Trust, privacy and security in digital business : 9th international conference, TrustBus 2012, Vienna, Austria, September 3-7, 2012 : proceedings

This book constitutes the refereed proceedings of the 8th International Conference on Trust and Privacy in Digital Business, TrustBus 2012, held in Vienna, Austria, in September 2012 in conjunction with DEXA 2012. The 18 revised full papers presented together with 12 presentations of EU projects were carefully reviewed and selected from 42 submissions. The papers are organized in the following topical sections: Web security; secure management processes and procedures; access control; intrusion detection - trust; applied cryptography; secure services, databases, and data warehouses; and presentations of EU projects. Front Matter....Pages - How Much Network Security Must Be Visible in Web Browsers?....Pages 1-16 A User-Level Authentication Scheme to Mitigate Web Session-Based Vulnerabilities....Pages 17-29 Access Control Configuration for J2EE Web Applications: A Formal Perspective....Pages 30-35 Cloud Separation: Stuck Inside the Cloud....Pages 36-49 Proposed Control Procedure to Mitigate the Risks of Strategic Information Outflow in the Recruitment Process....Pages 50-64 An Autonomous Social Web Privacy Infrastructure with Context-Aware Access Control....Pages 65-78 A Prototype for Enforcing Usage Control Policies Based on XACML....Pages 79-92 A Conceptual Framework for Trust Models....Pages 93-104 Advances and Challenges in Standalone Host-Based Intrusion Detection Systems....Pages 105-117 Encrypted Adaptive Storage Model – Analysis and Performance Tests....Pages 118-128 Efficient Comparison of Encrypted Biometric Templates....Pages 129-142 Short and Efficient Identity-Based Undeniable Signature Scheme....Pages 143-148 Damage Sharing May Not Be Enough: An Analysis of an Ex-ante Regulation Policy for Data Breaches....Pages 149-160 Flexible Regulation with Privacy Points....Pages 161-166 On the Security of the Non-Repudiation of Forwarding Service....Pages 167-178 Profitability and Cost Management of Trustworthy Composite Services....Pages 179-191 Query Auditing for Protecting Max/Min Values of Sensitive Attributes in Statistical Databases....Pages 192-206 Verification of Security Coherence in Data Warehouse Designs....Pages 207-213 Towards the Secure Provision and Consumption in the Internet of Services....Pages 214-215 WebSand: Server-Driven Outbound Web-Application Sandboxing....Pages 216-217 Attribute-Based Credentials for Trust (ABC4Trust)....Pages 218-219 uTRUSTit – Usable Trust in the Internet of Things....Pages 220-221 Challenges for Advanced Security Monitoring – The MASSIF Project....Pages 222-223 Decentralized, Cooperative, Secure and Privacy – Aware Monitoring for Trustworthiness....Pages 224-226 PASSIVE: Policy-Assessed System-Level Security of Sensitive Information Processing in Virtualised Environments....Pages 227-228 Policy and Security Configuration Management....Pages 229-231 Challenges and Current Results of the TWISNet FP7 Project....Pages 232-233 Aniketos: Challenges and Results....Pages 234-235 Ubiquitous Participation Platform for POLicy Making (UbiPOL): Security and Identity Management Considerations....Pages 236-237 Secure Embedded Platform with Advanced Process Isolation and Anonymity Capabilities....Pages 238-239 Back Matter....Pages -