Information Security Management and Small Systems Security IFIP TC11 WG11. 1/WG11. 2 Seventh Annual Working Conference on Information Security Management and Small Systems Security September 30-October 1, 1999, Amsterdam, the Netherlands

The 7th Annual Working Conference of ISMSSS (lnformation Security Management and Small Systems Security), jointly presented by WG 11.1 and WG 11.2 of the International Federation for Information Processing {IFIP), focuses on various state-of-art concepts in the two relevant fields. The conference focuses on technical, functional as well as managerial issues. This working conference brings together researchers and practitioners of different disciplines, organisations, and countries, to discuss the latest developments in (amongst others) secure techniques for smart card technology, information security management issues, risk analysis, intranets, electronic commerce protocols, certification and accreditation and biometrics authentication. W e are fortunate to have attracted at least six highly acclaimed international speakers to present invited lectures, which will set the platform for the reviewed papers. Invited speakers will talk on a broad spectrum of issues, all related to information security management and small system security issues. These talks cover new perspectives on secure smart card systems, the role of BS7799 in certification, electronic commerce and smart cards, iris biometrics and many more. AH papers presented at this conference were reviewed by a minimum of two international reviewers. W e wish to express our gratitude to all authors of papers and the international referee board. W e would also like to express our appreciation to the organising committee, chaired by Leon Strous, for aU their inputs and arrangements. Front Matter....Pages i-x Front Matter....Pages XI-XI A Protocol Improvement for High-Bandwith Encryption Using Non-Encrypting Smart Cards....Pages 1-10 Real-time Risk Analysis on the Internet....Pages 11-27 A practical approach to manage data communication security....Pages 29-39 The Future of Australian & New Zealand Security Standard AS/NZS 4444?....Pages 41-49 The Effective Utilization of Audit Logs in Information Security Management....Pages 51-61 An approach to standardizing security analysis methods for virtual systems....Pages 63-74 Information Security at Top Level....Pages 75-88 Risk analysis on Internet connection....Pages 89-101 A Secure Station for Network Monitoring and Control....Pages 103-116 Security Aspects of a Java-Servlet-Based Web-Hosted E-Mail System....Pages 117-130 Time as an Aid to Improving Security in Smart Cards....Pages 131-144 The Intranet Authorization Paradigm....Pages 145-159 Predicting the Performance of Transactional Electronic Commerce Protocols....Pages 161-175 Front Matter....Pages 177-177 The Cyber-Posture of the National Information Infrastructure....Pages 179-203 Principles of Iris Recognition....Pages 205-212 Designing a Secure System for Implementing Chip Cards in the Financial Services Industry....Pages 213-220 New models for the management of public key infrastructure and root certification authorities....Pages 221-229 A Secure Electronic Commerce Environment : Only with “Smart Cards”....Pages 231-241 Back Matter....Pages 243-243 This book presents a state-of-the-art review of current perspectives in information security management and small systems security, focusing on technical and functional as well as managerial issues. It contains the selected proceedings of the Seventh Annual Working Conference on Information Security Management and Small Systems Security, sponsored by the International Federation for Information Processing (IFIP) and held in Amsterdam, The Netherlands, in September/October 1999. Topics in this volume include the latest developments in: Secure techniques for smart card technology; Information security management issues; Risk analysis; Intranets; Electronic commerce protocols; Certification and accreditation; Biometrics authentication. £/LIST£ This volume will be essential reading for researchers in computer science, information technology, and business informatics, as well as for information security consultants, systems analysts and engineers, and IT managers.