Computer Security – ESORICS 2005: 10th European Symposium on Research in Computer Security, Milan, Italy, September 12-14, 2005. Proceedings

Barbara Simons (auth.), Sabrina de Capitani di Vimercati, Paul Syverson, Dieter Gollmann (eds.)3540289631, 9783540289630

Foreword from the Program Chairs These proceedings contain the papers selected for presentation at the 10th – ropean Symposium on Research in Computer Security (ESORICS), held S- tember 12–14, 2005 in Milan, Italy. In response to the call for papers 159 papers were submitted to the conf- ence. These paperswere evaluated on the basis of their signi?cance, novelty,and technical quality. Each paper was reviewed by at least three members of the program committee. The program committee meeting was held electronically, holding intensive discussion over a period of two weeks. Of the papers subm- ted, 27 were selected for presentation at the conference, giving an acceptance rate of about 16%. The conference program also includes an invited talk by Barbara Simons. There is a long list of people who volunteered their time and energy to put together the symposiom and who deserve acknowledgment. Thanks to all the members of the program committee, and the external reviewers, for all their hard work in evaluating and discussing papers. We are also very grateful to all those people whose work ensured a smooth organizational process: Pierangela Samarati, who served as General Chair, Claudio Ardagna, who served as P- licity Chair, Dieter Gollmann who served as Publication Chair and collated this volume, and Emilia Rosti and Olga Scotti for helping with local arrangements. Last, but certainly not least, our thanks go to all the authors who submitted papers and all the attendees. We hope you ?nd the program stimulating.

---

Table of contents :
Front Matter….Pages –
Computerized Voting Machines: A View from the Trenches….Pages 1-2
XML Access Control with Policy Matching Tree….Pages 3-23
Semantic Access Control Model: A Formal Specification….Pages 24-43
A Generic XACML Based Declarative Authorization Scheme for Java….Pages 44-63
Specification and Validation of Authorisation Constraints Using UML and OCL….Pages 64-79
Unified Index for Mobile Object Data and Authorizations….Pages 80-97
On Obligations….Pages 98-117
A Practical Voter-Verifiable Election Scheme….Pages 118-139
Machine-Checked Security Proofs of Cryptographic Signature Schemes….Pages 140-158
Sanitizable Signatures….Pages 159-177
Limits of the Cryptographic Realization of Dolev-Yao-Style XOR….Pages 178-196
Security-Typed Languages for Implementation of Cryptographic Protocols: A Case Study….Pages 197-221
Augmented Oblivious Polynomial Evaluation Protocol and Its Applications….Pages 222-230
Using Attack Trees to Identify Malicious Attacks from Authorized Insiders….Pages 231-246
An Efficient and Unified Approach to Correlating, Hypothesizing, and Predicting Intrusion Alerts….Pages 247-266
Towards a Theory of Intrusion Detection….Pages 267-286
On Scalability and Modularisation in the Modelling of Network Security Systems….Pages 287-304
Sybil-Resistant DHT Routing….Pages 305-318
Botnet Tracking: Exploring a Root-Cause Methodology to Prevent Distributed Denial-of-Service Attacks….Pages 319-335
Quantifying Probabilistic Information Flow in Computational Reactive Systems….Pages 336-354
Enforcing Non-safety Security Policies with Program Monitors….Pages 355-373
Soundness of Formal Encryption in the Presence of Key-Cycles….Pages 374-396
Privacy Preserving Clustering….Pages 397-417
Abstractions Preserving Parameter Confidentiality….Pages 418-437
Minimal Disclosure in Hierarchical Hippocratic Databases with Delegation….Pages 438-454
Security Notions for Disk Encryption….Pages 455-474
Local View Attack on Anonymous Communication….Pages 475-488
Browser Model for Security Analysis of Browser-Based Protocols….Pages 489-508
Back Matter….Pages –