Ict Systems Security And Privacy Protection: 29th Ifip Tc 11 International Conference, Sec 2014, Marrakech, Morocco, June 2-4, 2014, Proceedings (ifip . In Information And Communication Technology)

This book constitutes the refereed proceedings of the 29th IFIP TC 11 International Information Security and Privacy Conference, SEC 2014, held in Marrakech, Morocco, in June 2014. The 27 revised full papers and 14 short papers presented were carefully reviewed and selected from 151 submissions. The papers are organized in topical sections on intrusion detection, data security, mobile security, privacy, metrics and risk assessment, information flow control, identity management, identifiability and decision making, malicious behavior and fraud and organizational security. Front Matter....Pages - Mentor: Positive DNS Reputation to Skim-Off Benign Domains in Botnet C&C Blacklists....Pages 1-14 Game Theory Meets Information Security Management....Pages 15-29 Model-Based Detection of CSRF....Pages 30-43 Lightweight Resource Management for DDoS Traffic Isolation in a Cloud Environment....Pages 44-51 Multi-keyword Similarity Search over Encrypted Cloud Data....Pages 52-65 Security of the Multiple-Key Blom’s Key Agreement Scheme for Sensor Networks....Pages 66-79 New Algorithmic Approaches to Point Constellation Recognition....Pages 80-90 Protection Profile for PUF-Based Devices....Pages 91-98 Text-Based Active Authentication for Mobile Devices....Pages 99-112 Styx: Design and Evaluation of a New Privacy Risk Communication Method for Smartphones....Pages 113-126 A Trusted UI for the Mobile Web....Pages 127-141 Detecting Code Reuse in Android Applications Using Component-Based Control Flow Graph....Pages 142-155 Privacy Risks from Public Data Sources....Pages 156-168 Security and Privacy in Video Surveillance: Requirements and Challenges....Pages 169-184 Playing Hide and Seek with Mobile Dating Applications....Pages 185-196 Towards a Framework for Benchmarking Privacy-ABC Technologies....Pages 197-204 Evaluating the Security of a DNS Query Obfuscation Scheme for Private Web Surfing....Pages 205-219 A Novel Metric for the Evaluation of IDSs Effectiveness....Pages 220-233 How to Assess Confidentiality Requirements of Corporate Assets?....Pages 234-241 Towards Developing SCADA Systems Security Measures for Critical Infrastructures against Cyber-Terrorist Attacks....Pages 242-249 Compatibility of Safety Properties and Possibilistic Information Flow Security in MAKS....Pages 250-263 Ghostrail: Ad Hoc Control-Flow Integrity for Web Applications....Pages 264-277 An Information Flow Monitor-Inlining Compiler for Securing a Core of JavaScript....Pages 278-292 Authenticated Dictionary Based on Frequency....Pages 293-306 Géant-TrustBroker: Dynamic, Scalable Management of SAML-Based Inter-federation Authentication and Authorization Infrastructures....Pages 307-320 Efficient Identity-Based Signature from Lattices....Pages 321-329 Context-Aware Multifactor Authentication Based on Dynamic Pin....Pages 330-338 Authorship Attribution for Forensic Investigation with Thousands of Authors....Pages 339-350 Detection and Labeling of Personal Identifiable Information in E-mails....Pages 351-358 A Preliminary Study on User’s Decision Making towards Retweet Messages....Pages 359-365 Behavior Analysis of Web Service Attacks....Pages 366-379 BankSealer : An Online Banking Fraud Analysis and Decision Support System....Pages 380-394 Security Assessment of Payment Systems under PCI DSS Incompatibilities....Pages 395-402 PriMan: Facilitating the Development of Secure and Privacy-Preserving Applications....Pages 403-416 Managing Employee Security Behaviour in Organisations: The Role of Cultural Factors and Individual Values....Pages 417-430 Organizational Transformation and Information Security Culture: A Telecom Case Study....Pages 431-437 A Holistic Approach for Cyber Assurance of Critical Infrastructure with the Viable System Model....Pages 438-445 Privacy Design Strategies....Pages 446-459 Distance Computation between Two Private Preference Functions....Pages 460-470 Privacy-Preserving Implicit Authentication....Pages 471-484 Trusted Computing to Increase Security and Privacy in eID Authentication....Pages 485-492 Back Matter....Pages -