Data and Applications Security and Privacy XXXVI: 36th Annual IFIP WG 11.3 Conference, DBSec 2022 Newark, NJ, USA, July 18–20, 2022 Proceedings

330 Pages·2022·14.605 MB·English

by  Shamik Sural, Haibing Lu

Shamik Sural
Haibing Lu (Eds.)
3
8
3
3 Data and Applications
1

S
C
Security and Privacy XXXVI
N
L
36th Annual IFIP WG 11.3 Conference, DBSec 2022
Newark, NJ, USA, July 18–20, 2022
Proceedings
Lecture Notes in Computer Science 13383
FoundingEditors
GerhardGoos
KarlsruheInstituteofTechnology,Karlsruhe,Germany
JurisHartmanis
CornellUniversity,Ithaca,NY,USA
EditorialBoardMembers
ElisaBertino
PurdueUniversity,WestLafayette,IN,USA
WenGao
PekingUniversity,Beijing,China
BernhardSteffen
TUDortmundUniversity,Dortmund,Germany
MotiYung
ColumbiaUniversity,NewYork,NY,USA
Moreinformationaboutthisseriesathttps://link.springer.com/bookseries/558
·
Shamik Sural Haibing Lu (Eds.)
Data and Applications
Security and Privacy XXXVI
36th Annual IFIP WG 11.3 Conference, DBSec 2022
Newark, NJ, USA, July 18–20, 2022
Proceedings
Editors
ShamikSural HaibingLu
DepartmentofComputerScience DepartmentofInformationSystems
andEngineering andAnalytics
IndianInstituteofTechnologyKharagpur SantaClaraUniversity
Kharagpur,WestBengal,India SantaClara,CA,USA
ISSN 0302-9743 ISSN 1611-3349 (electronic)
LectureNotesinComputerScience
ISBN 978-3-031-10683-5 ISBN 978-3-031-10684-2 (eBook)
https://doi.org/10.1007/978-3-031-10684-2
©IFIPInternationalFederationforInformationProcessing2022
Thisworkissubjecttocopyright.AllrightsarereservedbythePublisher,whetherthewholeorpartofthe
material is concerned, specifically the rights of translation, reprinting, reuse of illustrations, recitation,
broadcasting, reproduction on microfilms or in any other physical way, and transmission or information
storageandretrieval,electronicadaptation,computersoftware,orbysimilarordissimilarmethodologynow
knownorhereafterdeveloped.
Theuseofgeneraldescriptivenames,registerednames,trademarks,servicemarks,etc.inthispublication
doesnotimply,evenintheabsenceofaspecificstatement,thatsuchnamesareexemptfromtherelevant
protectivelawsandregulationsandthereforefreeforgeneraluse.
Thepublisher,theauthors,andtheeditorsaresafetoassumethattheadviceandinformationinthisbookare
believedtobetrueandaccurateatthedateofpublication.Neitherthepublishernortheauthorsortheeditors
give a warranty, expressed or implied, with respect to the material contained herein or for any errors or
omissionsthatmayhavebeenmade.Thepublisherremainsneutralwithregardtojurisdictionalclaimsin
publishedmapsandinstitutionalaffiliations.
ThisSpringerimprintispublishedbytheregisteredcompanySpringerNatureSwitzerlandAG
Theregisteredcompanyaddressis:Gewerbestrasse11,6330Cham,Switzerland
Preface
This volume contains the papers selected for presentation at the 36th Annual IFIP
WG11.3 Conference on Data and Applications Security and Privacy (DBSec 2022),
heldduringJuly18–20,2022,inNewark,NJ,USA.
In response to the call for papers of this edition, 33 submissions were received,
and all submissions were evaluated on the basis of their significance, novelty, and
technical quality. The Program Committee, comprising 45 members, performed an
excellentjob,withthehelpofadditionalreviewers,ofreviewingallsubmissionsthrough
acarefulanonymousprocess(withthreeormorereviewspersubmission).TheProgram
Committee’sworkwascarriedoutelectronically,yieldingintensivediscussions.Ofthe
submittedpapers,12fullpapersandsixshortpaperswereselectedforpresentationat
theconference.
