Table Of ContentSECURITY AND PROTECTION IN
INFORMATION PROCESSING SYSTEMS
IFIP– The International Federation for Information Processing
IFIP was founded in 1960 under the auspices of UNESCO, following the First World
Computer Congress held in Paris the previous year. An umbrella organization for societies
working in information processing, IFIP’s aim is two-fold: to support information processing
within its member countries and to encourage technology transfer to developing nations. As
its mission statement clearly states,
IFIP’s mission is to be the leading, truly international, apolitical
organization which encourages and assists in the development, exploitation
and application of information technology for the benefit of all people.
IFIP is a non-profitmaking organization, run almost solely by 2500 volunteers. It operates
through a number of technical committees, which organize events and publications. IFIP’s
events range from an international congress to local seminars, but the most important are:
The IFIP World Computer Congress, held every second year;
Open conferences;
Working conferences.
The flagship event is the IFIP World Computer Congress, at which both invited and
contributed papers are presented. Contributedpapers are rigorously refereed and the rejection
rate is high.
As with the Congress, participation in the open conferences is open to all and papers may be
invited or submitted. Again, submittedpapers are stringently refereed.
The working conferences are structured differently. They are usually run by a working group
and attendance is small and by invitation only. Their purpose is to create an atmosphere
conducive to innovation and development. Refereeing is less rigorous and papers are
subjected to extensive group discussion.
Publications arising from IFIP eventsvary. The papers presented at the IFIP World Computer
Congress and at open conferences are published as conference proceedings, while the results
of the working conferences are often published as collections of selected and edited papers.
Any national society whose primary activity is in information may apply to become a full
member of IFIP, although full membership is restricted to one society per country. Full
members are entitled to vote at the annual General Assembly, National societies preferring a
less committed involvement may apply for associate or corresponding membership. Associate
members enjoy the same benefits as full members, but without voting rights. Corresponding
members are not represented in IFIP bodies. Affiliated membership is open to non-national
societies, and individual and honorary membership schemes are also offered.
SECURITY AND
PROTECTION IN
INFORMATION
PROCESSING SYSTEMS
IFIP World Computer Congress
TC11 International Information Security Conference
22–27 August 2004
Toulouse, France
Edited by
Yves Deswarte
LAAS-CNRS, France
Frédéric Cuppens
ENST-Bretagne, France
Sushil Jajodia
George Mason University, USA
Lingyu Wang
George Mason University, USA
KLUWER ACADEMIC PUBLISHERS
NEW YORK,BOSTON, DORDRECHT, LONDON, MOSCOW
eBookISBN: 1-4020-8143-X
Print ISBN: 1-4020-8142-1
©2004 Springer Science + Business Media, Inc.
Print ©2004by International Federation for Information Processing.
Boston
All rights reserved
No part of this eBook maybe reproducedor transmitted inanyform or byanymeans,electronic,
mechanical, recording, or otherwise, without written consent from the Publisher
Created in the United States of America
Visit Springer's eBookstore at: http://www.ebooks.kluweronline.com
and the Springer Global Website Online at: http://www.springeronline.com
Contents
General Chair’s Message ix
Program Chair’s Message xi
IFIP/SEC2004 Conference Committees xiii
An Abstract Reduction Model for Computer Security Risk
M. HAMDI, N.BOUDRIGA 1
Remediation Graphs for Security Patch Management
V. SWARUP 17
Security Modelling for Risk Analysis
L.F. KWOK,D.LONGLEY 29
Contrasting Malicious Java Applets by Modifying the Java
Virtual Machine
V. CIASCHINI,R. GORRIERI 47
Analyzing Network Management Effects with SPIN and cTLA
G. ROTHMAIER,A. POHL,H. KRUM 65
Formal Reasoning of Various Categories of Widely Exploited
Security Vulnerabilities by Pointer Taintedness Semantics
S. CHEN,K. PATTABIRAMAN,Z. KALBARCZYK AND R.K. IYER 83
vi Security and Protection in Information Processing Systems
Meeting the Global Challenges of Security Incident Response
V. MASURKAR,S. FISCHER-HÜBNER,M. SWIMMER 101
Security in Globally Distributed Industrial Information Systems
P. SALOMA,R. ADDAMS-MORING,T. VIRTANEN 119
A Case For Information Ownership in ERP Systems
S.H.VONSOLMS,M. P. HERTENBERGER 135
Interactive Access Control for Web Services
H. KOSHUTANSKI,F. MASSACCI 151
Identity-based Key Infrastructures (IKI)
Y. DESMEDT,M. BURMESTER 167
ModInt: Compact Modular Arithmatic Class Library Available
