CSFW
2007
IEEE
14 years 2 months ago
2007
IEEE
We present a new mechanized prover for showing correspondence assertions for cryptographic protocols in the computational model. Correspondence assertions are useful in particular...
CSFW
2007
IEEE
14 years 2 months ago
2007
IEEE
CSFW
2007
IEEE
14 years 2 months ago
2007
IEEE
se an abstract model of business processes for the purpose of (i) evaluating privacy policy in light of the goals of the process and (ii) developing automated support for privacy ...
CSFW
2007
IEEE
14 years 2 months ago
2007
IEEE
Although static systems for information flow security are well-studied, few works address run-time information flow monitoring. Run-time information flow control offers distinc...
CSFW
2007
IEEE
14 years 2 months ago
2007
IEEE
Key conjuring is the process by which an attacker obtains an unknown, encrypted key by repeatedly calling a cryptographic API function with random values in place of keys. We prop...
ACSAC
2007
IEEE
14 years 2 months ago
2007
IEEE
Usability is the weakest link in the security chain of many prominent applications. A set of security usability principles should therefore be considered when designing and engine...
ACSAC
2007
IEEE
14 years 2 months ago
2007
IEEE
We present an extension of traditional "black box" fuzz testing using a genetic algorithm based upon a Dynamic Markov Model fitness heuristic. This heuristic allows us t...
ACSAC
2007
IEEE
14 years 2 months ago
2007
IEEE
This paper describes the security and network architecture of the Annex system, a family of technologies for secure and pervasive communication and information processing that we ...
ACSAC
2007
IEEE
14 years 2 months ago
2007
IEEE
Special purpose trusted computing devices are currently being deployed to offer many services for which the general purpose computing paradigm is unsuitable. The nature of the ser...
ACSAC
2007
IEEE
14 years 2 months ago
2007
IEEE
This paper describes the design of a peer-to-peer network that supports integrity and confidentiality labeling of shared data. A notion of data ownership privacy is also enforced...