Security and Privacy Protection in Information Processing Systems

1. Policy Compliance and Obligations

   1. A Review of the Theory of Planned Behaviour in the Context of Information Security Policy Compliance

      • Teodor Sommestad, Jonas Hallberg

      Pages 257-271

2. Privacy Protection

   1. Enforcement of Privacy Requirements

      • Padmanabhan Krishnan, Kostyantyn Vorobyov

      Pages 272-285

   2. Towards Security-Enhanced and Privacy-Preserving Mashup Compositions

      • Heidelinde Hobel, Johannes Heurix, Amin Anjomshoaa, Edgar Weippl

      Pages 286-299

   3. On Privacy-Preserving Ways to Porting the Austrian eID System to the Public Cloud

      • Bernd Zwattendorfer, Daniel Slamanig

      Pages 300-314

3. Risk Analysis and Security Metrics

   1. Using the Conflicting Incentives Risk Analysis Method

      • Lisa Rajbhandari, Einar Snekkenes

      Pages 315-329

   2. Performance Analysis of Scalable Attack Representation Models

      • Jin B. Hong, Dong Seong Kim

      Pages 330-343

   3. ADAPT: A Game Inspired Attack-Defense and Performance Metric Taxonomy

      • Chris B. Simmons, Sajjan G. Shiva, Harkeerat Singh Bedi, Vivek Shandilya

      Pages 344-365

4. Social Engineering

   1. Phishing for the Truth: A Scenario-Based Experiment of Users’ Behavioural Response to Emails

      • Kathryn Parsons, Agata McCormac, Malcolm Pattinson, Marcus Butavicius, Cate Jerram

      Pages 366-378

   2. Phishing and Organisational Learning

      • Wayne D. Kearney, Hennie A. Kruger

      Pages 379-390

   3. A Case for Societal Digital Security Culture

      • Lotfi Ben Othmane, Harold Weffers, Rohit Ranchal, Pelin Angin, Bharat Bhargava, Mohd Murtadha Mohamad

      Pages 391-404

5. Security Management/Forensic

   1. Secure Outsourcing: An Investigation of the Fit between Clients and Providers

      • Gurpreet Dhillon, Romilla Chowdhuri, Filipe de Sá-Soares

      Pages 405-418

   2. Performance Analysis of File Carving Tools

      • Thomas Laurenson

      Pages 419-433

6. Back Matter

   PDF

This book constitutes the refereed proceedings of the 28th IFIP TC 11 International Information Security and Privacy Conference, SEC 2013, held in Auckland, New Zealand, in July 2013. The 31 revised full papers presented were carefully reviewed and selected from 83 submissions. The papers are organized in topical sections on malware, authentication and authorization, network security/cryptography, software security, policy compliance and obligations, privacy protection, risk analysis and security metrics, social engineering, and security management/forensics.

• Web services
• cloud computing
• denial of service
• network security
• smartphones
• algorithm analysis and problem complexity

• The University of Auckland, Auckland, New Zealand

  Lech J. Janczewski

• University of Otago, Dunedin, New Zealand

  Henry B. Wolfe

• The University of Tulsa, Tulsa, USA

  Sujeet Shenoi

Policies and ethics