ICT Systems Security and Privacy Protection: 34th IFIP TC 11 International Conference, SEC 2019, Lisbon, Portugal, June 25-27, 2019, Proceedings (IFIP ... and Communication Technology, 562)

"This book constitutes the refereed proceedings of the 34th IFIP TC 11 International Conference on Information Security and Privacy Protection, SEC 2019, held in Lisbon, Portugal, in June 2019. The 26 revised full papers presented were carefully reviewed and selected from 76 submissions. The papers present novel research on theoretical and practical aspects of security and privacy protection in ICT systems. They are organized in topical sections on intrusion detection, access control, organizational and behavioral, crypto and encryption, and integrity."--Publisher's website Front Matter ....Pages i-xi Front Matter ....Pages 1-1 Hunting Brand Domain Forgery: A Scalable Classification for Homograph Attack (Tran Phuong Thao, Yukiko Sawaya, Hoang-Quoc Nguyen-Son, Akira Yamada, Kazumasa Omote, Ayumu Kubota)....Pages 3-18 GanDef: A GAN Based Adversarial Training Defense for Neural Network Classifier (Guanxiong Liu, Issa Khalil, Abdallah Khreishah)....Pages 19-32 Control Logic Injection Attacks on Industrial Control Systems (Hyunguk Yoo, Irfan Ahmed)....Pages 33-48 An Efficient and Scalable Intrusion Detection System on Logs of Distributed Applications (David Lanoë, Michel Hurfin, Eric Totel, Carlos Maziero)....Pages 49-63 Front Matter ....Pages 65-65 Performance of Password Guessing Enumerators Under Cracking Conditions (Mathieu Valois, Patrick Lacharme, Jean-Marie Le Bars)....Pages 67-80 An Offline Dictionary Attack Against zkPAKE Protocol (José Becerra, Peter Y. A. Ryan, Petra Šala, Marjan Škrobot)....Pages 81-90 Fine-Grained Access Control in Industrial Internet of Things (Dominik Ziegler, Josef Sabongui, Gerald Palfinger)....Pages 91-104 Towards an Automated Extraction of ABAC Constraints from Natural Language Policies (Manar Alohaly, Hassan Takabi, Eduardo Blanco)....Pages 105-119 Removing Problems in Rule-Based Policies (Zheng Cheng, Jean-Claude Royer, Massimo Tisi)....Pages 120-133 Is This Really You? An Empirical Study on Risk-Based Authentication Applied in the Wild (Stephan Wiefling, Luigi Lo Iacono, Markus Dürmuth)....Pages 134-148 Front Matter ....Pages 149-149 Differentially Private Generative Adversarial Networks for Time Series, Continuous, and Discrete Open Data (Lorenzo Frigerio, Anderson Santana de Oliveira, Laurent Gomez, Patrick Duverger)....Pages 151-164 ESARA: A Framework for Enterprise Smartphone Apps Risk Assessment (Majid Hatamian, Sebastian Pape, Kai Rannenberg)....Pages 165-179 SocialAuth: Designing Touch Behavioral Smartphone User Authentication Based on Social Networking Applications (Weizhi Meng, Wenjuan Li, Lijun Jiang, Jianying Zhou)....Pages 180-193 The Influence of Organizational, Social and Personal Factors on Cybersecurity Awareness and Behavior of Home Computer Users (Joëlle Simonet, Stephanie Teufel)....Pages 194-208 To Be, or Not to Be Notified (Patrick Murmann, Delphine Reinhardt, Simone Fischer-Hübner)....Pages 209-222 A Structured Comparison of the Corporate Information Security Maturity Level (Michael Schmid, Sebastian Pape)....Pages 223-237 Predicting Students’ Security Behavior Using Information-Motivation-Behavioral Skills Model (Ali Farooq, Debora Jeske, Jouni Isoaho)....Pages 238-252 Why Do People Pay for Privacy-Enhancing Technologies? The Case of Tor and JonDonym (David Harborth, Xinyuan Cai, Sebastian Pape)....Pages 253-267 Front Matter ....Pages 269-269 Arcana: Enabling Private Posts on Public Microblog Platforms (Anirudh Narasimman, Qiaozhi Wang, Fengjun Li, Dongwon Lee, Bo Luo)....Pages 271-285 Fast Keyed-Verification Anonymous Credentials on Standard Smart Cards (Jan Camenisch, Manu Drijvers, Petr Dzurenda, Jan Hajny)....Pages 286-298 BlockTag: Design and Applications of a Tagging System for Blockchain Analysis (Yazan Boshmaf, Husam Al Jawaheri, Mashael Al Sabah)....Pages 299-313 Forward Secure Identity-Based Signature Scheme with RSA (Hankyung Ko, Gweonho Jeong, Jongho Kim, Jihye Kim, Hyunok Oh)....Pages 314-327 Front Matter ....Pages 329-329 On the Effectiveness of Control-Flow Integrity Against Modern Attack Techniques (Sarwar Sayeed, Hector Marco-Gisbert)....Pages 331-344 Automatically Proving Purpose Limitation in Software Architectures (Kai Bavendiek, Tobias Mueller, Florian Wittner, Thea Schwaneberg, Christian-Alexander Behrendt, Wolfgang Schulz et al.)