IFIP SEC 2019 - Conference Program

Crypto and Encryption

Chair: André Zúquete

Arcana: Enabling Private Posts on Public Microblog Platforms (#12)

Anirudh Narasimman, Qiaozhi Wang, Fengjun Li, Dongwon Lee, and Bo Luo

Fast Keyed-Verification Anonymous Credentials on Standard Smart Cards (#21)

Jan Camenisch, Manu Drijvers, Petr Dzurenda and Jan Hajny

BlockTag: Design and Applications of a Tagging System for Blockchain Analysis (#42)

Yazan Boshmaf, Husam Al Jawaheri, and Mashael Al Saba

Organizational and Behavioral Security

Chair: Lech Janczewski

Differentially Private Generative Adversarial Networks for Time Series, Continuous, and Discrete Open Data (#32)

Lorenzo Frigerio, Anderson Santana de Oliveira, Laurent Gomez, and Patrick Duverger

ESARA: A Framework for Enterprise Smartphone Apps Risk Assessment (#64)

Majid Hatamian, Sebastian Pape and Kai Rannenberg

SocialAuth: Designing Touch Behavioral Smartphone User Authentication based on Social Networking Applications (#81)

Weizhi Meng, Wenjuan Li, Lijun Jiang, and Jianying Zhou

User Data and Privacy Controls

Chair: Bart De Decker

Predicting Students’ Security Behavior Using Information-Motivation-Behavioral Skills Model (#46)

Ali Farooq, Debora Jeske, and Jouni Isoaho

Why Do People Pay for Privacy-Enhancing Technologies? The Case of Tor and JonDonym (#50)

David Harborth, Xinyuan Cai, and  Sebastian Pape

Towards Contractual Agreements for Revocation of Online Data (#37)

Theodor Schnitzler, Markus Dürmuth, and Christina Pöpper

WIPER

Chair: Kane Smith

Physical presence verification using TOTP and QR codes (#87)

Emin Huseynov and Jean-Marc Seigneur

An Authentication and Key Agreement Scheme using ECQV in IoT Environments (#90)

Dae-Hwi Lee and Im-Yeong Lee

Efficiently Vectorized Anonymization in Data Mining using Genetic Algorithms (#99)

Fatemeh Amiri, Gerald Quirchmayr, Peter Kieseberg, Alessio Bertone and Edgar Weippl

Access Control Models via Non-Standard Logics (#101)

Mikhail M. Kucherov and Bogulskaya Nina A.

Data Integrity and Security

Chair: Carlos Rieder

On the Effectiveness of Control-Flow Integrity Against Modern Attack Techniques (#44)

Sarwar Sayeed and Hector Marco-Gisbert

Automatically Proving Purpose Limitation in Software Architectures(#67)

Kai Bavendiek, Tobias Mueller, Florian Wittner, Thea Schwaneberg, Christian-Alexander Behrendt, Wolfgang Schulz, Hannes Federrath, and Sibylle Schupp

Commit Signatures for Centralized Version Control Systems (Extended Abstract) (#70)

Sangat Vaidya, Santiago Torres-Arias, Reza Curtmola, and Justin Cappos

WISE12

Chair: Matt Bishop

A Short-cycle Framework Approach to Integrating Psychometric Feedback and Data Analytics to Rapid Cyber Defense (#22)

Erik Moore, Steve Fulton, Roberta Mancuso, Tristen Amador and Daniel Likarish

Identifying Security Requirements Body of Knowledge for the Security Systems Engineer (#12) 

Sune von Solms and Annlize Marnewick

Introducing Research into the Undergraduate Curriculum in Cybersecurity (#17) 

Susanne Wetzel and Dimitrios Damopoulos

Intrusion Detection & Access Control

Chair: Abbas Shahim

Towards an Automated Extraction of ABAC Constraints from Natural Language Policies (#59)

Manar Alohaly, Hassan Takabi, and Eduardo Blanco

An Efficient and Scalable Intrusion Detection System on Logs of Distributed Applications (#48)

David Lanoë, Michel Hurfin, Eric Totel, and Carlos Maziero

Hunting Brand Domain Forgery: A Scalable Classification for Homograph Attack (#17)

Tran Phuong Thao, Yukiko Sawaya, Hoang-Quoc Nguyen-Son, Akira Yamada, Kazumasa Omote, and Ayumu Kubota

Organizational and Behavioral Security

Chair: Nora Cuppens

The Influence of Organizational, Social and Personal Factors on Cybersecurity Awareness and Behavior of Home Computer Users (#19)

