Information Systems Security: First International Conference, Iciss 2005, Kolkata, India, December 19-21, 2005, Proceedings (lecture Notes In Computer Science)

This book constitutes the refereed proceedings of the First International Conference on Information Systems Security, ICISS 2005, held in Calcutta, India in December 2005. The 19 revised papers presented together with 4 invited papers and 5 ongoing project summaries were carefully reviewed and selected from 72 submissions. The papers discuss in depth the current state of the research and practice in information systems security and cover the following topics: authentication and access control, mobile code security, key management and cryptographic protocols, privacy and anonymity, intrusion detection and avoidance, security verification, database and application security and integrity, security in P2P, sensor and ad hoc networks, secure Web services, fault tolerance and recovery methods for security infrastructure, threats, vulnerabilities and risk management, and commercial and industrial security. Authorization And Trust Enhanced Security For Distributed Applications / Vijay Varadharajan -- Toward Exploiting Location-based And Video Information In Negotiated Access Control Policies / Ernesto Damiani [and Others] -- Understanding Mutable Internet Pathogens, Or How I Learned To Stop Worrying And Love Parastitic Behavior / Kevin R.b. Butler, Patrick D. Mcdaniel -- Building India As The Destination For Secure Software Development -- Next Wave Of Opportunities Ofr The Ict Industry / Prem Chand -- Auditable Anaonymous Delegation / Bruce Christianson [and Others] -- A Robust Double Auction Protocol Based On A Hybrid Trust Model / Junghoon Ha [and Others] -- Vtrust: A Trust Management System Based On A Vector Model Of Trust / Indrajit Ray [and Others] -- Analysis And Modelling Of Trust In Distributed Information Systems / Weiliang Zhao [and Others] -- Epal Based Privacy Enforcement Using Eca Rules / Jaijit Bhattacharya, S.k. Gupta -- An Attribute Graph Based Approach To Map Local Access Control Policies To Credential Based Access Control Policies / Janice Warner [and Others] -- Protection Of Relationship In Xml Documents With The Xml-bb Model / Frédéric Cuppens [and Others] -- Eisa -- An Enterprise Application Security Solution For Databases / V. Radha, N. Hemanth Kumar -- Event Detection In Multilevel Secure Active Databases / Indrakshi Ray, Wei Huang -- Key Management For Multicast Fingerprinting / Jian Wang [and Others] -- A Key Reshuffling Scheme For Wireless Sensor Networks / Ashok Kumar Das -- Ccmea: Customized Cellular Message Encryption Algorithm For Wireless Networks / Debdeep Mukhopadhyay [and Others] -- A Hybrid Design Of Key Pre-distribution Scheme For Wireless Sensor Networks / Dibyendu Chakrabarti [and Others] -- Detecting Arp Spoofing: An Active Technique / Vivek Ramachandran, Sukumar Nandi -- Episode Based Masquerade Detection / Subrat Kumar Dash [and Others] -- Modifications Of Sha-0 To Prevent Attacks / Roshni Chatterjee [and Others] -- How To Solve Key Escrow And Identity Revocation In Identity-based Encryption Schemes / Joonghyo Oh [and Others] -- On Broadcast Encryption With Random Key Pre-distribution Schemes / Mahalingam Ramkumar -- A Framework For Examining Skill Specialization, Gender Inequity, And Career Advancement In The Information Security Field / Sharmistha Bagchi-sen [and Others] -- Spear: Design Of A Secured Peer-to-peer Architecture / Jaydev Misra [and Others] -- A Web-enabled Enterprise Security Management Framework Based On A Unified Model Of Enterprise Information System Security / Anirban Sengupta [and Others] -- Development Of A Comprehensive Intrusion Detection System -- Challenges And Approaches / N. Subramanian [and Others] -- A Transparent End-to-end Security Solution / Shince Thomas [and Others]. Sushil Jajodia, Chandan Mazumdar (eds.). The 1st International Conference On Information Systems Security (iciss 2005)... At Jadavpur University, Kolkata, India.--pref. Includes Bibliographical References And Index. Front Matter....Pages - Authorization and Trust Enhanced Security for Distributed Applications....Pages 1-20 Toward Exploiting Location-Based and Video Information in Negotiated Access Control Policies....Pages 21-35 Understanding Mutable Internet Pathogens, or How I Learned to Stop Worrying and Love Parasitic Behavior....Pages 36-48 Building India as the Destination for Secure Software Development – Next Wave of Opportunities for the ICT Industry....Pages 49-65 Auditable Anonymous Delegation....Pages 66-76 A Robust Double Auction Protocol Based on a Hybrid Trust Model....Pages 77-90 VTrust: A Trust Management System Based on a Vector Model of Trust....Pages 91-105 Analysis and Modelling of Trust in Distributed Information Systems....Pages 106-119 EPAL Based Privacy Enforcement Using ECA Rules....Pages 120-133 An Attribute Graph Based Approach to Map Local Access Control Policies to Credential Based Access Control Policies....Pages 134-147 Protection of Relationships in XML Documents with the XML-BB Model....Pages 148-163 EISA – An Enterprise Application Security Solution for Databases....Pages 164-176 Event Detection in Multilevel Secure Active Databases....Pages 177-190 Key Management for Multicast Fingerprinting....Pages 191-204 A Key Reshuffling Scheme for Wireless Sensor Networks....Pages 205-216 CCMEA: Customized Cellular Message Encryption Algorithm for Wireless Networks....Pages 217-227 A Hybrid Design of Key Pre-distribution Scheme for Wireless Sensor Networks....Pages 228-238 Detecting ARP Spoofing: An Active Technique....Pages 239-250 Episode Based Masquerade Detection....Pages 251-262 A Game-Theoretic Approach to Credit Card Fraud Detection....Pages 263-276 Modifications of SHA-0 to Prevent Attacks....Pages 277-289 How to Solve Key Escrow and Identity Revocation in Identity-Based Encryption Schemes....Pages 290-303 On Broadcast Encryption with Random Key Pre-distribution Schemes....Pages 304-316 A Framework for Examining Skill Specialization, Gender Inequity, and Career Advancement in the Information Security Field....Pages 317-321 SPEAR: Design of a Secured Peer-to-Peer Architecture....Pages 322-327 A Web-Enabled Enterprise Security Management Framework Based on a Unified Model of Enterprise Information System Security....Pages 328-331 Development of a Comprehensive Intrusion Detection System – Challenges and Approaches....Pages 332-335 A Transparent End-to-End Security Solution....Pages 336-339 Back Matter....Pages - Constitutes the refereed proceedings of the First International Conference on Information Systems Security, ICISS 2005. This book discusses the state of the research and practice in information systems security. It covers such topics as: authentication and access control, mobile code security, key management and cryptographic protocols, and more.