ESORICS
2010
Springer
14 years 20 days ago
2010
Springer
Sun and the CERT recommend for secure Java development to not allow partially initialized objects to be accessed. The CERT considers the severity of the risks taken by not followin...
ESORICS
2010
Springer
14 years 20 days ago
2010
Springer
Abstract. We introduce a novel remotely-mounted attack that can expose the network identity of an anonymous client, hidden service, and anonymizing proxies. To achieve this, we emp...
ESORICS
2010
Springer
14 years 20 days ago
2010
Springer
The security risk of a network against unknown zero day attacks has been considered as something unmeasurable since software flaws are less predictable than hardware faults and the...
ESORICS
2010
Springer
14 years 20 days ago
2010
Springer
Due to their nature, Peer-to-Peer (P2P) systems are subject to a wide range of security issues. In this paper, we focus on a specific security property, called the root authenticit...
ESORICS
2010
Springer
14 years 20 days ago
2010
Springer
This paper presents a theory of runtime enforcement based on mechanism models called MRAs (Mandatory Results Automata). MRAs can monitor and transform security-relevant actions and...
ESORICS
2010
Springer
14 years 20 days ago
2010
Springer
Formal RFID security and privacy frameworks are fundamental to the design and analysis of robust RFID systems. In this paper, we develop a new definitional framework for RFID priv...
ESORICS
2010
Springer
14 years 20 days ago
2010
Springer
Web browser history detection using CSS visited styles has long been dismissed as an issue of marginal impact. However, due to recent changes in Web usage patterns, coupled with br...
ESORICS
2010
Springer
14 years 20 days ago
2010
Springer
Fair exchange is one of the most fundamental problems in secure distributed computation. Alice has something that Bob wants, and Bob has something that Alice wants. A fair exchang...
ESORICS
2010
Springer
14 years 20 days ago
2010
Springer
Abstract. Recent emergence of RFID tags capable of performing public key operations motivates new RFID applications, including electronic travel documents, identification cards and...
ESORICS
2010
Springer
14 years 20 days ago
2010
Springer
Abstract. In distributed computer systems, it is possible that the evaluation of an authorization policy may suffer unexpected failures, perhaps because a sub-policy cannot be eval...