Theory of Security and Applications: Joint Workshop, TOSCA 2011, Saarbrücken, Germany, March 31 - April 1, 2011, Revised Selected Papers

This book constitutes the thoroughly refereed post-conference proceedings of the Joint Workshop on Theory of Security and Applications (formely known as ARSPA-WITS), TOSCA 2011, held in Saarbrücken, Germany, in March/April 2011, in association with ETAPS 2011. The 9 revised full papers presented together with 3 invited talks were carefully reviewed and selected from 24 submissions. The papers feature topics including various methods in computer security, including the formal specification, analysis and design of security protocols and their applications, the formal definition of various aspects of security such as access control mechanisms, mobile code security and denial-of-service attacks, and the modeling of information flow and its application. Front Matter....Pages - Union and Intersection Types for Secure Protocol Implementations....Pages 1-28 Secure Composition of Protocols....Pages 29-32 Constructive Cryptography – A New Paradigm for Security Definitions and Proofs....Pages 33-56 G2C: Cryptographic Protocols from Goal-Driven Specifications....Pages 57-77 Modeling Long-Term Signature Validation for Resolution of Dispute....Pages 78-97 Formal Analysis of Privacy for Anonymous Location Based Services....Pages 98-112 Formal Analysis of the EMV Protocol Suite....Pages 113-129 Security Goals and Protocol Transformations....Pages 130-147 Model-Checking Secure Information Flow for Multi-threaded Programs....Pages 148-165 Multiple Congruence Relations, First-Order Theories on Terms, and the Frames of the Applied Pi-Calculus....Pages 166-185 Automated Code Injection Prevention for Web Applications....Pages 186-204 Soundness of Removing Cancellation Identities in Protocol Analysis under Exclusive-OR....Pages 205-224 Back Matter....Pages - This book constitutes the thoroughly refereed post-conference proceedings of the Joint Workshop on Theory of Security and Applications (formely known as ARSPA-WITS), TOSCA 2011, held in Saarbrucken, Germany, in March/April 2011, in association with ETAPS 2011. The 9 revised full papers presented together with 3 invited talks were carefully reviewed and selected from 24 submissions. The papers feature topics including various methods in computer security, including the formal specification, analysis and design of security protocols and their applications, the formal definition of various aspects of security such as access control mechanisms, mobile code security and denial-of-service attacks, and the modeling of information flow and its application