Data and Applications Security XX

1. Aspect-Oriented Risk Driven Development of Secure Applications

   • Geri Georg, Siv Hilde Houmb, Indrakshi Ray

   Pages 282-296

2. From Business Process Choreography to Authorization Policies

   • Philip Robinson, Florian Kerschbaum, Andreas Schaad

   Pages 297-309

3. Information Theoretical Analysis of Two-Party Secret Computation

   • Da-Wei Wang, Churn-Jung Liau, Yi-Ting Chiang, Tsan-sheng Hsu

   Pages 310-317

4. Back Matter

   PDF

For 20 years, the IFIP WG 11. 3 Working Conference on Data and Appli- tions Security (DBSEC) has been a major forum for presenting originalresearch results, practical experiences, and innovative ideas in data and applications - curity. Looking back, it is di?cult not to appreciatethe full extent of the change that has occurred in our ?eld. Once considered afterthoughts in systems and application design, data protection, privacy and trust have become the key problems of our day. This central role of security in the information society has however brought increased responsibilities to the research community. - day practitioners and researchers alike need to ?nd new ways to cope with the increasing scale and complexity of the security problems that must be solved on the global information infrastructure. Like the previous conference, the 20th DBSEC has proved to be up to this challenge. DBSEC 2006 received 56 submissions, out of which the program committee selected22 high-qualitypaperscoveringanumber of diverseresearchtopicssuch as access control, privacy, and identity management. We are glad to see that the ?nal program contains a well-balanced mix of theoretical results and practical prototype systems, many of them converging and building o? each other. Also, the DBSEC program includes a number of papers on new, emerging aspects of security research. Putting together a top-level conference like DBSEC is always a team e?ort.

• Administration
• Information
• Registry
• Resolution
• Semantic Web
• XML
• algorithm
• algorithms
• authentication
• integrity maintenance
• privacy
• risk management
• secure information integration
• security
• security planning and administration
• algorithm analysis and problem complexity

• Dipartimento di Tecnologie dell’Informazione, Università degli Studi di Milano, Italy

  Ernesto Damiani

• The Logistics Institute, Northeastern University, Shenyang, China

  Peng Liu

Policies and ethics