Data and Applications Security XX

1. Front Matter

   PDF

2. Creating Objects in the Flexible Authorization Framework

   • Nicola Zannone, Sushil Jajodia, Duminda Wijesekera

   Pages 1-14

3. Detection and Resolution of Anomalies in Firewall Policy Rules

   • Muhammad Abedin, Syeda Nessa, Latifur Khan, Bhavani Thuraisingham

   Pages 15-29

4. On Finding an Inference-Proof Complete Database for Controlled Query Evaluation

   • Joachim Biskup, Lena Wiese

   Pages 30-43

5. Consolidating the Access Control of Composite Applications and Workflows

   • Martin Wimmer, Alfons Kemper, Maarten Rits, Volkmar Lotz

   Pages 44-59

6. Authenticating Multi-dimensional Query Results in Data Publishing

   • Weiwei Cheng, HweeHwa Pang, Kian-Lee Tan

   Pages 60-73

7. Xml Streams Watermarking

   • Julien Lafaye, David Gross-Amblard

   Pages 74-88

8. Aggregation Queries in the Database-As-a-Service Model

   • Einar Mykletun, Gene Tsudik

   Pages 89-103

9. Policy Classes and Query Rewriting Algorithm for XML Security Views

   • Nataliya Rassadko

   Pages 104-118

10. Interactive Analysis of Attack Graphs Using Relational Queries

    • Lingyu Wang, Chao Yao, Anoop Singhal, Sushil Jajodia

    Pages 119-132

11. Notarized Federated Identity Management for Web Services

    • Michael T. Goodrich, Roberto Tamassia, Danfeng Yao

    Pages 133-147

12. Resolving Information Flow Conflicts in RBAC Systems

    • Noa Tuval, Ehud Gudes

    Pages 148-162

13. Policy Transformations for Preventing Leakage of Sensitive Information in Email Systems

    • Saket Kaushik, William Winsborough, Duminda Wijesekera, Paul Ammann

    Pages 163-178

14. Term Rewriting for Access Control

    • Steve Barker, Maribel Fernández

    Pages 179-193

15. Discretionary and Mandatory Controls for Role-Based Administration

    • Jason Crampton

    Pages 194-208

16. A Distributed Coalition Service Registry for Ad-Hoc Dynamic Coalitions: A Service-Oriented Approach

    • Ravi Mukkamala, Vijayalakshmi Atluri, Janice Warner, Ranjit Abbadasari

    Pages 209-223

17. Enhancing User Privacy Through Data Handling Policies

    • C. A. Ardagna, S. De Capitani di Vimercati, P. Samarati

    Pages 224-236

18. Efficient Enforcement of Security Policies Based on Tracking of Mobile Users

    • Vijayalakshmi Atluri, Heechang Shin

    Pages 237-251

19. A Framework for Flexible Access Control in Digital Library Systems

    • Indrajit Ray, Sudip Chakraborty

    Pages 252-266

20. Authrule: A Generic Rule-Based Authorization Module

    • Sönke Busch, Björn Muschall, Günther Pernul, Torsten Priebe

    Pages 267-281

For 20 years, the IFIP WG 11. 3 Working Conference on Data and Appli- tions Security (DBSEC) has been a major forum for presenting originalresearch results, practical experiences, and innovative ideas in data and applications - curity. Looking back, it is di?cult not to appreciatethe full extent of the change that has occurred in our ?eld. Once considered afterthoughts in systems and application design, data protection, privacy and trust have become the key problems of our day. This central role of security in the information society has however brought increased responsibilities to the research community. - day practitioners and researchers alike need to ?nd new ways to cope with the increasing scale and complexity of the security problems that must be solved on the global information infrastructure. Like the previous conference, the 20th DBSEC has proved to be up to this challenge. DBSEC 2006 received 56 submissions, out of which the program committee selected22 high-qualitypaperscoveringanumber of diverseresearchtopicssuch as access control, privacy, and identity management. We are glad to see that the ?nal program contains a well-balanced mix of theoretical results and practical prototype systems, many of them converging and building o? each other. Also, the DBSEC program includes a number of papers on new, emerging aspects of security research. Putting together a top-level conference like DBSEC is always a team e?ort.

• Administration
• Information
• Registry
• Resolution
• Semantic Web
• XML
• algorithm
• algorithms
• authentication
• integrity maintenance
• privacy
• risk management
• secure information integration
• security
• security planning and administration
• algorithm analysis and problem complexity

• Dipartimento di Tecnologie dell’Informazione, Università degli Studi di Milano, Italy

  Ernesto Damiani

• The Logistics Institute, Northeastern University, Shenyang, China

  Peng Liu