Security Protocols: 10th International Workshop, Cambridge, UK, April 17-19, 2002. Revised Papers

Bruce Christianson (auth.), Bruce Christianson, Bruno Crispo, James A. Malcolm, Michael Roe (eds.)3540208305, 9783540208303

Once again we bring you the proceedings of the International Workshop on Security Protocols. It seems hard to believe that we have reached the tenth event in this annual series. This year our theme was “Discerning the Protocol Participants.” Security protocols are usually described in terms of the active participants – Alice c- putes foo and sends it to Bob. However most security protocols also include o?-line participants, which are not synchronously involved in the exchange of messages: a bank may participate on behalf of a customer, and an arbiter may subsequently be asked to interpret the meaning of a run. These silent partners to the protocol have their own security policies, and assumptionsaboutidentity,authorizationandcapabilityneedtobere-examined when the agenda of a hidden participant may change. We hope that the position papers published here, which have been rewritten and rethought in the light of the discussions at the workshop, will be of interest, not just for the speci?c contributions they make but also for the deeper issues which they expose. In order to identify these issues more clearly, we include transcripts for some of the discussions which took place in Cambridge during the workshop. What would you have liked to add? Do let us know.

---

Table of contents :
Front Matter….Pages –
Introduction (Transcript)….Pages 1-1
Keynote Address….Pages 2-4
Weak Authentication: How to Authenticate Unknown Principals without Trusted Parties….Pages 5-19
Is Entity Authentication Necessary?….Pages 20-33
A Structured Operational Modelling of the Dolev-Yao Threat Model….Pages 34-46
On Trust Establishment in Mobile Ad-Hoc Networks….Pages 47-66
Legally Authorized and Unauthorized Digital Evidence….Pages 67-73
Shrink-Wrapped Optimism: The DODA Approach to Distributed Document Processing….Pages 74-95
Contractual Access Control….Pages 96-103
Confidentiality Levels and Deliberate/Indeliberate Protocol Attacks….Pages 104-119
Analyzing Delegation Properties….Pages 120-127
Combinatorial Optimization of Countermeasures against Illegal Copying….Pages 128-144
Protocols with Certified-Transfer Servers….Pages 145-157
An Architecture for an Adaptive Intrusion-Tolerant Server….Pages 158-178
Supporting Imprecise Delegation in KeyNote….Pages 179-188
Modeling Protocols for Secure Group Communications in Ad Hoc Networks….Pages 189-202
Delegation of Signalling Rights….Pages 203-214
Mobile IPv6 Security….Pages 215-234
Concluding Discussion: Accounting for Resources….Pages 235-241
Back to the Beginning….Pages 242-242
Back Matter….Pages –