ICT Systems Security and Privacy Protection

1. Operating System and Firmware Security

   1. Towards Automated Classification of Firmware Images and Identification of Embedded Devices

      • Andrei Costin, Apostolis Zarras, Aurélien Francillon

      Pages 233-247

   2. Runtime Firmware Product Lines Using TPM2.0

      • Andreas Fuchs, Christoph Krauß, Jürgen Repp

      Pages 248-261

2. User Authentication and Policies

   1. Front Matter

      Pages 263-263

      PDF

   2. On the Use of Emojis in Mobile Authentication

      • Lydia Kraus, Robert Schmidt, Marcel Walch, Florian Schaub, Sebastian Möller

      Pages 265-280

   3. EmojiTCHA: Using Emotion Recognition to Tell Computers and Humans Apart

      • David Lorenzi, Jaideep Vaidya, Achyuta Aich, Shamik Sural, Vijayalakshmi Atluri, Joseph Calca

      Pages 281-295

   4. Assisted Authoring, Analysis and Enforcement of Access Control Policies in the Cloud

      • Umberto Morelli, Silvio Ranise

      Pages 296-309

   5. Capturing Policies for BYOD

      • Joseph Hallett, David Aspinall

      Pages 310-323

3. Applied Cryptography and Voting Schemes

   1. Front Matter

      Pages 325-325

      PDF

   2. Improving Blind Steganalysis in Spatial Domain Using a Criterion to Choose the Appropriate Steganalyzer Between CNN and SRM+EC

      • Jean-Francois Couchot, Raphaël Couturier, Michel Salomon

      Pages 327-340

   3. BinSign: Fingerprinting Binary Functions to Support Automated Analysis of Code Executables

      • Lina Nouh, Ashkan Rahimian, Djedjiga Mouheb, Mourad Debbabi, Aiman Hanna

      Pages 341-355

   4. Decoy Password Vaults: At Least as Hard as Steganography?

      • Cecilia Pasquini, Pascal Schöttle, Rainer Böhme

      Pages 356-370

   5. Election-Dependent Security Evaluation of Internet Voting Schemes

      • Stephan Neumann, Manuel Noll, Melanie Volkamer

      Pages 371-382

4. Software Security and Privacy

   1. Front Matter

      Pages 383-383

      PDF

   2. Combating Control Flow Linearization

      • Julian Kirsch, Clemens Jonischkeit, Thomas Kittel, Apostolis Zarras, Claudia Eckert

      Pages 385-398

   3. Ghost Patches: Fake Patches for Fake Vulnerabilities

      • Jeffrey Avery, Eugene H. Spafford

      Pages 399-412

   4. SIMBER: Eliminating Redundant Memory Bound Checks via Statistical Inference

      • Hongfa Xue, Yurong Chen, Fan Yao, Yongbo Li, Tian Lan, Guru Venkataramani

      Pages 413-426

   5. Towards Systematic Privacy and Operability (PRIOP) Studies

      • Rene Meis, Maritta Heisel

      Pages 427-441

   6. Data Minimisation: A Language-Based Approach

      • Thibaud Antignac, David Sands, Gerardo Schneider

      Pages 442-456

5. Privacy

   1. Front Matter

      Pages 457-457

      PDF

   2. Differentially Private Neighborhood-Based Recommender Systems

      • Jun Wang, Qiang Tang

      Pages 459-473

This book constitutes the refereed proceedings of the 32nd IFIP TC 11 International Conference on ICT Systems Security and Privacy Protection, SEC 2017, held in Rome, Italy, in May 2017.

The 38 revised full papers presented were carefully reviewed and selected from 199 submissions. The papers are organized in the following topical sections: network security and cyber attacks; security and privacy in social applications and cyber attacks defense; private queries and aggregations; operating systems and firmware security; user authentication and policies; applied cryptography and voting schemes; software security and privacy; privacy; and digital signature, risk management, and code reuse attacks.

• applied computing
• authentication
• computer crime
• cryptography
• data security
• face recognition
• information security
• Internet
• machine learning
• malware
• network security
• privacy
• public key cryptography
• security
• semantics
• social networks
• trust
• World Wide Web

• Università degli Studi di Milano, Crema, Italy

  Sabrina De Capitani di Vimercati

• National Research Council of Italy, Pisa, Italy

  Fabio Martinelli

Policies and ethics