Identity and Privacy in the Internet Age: 14th Nordic Conference on Secure IT Systems, NordSec 2009, Oslo, Norway, 14-16 October 2009, Proceedings (Lecture Notes in Computer Science, 5838)

This book constitutes the refereed proceedings of the 14th International Conference on Secure IT Systems, NordSec 2009, held in Oslo, Norway, October 14-16, 2009. The 20 revised full papers and 8 short papers presented were carefully reviewed and selected from 52 submissions. Under the theme Identity and Privacy in the Internet Age, this year's conference explored policies, strategies and technologies for protecting identities and the growing flow of personal information passing through the Internet and mobile networks under an increasingly serious threat picture. Among the contemporary security issues discussed were Security Services Modeling, Petri Nets, Attack Graphs, Electronic Voting Schemes, Anonymous Payment Schemes, Mobile ID-Protocols, SIM Cards, Network Embedded Systems, Trust, Wireless Sensor Networks, Privacy, Privacy Disclosure Regulations, Financial Cryptography, PIN Verification, Temporal Access Control, Random Number Generators, and some more. Front Matter....Pages - On the Effectiveness of Privacy Breach Disclosure Legislation in Europe: Empirical Evidence from the US Stock Market....Pages 1-14 Facilitating the Adoption of Tor by Focusing on a Promising Target Group....Pages 15-27 A Parallelism-Based Approach to Network Anonymization....Pages 28-43 Security Usability of Petname Systems....Pages 44-59 An Analysis of Widget Security....Pages 60-71 Trade-Offs in Cryptographic Implementations of Temporal Access Control....Pages 72-87 Blunting Differential Attacks on PIN Processing APIs....Pages 88-103 Characterising Anomalous Events Using Change - Point Correlation on Unsolicited Network Traffic....Pages 104-119 An Improved Attack on TKIP....Pages 120-132 ContikiSec: A Secure Network Layer for Wireless Sensor Networks under the Contiki Operating System....Pages 133-147 A Mechanism for Identity Delegation at Authentication Level....Pages 148-162 Introducing Sim-Based Security Tokens as Enabling Technology for Mobile Real-Time Services....Pages 163-178 Towards True Random Number Generation in Mobile Environments....Pages 179-189 Towards Modelling Information Security with Key-Challenge Petri Nets....Pages 190-206 Security and Trust for the Norwegian E-Voting Pilot Project E-valg 2011 ....Pages 207-222 Advanced SIM Capabilities Supporting Trust-Based Applications....Pages 223-238 Towards Practical Enforcement Theories....Pages 239-254 Security Analysis of AN.ON’s Payment Scheme....Pages 255-270 Formal Analysis of the Estonian Mobile-ID Protocol....Pages 271-286 Generating In-Line Monitors for Rabin Automata....Pages 287-301 Back Matter....Pages - The NordSec workshops were started in 1996 with the aim of bringing together - searchers and practitioners within computer security in the Nordic countries – thereby establishing a forum for discussions and co-operation between universities, industry and computer societies. Since then, the workshop has developed into a fully fledged inter- tional information security conference, held in the Nordic countries on a round robin basis. The 14th Nordic Conference on Secure IT Systems was held in Oslo on 14-16 October 2009. Under the theme Identity and Privacy in the Internet Age, this year's conference explored policies, strategies and technologies for protecting identities and the growing flow of personal information passing through the Internet and mobile n- works under an increasingly serious threat picture. Among the contemporary security issues discussed were security services modeling, Petri nets, attack graphs, electronic voting schemes, anonymous payment schemes, mobile ID-protocols, SIM cards, n- work embedded systems, trust, wireless sensor networks, privacy, privacy disclosure regulations, financial cryptography, PIN verification, temporal access control, random number generators, and some more. As a pre-cursor to the conference proper, the Nordic Security Day on Wednesday 14 October hosted talks by leading representatives from industry, academia and the g- ernment sector, and a press conference was given.