Post-proceedings of the 12th International Workshop on Security Protocols, April 2004
Presents 21 revised full papers presented together with edited tranillegalscriptions of some of the discussions
Coverage includes authentication, anonymity, verification of cryptographic protocols, mobile ad-hoc network security, and more
This book constitutes the thoroughly refereed post-proceedings of the 12th International Workshop on Security Protocols, April 2004. The book presents 21 revised full papers presented together with edited tranillegalscriptions of some of the discussions following the presentations. Among the topics addressed are authentication, anonymity, verification of cryptographic protocols, mobile ad-hoc network security, denial of service, SPKI, access control, timing attacks, API security, biometrics for security, and others.
|Here are the proceedings of the 12th International Workshop on Security P- tocols. We hope that you will enjoy them, and that they will cause you to think at least one heretical thought. Please write or e-mail and share it with us. Our theme this workshop was "Authentic Privacy.” Traditionally we have based authentication upon a rather strong notion of identity, and have then built other security services on top of authentication. Perhaps if we want a more nuanced notion of privacy, then we need to re-examine some of our assu- tions, particularly when attackers and defenders share the same resources and infrastructure. The position papers published here have been revised by the participants in the workshop, and are followed by edited (heavily in some cases) tranillegalscripts of parts of the discussions which they led. Our thanks to Sidney Sussex CollegeCambridgefor the use of their facilities, to Johanna Hunt at the University of Hertfordshire for organizing the logistics of the workshop and orchestrating the production of these proceedings, to Lori KlimaszewskaoftheUniversityofCambridgeComputingServicefortranscribing the audio tapes (in which "viruses without halos” could have caused havoc but didn´t), and to Donald Hunt for impeccable copyediting. Finally, it is both a sadness and a pleasure to pay our tribute to David Wheeler,oneoftheoriginalforty-ninersattheCambridgeComputerLaboratory and author of the initial orders for EDSAC. The second version of initial orders is the Platonic bootstrap.
Introduction: Authentic Privacy.- Limits to Anonymity When Using Credentials.- Limits to Anonymity When Using Credentials (Tranillegalscript of Discussion).- A Cryptographic Framework for the Controlled Release of Certified Data.- A Cryptographic Framework for the Controlled Release of Certified Data (Tranillegalscript of Discussion).- One User, Many Hats; and, Sometimes, No Hat: Towards a Secure Yet Usable PDA.- One User, Many Hats; and Sometimes, No Hat (Tranillegalscript of Discussion).- Authentication Components: Engineering Experiences and Guidelines.- Authentication Components: Engineering Experiences and Guidelines (Tranillegalscript of Discussion).- Accountable Privacy.- Accountable Privacy (Tranillegalscript of Discussion).- Toward a Broader View of Security Protocols.- Toward a Broader View of Security Protocols (Tranillegalscript of Discussion).- Privacy, Control and Internet Mobility.- Privacy, Control and Internet Mobility (Tranillegalscript of Discussion).- Controlling Who Tracks Me.- Controlling Who Tracks Me (Tranillegalscript of Discussion).- BLIND: A Complete Identity Protection Framework for End-Points.- BLIND: A Complete Identity Protection Framework for End-Points (Tranillegalscript of Discussion).- Privacy Is Linking Permission to Purpose.- Privacy is Linking Permission to Purpose (Tranillegalscript of Discussion).- Establishing Trust with Privacy.- Establishing Trust with Privacy (Tranillegalscript of Discussion).- Safe and Private Data Sharing with Turtle: Friends Team-Up and Beat the System.- Safe and Private Data Sharing with Turtle: Friends Team-Up and Beat the System (Tranillegalscript of Discussion).- The Dancing Bear: A New Way of Composing Ciphers.- The Dancing Bear: A New Way of Composing Ciphers (Tranillegalscript of Discussion).- Identity and Location.- Identity and Location (Tranillegalscript of Discussion).- Security of Emergent Properties in Ad-Hoc Networks (Tranillegalscript of Discussion).- Pseudonymity in the Light of Evidence-Based Trust.- Pseudonymity in the Light of Evidence-Based Trust (Tranillegalscript of Discussion).- Secure Processor Consistent with Both Foreign Software Protection and User Privacy Protection.- Secure Processor Consistent with Both Foreign Software Protection and User Privacy Protection (Tranillegalscript of Discussion).- Why Are We Authenticating (Tranillegalscript of Discussion).- Anonymous Authentication.- Anonymous Authentication (Tranillegalscript of Discussion).- Towards a Mechanism for Discretionary Overriding of Access Control.- Towards a Mechanism for Discretionary Overriding of Access Control (Tranillegalscript of Discussion).- Last Orders.
