ESORICS
2009
Springer
14 years 5 months ago
2009
Springer
We present a formal model for stateful security protocols. This model is used to define ownership and ownership transfer as concepts as well as security properties. These definitio...
ESORICS
2009
Springer
14 years 5 months ago
2009
Springer
We present a traffic analysis of the ADU anonymity scheme presented at ESORICS 2008, and the related RADU scheme. We show that optimal attacks are able to de-anonymize messages mor...
ESORICS
2009
Springer
14 years 5 months ago
2009
Springer
Content Delivery Networks (CDNs) are commonly believed to offer their customers protection against application-level denial of service (DoS) attacks. Indeed, a typical CDN with its...
ESORICS
2009
Springer
14 years 5 months ago
2009
Springer
Abstract. We study the problem of authenticating the content and creation time of documents generated by an organization and retained in archival storage. Recent regulations (e.g.,...
ESORICS
2009
Springer
14 years 5 months ago
2009
Springer
Security APIs are used to define the boundary between trusted and untrusted code. The security properties of existing APIs are not always clear. In this paper, we give a new generi...
ESORICS
2009
Springer
14 years 5 months ago
2009
Springer
Cross-site scripting (XSS) vulnerabilities make it possible for worms to spread quickly to a broad range of users on popular Web sites. To date, the detection of XSS worms has been...
ESORICS
2009
Springer
14 years 5 months ago
2009
Springer
Separation of Duty Constraints David Basin1 , Samuel J. Burri1,2 , and G?unter Karjoth2 1 ETH Zurich, Department of Computer Science, Switzerland 2 IBM Research, Zurich Research La...
ESORICS
2009
Springer
14 years 5 months ago
2009
Springer
Abstract. Interest in role-based access control has generated considerable research activity in recent years. A number of interesting problems related to the well known set cover p...
ESORICS
2009
Springer
14 years 5 months ago
2009
Springer
In this paper, we propose a novel ID-based secure distance bounding protocol. Unlike traditional secure distance measurement protocols, our protocol is based on standard insecure d...
ESORICS
2009
Springer
14 years 5 months ago
2009
Springer
We examine some known attacks on the PIN verification framework, based on weaknesses of the security API for the tamperresistant Hardware Security Modules used in the network. We s...