Foundations and applications of security analysis : Joint Workshop on Automated Reasoning for Security Protocol Analysis and Issues in the Theory of Security, ARSPA-WITS 2009, York, UK, March 28-29, 2009 : revised selected papers

This book constitutes the thoroughly refereed post-conference proceedings of the Joint Workshop on Automated Reasoning for Security Protocol Analysis and Issues in the Theory of Security, ARSPA-WITS 2009, held in York, UK, in March 2009, in association with ETAPS 2009. The 12 revised full papers presented together with 2 invited talks were carefully reviewed and selected from 27 submissions. The papers feature topics including formal specification, analysis and design of security protocols and their applications, the formal definition of various aspects of security such as access control mechanisms, mobile code security and denial-of-service attacks, the modeling of information flow and its application to confidentiality policies, system composition and covert channel analysis. Front Matter....Pages - A Policy Model for Secure Information Flow....Pages 1-17 A General Framework for Nondeterministic, Probabilistic, and Stochastic Noninterference....Pages 18-33 Validating Security Protocols under the General Attacker....Pages 34-51 Usage Automata....Pages 52-69 Static Detection of Logic Flaws in Service-Oriented Applications....Pages 70-87 Improving the Semantics of Imperfect Security....Pages 88-91 Analysing PKCS#11 Key Management APIs with Unbounded Fresh Data....Pages 92-106 Transformations between Cryptographic Protocols....Pages 107-123 Formal Validation of OFEPSP+ with AVISPA....Pages 124-137 On the Automated Correction of Protocols with Improper Message Encoding....Pages 138-154 Finite Models in FOL-Based Crypto-Protocol Verification....Pages 155-172 Towards a Type System for Security APIs....Pages 173-192 Separating Trace Mapping and Reactive Simulatability Soundness: The Case of Adaptive Corruption....Pages 193-210 How Many Election Officials Does It Take to Change an Election?....Pages 211-221 Back Matter....Pages -

This book constitutes the thoroughly refereed post-conference proceedings of the Joint Workshop on Automated Reasoning for Security Protocol Analysis and Issues in the Theory of Security, ARSPA-WITS 2009, held in York, UK, in March 2009, in association with ETAPS 2009.

The 12 revised full papers presented together with 2 invited talks were carefully reviewed and selected from 27 submissions. The papers feature topics including formal specification, analysis and design of security protocols and their applications, the formal definition of various aspects of security such as access control mechanisms, mobile code security and denial-of-service attacks, the modeling of information flow and its application to confidentiality policies, system composition and covert channel analysis.