Secure IT Systems: 22nd Nordic Conference, NordSec 2017, Tartu, Estonia, November 8–10, 2017, Proceedings (Lecture Notes in Computer Science, 10674)

This book constitutes the proceedings of the 22nd Nordic Conference on Secure IT Systems, held in Tartu, Estonia, in November 2017. The 18 full papers presented were carefully reviewed and selected from 42 submissions. The papers address a broad range of topics in IT security and privacy. They are organized in the following topical sections: outsourcing computations; privacy preservation; security and privacy in machine learning; applications; access control; and emerging security areas. Front Matter ....Pages I-XVIII Front Matter ....Pages 1-1 A Server-Assisted Hash-Based Signature Scheme (Ahto Buldas, Risto Laanoja, Ahto Truu)....Pages 3-17 Outsourcing of Verifiable Attribute-Based Keyword Search (Go Ohtake, Reihaneh Safavi-Naini, Liang Feng Zhang)....Pages 18-35 Front Matter ....Pages 37-37 Is RCB a Leakage Resilient Authenticated Encryption Scheme? (Farzaneh Abed, Francesco Berti, Stefan Lucks)....Pages 39-52 Practical and Secure Searchable Symmetric Encryption with a Small Index (Ryuji Miyoshi, Hiroaki Yamamoto, Hiroshi Fujiwara, Takashi Miyazaki)....Pages 53-69 Anonymous Certification for an e-Assessment Framework (Christophe Kiennert, Nesrine Kaaniche, Maryline Laurent, Pierre-Olivier Rocher, Joaquin Garcia-Alfaro)....Pages 70-85 PARTS – Privacy-Aware Routing with Transportation Subgraphs (Christian Roth, Lukas Hartmann, Doğan Kesdoğan)....Pages 86-101 Front Matter ....Pages 103-103 Bayesian Network Models in Cyber Security: A Systematic Review (Sabarathinam Chockalingam, Wolter Pieters, André Teixeira, Pieter van Gelder)....Pages 105-122 Improving and Measuring Learning Effectiveness at Cyber Defense Exercises (Kaie Maennel, Rain Ottis, Olaf Maennel)....Pages 123-138 Privacy-Preserving Frequent Itemset Mining for Sparse and Dense Data (Peeter Laud, Alisa Pankova)....Pages 139-155 Front Matter ....Pages 157-157 Free Rides in Denmark: Lessons from Improperly Generated Mobile Transport Tickets (Rosario Giustolisi)....Pages 159-174 Using the Estonian Electronic Identity Card for Authentication to a Machine (Danielle Morgan, Arnis Parsovs)....Pages 175-191 Data Aware Defense (DaD): Towards a Generic and Practical Ransomware Countermeasure (Aurélien Palisse, Antoine Durand, Hélène Le Bouder, Colas Le Guernic, Jean-Louis Lanet)....Pages 192-208 A Large-Scale Analysis of Download Portals and Freeware Installers (Alberto Geniola, Markku Antikainen, Tuomas Aura)....Pages 209-225 Front Matter ....Pages 227-227 GPASS: A Password Manager with Group-Based Access Control (Thanh Bui, Tuomas Aura)....Pages 229-244 Towards Accelerated Usage Control Based on Access Correlations (Richard Gay, Jinwei Hu, Heiko Mantel, Johannes Schickel)....Pages 245-261 Front Matter ....Pages 263-263 Generating Functionally Equivalent Programs Having Non-isomorphic Control-Flow Graphs (Rémi Géraud, Mirko Koscina, Paul Lenczner, David Naccache, David Saulpic)....Pages 265-279 Proof of a Shuffle for Lattice-Based Cryptography (Nuria Costa, Ramiro Martínez, Paz Morillo)....Pages 280-296 An Analysis of Bitcoin Laundry Services (Thibault de Balthasar, Julio Hernandez-Castro)....Pages 297-312 Back Matter ....Pages 313-313