Barthe, Gilles

English

University of Twente Research Information

Lecture Notes in Computer Science 7140Commenced Publication in 1973Founding and Former Series Editors:Gerhard Goos, Juris Hartmanis, and Jan van LeeuwenEditorial BoardDavid HutchisonLancaster University, UKTakeo KanadeCarnegie Mellon University, Pittsburgh, PA, USAJosef KittlerUniversity of Surrey, Guildford, UKJon M. KleinbergCornell University, Ithaca, NY, USAAlfred KobsaUniversity of California, Irvine, CA, USAFriedemann MatternETH Zurich, SwitzerlandJohn C. MitchellStanford University, CA, USAMoni NaorWeizmann Institute of Science, Rehovot, IsraelOscar NierstraszUniversity of Bern, SwitzerlandC. Pandu RanganIndian Institute of Technology, Madras, IndiaBernhard SteffenTU Dortmund University, GermanyMadhu SudanMicrosoft Research, Cambridge, MA, USADemetri TerzopoulosUniversity of California, Los Angeles, CA, USADoug TygarUniversity of California, Berkeley, CA, USAGerhard WeikumMax Planck Institute for Informatics, Saarbruecken, GermanyGilles Barthe Anupam DattaSandro Etalle (Eds.)Formal Aspectsof Security and Trust8th International Workshop, FAST 2011Leuven, Belgium, September 12-14, 2011Revised Selected Papers13Volume EditorsGilles BartheUniversidad Politecnica de MadridIMDEA Software InstituteCampus Montegancedo28660 Boadilla del Monte, Madrid, SpainE-mail: gilles.barthe@imdea.orgAnupam DattaCarnegie Mellon UniversityNASA Research Park, Bldg. 23 (MS 23-11)P.O. Box 1Moffet Field, CA 94035-0001, USAE-mail: danupam@cmu.eduSandro EtalleTechnical University of EindhovenFaculty of Mathematics and Computer ScienceEmbedded Systems Security GroupP.O. Box 5135600 MB Eindhoven, The NetherlandsE-mail: s.etalle@tue.nlISSN 0302-9743 e-ISSN 1611-3349ISBN 978-3-642-29419-8 e-ISBN 978-3-642-29420-4DOI 10.1007/978-3-642-29420-4Springer Heidelberg Dordrecht London New YorkLibrary of Congress Control Number: 2012934839CR Subject Classification (1998): C.2.0, K.6.5, D.4.6, E.3, K.4.4, H.3-4, J.1LNCS Sublibrary: SL 4 – Security and Cryptology© Springer-Verlag Berlin Heidelberg 2012This work is subject to copyright. All rights are reserved, whether the whole or part of the material isconcerned, specifically the rights of translation, reprinting, re-use of illustrations, recitation, broadcasting,reproduction on microfilms or in any other way, and storage in data banks. Duplication of this publicationor parts thereof is permitted only under the provisions of the German Copyright Law of September 9, 1965,in its current version, and permission for use must always be obtained from Springer. Violations are liableto prosecution under the German Copyright Law.The use of general descriptive names, registered names, trademarks, etc. in this publication does not imply,even in the absence of a specific statement, that such names are exempt from the relevant protective lawsand regulations and therefore free for general use.Typesetting: Camera-ready by author, data conversion by Scientific Publishing Services, Chennai, IndiaPrinted on acid-free paperSpringer is part of Springer Science+Business Media (www.springer.com)PrefaceThe present volume contains the proceedings of the 8th International Workshopon Formal Aspects of Security and Trust (FAST 2011), held in Leuven, Belgium,September 12–14, 2011, in co-location with the 16th European Symposium onResearch in Computer Security (ESORICS).FAST sought original papers focusing on formal aspects of the followingtopics: security and trust policy models; security protocol design and analysis;formal models of trust and reputation; logics for security and trust; distributedtrust management systems; trust-based reasoning; digital assets protection; dataprotection; privacy and ID issues; information flow analysis; language-based se-curity; security and trust aspects of ubiquitous computing; validation/analysistools; Web service security/trust/privacy; grid security; security risk assessment;and case studies.The Program Committee of FAST 2011 received 42 submissions in responseto the Call for Papers. Our warmest thanks go to all the authors of submittedpapers for sending their work to the conference. Each paper was reviewed bythree members of the Program Committee; we thank all the external reviewersfor their valuable efforts. Based on the review reports and electronic discussions,the Program Committee selected 15 papers for inclusion in the proceedings.The proceedings contain revised versions of these 15 accepted papers, andtwo papers that accompany invited lectures by Andrew D. Gordon (MicrosoftResearch and University of Edinburgh), and Frank Piessens (Katholieke Univer-siteit Leuven).We are grateful to the invited speakers for accepting to address the confer-ence, and to the members of the Program Committee for their assistance in thepaper selection. We are also grateful to the local organizers of ESORICS 2011for providing a perfect environment for running the workshop, and to AndreiVoronkov for his EasyChair