ThesuccessofDBSec2022dependedonthevolunteeringeffortofmanyindividu-
als,andthereisalonglistofpeoplewhodeservespecialthanks.Wewouldliketothank
allthemembersoftheProgramCommittee,andalltheexternalreviewers,foralltheir
hard work in evaluating the papers and for their active participation in the discussion
and selection process. We are very grateful to all people who readily assisted and
ensured a smooth organization process, in particular Jaideep Vaidya and Yuan Hong
for their efforts as DBSec 2022 general co-chairs; Sara Foresti (IFIP WG11.3 chair)
for her guidance and support; Hafiz Asif (publicity chair) for helping with publicity;
andLanYaoforhelpingwithotherarrangementsfortheconference.EasyChairmade
theconferencereviewandproceedingsprocessrunverysmoothly.
Lastbutcertainlynotleast,thankstoalltheauthorswhosubmittedpapersandall
theconferenceattendees.WehopeyoufindtheproceedingsofDBSec2022interesting,
stimulating,andinspiringforyourfutureresearch.
June2022 ShamikSural
HaibingLu
Organization
ProgramCommittee
VijayAtluri RutgersUniversity,USA
YangCao KyotoUniversity,Japan
FrédéricCuppens PolytechniqueMontréal,Canada
NoraCuppens-Boulahia PolytechniqueMontréal,Canada
SabrinaDeCapitanidiVimercati UniversitàdegliStudidiMilano,Italy
GiovanniDiCrescenzo PeratonLabs,USA
CsillaFarkas UniversityofSouthCarolina,USA
BarbaraFila INSARennes,IRISA,France
SaraForesti UniversitàdegliStudidiMilano,Italy
StevenFurnell UniversityofNottingham,UK
KambizGhazinour KentStateUniversity,USA
EhudGudes Ben-GurionUniversity,Israel
MaanakGupta TennesseeTechUniversity,USA
YuanHong UniversityofConnecticut,USA
SokratisKatsikas NorwegianUniversityofScienceandTechnology,
Norway
RamKrishnan UniversityofTexasatSanAntonio,USA
CostasLambrinoudakis UniversityofPiraeus,Greece
AdamJ.Lee UniversityofPittsburgh,USA
XiangLi SantaClaraUniversity,USA
YingjiuLi UniversityofOregon,USA
GiovanniLivraga UniversityofMilan,Italy
JavierLopez UniversidaddeMálaga,Spain
HaibingLu(Chair) SantaClaraUniversity,USA
MaryamMajedi UniversityofToronto,Canada
BradMalin VanderbiltUniversity,USA
SjoukeMauw UniversityofLuxembourg,Luxembourg
MeisamMohammady CSIRO,Australia
SamratMondal IndianInstituteofTechnologyPatna,India
CharlesMorisset NewcastleUniversity,UK
MartinOlivier UniversityofPretoria,SouthAfrica
StefanoParaboschi UniversitadiBergamo,Italy
GüntherPernul UniversitätRegensburg,Germany
SilvioRanise UniversityofTrentoandFondazioneBruno
Kessler,Italy
IndrajitRay ColoradoStateUniversity,USA
viii Organization
IndrakshiRay ColoradoStateUniversity,USA
PierangelaSamarati UniversitàdegliStudidiMilano,Italy
AndreasSchaad Wibu-Systems,Germany
AnoopSinghal NIST,USA
ScottStoller StonyBrookUniversity,USA
ShamikSural(Chair) IITKharagpur,India
JaideepVaidya RutgersUniversity,USA
VijayVaradharajan UniversityofNewcastle,Australia
LingyuWang ConcordiaUniversity,Canada
EdgarWeippl UniversityofVienna,Austria
NicolaZannone EindhovenUniversityofTechnology,
TheNetherlands
Contents
DataPrivacy
Assessing Differentially Private Variational Autoencoders Under
MembershipInference ................................................. 3
