Engineering Secure Software and Systems: 4th International Symposium, ESSoS 2012, Eindhoven, The Netherlands, February, 16-17, 2012. Proceedings

Description

This book constitutes the refereed proceedings of the 4th International Symposium on Engineering Secure Software and Systems, ESSoS 2012, held in Eindhoven, The Netherlands, in February 2012. The 7 revised full papers presented together with 7 idea papers were carefully reviewed and selected from 53 submissions. The full papers present new research results in the field of engineering secure software and systems, whereas the idea papers give crisp expositions of interesting, novel ideas in the early stages of development. Front Matter....Pages - Application-Replay Attack on Java Cards: When the Garbage Collector Gets Confused....Pages 1-13 Supporting the Development and Documentation of ISO 27001 Information Security Management Systems through Security Requirements Engineering Approaches....Pages 14-21 Typed Assembler for a RISC Crypto-Processor....Pages 22-29 Transversal Policy Conflict Detection....Pages 30-37 Challenges in Implementing an End-to-End Secure Protocol for Java ME-Based Mobile Data Collection in Low-Budget Settings....Pages 38-45 Runtime Enforcement of Information Flow Security in Tree Manipulating Processes....Pages 46-59 Formalisation and Implementation of the XACML Access Control Mechanism....Pages 60-74 A Task Ordering Approach for Automatic Trust Establishment....Pages 75-88 An Idea of an Independent Validation of Vulnerability Discovery Models....Pages 89-96 A Sound Decision Procedure for the Compositionality of Secrecy....Pages 97-105 Plagiarizing Smartphone Applications: Attack Strategies and Defense Techniques....Pages 106-120 Design of Adaptive Security Mechanisms for Real-Time Embedded Systems....Pages 121-134 Hunting Application-Level Logical Errors....Pages 135-142 Optimal Trust Mining and Computing on Keyed MapReduce....Pages 143-150 Back Matter....Pages -