Recent advances in e-commerce security and privacy : proceedings of the 1st Workshop on Security and Privacy in E-Commerce (WSPEC'00), Athens, Greece, November 4, 2000

Welcome to the second volume of the Kluwer International Series on ADVANCES IN INFORMATION SECURITY. The goals of this series are, one, to establish the state of the art of and set the course for future research in information security and, two, to serve as a central reference and timely topics in information security research source for advanced and development. The scope of this series includes all aspects of com­ puter and network security and related areas such as fault tolerance and software assurance. ADVANCES IN INFORMATION SECURITY aims to publish thor­ ough and cohesive overviews of specific topics in information security, as well as works that are larger in scope or that contain more detailed background information than can be accommodated in shorter survey articles. The series also serves as a forum for topics that may not have reached a level of maturity to warrant a comprehensive textbook treat­ ment. The success of this series depends on contributions by researchers and developers such as yourself. If you have an idea for a book that is appro­ priate for this series, I encourage you to contact either the Acquisitions Editor for the series, Lance Wobus (lwobus@wkap.com), or myself, the Consulting Editor for the series (jajodia@gmu.edu). We would be happy about to discuss any potential projects with you. Additional information this series can be obtained from www.wkap.nljseries.htmjADIS.

While e-commerce has experienced meteoric growth recently, security risks have similarly grown in scope and magnitude. Three major factors have driven the security risks in e-commerce: the growing reliance on the electronic medium for a company's core business, the growing complexity of the software systems needed to support e-commerce, and the value of the digital assets brought online to an inherently insecure medium - the Internet. While security has long been a primary concern in e-commerce, more recently privacy has also grown in importance to consumers. Many of the same Internet technologies that make e-commerce possible also make it possible to create detailed profiles of an individual's purchases, to spy on individual Web usage habits, and even to peer into confidential files that reside on an individual's machine.
E-Commerce Security and Privacy is the first volume to pull together leading researchers and practitioners in diverse areas of computer science and software engineering to explore their technical innovations to problems in security and privacy in e-commerce. The information is drawn from selected papers presented at the first Workshop on Security and Privacy in E-Commerce (WSPEC'00) held in Athens, Greece, November 4, 2000. As such, E-Commerce Security and Privacy introduces both practitioners and researchers to innovations in secure and private e-commerce. Practitioners will gain great insight from the case studies, and researchers will learn about state-of-the-art protocols in secure and private e-commerce that will serve as the basis for future innovations in applied e-commerce technologies.
E-Commerce Security and Privacy is suitable as a secondary text for a graduate level course, and as a reference for researchers and practitioners in industry.

Booknews

Resulting from a workshop held in Athens, Greece in November 2000, this group of 8 papers is divided into case studies and innovations in reasoning about secure and private e-commerce by an international group of contributors. The case studies grapple with issues that include problems in policing e-commerce crime, security issues in mobile e- commerce, online banking, and software security analysis. Among the topics in the second part are a goal-based approach for specifying security and policy requirements, methods to provide secure and private access to Internet databases, a logic system used to define accountabilities in cryptographic protocols, and a logic system for provisional authorizations in e-commerce transactions. Annotation c. Book News, Inc., Portland, OR (booknews.com)

Front Matter....Pages i-xxiii Front Matter....Pages 1-1 Security Testing of an Online Banking Service....Pages 3-15 Software Security Analysis: an Example Case Study....Pages 17-28 New Security Issues in Mobile E-Commerce....Pages 29-46 Problems in Policing E-Commerce Crime....Pages 47-63 Front Matter....Pages 65-65 Strategies for Developing Policies and Requirements for Secure and Private Electronic Commerce....Pages 67-86 Protocols for Secure Remote Database Access with Approximate Matching....Pages 87-111 A New Approach to Reasoning About Accountability in Cryptographic Protocols for E-Commerce....Pages 113-131 Provisional Authorizations....Pages 133-159 Back Matter....Pages 161-163