17. ACSAC 2001: New Orleans, Louisiana, USA

17th Annual Computer Security Applications Conference (ACSAC 2001), 11-14 December 2001, New Orleans, Louisiana, USA. IEEE Computer Society 2001, ISBN 0-7695-1405-7
Contents BibTeX 17th Annual Computer Security Applications Conference (ACSAC 2001), 11-14 December 2001, New Orleans, Louisiana, USA. IEEE Computer Society 2001, ISBN 0-7695-1405-7
Contents BibTeX

Intrusion Detection I

Tao Wan, Xue Dong Yang:
IntruDetector: A Software Platform for Testing Network Intrusion Detection Algorithms. 3-11
Electronic Edition (link) BibTeX
Klaus Julisch:
Mining Alarm Clusters to Improve Alarm Handling Efficiency. 12-21
Electronic Edition (link) BibTeX
Frédéric Cuppens:
Managing Alerts in a Multi-Intrusion Detection Environmen. 22-31
Electronic Edition (link) BibTeX
Tim Buchheim, Michael Erlinger, Ben Feinstein, Greg Matthews, Roy Pollock, Joseph Betser, Andy Walther:
Implementing the Intrusion Detection Exchange Protocol. 32-44
Electronic Edition (link) BibTeX

Security Architecture

Peter Herrmann:
Information Flow Analysis of Component-Structured Applications. 45-54
Electronic Edition (link) BibTeX
Stephen D. Wolthusen:
Security Policy Enforcement at the File System Level in the Windows NT Operating System Family. 55-63
Electronic Edition (link) BibTeX
David M. Wheeler, Adam Conyers, Jane Luo, Alex Xiong:
Java Security Extensions for a Java Server in a Hostile Environment. 64-73
Electronic Edition (link) BibTeX
Eric Monteith:
Genoa TIE, Advanced Boundary Controller Experiment. 74-84
Electronic Edition (link) BibTeX

Cryptography

Yih Huang, David Rine, Xunhua Wang:
A JCA-Based Implementation Framework for Threshold Cryptography. 85-91
Electronic Edition (link) BibTeX
Duncan S. Wong, Hector Ho Fuentes, Agnes Hui Chan:
The Performance Measurement of Cryptographic Primitives on Palm Devices. 92-101
Electronic Edition (link) BibTeX
Wenliang Du, Mikhail J. Atallah:
Privacy-Preserving Cooperative Statistical Analysis. 102-112
Electronic Edition (link) BibTeX

Forum

Ben Feinstein, Greg Matthews, Stuart Staniford, Andy Walther:
Experiences Implementing a Common Format for IDS Alerts. 113-116
Electronic Edition (link) BibTeX

Access Control I

Andreas Schaad:
Detecting Conflicts in a Role-Based Delegation Model. 117-126
Electronic Edition (link) BibTeX
Pete Epstein, Ravi S. Sandhu:
Engineering of Role/Permission Assignments. 127-136
Electronic Edition (link) BibTeX
Ramaswamy Chandramouli:
A Framework for Multiple Authorization Types in a Healthcare Application System. 137-148
Electronic Edition (link) BibTeX
Wayne A. Jansen:
Determining Privileges of Mobile Agents. 149-160
Electronic Edition (link) BibTeX

Classic Papers

Dan Thomsen:
Introduction to Classic Papers. 161
Electronic Edition (link) BibTeX
John E. Dobson, Brian Randell:
Building Reliable Secure Computing Systems out of Unreliable Insecure Components. 162-173
Electronic Edition (link) BibTeX
Carl E. Landwehr, Constance L. Heitmeyer, John D. McLean:
A Security Model for Military Message Systems: Retrospective. 174-190
Electronic Edition (link) BibTeX
John McHugh:
An Information Flow Tool for Gypsy. 191-204
Electronic Edition (link) BibTeX

Invited Essayist Plenary

Roger R. Schell:
Information Security: Science, Pseudoscience, and Flying Pigs. 205-218
Electronic Edition (link) BibTeX

Intrusion Detection II

Peng Liu:
DAIS: A Real-Time Data Attack Isolation System for Commercial Database Applications. 219-229
Electronic Edition (link) BibTeX
John C. Munson, Scott Wimer:
Watcher: The Missing Piece of the Security Puzzle. 230-239
Electronic Edition (link) BibTeX
Ulf Lindqvist, Phillip A. Porras:
eXpert-BSM: A Host-Based Intrusion Detection Solution for Sun Solaris. 240-251
Electronic Edition (link) BibTeX
Anita Jones, Song Li:
Temporal Signatures for Intrusion Detection. 252-264
Electronic Edition (link) BibTeX