Joëlle Simonet and Stephanie Teufel

To Be, or Not to Be Notified Eliciting Privacy Notification Preferences for Online mHealth Services (#47)

Patrick Murmann, Delphine Reinhardt, and Simone Fischer-Hübner

A Structured Comparison of the Corporate Information Security Maturity Level (#49)

Michael Schmid and Sebastian Pape

WIPER

Chair: Onyi Nwafor

Privacy by Design using Agents and Sovereign Identities (#91)

Kalman Toth and Alan Anderson-Priddy

ID-Based Proxy Re-encryption for Collusion Resistance in Cloud Storage (#92)

Won-Bin Kim and Im-Yeong Lee

A Machine Learning Framework for Studying User Behaviors in Phishing Email Processing (#97)

Yi Li, Kaiqi Xiong and Xiangyang Li

On the Administrative Information Security: definition and impact on Security Governance

Gurpreet Dhillon and Winnie Picoto

WISE12

Chair: Erik Moore

Learning Principles and the Secure Programming Clinic (#26) 

Matt Bishop, Melissa Dark, Lynn Futcher and Johan van Niekerk

Light Cryptography (#14)

Pascal Lafourcade, Takaaki Mizuki, Atsuki Nagao and Kazumasa Shinagawa

An Educational Intervention for Teaching Secure Coding Practices (#10)

Vuyolwethu Mdunyelwa, Lynn Futcher and Johan van Niekerk

Access Control

Chair: Kai Rannenberg

Performance of Password Guessing Enumerators Under Cracking Conditions (#35)

Mathieu Valois, Patrick Lacharme, and Jean-Marie Le Bars

An Offline Dictionary Attack against zkPAKE Protocol (#23)

José Becerra, Peter Y. A. Ryan, Petra Sala, and Marjan Skrobot

Fine-Grained Access Control in Industrial Internet of Things: Evaluating Outsourced Attribute-Based Encryption (#56)

Dominik Ziegler, Josef Sabongui, and Gerald Palfinger

WISE12

Chair: Lynette Drevin

Lessons Learned from an Organizational Information Security Awareness Campaign (#20)

 Jacques Ophoff and Juan-Marc Scrimgeour

A Comprehensive Framework for Understanding Security Culture in Organizations (#9) 

Alaa Tolah, Steven Furnell and Maria Papadaki

Using Gamification to Improve Information Security Behavior: A Password Strength Experiment (#25) 

Jacques Ophoff and Frauke Dietz

Identity & Access Control

Chair: Fredrik Karlsson

Forward Secure Identity-based Signature Scheme with RSA (#80)

Hankyung Ko, Gweonho Jeong, Jongho Kim, Jihye Kim and Hyunok Oh

Removing Problems in Rule-Based Policies (#63)

Zheng Cheng , Jean-Claude Royer, and Massimo Tisi

Is This Really You? An Empirical Study on Risk-Based Authentication Applied in the Wild (#11)

Stephan Wiefling, Luigi Lo Iacono, and Markus Dürmuth

Jacques Ophoff

Andragogy as a Scientific Basis for Training Professionals in Information Security (#5) Alexander Tolstoy and Natalia Miloslavskaya

Identifying Information Security Risks in a Social Network using Self-organising Map (#11) 

Rudi Serfontein, Hennie Kruger and Lynette Drevin

Blockchain and its Security: Ignore or Insert into Academic Training? (#1) 

Natalia Miloslavskaya and Alexander Tolstoy

Intrusion Detection

Chair: Yuko Murayama

Control Logic Injection Attacks on Industrial Control Systems (#45)

Hyunguk Yoo and Irfan Ahmed

GanDef: A GAN based Adversarial Training Defense for Neural Network Classifier (#6)

Guanxiong Liu, Issa Khalil, and Abdallah Khreishah

WISE Working Group

Chair: Natalia Miloslavskaya

Addressing the Graduate Student Pipeline Problem in Cybersecurity

Susanne We

WIPER

Chair: Ella Kolkowska

Integrating Blockchain into Security Curricula

Kane Smith

A theoretical study and review on Blockchain's Privacy Mechanisms (98)

Adam Mihai Gergely and Bogdan Crainicu

WHOIS and the GDPR - A (never) ending story in cyberspace? (85)

Matthias Hudobnik

Soter: Trust Discovery Framework for Internet of Medical Things (IoMT) (#93)

Maha Allouzi and Javed Khan