Security Research Institute, Edith Cowan University

English

Research Online @ ECU

Edith Cowan UniversityResearch OnlineAustralian Information Security ManagementConference Conferences, Symposia and Campus Events201412th Australian Information Security ManagementConference, 2014, Edith Cowan University:Conference detailsSecurity Research Institute, Edith Cowan UniversityThis Conference Proceeding is posted at Research Online.http://ro.ecu.edu.au/ism/169      The Proceedings of  12th Australian Information Security Management Conference   1-3 December, 2014 ECU Joondalup Campus, Perth, Western Australia     1    Proceedings of the 12th Australian Information Security Management Conference   Published By Security Research Institute Edith Cowan University  Edited By Dr Mike Johnstone Security Research Institute Edith Cowan University  Copyright 2014, All Rights Reserved, Edith Cowan University  ISBN  978-0-7298-0718-0  CRICOS Institution Provider Code 00279B   Sponsors       Supporters        2   Conference Foreword The annual Security Congress, run by the Security Research Institute at Edith Cowan University, includes the 12th Australian Information Security and Management Conference. Now in its twelfth year, the conference remains popular for its diverse content and mixture of technical research and discussion papers. The area of information security and management continues to be varied, as is reflected by the variety of subject matter disciplines covered by the papers this year.   The conference has drawn interest and papers from within Australia and internationally. All submitted papers were subject to a double blind peer review process and 16 papers were submitted from Australia and overseas, of which 12 were accepted for final presentation and publication.  We wish to thank all the reviewers for kindly volunteering their time and expertise in support of this event. We would also like to thank the conference committee who have organised yet another successful congress. Events such as this are impossible without the tireless efforts of such people in reviewing and editing of the conference papers, helping with the planning, organisation and execution of the conferences.   To our sponsors also a vote of thanks for both the financial and moral support provided to the conference. Finally, to the administrative and technical staff and students of the ECU Security Research Institute for their contributions to the running of the conference.  Yours sincerely  Conference Chair Dr Mike Johnstone, Security Research Institute, Edith Cowan University   Congress Organising Committee Congress Chair:  Professor Craig Valli Committee Members:    Dr David Brooks    Mr Clinton Carpene    Mr Jeff Corkill    Mr Michael Coole    Mr David Cook    Mr Michael Crowley    Mr Peter Hannay    Dr Mike Johnstone    Mr Patryk Szewczyk    Mr Krishnun Sansurooah    Dr Zubair Baig    Associate Professor Andrew Woodward    Associate Professor Trish Williams    Professor Bill Hutchinson Professor Nara Srinivasan Congress Coordinator:  Ms Emma Burke        3Table of Contents    MITIGATING MAN-IN-THE-MIDDLE ATTACKS ON SMARTPHONES – A DISCUSSION OF SSL PINNING AND DNSSEC…………………………………………………………………………………………………………………   5  Veelasha Moonsamy and Lynn Batten   SECURING IDENTITY INFORMATION WITH IMAGE WATERMARKS…………………………………………….. 14  Brian Cusack, Reza Khaleghparast   ATTRIBUTE-BASED ENCRYPTION WITH ENCRYPTION AND DECRYPTION OUTSOURCING………….. 21  Muhammad Asim,  Milan Petković, Tanya Ignatenko   EVALUATING THE SECURITY VULENERABILITIES OF THE IP6to4 TUNNELLING MECHANISM……… 29  Brian Cusack, Raymond Lutui   THE IMPACT OF SOCIAL CONSTRUCTIVISM ON ERP SYSTEMS SECURITY: A CRITICAL SOCIAL REVIEW……………………………………………………………………………………………………………………………………….  39  Kennedy Njenga   CACHE-TIMING ATTACK AGAINST AES CRYPTO SYSTEM - COUNTERMEASURES REVIEW………….. 48  Yaseen.H.Taha, Settana.M.Abdulh,  Naila.A.Sadalla, Huwaida Elshoush   AUTHENTICATION AND AUTHORISATION IN ENTRUSTED UNIONS……………………………………………. 56  Ayed F. Dhouha,  Jan Camenisch,  Tanya Ignatenko, Michael N. Johnstone,    Paul Koster, Brigitta Lange, Milan Petkovic, Dieter Sommer, John Zic   PERSISTENT ISSUES IN ENCRYPTION SOFTWARE: A HEURISTIC AND COGNITIVE WALKTHROUGH………………………………………………………………………………………………………………………….  64  Jad El-Abed, Patryk Szewczyk   SECURING THE INTERNET OF THINGS INFRASTRUCTURE – STANDARDS AND TECHNIQUES……… 75  Zubair A. Baig   THE APPLICATION OF AN AGILE APPROACH TO IT SECURITY RISK MANAGEMENT FOR SMES…… 82  Damien Hutchinson, Chris Armitt, Dean Edwards-Lear   A SURVEY OF IPV6 ADDRESS USAGE IN THE PUBLIC DOMAIN NAME SYSTEM…………………………… 91  Clinton Carpene, Andrew Woodward   AN ANALYSIS OF SECURITY ISSUES IN BUILDING AUTOMATION SYSTEMS………………………………… 100  Matthew Peacock and Michael N. Johnstone    4

12th Australian Information Security Management Conference, 2014, Edith Cowan University: Conference details

https://ro.ecu.edu.au/cgi/viewcontent.cgi?article=1174&context=ism

12th Australian Information Security Management Conference, 2014, Edith Cowan University: Conference details

Abstract

Similar works

Full text

Available Versions

Research Online @ ECU