Future challenges in security and privacy for academia and industry : 26th IFIP TC 11 International Information Security Conference, SEC 2011, Lucerne, Switzerland, June 7-9, 2011 : Proceedings

This book constitutes the refereed proceedings of the IFIP WG 8.2 Working Conference "Researching the Future", Future IS 2011, held in Turku, Finland, in June 2011. The 17 revised full papers presented together with 4 panels and workshops were carefully reviewed and selected from numerous submissions. The papers are organized into 6 topical sections: how the future and the past are connected and inter-related; critical view of the future; technological futures; the future of information technology and work-related practices in health care; the future of industrial and institutional practices and outcomes through information technology; and the future of critical realism in IS research. Front Matter....Pages - Patience, Persistence, and Faith: Evolving the Gold Standard in Privacy and Data Protection....Pages 1-16 iSAM: An iPhone Stealth Airborne Malware....Pages 17-28 TCP Ack Storm DoS Attacks....Pages 29-40 Detecting Hidden Storage Side Channel Vulnerabilities in Networked Applications....Pages 41-55 Breaking reCAPTCHA: A Holistic Approach via Shape Recognition....Pages 56-67 From Multiple Credentials to Browser-Based Single Sign-On: Are We More Secure?....Pages 68-79 Quantifying the Effect of Graphical Password Guidelines for Better Security....Pages 80-91 A Case Study in Practical Security of Cable Networks....Pages 92-103 Ceremony Analysis: Strengths and Weaknesses....Pages 104-115 Preventing Board Flooding Attacks in Coercion-Resistant Electronic Voting Schemes....Pages 116-127 Piracy Protection for Streaming Content in Home Networks....Pages 128-141 JITDefender: A Defense against JIT Spraying Attacks....Pages 142-153 Retrofitting Security in COTS Software with Binary Rewriting....Pages 154-172 Generating Optimised and Formally Checked Packet Parsing Code....Pages 173-184 Organizational Power and Information Security Rule Compliance....Pages 185-196 Delegation of Obligations and Responsibility....Pages 197-209 Distributed Security Policy Conformance....Pages 210-222 Scalable Privacy-Preserving Data Mining with Asynchronously Partitioned Datasets....Pages 223-234 Privacy-Enhanced Web-Based Event Scheduling with Majority Agreement....Pages 235-246 Analyzing Key-Click Patterns of PIN Input for Recognizing VoIP Users....Pages 247-258 Problem Analysis of Traditional IT-Security Risk Assessment Methods – An Experience Report from the Insurance and Auditing Domain....Pages 259-270 On Computing Enterprise IT Risk Metrics....Pages 271-280 A Kolmogorov Complexity Approach for Measuring Attack Path Complexity....Pages 281-292 Extending LSCs for Behavioral Signature Modeling....Pages 293-304 Detecting Illegal System Calls Using a Data-Oriented Detection Model....Pages 305-316 IFIP Technical Committee 11 Security and Privacy Protection in Information Processing Systems....Pages 317-325 Back Matter....Pages - This book constitutes the refereed proceedings of the 26th IFIP TC 11 International Information Security Conference, SEC 2011, held in Lucerne, Switzerland, in June 2011. The 24 revised full papers presented together with a keynote talk were carefully reviewed and selected from 100 submissions. The papers are organized in topical sections on malware, information flow and DoS attacks, authentication, network security and security protocols, software security, policy compliance and obligations, privacy attacks and privacy-enhancing technologies, risk analysis and security metrics, and intrusion detection. Edited By Jan Camenisch, Simone Fischer-hübner, Yuko Murayama, Armand Portmann, Carlos Rieder.