system.November 2011 Gilles BartheAnupam DattaSandro EtalleOrganizationProgram CommitteeGilles Barthe IMDEA Software Institute, SpainKonstantinos Chatzikokolakis CNRS and Ecole Polytechnique, FranceStephen Chong Harvard University, USAMichael Clarkson George Washington University, USARicardo Corin Universidad Nacional de Córdoba, ArgentinaCas Cremers ETH Zurich, SwitzerlandAnupam Datta Carnegie Mellon University, USASandro Etalle T.U. Eindhoven and University of Twente,The NetherlandsCédric Fournet Microsoft Research, USADeepak Garg Carnegie Mellon University, USAPeter Herrmann NTNU Trondheim, NorwayBart Jacobs Radboud University Nijmegen,The NetherlandsChristian Damsgaard Jensen Technical University of Denmark, DenmarkSteve Kremer LSV, ENS Cachan, CNRS, INRIA, FranceFabio Martinelli IIT-CNR, ItalyFabio Massacci University of Trento, ItalySjouke Mauw University of Luxembourg, LuxembourgRon van der Meyden University of New South Wales, AustraliaMogens Nielsen BRICS, University of Aarhus, DenmarkMark Ryan University of Birmingham, UKLuca Viganò University of Verona, ItalyAdditional ReviewersAlvim, Mario S.Barletta, MicheleBielova, NataliiaBursuc, SergiuClavel, ManuelCosta, GabrieleDe Ruiter, JoeriDechesne, FrancienDelaune, StephanieGadyatskaya, OlgaGarcia, Flavio D.Harvan, MatusHuisman, MariekeJeffrey, AlanKoleini, MasoudKordy, BarbaraKoshutanski, HristoKunnemann, RobertLee, Mat́ıas D.Li, NinghuiManzano, FelipeMatteucci, IlariaVIII OrganizationMelissen, MatthijsMödersheim, SebastianPaci, FedericaPagano, MiguelPang, JunRadomirović, SašaRamanujam, R.Samardjiska, SimonaSchmidt, BenediktShkaravska, OlhaSu, KaileTorabi Dashti, MohammadUllman, JonathanVan Deursen, TonVerdult, RoelYautsiukhin, ArtsiomTable of ContentsVerifying Cryptographic Code in C: Some Experience and the CsecChallenge . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1Mihhail Aizatulin, François Dupressoir, Andrew D. Gordon, andJan JürjensBetter Security and Privacy for Web Browsers: A Survey of Techniques,and a New Implementation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21Willem De Groef, Dominique Devriese, and Frank PiessensDifferential Privacy: On the Trade-Off between Utility and InformationLeakage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39Mário S. Alvim, Miguel E. Andrés, Konstantinos Chatzikokolakis,Pierpaolo Degano, and Catuscia PalamidessiOn-the-Fly Inlining of Dynamic Dependency Monitors for SecureInformation Flow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55Luciano Bello and Eduardo BonelliMin-Entropy Leakage of Channels in Cascade . . . . . . . . . . . . . . . . . . . . . . . . 70Barbara Espinoza and Geoffrey SmithSecure Recharge of Disposable RFID Tickets . . . . . . . . . . . . . . . . . . . . . . . . 85Riccardo Focardi and Flaminia L. LuccioAvoiding Delegation Subterfuge Using Linked Local PermissionNames . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100Simon N. Foley and Samane AbdiVerifiable Control Flow Policies for Java Bytecode . . . . . . . . . . . . . . . . . . . 115Arnaud Fontaine, Samuel Hym, and Isabelle Simplot-RylConcepts and Proofs for Configuring PKCS#11 . . . . . . . . . . . . . . . . . . . . . . 131Sibylle Fröschle and Nils SommerService Automata . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148Richard Gay, Heiko Mantel, and Barbara SprickAnalysing Applications Layered on Unilaterally AuthenticatingProtocols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164Thomas Gibson-Robinson and Gavin LoweType-Based Enforcement of Secure Programming Guidelines — CodeInjection Prevention at SAP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 182Robert Grabowski, Martin Hofmann, and Keqin LiX Table of ContentsTBA : A Hybrid of Logic and Extensional Access Control Systems . . . . . 198Timothy L. Hinrichs, William C. Garrison III, Adam J. Lee,Skip Saunders, and John C. MitchellDiffie-Hellman without Difficulty . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 214Sebastian MödersheimIs Cryptyc Able to Detect Insider Attacks? . . . . . . . . . . . . . . . . . . . . . . . . . . 230Behnam Sattarzadeh and Mehran S. FallahFormal Analysis of Anonymity in ECC-Based Direct AnonymousAttestation Schemes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 245Ben Smyth, Mark Ryan, and Liqun ChenRisk Balance in Optimistic Non-repudiation Protocols . . . . . . . . . . . . . . . . 263Mohammad Torabi Dashti, Jan Cederquist, and Yanjing WangAuthor Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 279

Formal aspects of security and trust : 8th international workshop, FAST 2011 Leuven, Belgium, September 12-14, 2011: revised selected papers

https://research.utwente.nl/en/publications/274e0e17-17f3-458d-b4f4-979f46cb20df

Formal aspects of security and trust : 8th international workshop, FAST 2011 Leuven, Belgium, September 12-14, 2011: revised selected papers

Abstract

Similar works

Full text

Available Versions

University of Twente Research Information