This volume contains papers presented at the 3rd International Workshop on Mathematical Methods, Models and Architectures for Computer Network - curity (MMM-ACNS 2005) held in St. Petersburg, Russia, during September 25–27, 2005. The workshop was organized by the St. Petersburg Institute for Informatics and Automation of the Russian Academy of Sciences (SPIIRAS) in cooperation with Binghamton University (SUNY, USA). The 1st and the 2nd International Workshops on Mathematical Methods, Models and Architectures for Computer Network Security (MMM-ACNS 2001 and MMM-ACNS 2003), hosted by the St. Petersburg Institute for Informatics and Automation, demonstrated the keen interest of the international research community in the subject area. It was recognized that conducting a biannual series of such workshops in St. Petersburg stimulates fruitful exchanges between the di?erent schools of thought, facilitates the dissemination of new ideas and promotesthespiritofcooperationbetweenresearchersontheinternationalscale. MMM-ACNS 2005 provided an international forum for sharing original - search results and application experiences among specialists in fundamental and applied problems of computer network security. An important distinction of the workshop was its focus on mathematical aspects of information and computer network security addressing the ever-increasing demands for secure computing and highly dependable computer networks.
Author(s): Naranker Dulay, Emil Lupu, Morris Sloman, Joe Sventek, Nagwa Badr, Stephen Heeps (auth.), Vladimir Gorodetsky, Igor Kotenko, Victor Skormin (eds.)
Series: Lecture Notes in Computer Science 3685 : Computer Communication Networks and Telecommunications
Edition: 1
Publisher: Springer-Verlag Berlin Heidelberg
Year: 2005
Language: English
Pages: 482
Tags: Computer Communication Networks; Data Encryption; Algorithm Analysis and Problem Complexity; Management of Computing and Information Systems; Computers and Society; Operating Systems
Front Matter....Pages -
Self-managed Cells for Ubiquitous Systems....Pages 1-6
Critical Information Assurance Challenges for Modern Large-Scale Infrastructures....Pages 7-22
Rule-Based Topological Vulnerability Analysis....Pages 23-37
Models and Analysis of Active Worm Defense....Pages 38-53
Prevention of Information Attacks by Run-Time Detection of Self-replication in Computer Codes....Pages 54-75
Calibrating Entropy Functions Applied to Computer Networks....Pages 76-87
A Passive External Web Surveillance Technique for Private Networks....Pages 88-103
A Secure Way to Combine IPsec, NAT & DHCP....Pages 104-118
A Generic Model for Analyzing Security Protocols....Pages 119-128
Networks, Markov Lie Monoids, and Generalized Entropy....Pages 129-135
Trust by Workflow in Autonomic Communication....Pages 136-150
An Ontology-Based Approach to Information Systems Security Management....Pages 151-164
Safety Problems in Access Control with Temporal Constraints....Pages 165-178
A Modal Logic for Role-Based Access Control....Pages 179-193
Unique User-Generated Digital Pseudonyms....Pages 194-205
A Probabilistic Property-Specific Approach to Information Flow....Pages 206-220
Generalized Abstract Non-interference: Abstract Secure Information-Flow Analysis for Automata....Pages 221-234
Detection of Illegal Information Flow....Pages 235-244
Towards More Controllable and Practical Delegation....Pages 245-258
Policy-Driven Routing Management Using CIM....Pages 259-271
Secure Hybrid Operating System “Linux over Fenix”....Pages 272-285
A Formal Description of SECIMOS Operating System....Pages 286-297
A Theoretical Model for the Average Impact of Attacks on Billing Infrastructures....Pages 298-310
Analyzing Vulnerabilities and Measuring Security Level at Design and Exploitation Stages of Computer Network Life Cycle....Pages 311-324
A Temporal Logic-Based Model for Forensic Investigation in Networked System Security....Pages 325-338
Vulnerabilities Detection in the Configurations of MS Windows Operating System....Pages 339-351
Hybrid Intrusion Detection Model Based on Ordered Sequences....Pages 352-365
Asynchronous Alert Correlation in Multi-agent Intrusion Detection Systems....Pages 366-379
Behavior-Based Model of Detection and Prevention of Intrusions in Computer Networks....Pages 380-393
A Formal Immune Network and Its Implementation for On-line Intrusion Detection....Pages 394-405
Foundation for a Time Interval Access Control Model....Pages 406-411
Developing an Insider Threat Model Using Functional Decomposition....Pages 412-417
An XML-Seamless Policy Based Management Framework....Pages 418-423
Statistical Covert Channels Through PROXY Server....Pages 424-429
Encoding Private Key in Fingerprint....Pages 430-435
A New Scheme for the Location Information Protection in Mobile Communication Environments....Pages 436-441
Region Protection/Restoration Scheme in Survivable Networks....Pages 442-447
Massive Data Mining for Polymorphic Code Detection....Pages 448-453
Key Escrow with Tree-Based Access Structure....Pages 454-459
Security Checker Architecture for Policy-Based Security Management....Pages 460-465
An Efficient Access Control Model Utilized the Attribute Certificate Structuring....Pages 466-471
Secure Protected Password Change Scheme....Pages 472-477
Back Matter....Pages -
