Security and Trust Management: 12th International Workshop, STM 2016, Heraklion, Crete, Greece, September 26-27, 2016, Proceedings (Lecture Notes in Computer Science Book 9871)

This book constitutes the refereed proceedings of the 12th International Workshop on Security and Trust Management, STM 2016, held in Heraklion, Crete, Greece, in September 2016, in conjunction with the 21st European Symposium Research in Computer Security, ESORICS 2016. The 13 full papers together with 2 short papers were carefully reviewed and selected from 34 submissions. the focus on the workshop was on following topics: access control, data protection, mobile security, privacy, security and trust policies, trust models. Front Matter....Pages I-X Towards a Personal Security Device....Pages 1-16 Retrofitting Mutual Authentication to GSM Using RAND Hijacking....Pages 17-31 DAPA: Degradation-Aware Privacy Analysis of Android Apps....Pages 32-46 Access Control Enforcement for Selective Disclosure of Linked Data....Pages 47-63 Enforcement of U-XACML History-Based Usage Control Policy....Pages 64-81 Access Control for Weakly Consistent Replicated Information Systems....Pages 82-97 Privacy-Aware Trust Negotiation....Pages 98-105 Securely Derived Identity Credentials on Smart Phones via Self-enrolment....Pages 106-121 Distributed Immutabilization of Secure Logs....Pages 122-137 A Stochastic Framework for Quantitative Analysis of Attack-Defense Trees....Pages 138-153 Information Security as Strategic (In)effectivity....Pages 154-169 Analysing the Efficacy of Security Policies in Cyber-Physical Socio-Technical Systems....Pages 170-178 Formal Analysis of Vulnerabilities of Web Applications Based on SQL Injection....Pages 179-195 MalloryWorker: Stealthy Computation and Covert Channels Using Web Workers....Pages 196-211 PSHAPE: Automatically Combining Gadgets for Arbitrary Method Execution....Pages 212-228 Back Matter....Pages 229-229