Secure IT Systems : 17th Nordic Conference, NordSec 2012, Karlskrona, Sweden, October 31 -- November 2, 2012, Proceedings

This book constitutes the refereed proceedings of the 17th Nordic Conference on Secure IT Systems, NordSec 2012, held in Karlskrona, Sweden, in October 2012. The 16 revised papers were carefully reviewed and selected from 32 submissions. The papers are organized in topical sections on application security, security management, system security, network security, and trust management. Front Matter....Pages - Designed to Fail: A USB-Connected Reader for Online Banking....Pages 1-16 Security Add-Ons for Mobile Platforms....Pages 17-30 THAPS: Automated Vulnerability Scanning of PHP Applications....Pages 31-46 Cyber Security Exercises and Competitions as a Platform for Cyber Security Experiments....Pages 47-60 The Development of Cyber Security Warning, Advice and Report Points....Pages 61-72 Towards an Empirical Examination of IT Security Infrastructures in SME....Pages 73-88 How to Select a Security Requirements Method? A Comparative Study with Students and Practitioners....Pages 89-104 There Is Safety in Numbers: Preventing Control-Flow Hijacking by Duplication....Pages 105-120 Coinductive Unwinding of Security-Relevant Hyperproperties....Pages 121-136 Retooling and Securing Systemic Debugging....Pages 137-152 Cracking Associative Passwords....Pages 153-168 A Hybrid Approach for Highly Available and Secure Storage of Pseudo-SSO Credentials....Pages 169-183 Assessing the Quality of Packet-Level Traces Collected on Internet Backbone Links....Pages 184-198 Everything But the Kitchen Sink: Determining the Effect of Multiple Attacks on Privacy Preserving Technology Users....Pages 199-214 Can We Identify Manipulative Behavior and the Corresponding Suspects on Review Websites Using Supervised Learning?....Pages 215-230 Privacy-Friendly Cloud Storage for the Data Track....Pages 231-246 Back Matter....Pages -

Designed to Fail: A USB-Connected Reader for Online Banking Security Add-Ons for Mobile Platforms THAPS: Automated Vulnerability Scanning of PHP Applications Cyber security exercises and competitions as a platform for cyber security experiments The Development of Cyber Security Warning, Advice & Report Points Towards an Empirical Examination of IT Security Infrastructures in SME How to Select a Security Requirements Method? A comparative study with students and practitioners There is Safety in Numbers: Preventing Control-Flow Hijacking by Duplication Coinductive Unwinding of Security-Relevant

Retooling and Securing Systemic Debugging Cracking Associative Passwords A Hybrid Approach for Highly Available & Secure Storage of Pseudo-SSO Credentials Assessing the Quality of Packet-Level Traces Collected on Internet Backbone Links Everything but the Kitchen Sink: Determining the effect of multiple attacks on privacy preserving technology users Can We Identify Manipulative Behavior and the Corresponding Suspects on Review Websites using Supervised Learning? Privacy-Friendly Cloud Storage for the Data Track.

.