This book contains the Proceedings of the 21st IFIP TC-11 International Information Security Conference (IFIP/SEC 2006) on "Security and Privacy in Dynamic Environments". The papers presented here place a special emphasis on Privacy and Privacy Enhancing Technologies. Further topics addressed include security in mobile and ad hoc networks, access control for dynamic environments, new forms of attacks, security awareness, intrusion detection, and network forensics.
One of the main goals of the pervasive computing domain is to provide the user with task support for everyday tasks. This task support should be realized by pervasive applications that are seamlessly integrated in the environment, for example embedded into devices such as everyday objects. To automate configuration, context information is shared between these devices. The shared context can contain private information that should not be made public. System support, which helps to develop pervasive applications, should therefore contain mechanisms that utilize security and privacy methods when handling context. Pervasive applications can then use these mechanisms and create pervasive environments while preserving the user's privacy. Here, we show how context information can be processed and queried in a privacy-preserving manner. By securing the authenticity and integrity of context information and creating a secure context distribution algorithm, we show how pervasive applications can use and share context securely. Second, we introduce secure role assignment as a mechanism for environment adaptation which is built on context information. Similar to context, roles need to be protected and secured during distribution. Additionally, we add system support for secure roles which can be used for role-based access control by pervasive applications. Third, we create a secure key-exchange mechanism that can be used to secure the communication between users and devices. This is an essential step that needs to be performed before any private information can be shared among them. Fourth, we introduce a framework for the automatic generation of a privacy policy. This framework creates an individual privacy policy that can be used to share context between users, devices or applications while preserving the user's will with regard to context privacy.
Annotation This book constitutes the refereed post-conference proceedings of the 6th European Workshop on Public Key Services, Applications and Infrastructures, EuroPKI 2009, held in Pisa, Italy, in September 2009. The 18 revised full papers presented together with an invited speech were carefully reviewed and selected from 40 submissions. The papers are organized in topical sections on certificate less encryption, certificates and revocation, cryptographic protocols, PKI in practice, encryption and auctions, reputation and user aspects, and digital signatures.
This book analyzes the latest advances in privacy, security and risk technologies within cloud environments. With contributions from leading experts, the text presents both a solid overview of the field and novel, cutting-edge research. A Glossary is also included at the end of the book. Topics and features: considers the various forensic challenges for legal access to data in a cloud computing environment; discusses privacy impact assessments for the cloud, and examines the use of cloud audits to attenuate cloud security problems; reviews conceptual issues, basic requirements and practical suggestions for provisioning dynamically configured access control services in the cloud; proposes scoped invariants as a primitive for analyzing a cloud server for its integrity properties; investigates the applicability of existing controls for mitigating information security risks to cloud computing environments; describes risk management for cloud computing from an enterprise perspective.
This book constitutes the proceedings of the 17th International Conference on Risks and Security of Internet and Systems, CRiSIS 2022, which took place in Sousse, Tunesia, during December 7-9, 2022. The 14full papers and 4 short papers included in this volume were carefully reviewed and selected from 39 submissions. The papers detail security issues in internet-related applications, networks and systems.
The Internet of Things (IoT) is a network of devices and smart things that provides a pervasive environment in which people can interact with both the cyber and physical worlds. As the number and variety of connected objects continue to grow and the devices themselves become smarter, users’ expectations in terms of adaptive and self-governing digital environments are also on the rise. Although, this connectivity and the resultant smarter living is highly attractive to general public and profitable for the industry, there are also inherent concerns. The most challenging of these refer to the privacy and security of data, user trust of the digital systems, and relevant authentication mechanisms. These aspects call for novel network architectures and middleware platforms based on new communication technologies; as well as the adoption of novel context-aware management approaches and more efficient tools and devices. In this context, this book explores central issues of privacy, security and trust with regard to the IoT environments, as well as technical solutions to help address them. The main topics covered include:• Basic concepts, principles and related technologies• Security/privacy of data, and trust issues• Mechanisms for security, privacy, trust and authentication• Success indicators, performance metrics and future directions. This reference text is aimed at supporting a number of potential audiences, including• Network Specialists, Hardware Engineers and Security Experts • Students, Researchers, Academics and Practitioners.
This e-book discusses the issues surrounding informational privacy - assuming that privacy is the indefeasible right of an individual to control the ways in which personal information is obtained, processed, distributed, shared and used by any other entity. The review of current research work in the area of user privacy has indicated that the path for user privacy protection is through the four basic privacy requirements namely anonymity, pseudonymity, unlinkability and unobservability. By addressing these four basic requirements one aims to minimize the collection of user identifiable data.
This comprehensive monograph delves into the integration of Identity Access Management (IAM) and Blockchain technologies, offering advanced techniques and methodologies to enhance security, privacy, and scalability in modern digital infrastructures. By exploring the intersection of IAM and Blockchain, the book provides a detailed understanding of how these technologies can be combined to create robust, decentralized, and secure systems. It covers practical applications, case studies, and best practices, making it an essential resource for professionals aiming to leverage IAM and Blockchain for secure and efficient digital identity management. The book maintains a cohesive flow, ensuring that each chapter builds on the previous one, offering a seamless and comprehensive narrative.
Privacy and security concerns are at the forefront of research and critical study in the prevalence of information technology. Pervasive Information Security and Privacy Developments: Trends and Advancements compiles research on topics such as technical, regulatory, organizational, managerial, cultural, ethical, and human aspects of information security and privacy. This reference offers methodologies, research frameworks, theory development and validation, case studies, simulations, technological architectures, infrastructure issues in design, and implementation of secure and privacy preserving initiatives.
