ICT Systems Security and Privacy Protection

1. Front Matter

   Pages i-xi

   PDF

2. Intrusion Detection

   1. Front Matter

      Pages 1-1

      PDF

   2. Hunting Brand Domain Forgery: A Scalable Classification for Homograph Attack

      • Tran Phuong Thao, Yukiko Sawaya, Hoang-Quoc Nguyen-Son, Akira Yamada, Kazumasa Omote, Ayumu Kubota

      Pages 3-18

   3. GanDef: A GAN Based Adversarial Training Defense for Neural Network Classifier

      • Guanxiong Liu, Issa Khalil, Abdallah Khreishah

      Pages 19-32

   4. Control Logic Injection Attacks on Industrial Control Systems

      • Hyunguk Yoo, Irfan Ahmed

      Pages 33-48

   5. An Efficient and Scalable Intrusion Detection System on Logs of Distributed Applications

      • David Lanoë, Michel Hurfin, Eric Totel, Carlos Maziero

      Pages 49-63

3. Access Control

   1. Front Matter

      Pages 65-65

      PDF

   2. Performance of Password Guessing Enumerators Under Cracking Conditions

      • Mathieu Valois, Patrick Lacharme, Jean-Marie Le Bars

      Pages 67-80

   3. An Offline Dictionary Attack Against zkPAKE Protocol

      • José Becerra, Peter Y. A. Ryan, Petra Šala, Marjan Škrobot

      Pages 81-90

   4. Fine-Grained Access Control in Industrial Internet of Things

      • Dominik Ziegler, Josef Sabongui, Gerald Palfinger

      Pages 91-104

   5. Towards an Automated Extraction of ABAC Constraints from Natural Language Policies

      • Manar Alohaly, Hassan Takabi, Eduardo Blanco

      Pages 105-119

   6. Removing Problems in Rule-Based Policies

      • Zheng Cheng, Jean-Claude Royer, Massimo Tisi

      Pages 120-133

   7. Is This Really You? An Empirical Study on Risk-Based Authentication Applied in the Wild

      • Stephan Wiefling, Luigi Lo Iacono, Markus Dürmuth

      Pages 134-148

4. Organizational and Behavioral Security

   1. Front Matter

      Pages 149-149

      PDF

   2. Differentially Private Generative Adversarial Networks for Time Series, Continuous, and Discrete Open Data

      • Lorenzo Frigerio, Anderson Santana de Oliveira, Laurent Gomez, Patrick Duverger

      Pages 151-164

   3. ESARA: A Framework for Enterprise Smartphone Apps Risk Assessment

      • Majid Hatamian, Sebastian Pape, Kai Rannenberg

      Pages 165-179

   4. SocialAuth: Designing Touch Behavioral Smartphone User Authentication Based on Social Networking Applications

      • Weizhi Meng, Wenjuan Li, Lijun Jiang, Jianying Zhou

      Pages 180-193

   5. The Influence of Organizational, Social and Personal Factors on Cybersecurity Awareness and Behavior of Home Computer Users

      • Joëlle Simonet, Stephanie Teufel

      Pages 194-208

   6. To Be, or Not to Be Notified

      • Patrick Murmann, Delphine Reinhardt, Simone Fischer-Hübner

      Pages 209-222

   7. A Structured Comparison of the Corporate Information Security Maturity Level

      • Michael Schmid, Sebastian Pape

      Pages 223-237

This book constitutes the refereed proceedings of the 34th IFIP TC 11 International Conference on Information Security and Privacy Protection, SEC 2019, held in Lisbon, Portugal, in June 2019.

The 26 revised full papers presented were carefully reviewed and selected from 76 submissions. The papers present novel research on theoretical and practical aspects of security and privacy protection in ICT systems. They are organized in topical sections on intrusion detection, access control, organizational and behavioral, crypto and encryption, and integrity.

• access control
• artificial intelligence
• authentication
• computer crime
• cryptography
• data mining
• data privacy
• data security
• encryption
• information systems
• internet
• Natural Language Processing (NLP)
• privacy
• privacy preserving
• public key cryptography
• security systems
• semantics
• smart cards
• software engineering
• World Wide Web

• University of North Carolina, Greensboro, USA

  Gurpreet Dhillon

• Örebro University, Örebro, Sweden

  Fredrik Karlsson, Karin Hedström

• University of Aveiro, Aveiro, Portugal

  André Zúquete

Policies and ethics