....Pages 345-358 Commit Signatures for Centralized Version Control Systems (Sangat Vaidya, Santiago Torres-Arias, Reza Curtmola, Justin Cappos)....Pages 359-373 Towards Contractual Agreements for Revocation of Online Data (Theodor Schnitzler, Markus Dürmuth, Christina Pöpper)....Pages 374-387 Correction to: ESARA: A Framework for Enterprise Smartphone Apps Risk Assessment (Majid Hatamian, Sebastian Pape, Kai Rannenberg)....Pages C1-C1 Back Matter ....Pages 389-390 Hunting brand domain forgery: a scalable classification for homograph attack / Tran Phuong Thao, Yukiko Sawaya, Hoang-Quoc Nguyen-Son, Akira Yamada, Kazumasa Omote, Ayumu Kubota -- GanDef: a GAN based adversarial training defense for neural network classifier / Guanxiong Liu, Issa Khalil, Abdallah Khreishah -- Control logic injection attacks on industrial control systems / Hyunguk Yoo, Irfan Ahmed -- An efficient and scalable intrusion detection system on logs of distributed applications / David Lanoë, Michel Hurfin, Eric Totel, Carlos Maziero -- Performance of password guessing enumerators under cracking conditions / Mathieu Valois, Patrick Lacharme, Jean-Marie Le Bars -- An offline dictionary attack against zkPAKE protocol / José Becerra, Peter Y.A. Ryan, Petra Šala, Marjan Škrobot -- Fine-grained access control in industrial Internet of things / Dominik Ziegler, Josef Sabongui, Gerald Palfinger -- Towards an automated extraction of ABAC constraints from natural language policies / Manar Alohaly, Hassan Takabi, Eduardo Blanco -- Removing problems in rule-based policies / Zheng Cheng, Jean-Claude Royer, Massimo Tisi -- Is this really you? An empirical study on risk-based authentication applied in the wild / Stephan Wiefling, Luigi Lo Iacono, Markus Dürmuth -- Differentially private generative adversarial networks for time series, continuous, and discrete open data / Lorenzo Frigerio, Anderson Santana de Oliveira, Laurent Gomez, Patrick Duverger -- ESARA: a framework for enterprise smartphone apps risk assessment / Majid Hatamian, Sebastian Pape, Kai Rannenberg -- SocialAuth: designing touch behavioral smartphone user authentication based on social networking applications / Weizhi Meng, Wenjuan Li, Lijun Jiang, Jianying Zhou -- The influence of organizational, social and personal factors on cybersecurity awareness and behavior of home computer users / Joëlle Simonet, Stephanie Teufel -- To be, or not to be notified: eliciting privacy notification preferences for online mHealth services / Patrick Murmann, Delphine Reinhardt, Simone Fischer-Hübner -- A structured comparison of the corporate information security maturity level / Michael Schmid, Sebastian Pape -- Predicting students' security behavior using information-motivation-behavioral skills model / Ali Farooq, Debora Jeske, Jouni Isoaho -- Why do people pay for privacy-enhancing technologies? The case of Tor and JonDonym / David Harborth, Xinyuan Cai, Sebastian Pape -- Arcana: enabling private posts on public microblog platforms / Anirudh Narasimman, Qiaozhi Wang, Fengjun Li, Dongwon Lee, Bo Luo -- Fast keyed-verification anonymous credentials on standard smart cards / Jan Camenisch, Manu Drijvers, Petr Dzurenda, Jan Hajny -- BlockTag: design and applications of a tagging system for blockchain analysis / Yazan Boshmaf, Husam Al Jawaheri, Mashael Al Sabah -- Forward secure identity-based signature scheme with RSA / Hankyung Ko, Gweonho Jeong, Jongho Kim, Jihye Kim, Hyunok Oh -- On the effectiveness of control-flow integrity against modern attack techniques / Sarwar Sayeed, Hector Marco-Gisbert -- Automatically proving purpose limitation in software architectures / Kai Bavendiek, Tobias Mueller, Florian Wittner, Thea Schwaneberg, Christian-Alexander Behrendt, Wolfgang Schulz, Hannes Federrath, Sibylle Schupp -- Commit signatures for centralized version control systems / Sangat Vaidya, Santiago Torres-Arias, Reza Curtmola, Justin Cappos -- Towards contractual agreements for revocation of online data / Theodor Schnitzler, Markus Dürmuth, Christina Pöpper