Information Systems Security: First International conference, ICISS 2005, Kolkata, India, December 19-21, 2005, Proceedings (Lecture Notes in Computer Science, 3803)

The 1st InternationalConference on Information Systems Security (ICISS 2005) was held December 19 21, 2005 at Jadavpur University, Kolkata, India. The objectives of the conference were to discuss in depth the current state of the research and practice in information systems security, enable participants to bene?tfrompersonalcontactwithotherresearchersandexpandtheirknowledge, and disseminate the research results. This volumecontains 4 invitedpapers,19refereedpapersthat werepresented at the conference, and 5 ongoing project summaries. The refereed papers, which were selected from the 72 submissions, were rigorouslyreviewed by the Program Committee members. The volume provides researcherswith a broad perspective of recent developments in information systems security. A special note of thanks goes to the many volunteers whose e?orts made this conference a success. We wish to thank Prem Chand, Ernesto Damiani, Patrick McDaniel, R. Sekar, and Vijay Varadharajan for agreeing to deliver the invited talks, the authors for their worthy contributions, and the referees for their time and e?ort in reviewing the papers. We are grateful to Arun Majumdar and Aditya Bagchi for serving as the General Chairs. Last, but certainly not least, our thanks go to Vijay Kowtha of the U.S. O?ce ofNaval ResearchGlobal and MichaelCheetham of the INDO-US Science & Technology Forum for providing the generous ?nancial support." Authorization And Trust Enhanced Security For Distributed Applications / Vijay Varadharajan -- Toward Exploiting Location-based And Video Information In Negotiated Access Control Policies / Ernesto Damiani [and Others] -- Understanding Mutable Internet Pathogens, Or How I Learned To Stop Worrying And Love Parastitic Behavior / Kevin R.b. Butler, Patrick D. Mcdaniel -- Building India As The Destination For Secure Software Development -- Next Wave Of Opportunities Ofr The Ict Industry / Prem Chand -- Auditable Anaonymous Delegation / Bruce Christianson [and Others] -- A Robust Double Auction Protocol Based On A Hybrid Trust Model / Junghoon Ha [and Others] -- Vtrust: A Trust Management System Based On A Vector Model Of Trust / Indrajit Ray [and Others] -- Analysis And Modelling Of Trust In Distributed Information Systems / Weiliang Zhao [and Others] -- Epal Based Privacy Enforcement Using Eca Rules / Jaijit Bhattacharya, S.k. Gupta -- An Attribute Graph Based Approach To Map Local Access Control Policies To Credential Based Access Control Policies / Janice Warner [and Others] -- Protection Of Relationship In Xml Documents With The Xml-bb Model / Frédéric Cuppens [and Others] -- Eisa -- An Enterprise Application Security Solution For Databases / V. Radha, N. Hemanth Kumar -- Event Detection In Multilevel Secure Active Databases / Indrakshi Ray, Wei Huang -- Key Management For Multicast Fingerprinting / Jian Wang [and Others] -- A Key Reshuffling Scheme For Wireless Sensor Networks / Ashok Kumar Das -- Ccmea: Customized Cellular Message Encryption Algorithm For Wireless Networks / Debdeep Mukhopadhyay [and Others] -- A Hybrid Design Of Key Pre-distribution Scheme For Wireless Sensor Networks / Dibyendu Chakrabarti [and Others] -- Detecting Arp Spoofing: An Active Technique / Vivek Ramachandran, Sukumar Nandi -- Episode Based Masquerade Detection / Subrat Kumar Dash [and Others] -- Modifications Of Sha-0 To Prevent Attacks / Roshni Chatterjee [and Others] -- How To Solve Key Escrow And Identity Revocation In Identity-based Encryption Schemes / Joonghyo Oh [and Others] -- On Broadcast Encryption With Random Key Pre-distribution Schemes / Mahalingam Ramkumar -- A Framework For Examining Skill Specialization, Gender Inequity, And Career Advancement In The Information Security Field / Sharmistha Bagchi-sen [and Others] -- Spear: Design Of A Secured Peer-to-peer Architecture / Jaydev Misra [and Others] -- A Web-enabled Enterprise Security Management Framework Based On A Unified Model Of Enterprise Information System Security / Anirban Sengupta [and Others] -- Development Of A Comprehensive Intrusion Detection System -- Challenges And Approaches / N. Subramanian [and Others] -- A Transparent End-to-end Security Solution / Shince Thomas [and Others]. Sushil Jajodia, Chandan Mazumdar (eds.). The 1st International Conference On Information Systems Security (iciss 2005)... At Jadavpur University, Kolkata, India.--pref. Includes Bibliographical References And Index. Frontmatter Authorization and Trust Enhanced Security for Distributed Applications Toward Exploiting Location-Based and Video Information in Negotiated Access Control Policies Understanding Mutable Internet Pathogens, or How I Learned to Stop Worrying and Love Parasitic Behavior Building India as the Destination for Secure Software Development -- Next Wave of Opportunities for the ICT Industry Auditable Anonymous Delegation A Robust Double Auction Protocol Based on a Hybrid Trust Model VTrust: A Trust Management System Based on a Vector Model of Trust Analysis and Modelling of Trust in Distributed Information Systems EPAL Based Privacy Enforcement Using ECA Rules An Attribute Graph Based Approach to Map Local Access Control Policies to Credential Based Access Control Policies Protection of Relationships in XML Documents with the XML-BB Model EISA -- An Enterprise Application Security Solution for Databases Event Detection in Multilevel Secure Active Databases Key Management for Multicast Fingerprinting A Key Reshuffling Scheme for Wireless Sensor Networks CCMEA: Customized Cellular Message Encryption Algorithm for Wireless Networks A Hybrid Design of Key Pre-distribution Scheme for Wireless Sensor Networks Detecting ARP Spoofing: An Active Technique Episode Based Masquerade Detection A Game-Theoretic Approach to Credit Card Fraud Detection Modifications of SHA-0 to Prevent Attacks How to Solve Key Escrow and Identity Revocation in Identity-Based Encryption Schemes On Broadcast Encryption with Random Key Pre-distribution Schemes A Framework for Examining Skill Specialization, Gender Inequity, and Career Advancement in the Information Security Field SPEAR: Design of a Secured Peer-to-Peer Architecture A Web-Enabled Enterprise Security Management Framework Based on a Unified Model of Enterprise Information System Security Development of a Comprehensive Intrusion Detection System -- Challenges and Approaches A Transparent End-to-End Security Solution Backmatter This Book Constitutes The Refereed Proceedings Of The First International Conference On Information Systems Security, Iciss 2005, Held In Calcutta, India In December 2005. The 19 Revised Papers Presented Together With 4 Invited Papers And 5 Ongoing Project Summaries Were Carefully Reviewed And Selected From 72 Submissions. The Papers Discuss In Depth The Current State Of The Research And Practice In Information Systems Security And Cover The Following Topics: Authentication And Access Control, Mobile Code Security, Key Management And Cryptographic Protocols, Privacy And Anonymity, Intrusion Detection And Avoidance, Security Verification, Database And Application Security And Integrity, Security In P2p, Sensor And Ad Hoc Networks, Secure Web Services, Fault Tolerance And Recovery Methods For Security Infrastructure, Threats, Vulnerabilities And Risk Management, And Commercial And Industrial Security. Constitutes the refereed proceedings of the First International Conference on Information Systems Security, ICISS 2005. This book discusses the state of the research and practice in information systems security. It covers such topics as: authentication and access control, mobile code security, key management and cryptographic protocols, and more.