| Wednesday, 27
October 2010 |
|
|
| 17:00-19:30 |
Registration, Poster
Session and Welcome Reception |
|
at Aalto University,
Otaniemi Campus, T building (street address Konemiehentie 2, Espoo) |
|
|
| Thursday, 28
October 2010 |
|
|
| 8:00-8:45 |
Registration |
|
|
| 8:45-9:00 |
Opening remarks |
|
|
| Session 1: Network security |
|
|
| 9:00-9:30 |
BloomCast: Security in
Bloom Filter Based Multicast |
|
Mikko Särelä1, Christian
Esteve Rothenberg2, András Zahemszky1, Pekka Nikander1, Jörg Ott3 (1Ericsson Research, 2State University of Campinas, 3Aalto
Univesity) |
|
|
| 9:30-10:00 |
Authentication Session
Migration |
|
Sanna Suoranta, Jani
Heikkinen, Pekka Silvekoski (Aalto University) |
|
|
| 10:00-10:30 |
Mitigation of Unsolicited Traffic Across Domains with
Host Identities and Puzzles |
|
Miika Komu1, Sasu Tarkoma2, Andrey Lukyanenko1 (1Aalto University, 2University of Helsinki) |
|
|
| 10:30-10:45 |
Experimental Analysis of the Femtocell Location
Verification Techniques |
|
Ravishankar Borgaonkar,
Kevin Redon, Jean-Pierre Seifert (Technical University Berlin and Deutsche
Telekom Laboratories) |
|
|
| 10:45-11:00 |
Coffee break |
|
|
| Session 2: Invited Talk |
|
|
| 11:00-12:00 |
Why Wasn't I Notified? –
Information Security Incident Reporting |
|
Erka Koivunen (CERT-FI) |
|
|
| 12:00-13:30 |
Lunch |
|
|
| Session 3: Monitoring and Reputation |
|
|
| 13:30-14:00 |
Use of Ratings from
Personalized Community for Trustworthy Application Installation. |
|
Pern Hui Chia, Andreas
Heiner, N. Asokan (Nokia Research Center) |
|
|
| 14:00-14:30 |
Practical Private
Information Aggregation in Large Networks |
|
Gunnar Kreitz, Mads Dam,
Douglas Wikström (KTH Royal Institute of Technology)) |
|
|
| 14:30-15:00 |
Tracking Malicious Hosts on
a 10Gbps Backbone Link |
|
Magnus Almgren, Wolfgang
John (Chalmers University of Technology) |
|
|
| 15:00-15:15 |
Coffee break |
|
|
| Session 4: Privacy |
|
|
| 15:15-15:45 |
Service Users’
Requirements for Tools to Support Effective On-line Privacy and Consent
Practices |
|
Elahe Kani-Zabihi, Lizzie
Coles-Kemp (Royal Holloway University of London) |
|
|
| 15:45-16:15 |
Analyzing Characteristic
Host Access Patterns for Re-Identification of Web User Sessions |
|
Dominik Herrmann, Cristoph
Gerber, Christian Banse, Hannes Federrath (University of Regensburg) |
|
|
| 16:15-16:30 |
Investigations about
Privacy Management in a Social Network Community |
|
Sachin Gaur (Aalto
University) |
|
|
| 18:00-21:00 |
Conference Dinner |
|
in Dipoli |
|
|
| Friday, 29
October 2010 |
|
|
| Session 5: Policy Enforcement |
|
|
| 9:00-9:30 |
A Framework for the Modular
Specification and Orchestration of Authorization Policies |
|
Jason Crampton (Royal
Holloway University of London), Michael Huth (Imperial College London) |
|
|
| 9:30-10:00 |
Credential Disabling from
Trusted Execution Environments |
|
Kari Kostiainen, N. Asokan,
Jan-Erik Ekberg (Nokia Research Center) |
|
|
| 10:00-10:15 |
Java Card Architecture for
Autonomous yet Secure Evolution of Smart Cards Applications |
|
Olga Gadyatskaya, Fabio
Massacci, Federica Paci, Sergey Stankevich
(University of Trento) |
|
|
| 10:15-10:45 |
Implementing Erasure
Policies Using Taint Analysis |
|
Filipo Del Tedesco,
Alejandro Russo, David Sands (Chalmers University of Technology) |
|
|
| 10:45-11:00 |
Coffee break |
|
|
| Session 6: Selected OWASP AppSec Research 2010
Papers |
|
|
| 11:00-11:30 |
A Taint Mode for Python via a Library |
|
Juan José Conti
(Universidad Technológica Nacional, Argentina), Alejandro Russo (Chalmers
University of Technology) |
|
|
| 11:30-12:00 |
Security of Web Mashups: a Survey |
|
Philippe De Ryck, Maarten
Decat, Lieven Desmet, Frank Piessens, Wouter Joose (Katholieke Universiteit
Leuven) |
|
|
| 12:00-12:30 |
Safe Wrappers and Sane Policies for Self Protecting
JavaScript |
|
Jonas Magazinius, Phu H.
Phung, David Sands (Chalmers University of Technology) |
|
|
| 12:30-14:00 |
Lunch |
|
|
| Session 7: Cryptography and Protocols |
|
|
| 14:00-14:30 |
Protocol Implementation Generator |
|
Jose Quaresma, Christian W.
Probst (Technical University of Denmark) |
|
|
| 14:30-15:00 |
Secure and Fast Implementations of Two Involution Ciphers |
|
Billy Bob Brumley (Aalto
University) |
|
|
| 15:00-15:15 |
The PASSERINE Public Key Encryption and Authentication
Mechanism |
|
Markku-Juhani O. Saarinen
(Aalto University) |
|
|
| 15:15-15:30 |
Closing |