Secure Electronic Commerce

Shan Jiang, Sean Smith, Kazuhiro Minami:
Securing Web Servers against Insider Attack . 265-276
Electronic Edition (link) BibTeX
Germano Caronni, Christoph L. Schuba:
Enabling Hierarchical and Bulk-Distribution for Watermarked Content. 277-285
Electronic Edition (link) BibTeX
Albert Levi, Çetin Kaya Koç:
CONSEPP: CONvenient and Secure Electronic Payment Protocol Based on X9.59. 286-295
Electronic Edition (link) BibTeX
Paul Ashley, Heather M. Hinton, Mark Vandenwauver:
Wired versus Wireless Security: The Internet, WAP and iMode for E-Commerce. 296-308
Electronic Edition (link) BibTeX

Access Control II

Piero A. Bonatti, Ernesto Damiani, Sabrina De Capitani di Vimercati, Pierangela Samarati:
A Component-Based Architecture for Secure Data Publication. 309-318
Electronic Edition (link) BibTeX
Günter Karjoth:
The Authorization Service of Tivoli Policy Director. 319-328
Electronic Edition (link) BibTeX
Charles Payne, Tom Markham:
Architecture and Applications for a Distributed Embedded Firewall. 329-338
Electronic Edition (link) BibTeX

Panel

Matt Bishop, Anup K. Ghosh, James A. Whittaker:
How Useful is Software Fault Injection for Evaluating the Security of COTS Products? 339-342
Electronic Edition (link) BibTeX

Forum

Ron Gula, Gene Kim, Chris Klaus, Paul Proctor:
Security Vendor CTOs: Perspectives, Opinions, and Lessons Learned. 343-346
Electronic Edition (link) BibTeX

Reality vs. Security

Valentin Razmov, Daniel R. Simon:
Practical Automated Filter Generation to Explicitly Enforce Implicit Input Assumptions. 347-357
Electronic Edition (link) BibTeX
Ross J. Anderson:
Why Information Security is Hard-An Economic Perspective. 358-365
Electronic Edition (link) BibTeX
John P. McDermott:
Abuse-Case-Based Assurance Arguments. 366-376
Electronic Edition (link) BibTeX

PKI

Victoria Ungureanu:
A Regulated Approach to Certificate Management. 377-385
Electronic Edition (link) BibTeX
James M. Hayes:
Restricting Access with Certificate Attributes in Multiple Root Environments-A Recipe for Certificate Masquerading. 386-390
Electronic Edition (link) BibTeX
Ronald Mraz:
Secure Blue: An Architecture for a Scalable, Reliable, High Volume SSL Internet Server. 391-400
Electronic Edition (link) BibTeX

Internet Security

Nathalie Weiler:
Secure Anonymous Group Infrastructure for Common and Future Internet Applications. 401-410
Electronic Edition (link) BibTeX
David Mankins, Rajesh Krishnan, Ceilyn Boyd, John Zao, Michael Frentz:
Mitigating Distributed Denial of Service Attacks with Dynamic Resource Pricing. 411-421
Electronic Edition (link) BibTeX
D. W. Gresty, Qi Shi, Madjid Merabti:
Requirements for a General Framework for Response to Distributed Denial-of-Service. 422-432
Electronic Edition (link) BibTeX

Applications Security

Bernd Blobel:
Trustworthiness in Distributed Electronic Healthcare Records-Basis for Shared Care. 433-441
Electronic Edition (link) BibTeX
Anita K. Jones, Yu Lin:
Application Intrusion Detection using Language Library Calls. 442-449
Electronic Edition (link) BibTeX
Ulrich Lang, Dieter Gollmann, Rudolf Schreiner:
Verifiable Identifiers in Middleware Security. 450-462
Electronic Edition (link) BibTeX

Panel

Anna Entrichel, James Bergman, Jason Willis, Herb Little:
Computing Without Wires (Or Even a Net): The Pitfalls, Potentials, and Practicality of Wireless Networking. 463-464
Electronic Edition (link) BibTeX