ISSE 2014 Securing Electronic Business Processes : Highlights of the Information Security Solutions Europe 2014 Conference

This book presents the most interesting talks given at ISSE 2014 – the forum for the interdisciplinary discussion of how to adequately secure electronic business processes. The topics include: - Trust Services, eID and Cloud Security - BYOD and Mobile Security - Cybersecurity, Cybercrime, Critical Infrastructures - Security Management, CISO Inside - Privacy, Data Protection, Human Factors - Regulation & Policies Adequate information security is one of the basic requirements of all electronic business processes. It is crucial for effective solutions that the possibilities offered by security technology can be integrated with the commercial requirements of the applications. The reader may expect state-of-the-art: best papers of the Conference ISSE 2014. Content Trust Services, eID, Cloud Security & Management – BYOD, Mobile Security & Applications – Cybersecurity, Cybercrime, Critical Infrastructures – Security Management, CISO’s Experiences – Human Factors, Awareness & Privacy – Regulations and Policies Target Groups Chief Information Security Officers Developers of Electronic Business Processes IT Managers IT Security Experts Researchers Editors Norbert Pohlmann: Professor for Information Security and Director of the Institute for Internet Security at the Westphalian University of Applied Sciences Gelsenkirchen. Additionally he is president of the IT Security Association TeleTrusT. Helmut Reimer: Senior Consultant, TeleTrusT Wolfgang Schneider: Senior Adviser, Fraunhofer Institute SIT Front Matter....Pages i-xiii SAFECode Whitepaper: Fundamental Practices for Secure Software Development 2nd Edition....Pages 1-32 Front Matter....Pages 33-33 In-House Standardization of Security Measures: Necessity, Benefits and Realworld Obstructions....Pages 35-48 An Effective Approach for Assessing the Risk of Acquired IT Products....Pages 49-55 IT-Security in Railway Signalling Systems....Pages 56-64 13+ Real Ways to Destroy Business by Breaking Company’s SAP Applications....Pages 65-78 Front Matter....Pages 79-79 Achieving the eIDAS Vision Through the Mobile, Social and Cloud Triad....Pages 81-93 Security Versus Usability – User-Friendly Qualified Signatures Based on German ID Cards....Pages 94-105 Using the Semantic Web to Generate Trust Indicators....Pages 106-119 Front Matter....Pages 121-121 Hidden and Uncontrolled – On the Emergence of Network Steganographic Threats....Pages 123-133 Restricting Excessive State-on-State Cyber Espionage under International Law: A Quest of Futility?....Pages 134-143 Securing Cloud: Elastic Key Management and Homomorphic Encryption....Pages 144-154 Secure Communication and Digital Sovereignty in Europe....Pages 155-169 The need of European White Knights for the TLS/SSL Certificate System....Pages 170-174 Front Matter....Pages 175-175 Emerging Technologies, Disrupt or be Disrupted....Pages 177-187 Hardware Intrinsic Security to Protect Value in the Mobile Market....Pages 188-198 On Cross-Border Mobile Government Systems....Pages 199-208 Front Matter....Pages 209-209 Privacy for Cloud Storage....Pages 211-219 Enforcing Data Privacy in the Age of Google Glass....Pages 220-229 Internet of Trucks and Digital Tachograph – Security and Privacy Threats....Pages 230-238 Front Matter....Pages 239-239 Towards eIDAS as a Service....Pages 241-248 Front Matter....Pages 239-239 What now? Data Retention Scenarios After the ECJ Ruling....Pages 249-255 From Research Results to Strategy: A Mapping Exercise.....Pages 256-264 Back Matter....Pages 265-274 This book presents the most interesting talks given as ISSE 2014 - the forum for the interdisciplinary discussion of how to adequately secure electronic business processes. The topics include: trust services, eID and cloud security ; BYOD and mobile security ; Cybersecurity, cybercrime, critical infrastructures ; Security management, CISO inside ; Privacy, data protection, human factors ; Regulations & policies. Adequate information security is one of the basic requirements of all electronic business processes. It is crucial for effective solutions that the possibilities offered by security technology can be integrated with the commercial requirements of the applications. The reader may expect state-of-the-art: best papers of the Conference ISSE 2014. ... Target groups: chief information security officers ; developers of electronic business processes ; IT managers ; IT security experts ; Researchers. -- back cover