ISSE 2006 : securing electronic business processes : highlights of the Information Security Solutions Europe 2006 Conference

This book presents the most interesting talks given at ISSE 2006 - the forum for the interdisciplinary discussion of how to adequately secure electronic business processes. The topics include: Smart Token and e-ID-Card Developments and their Application - Secure Computing and how it will change the way we trust computers - Risk Management and how to quantify security threats - Awareness raising, Data Protection and how we secure corporate information. Adequate information security is one of the basic requirements of all electronic business processes. It is crucial for effective solutions that the possibilities offered by security technology can be integrated with the commercial requirements of the applications. The reader may expect state-of-the-art: best papers of the Conference ISSE 2006. Front Matter....Pages i-xvi Front Matter....Pages 1-1 Radio Frequency Identification (RFID) and Data Protection Legal Issues....Pages 3-16 e-ID and Smartcards — Current Status, Hopeful Developments and Best Practices....Pages 17-24 European Citizen Card Combined with Travel Document Function, Convergence or Divergence?....Pages 25-29 Physical Unclonable Functions for enhanced security of tokens and tags....Pages 30-37 Hardware Security Features for Secure Embedded Devices....Pages 38-44 Security in Next Generation Consumer Electronic Devices....Pages 45-53 Security Architecture for Device Encryption and VPN....Pages 54-63 TPM Enterprise Key Management requires centralized Hardware-based Security....Pages 64-71 Implementation of DRM Systems under the EU Legal Framework....Pages 72-94 IT-Grundschutz: Two-Tier Risk Assessment for a Higher Efficiency in IT Security Management....Pages 95-101 ISOIIEC 24727 — A Future Standard for Smart Card Middleware....Pages 102-107 Information Security Standardization — the ETSI Perspective....Pages 108-118 Digital Signatures without the Headaches....Pages 119-128 Could Test Standards Help on the Way to Achieve Global e-Passport Interoperability?....Pages 129-138 A New Standard Based Road to Interoperable Strong Authentication....Pages 139-147 Front Matter....Pages 149-149 Identifying Patterns of Federation Adoption....Pages 151-160 Fidelity: Federated Identity Management Security based on Liberty Alliance on European Ambit....Pages 161-167 Deflecting Active Directory Attacks....Pages 168-175 Implementing role based access control — How we can do it better!....Pages 176-185 Identity and Access Control — Demonstrating Compliance....Pages 186-195 Front Matter....Pages 149-149 Robust and Secure Biometrics: Some Application Examples....Pages 196-203 Selecting the Optimal Biometric 2-factor Authentication Method — a User’s Viewpoint....Pages 204-210 A Face Recognition System for Mobile Phones....Pages 211-217 Advanced certificate validation service for secure Service-Oriented Architectures....Pages 218-227 An Introduction to Validation for Federated PKIs....Pages 228-240 MADSig: Enhancing Digital Signature to Capture Secure Document Processing Requirements....Pages 241-248 PKi Consolidation Project and Multiapplicative Smart Payment Cards....Pages 249-258 Security Analysis and Configuration of Large Networks....Pages 259-265 S-VPN Policy: Access List Conflict Automatic Analysis and Resolution....Pages 266-274 Lock-Keeper: A New Implementation of Physical Separation Technology....Pages 275-286 SPEECH: Secure Personal End-to-End Communication with Handheld....Pages 287-297 Finding the Mobile Trusted Element....Pages 298-307 Front Matter....Pages 309-309 Centrally Administered COIs Using Cross-Organizational Trust....Pages 311-317 Improving Assurance of Information Security Rol....Pages 318-325 Modelling the Economics of Free and Open Source Software Security....Pages 326-335 Securing service-oriented applications....Pages 336-343 A Service Oriented Trust Development Platform....Pages 344-355 A Trust Label for Secure and Compliant e-ID Applications: The Belgian Experience....Pages 356-362 Electronic signature in Italy after ten years of “running in”....Pages 363-373 Front Matter....Pages 375-375 Internet Early Warning System: The Global View....Pages 377-386 Front Matter....Pages 375-375 IT Security Vulnerability and Incident Response Management....Pages 387-395 Blending Corporate Governance with Information Security....Pages 396-404 On Privacy-aware Information Lifecycle Management in Enterprises: Setting the Context....Pages 405-414 Regulation of State Surveillance of the Internet....Pages 415-425 How Can NRA Contribute to the Improvement of IT Security?....Pages 426-432 Information Security Regulation: Tomorrow Never Dies?....Pages 433-438 Introducing Regulatory Compliance Requirements Engineering....Pages 439-447 Legal Issues in Secure Grid Computing Environments....Pages 448-454 The Impact of Monitoring Technology on the Law....Pages 455-466 Back Matter....Pages 467-476