NDLI: A Server-side Approach to Privacy Policy Matching

Please wait, while we are loading the content...

2015 10th International Conference on Availability, Reliability and Security

2014 Ninth International Conference on Availability, Reliability and Security

2013 International Conference on Availability, Reliability and Security

2012 Seventh International Conference on Availability, Reliability and Security

2011 Sixth International Conference on Availability, Reliability and Security

Table of Contents

Message from the ARES 2011 General Co-Chairs, Program Committee Co-Chairs, and Keynote Chairs

Message from the ARES 2011 Workshop Co-Chairs

Message from the FARES 2011 Workshop Co-chairs

Message from the DYADEM-FTS 2011 Workshop Organizers

Message from the PBD 2011 Workshop Organizers

Message from the RISI 2011 Workshop Organizers

Message from the SAPAIS 2011 Workshop Organizers

Message from the SECSE 2011 Workshop Organizers

Message from the WSDF 2011 Workshop Organizers

Message from the OSA 2011 Workshop Organizers

An Approach to Access Control under Uncertainty

Support Access to Distributed EPRs with Three Levels of Identity Privacy Preservation

Smatch Model: Extending RBAC Sessions in Virtualization Environment

AW-RBAC: Access Control in Adaptive Workflow Systems

The Role Mining Process Model - Underlining the Need for a Comprehensive Research Perspective

Biometric authentication as a service for enterprise identity management deployment: a data protection perspective

An Obfuscation-Based Approach against Injection Attacks

Using CVSS in Attack Graphs

Selecting Software Packages for Secure Database Installations

Probabilistic Fault-tolerance of Distributed Services: A Paradigm for Dependable Applications

Proactive Failure Management by Integrated Unsupervised and Semi-Supervised Learning for Dependable Cloud Systems

A Novel Phase Coding Technique for Steganography in Auditive Media

ESPOON: Enforcing Encrypted Security Policies in Outsourced Environments

A Robust Anti-tamper Protection Scheme

Formalization of Receipt-Freeness in the Context of Electronic Voting

Introducing Verifiability in the POLYAS Remote Electronic Voting System

Non-Parallelizable and Non-Interactive Client Puzzles from Modular Square Roots

Declassification Policy Management in Dynamic Information Systems

ASPF: Adaptive anti-SPIT Policy-based Framework

Modeling and Analyzing Server System with Rejuvenation through SysML and Stochastic Reward Nets

Early Detection of Security Misconfiguration Vulnerabilities in Web Applications

Implicit Buffer Overflow Protection Using Memory Segregation

Recovery of Pidgin Chat Communication Artefacts from Physical Memory: A Pilot Test to Determine Feasibility

Accurate Adware Detection Using Opcode Sequence Extraction

Digital Forensics Infovis: An Implementation of a Process for Visualisation of Digital Evidence

Security SLAs for Federated Cloud Services

Parametric Differences between a Real-world Distributed Denial-of-Service Attack and a Flash Event

Observer-based Testing of Distributed Protocols Designed for Harsh Environments

Trustworthiness Benchmarking of Web Applications Using Static Code Analysis

A Trustworthy Usage Control Enforcement Framework

An Attribute Based Framework for Risk-Adaptive Access Control Models

ACON: Activity-Centric Access Control for Social Computing

Dynamic Responsibilities Assignment in Critical Electronic Institutions - A Context-Aware Solution for in Crisis Access Right Management

A Hypervisor-Based Bus System for Usage Control

An Approach to Model-based Development of Secure and Reliable Systems

Techniques for Automating Policy Specification for Application-oriented Access Controls

Model-Based Security Verification and Testing for Smart-cards

Information Security Automation: How Far Can We Go?

An Epistemic Logic Based Framework for Reasoning about Information Hiding

Bulletin Boards in Voting Systems: Modelling and Measuring Privacy

System State Discovery Via Information Content Clustering of System Logs

File Block Classification by Support Vector Machine

Security and Privacy in Companies: State-of-the-art and Qualitative Analysis

Hidden Price of User Authentication: Cost Analysis and Stakeholder Motivation

Pattern-Based Support for Context Establishment and Asset Identification of the ISO 27000 in the Field of Cloud Computing

Responsibility-driven Design and Development of Process-aware Security Policies

Fast Implementation of the Advanced Encryption Standard Using Atmega1281

Optimization of Privacy Preserving Mechanisms in Homogeneous Collaborative Association Rules Mining

CDRAS: An Approach to Dealing with Man-in-the-Middle Attacks in the Context of Voice over IP

Crowds Based on Secret-Sharing

A Gate Level Analysis of Transient Faults Effects on Dual-Core Chip-Multi Processors

Secure Broadcast with One-Time Signatures in Controller Area Networks

Performance Evaluation of ID-based Group Key Agreement Protocols

Preliminary Thoughts on Cost-based Investment Decisions in IT: A Problem Analysis

On the Context-aware, Personalized Delivery of Process Information: Viewpoints, Problems, and Requirements

Study of Countermeasures for Content Leaks by Video Recording

Product Line Engineering in Large-Scale Lean and Agile Software Product Development Environments - Towards a Hybrid Approach to Decentral Control and Managed Reuse

Seamless Fusion of Secure Software and Trusted USB Token for Protecting Enterprise & Government Data

