme....Pages 115-128 Complementing Computational Protocol Analysis with Formal Specifications....Pages 129-144 A Trust Model with Statistical Foundation....Pages 145-158 Modelling Dynamic Opacity Using Petri Nets with Silent Actions....Pages 159-172 Reasoning about Secure Interoperation Using Soft Constraints....Pages 173-186 A Logic for Auditing Accountability in Decentralized Systems....Pages 187-201 A Formal Approach to Specify and Deploy a Network Security Policy....Pages 203-218 Discretionary Overriding of Access Control in the Privilege Calculus....Pages 219-232 A Formal Model for Parameterized Role-Based Access Control....Pages 233-246 "Contains the post-proceedings of the second international Workshop on Formal Aspects in Security and Trust (FAST2004), held in Toulouse, 26-27 August 2004. FAST is an event of the 18th IFIP World Computer Congress (WCC2004) and is under the auspices of IFIP WG1.7 on 'Foundations of security analysis and design'"--Page [v] New networking technologies are moving to support applications for open systems (e.g., peer-to-peer, ad-hoc networks, Web services), in which the entities that will be involved in the application are unknown at design time.