Lecture Notes in Computer Science 5185

More documents

Recommendations

Info

X Table of Contents Combining Trust and Reputation Management for Web-Based Services ......................................................... 90 Audun Jøsang, Touhid Bhuiyan, Yue Xu, and Clive Cox Security Policies and Identity Management Controlling Usage in Business Process Workflows through Fine-Grained Security Policies ................................................. 100 Benjamin Aziz, Alvaro Arenas, Fabio Martinelli, Ilaria Matteucci, and Paolo Mori Spatiotemporal Connectives for Security Policy in the Presence of Location Hierarchy ............................................... 118 Subhendu Aich, Shamik Sural, and Arun K. Majumdar BusiROLE: A Model for Integrating Business Roles into Identity Management .................................................... 128 Ludwig Fuchs and Anton Preis Intrusion Detection and Applications of Game Theory to IT Security Problems The Problem of False Alarms: Evaluation with Snort and DARPA 1999 Dataset ......................................................... 139 Gina C. Tjhai, Maria Papadaki, Steven M. Furnell, and Nathan L. Clarke A Generic Intrusion Detection Game Model in IT Security ............ 151 Ioanna Kantzavelou and Sokratis Katsikas On the Design Dilemma in Dining Cryptographer Networks ........... 163 Jens O. Oberender and Hermann de Meer Privacy Obligations: Building a Bridge between Personal and Enterprise Privacy in Pervasive Computing ................................... 173 Susana Alcalde Bagüés, Jelena Mitic, Andreas Zeidler, Marta Tejada, Ignacio R. Matias, and Carlos Fernandez Valdivielso A User-Centric Protocol for Conditional Anonymity Revocation ...................................................... 185 Suriadi Suriadi, Ernest Foo, and Jason Smith Preservation of Privacy in Thwarting the Ballot Stuffing Scheme ....... 195 Wesley Brandi, Martin S. Olivier, and Alf Zugenmaier Author Index .................................................. 205
Biometrics – How to Put to Use and How Not at All? Andreas Pfitzmann TU Dresden, Faculty of Computer Science, 01062 Dresden, Germany Andreas.Pfitzmann@tu-dresden.de Abstract. After a short introduction to biometrics w.r.t. IT security, we derive conclusions on how biometrics should be put to use and how not at all. In particular, we show how to handle security problems of biometrics and how to handle security and privacy problems caused by biometrics in an appropriate way. The main conclusion is that biometrics should be used between human being and his/her personal devices only. 1 Introduction Biometrics is advocated as the solution to admission control nowadays. But what can biometrics achieve, what not, which side effects do biometrics cause and which challenges in system design do emerge? 1.1 What Is Biometrics? Measuring physiological or behavioral characteristics of persons is called biometrics. Measures include the physiological characteristics – (shape of) face, – facial thermograms, – fingerprint, – hand geometry, – vein patterns of the retina, – patterns of the iris, and – DNA and the behavioral characteristics – dynamics of handwriting (e.g., handwritten signatures), – voice print, and – gait. One might make a distinction whether the person whose physiological or behavioral characteristics are measured has to participate explicitly (active biometrics), so (s)he gets to know that a measurement takes place, or whether his/her explicit participation is not necessary (passive biometrics), so (s)he might not notice that a measurement takes place. S.M. Furnell, S.K. Katsikas, and A. Lioy (Eds.): TrustBus 2008, LNCS 5185, pp. 1–7, 2008. c○ Springer-Verlag Berlin Heidelberg 2008
Page 1 and 2: Lecture Notes in Computer Science 5
Page 3 and 4: Volume Editors Steven Furnell Unive
Page 5 and 6: Program Committee General Chairpers
Page 7: Invited Lecture Table of Contents B
Page 11 and 12: Biometrics-HowtoPuttoUseandHowNotat
Page 13 and 14: Biometrics-HowtoPuttoUseandHowNotat
Page 15 and 16: 7 Outlook Biometrics-HowtoPuttoUsea
Page 17 and 18: A Map of Trust between Trading Part
Page 27 and 28: Implementation of a TCG-Based Trust
Page 37 and 38: A Model for Trust Metrics Analysis
Page 47 and 48: Patterns and Pattern Diagrams for A
Page 51 and 52: Policy Model AC model Patterns and
Page 53 and 54: Broker Investor Doctor Patient 1
Page 57 and 58: A Spatio-temporal Access Control Mo
Page 59 and 60:
A Spatio-temporal Access Control Mo
Page 61 and 62:
Page 63 and 64:
Page 65 and 66:
Page 67 and 68:
A Mechanism for Ensuring the Validi
Page 69 and 70:
Page 71 and 72:
Page 73 and 74:
Page 75 and 76:
Page 77 and 78:
Multilateral Secure Cross-Community
Page 79 and 80:
Page 81 and 82:
Page 83 and 84:
Page 85 and 86:
Page 87 and 88:
Fairness Emergence through Simple R
Page 89 and 90:
Page 91 and 92:
Page 93 and 94:
Page 95 and 96:
Page 97 and 98:
Page 99 and 100:
Combining Trust and Reputation Mana
Page 101 and 102:
Page 103 and 104:
Page 105 and 106:
Page 107 and 108:
Page 109 and 110:
Controlling Usage in Business Proce
Page 111 and 112:
Page 113 and 114:
Page 115 and 116:
Page 117 and 118:
Page 119 and 120:
Page 121 and 122:
Page 123 and 124:
A Semantics Rules for POLPA-Control
Page 125 and 126:
Page 127 and 128:
Spatiotemporal Connectives for Secu
Page 129 and 130:
Page 131 and 132:
Page 133 and 134:
5.2 Expressiveness Spatiotemporal C
Page 135 and 136:
Acknowledgement Spatiotemporal Conn
Page 137 and 138:
BusiROLE: A Model for Integrating B
Page 139 and 140:
Page 141 and 142:
Page 143 and 144:
Page 145 and 146:
Page 147 and 148:
The Problem of False Alarms: Evalua
Page 149 and 150:
The Problem of False Alarms 141 pro
Page 151 and 152:
The Problem of False Alarms 143 To
Page 153 and 154:
The Problem of False Alarms 145 mad
Page 155 and 156:
The Problem of False Alarms 147 Des
Page 157 and 158:
The Problem of False Alarms 149 3.
Page 159 and 160:
A Generic Intrusion Detection Game
Page 161 and 162:
Page 163 and 164:
Page 165 and 166:
Page 167 and 168:
Page 169 and 170:
Page 171 and 172:
On the Design Dilemma in Dining Cry
Page 173 and 174:
Page 175 and 176:
Page 177 and 178:
Page 179 and 180:
Page 181 and 182:
Obligations: Building a Bridge betw
Page 183 and 184:
Page 185 and 186:
Page 187 and 188:
Page 189 and 190:
Page 191 and 192:
Page 193 and 194:
A User-Centric Protocol for Conditi
Page 195 and 196:
Page 197 and 198:
Page 199 and 200:
Identity Escrow: A User-Centric Pro
Page 201 and 202:
Page 203 and 204:
Preservation of Privacy in Thwartin
Page 205 and 206:
Page 207 and 208:
Page 209 and 210:
Page 211 and 212:
Page 213:
Agudo, Isaac 28 Aich, Subhendu 118
show all

Lecture Notes in Computer Science 5185

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?