Here are the proceedings of the 12th International Workshop on Security P- tocols. We hope that you will enjoy them, and that they will cause you to think at least one heretical thought. Please write or e-mail and share it with us. Our theme this workshop was "Authentic Privacy." Traditionally we have based authentication upon a rather strong notion of identity, and have then built other security services on top of authentication. Perhaps if we want a more nuanced notion of privacy, then we need to re-examine some of our assu- tions, particularly when attackers and defenders share the same resources and infrastructure. The position papers published here have been revised by the participants in the workshop, and are followed by edited (heavily in some cases) tranillegalscripts of parts of the discussions which they led. Our thanks to Sidney Sussex CollegeCambridgefor the use of their facilities, to Johanna Hunt at the University of Hertfordshire for organizing the logistics of the workshop and orchestrating the production of these proceedings, to Lori KlimaszewskaoftheUniversityofCambridgeComputingServicefortranscribing the audio tapes (in which "viruses without halos" could have caused havoc but didn't), and to Donald Hunt for impeccable copyediting. Finally, it is both a sadness and a pleasure to pay our tribute to David Wheeler,oneoftheoriginalforty-ninersattheCambridgeComputerLaboratory and author of the initial orders for EDSAC. The second version of initial orders is the Platonic bootstrap.
Inhaltsverzeichnis
Introduction: Authentic Privacy.- Limits to Anonymity When Using Credentials.- Limits to Anonymity When Using Credentials (Tranillegalscript of Discussion).- A Cryptographic Framework for the Controlled Release of Certified Data.- A Cryptographic Framework for the Controlled Release of Certified Data (Tranillegalscript of Discussion).- One User, Many Hats; and, Sometimes, No Hat: Towards a Secure Yet Usable PDA.- One User, Many Hats; and Sometimes, No Hat (Tranillegalscript of Discussion).- Authentication Components: Engineering Experiences and Guidelines.- Authentication Components: Engineering Experiences and Guidelines (Tranillegalscript of Discussion).- Accountable Privacy.- Accountable Privacy (Tranillegalscript of Discussion).- Toward a Broader View of Security Protocols.- Toward a Broader View of Security Protocols (Tranillegalscript of Discussion).- Privacy, Control and Internet Mobility.- Privacy, Control and Internet Mobility (Tranillegalscript of Discussion).- Controlling Who Tracks Me.- Controlling Who Tracks Me (Tranillegalscript of Discussion).- BLIND: A Complete Identity Protection Framework for End-Points.- BLIND: A Complete Identity Protection Framework for End-Points (Tranillegalscript of Discussion).- Privacy Is Linking Permission to Purpose.- Privacy is Linking Permission to Purpose (Tranillegalscript of Discussion).- Establishing Trust with Privacy.- Establishing Trust with Privacy (Tranillegalscript of Discussion).- Safe and Private Data Sharing with Turtle: Friends Team-Up and Beat the System.- Safe and Private Data Sharing with Turtle: Friends Team-Up and Beat the System (Tranillegalscript of Discussion).- The Dancing Bear: A New Way of Composing Ciphers.- The Dancing Bear: A New Way of Composing Ciphers (Tranillegalscript of Discussion).- Identity and Location.- Identity and Location (Tranillegalscript of Discussion).- Security of Emergent Properties in Ad-Hoc Networks (Tranillegalscript of Discussion).- Pseudonymity in the Light of Evidence-Based Trust.- Pseudonymity in the Light of Evidence-Based Trust (Tranillegalscript of Discussion).- Secure Processor Consistent with Both Foreign Software Protection and User Privacy Protection.- Secure Processor Consistent with Both Foreign Software Protection and User Privacy Protection (Tranillegalscript of Discussion).- Why Are We Authenticating (Tranillegalscript of Discussion).- Anonymous Authentication.- Anonymous Authentication (Tranillegalscript of Discussion).- Towards a Mechanism for Discretionary Overriding of Access Control.- Towards a Mechanism for Discretionary Overriding of Access Control (Tranillegalscript of Discussion).- Last Orders.
Klappentext
Here are the proceedings of the 12th International Workshop on Security P- tocols. We hope that you will enjoy them, and that they will cause you to think at least one heretical thought. Please write or e-mail and share it with us. Our theme this workshop was ¿Authentic Privacy.¿ Traditionally we have based authentication upon a rather strong notion of identity, and have then built other security services on top of authentication. Perhaps if we want a more nuanced notion of privacy, then we need to re-examine some of our assu- tions, particularly when attackers and defenders share the same resources and infrastructure. The position papers published here have been revised by the participants in the workshop, and are followed by edited (heavily in some cases) tranillegalscripts of parts of the discussions which they led. Our thanks to Sidney Sussex CollegeCambridgefor the use of their facilities, to Johanna Hunt at the University of Hertfordshire for organizing the logistics of the workshop and orchestrating the production of these proceedings, to Lori KlimaszewskaoftheUniversityofCambridgeComputingServicefortranscribing the audio tapes (in which ¿viruses without halos¿ could have caused havoc but didn¿t), and to Donald Hunt for impeccable copyediting. Finally, it is both a sadness and a pleasure to pay our tribute to David Wheeler,oneoftheoriginalforty-ninersattheCambridgeComputerLaboratory and author of the initial orders for EDSAC. The second version of initial orders is the Platonic bootstrap.
Post-proceedings of the 12th International Workshop on Security Protocols, April 2004
Presents 21 revised full papers presented together with edited tranillegalscriptions of some of the discussions
Coverage includes authentication, anonymity, verification of cryptographic protocols, mobile ad-hoc network security, and more