Considering Dependent Components in the Terminal Pair Reliability Problem

Cyber-Physical Systems Based Modeling of Dependability of Complex Network Systems

Compositional Synthesis of Temporal Fault Trees from State Machines

Stepwise Refinement of Complex Dependability Models Using LARES+

Privacy Frost: A User-Oriented Data Anonymization Tool

Key Management Scheme Applicable to Various Topologies of Sensor Networks

An Inductive Approach to Provable Anonymity

Information Security for Service Oriented Computing: Ally or Antagonist

Van Wijngaarden Grammars and Metamorphism

PUF Based Scalable Private RFID Authentication

Practitioners' Perspectives on Security in Agile Development

Security Issues in a Synchronous e-Training Platform

Some Security Issues in SCALANCE Wireless Industrial Networks

Development and Trial Application of Prototype Program for "Social-MRC": Social Consensus Formation Support System Concerning IT Risk Countermeasures

Experimental Comparison of Misuse Case Maps with Misuse Cases and System Architecture Diagrams for Eliciting Security Vulnerabilities and Mitigations

Proactive Detection of Kernel-Mode Rootkits

Service Security Requirement Profiles for Telecom: How Software Engineers May Tackle Security

Effective Security Impact Analysis with Patterns for Software Enhancement

Web Services Security Policy Assertion Trade-offs

Federated Authentication and Authorisation in the Social Science Domain

A Proposed Web Access Control System Request Policy Framework for Cooperation of DNS and a Web Browser

An Identity-Centric Internet: Identity in the Cloud, Identity as a Service and Other Delights

Wormhole Attacks Mitigation in Ad Hoc Networks

A Distributed Intrusion Detection Model Based on a Society of Intelligent Mobile Agents for Ad Hoc Network

The Limes Security Model for Information Flow Control

Tag Impersonation Attack on Two RFID Mutual Authentication Protocols

Information Security Integral Engineering Technique and its Application in ISMS Design

Optimal Budget Allocation in Budget-based Access Control

A Study of Prevention for Social Engineering Attacks Using Real/Fake Organization's Uniforms: Application of Radio and Intra-Body Communication Technologies

LiDSec- A Lightweight Pseudonymization Approach for Privacy-Preserving Publishing of Textual Personal Information

A Server-side Approach to Privacy Policy Matching

Enhance Data Privacy in Service Compositions through a Privacy Proxy

Learning Privacy Preferences

Privacy Verification Using Ontologies

A Survey on Saving Personal Data in the Mobile Phone

Gaining Flexibility and Compliance in Rescue Processes with BPM

Using Generalization Patterns for Fingerprinting Sets of Partially Anonymized Microdata in the Course of Disasters

Improving Resilience with Community Cloud Computing

A Visualization Method for Helping Children Assess the Risk of Websites

Testbed for Mobile Telephony Networks

Deriving Current State RBAC Models from Event Logs

Integrity and Confidentiality Annotations for Service Interfaces in SoaML Models

Consistency Checks for Duties in Extended UML2 Activity Models

Security Policies in Adaptive Process-Aware Information Systems: Existing Approaches and Challenges

SWAT: A Security Workflow Analysis Toolkit for Reliably Secure Process-aware Information Systems

Security Evaluation of Service-oriented Systems with an Extensible Knowledge Base

Security in Model Driven Development: A Survey

Characterising and Analysing Security Requirements Modelling Initiatives

User-Centered Information Security Policy Development in a Post-Stuxnet World

Here's Johnny: A Methodology for Developing Attacker Personas

Enhancing Fuzzing Technique for OKL4 Syscalls Testing

Evaluating RBAC Supported Techniques and their Validation and Verification

Optimising CAPTCHA Generation

The Java SPI Framework for Security Protocol Implementation

Roadmap to Approaches for Carving of Fragmented Multimedia Files

A Discussion of Visualization Techniques for the Analysis of Digital Evidence

A Complexity Based Forensic Analysis of the Trojan Horse Defence

Publisher's Information

2010 International Conference on Availability, Reliability and Security

2009 International Conference on Availability, Reliability and Security

2008 Third International Conference on Availability, Reliability and Security

The Second International Conference on Availability, Reliability and Security (ARES'07)

First International Conference on Availability, Reliability and Security (ARES'06)

A Server-side Approach to Privacy Policy Matching

Content Provider	IEEE Xplore Digital Library
Author	Nyre, A.A. Bernsmed, K. Bo, S. Pedersen, S.
Copyright Year	2011
Abstract	With the increasing use of online services that require sharing of information there is a need for Privacy Enhancing Technology tailored for personal information control. Commonly, web privacy is handled through matching of privacy policies and user preferences using software agents on the client side. In this paper, we propose a new approach to privacy policy matching we denote server-side matching. By moving the matching logic from the client to the server, the client is alleviated from the resource consuming process of obtaining and matching policies and the service provider is able to adapt services to users' privacy preferences. We describe the architecture of a general solution and a prototype implementation of selected parts. The solution has only been subject to rudimentary testing, but our initial evaluation is promising.
Starting Page	609
Ending Page	614
File Size	580758
Page Count	6
File Format	PDF
ISBN	9781457709791
DOI	10.1109/ARES.2011.95
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2011-08-22
Publisher Place	Austria
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Context Privacy Data privacy Prototypes Computer architecture Software Browsers P3P user agent Privacy Enhancing Technology privacy preferences
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in