on Cellular Phone and its Application to Secure Electronic
Voting System
H. KIKUCHI,J. NAKAZATO 177
Dependable Security by Twisted Secret Sharing
S. DASKAPAN 193
A Language Driven IDS for Event and AlertCorrelation
E. TOTEL,B. VIVINIS,L. MÉ 209
Install-time Vaccination of Windows Executables to Defend
Against Stack Smashing Attacks
A. WOOL,D. NEBENZAHL 225
Eigenconnections to Intrusion Detection
Y. BOUZIDA,S. GOMBAULT 241
Visualising Intrusions: Watching the Webserver
S. AXELSSON 259
A Long-term Trial of Keystroke Profiling using Digraph, Trigraph
and Keyword Latencies
P. S.DOWLAND,S. M. FURNELL 275
Trusted Computing, Trusted Third Parties, and Verified
Communications
M. ABADI 291
Security and Protection in Information Processing Systems vii
Maille Authentication - A Novel Protocol for Distributed
Authentication
A.A. FRITZ,J.F. PÂRIS 309
Supporting End-to-end Security across Proxies with Multiple-
Channel SSL
Y. SONG,V. LEUNG,K. BEZNOSOV 323
A Content-Protection Scheme for Multi-Layered Reselling Structure
P.L. YU,P.L. TSAI,C.L. LEI 339
An Asymmetric Cryptography Secure Channel Protocol for
Smart Cards
K. MARKANTONAKIS,K. RANTOS 351
IPsec Clustering
A. NUOPPONEN,S. VAARALA,T. VIRTANEN 367
Improving Secure Device Insertion in Home Ad-hoc Networks
Keyword Latencies
O. HEEN,J.P.ANDREAUX 381
Spam Filter Analysis
F.D. GARCIA,J.H. HOEPMAN 395
Collective Signature for Efficient Authentication of XML Documents
I. RAY,E. KIM 411
Updating Encrypted XML Documents on Untrusted Machines
P.D. REDDY,R.N. MAYO,E. O’BRIEN-STRAIN,J. ROWSON,
Y. XIONG 425
Efficient Simultaneous Contract Signing
M. STANEK,L. LISKOVA 441
DHCP Authentication Using Certificates
J. DEMERJIAN,A. SERHROUCHNI 457
Recursive Sandboxes: Extending Systrace To Empower Applications
A. KURCHUK,A.D. KEROMYTIS 473
Fast Digital Certificate Revocation
V. GOYAL 489
viii Security and Protection in Information Processing Systems
MASKS: ManagingAnonymity while Sharing Knowledge to Servers
R. PINTO,L. ISHITANI,V. ALMEIDA,W.M. JÚNIOR,
F.A. FONSECA,F.D. CASTRO 501
Security and DifferentiatedHotspot Services Through Policy-based
Management Architecture
I. FODIL,V. JARDIN 517
Key Management for Secure Multicast in Hybrid Satellite Networks
A. R. CHOWDHURY,J.S. BARAS 533
General Chair’s Message
Security is probably the most critical factor for the development of the
“Information Society”. E-government, e-commerce, e-healthcare and all
other e-activities present challenging security requirements that cannot be
satisfied with current technology, except maybe if the citizens accept to
waive their privacy, which is unacceptable ethically and socially. New
progress is needed in security and privacy-preserving technologies.
On these foundations, the IFIP/Sec conference has been established from
the eighties as one of the most important forum for presenting new scientific
research results as well as best professional practice to improve the security
of information systems. This balance between future technology
improvements and day-to-day security management has contributed to better
understanding between researchers, solution providers and practitioners,
making this forum lively and fruitful.
The first IFIP/Sec Conference was held in Stockholm in May 1983. The
IFIP Technical Committee on Security and Protection in Information
Processing Systems, TC-11, was created in 1984, just before the second Sec
conference. As we are celebrating its 20th anniversary, TC-11 has now
seven active working groups on dedicated security topics. And even if the
Sec conference remains the flagship event of TC-11, the working groups
organize periodically workshops and working conferences on their own
topics. This year, the 19th IFIP/Sec Conference embeds three of these
workshops, on Information Security Management (ISM), on Information
Security Education (ISE), and on Privacy and Anonymity in Networked and
Distributed Systems (I-NetSec). These workshops had their own calls for
x Security and Protection in Information Processing Systems
papers, Program Committees and selection processes, and their papers are
gathered in another volume of the IFIP/Sec 2004 Conference proceedings.
The present volume contains all the papers that were selected for the main
track of the conference.
In 2004, the IFIP/Sec conference is part of the IFIP World Computer
Congress, in Toulouse. And security is also one of the main topics of other
conferences and workshops that are hosted by the Congress, including
CARDIS, the 6th Smart Card Research and Advanced Application
Conference, I3E, the 4th Conference on e-Commerce, e-Business and e-
Government, and FAST, the 2nd Workshop on Formal Aspects in Security
and Trust. So there is no doubt that the 18th IFIP World Computer Congress
will remain as a memorable event for many security professionals.
Yves Deswarte
General Chair