DanielBernau,JonasRobl,andFlorianKerschbaum
UtilityandPrivacyAssessmentofSyntheticMicrobiomeData ............... 15
MarkusHittmeir,RudolfMayer,andAndreasEkelhart
CombiningDefencesAgainstData-PoisoningBasedBackdoorAttacks
onNeuralNetworks ................................................... 28
AndreaMilakovicandRudolfMayer
MCoM:ASemi-SupervisedMethodforImbalancedTabularSecurityData .... 48
XiaodiLi,LatifurKhan,MahmoudZamani,ShamilaWickramasuriya,
KevinW.Hamlen,andBhavaniThuraisingham
MitigatingPrivacyVulnerabilityCausedbyMapAsymmetry ................ 68
RyotaHiraishi, MasatoshiYoshikawa, ShunTakagi, YangCao,
SumioFujita,andHidehitoGomi
DistributedSystems
LiberateYourServers:ADecentralizedContentComplianceValidation
Protocol .............................................................. 89
BowenLiuandJianyingZhou
KnowledgeMininginCybersecurity:FromAttacktoDefense ............... 110
KhandakarAshrafiAkbar,SadafMdHalim,YiboHu,AnoopSinghal,
LatifurKhan,andBhavaniThuraisingham
Attack-ResilientBlockchain-BasedDecentralizedTimedDataRelease ........ 123
JingzheWangandBalajiPalanisamy
IoTSecurity
Local Intrinsic Dimensionality of IoT Networks for Unsupervised
IntrusionDetection .................................................... 143
MattGorbett,HosseinShirazi,andIndrakshiRay
x Contents
OntheDataPrivacy,Security,andRiskPosturesofIoTMobileCompanion
Apps ................................................................ 162
ShradhaNeupane, FaizaTazi, UpakarPaudel, FreddyVelozBaez,
MerziaAdamjee,LorenzoDeCarli,SanchariDas,andIndrakshiRay
VerificationandValidationMethodsforaTrust-by-DesignFramework
fortheIoT ............................................................ 183
DavideFerraris,CarmenFernandez-Gago,andJavierLopez
Privacy-PreservingAccessandComputation
Robust and Provably Secure Attribute-Based Encryption Supporting
AccessRevocationandOutsourcedDecryption ............................ 197
AnisBkakria
Libertas:BackwardPrivateDynamicSearchableSymmetricEncryption
SupportingWildcards .................................................. 215
JeroenWeener,FlorianHahn,andAndreasPeter
End-to-EndProtectionofIoTCommunicationsThroughCryptographic
EnforcementofAccessControlPolicies .................................. 236
StefanoBerlato,UmbertoMorelli,RobertoCarbone,andSilvioRanise
QuantumSecurity
IntegratingandEvaluatingQuantum-safeTLSinDatabaseApplications ...... 259
AnselmeTueno,DavidBoehm,andShinHoChoe
Feel the Quantum Functioning: Instantiating Generic Multi-Input
FunctionalEncryptionfromLearningwithErrors .......................... 279
AlexandrosBakas, AntonisMichalas, EugeneFrimpong,
andReyhanehRabaninejad
SecurityOperationsandPolicies
ReLOG:AUnifiedFrameworkforRelationship-BasedAccessControl
overGraphDatabases .................................................. 303
StanleyClark,NikolayYakovets,GeorgeFletcher,andNicolaZannone
SecurityOperationsCenterRolesandSkills:AComparisonofTheory
andPractice .......................................................... 316
AndreasReisser,ManfredVielberth,SofiaFohringer,andGüntherPernul
AuthorIndex ......................................................... 329