Moti Yung

Dongdai Lin

Peng Liu

The 4th China International Conference on Information Security and Crypt- ogy(Inscrypt2008)wasco-organizedbytheChineseAssociationforCryptologic Research and by the State Key Laboratory of Information Security. The conf- ence was held in Beijing, China in mid-December, and was further sponsored by the Institute of Software, the Graduate University of the Chinese Academy of Sciences, and the National Natural Science Foundations of China. Givenitsfour-yearsuccess,Inscryptis nowatradition.It is,infact,aleading annual international event in the area of cryptographyand information security, taking place in China. We are pleased to report the continuous support of the entire community: authors, attendees, committee members, reviewers, sponsors, and organizers. This state of a?airs re?ects the fact that the research areas c- ered by Inscrypt are important to modern computing, where increased security, trust, safety, and reliability are required. This need makes sure that the relevant research community, worldwide, continues producing important fundamental, experimental, and applied work in the wide areas of cryptography and infor- tion security research. It is not a surprise that the scienti?c program of Inscrypt 2008 covered numerous ?elds of research within these general areas.

4th International Conference, Inscrypt 2008, Beijing, China, December 14-17, 2008, Revised Selected Papers

Information Security and Cryptology

Ernesto Damiani

This book constitutes the refereed proceedings of the 20th Annual Working Conference on Data and Applications Security held in Sophia Antipolis, France, in July/August 2006. The 22 revised full papers presented were carefully reviewed and selected from 56 submissions. The papers explore theory, technique, applications, and practical experience of data and application security covering a number of diverse research topics such as access control, privacy, and identity management.

20th Annual IFIP WG 11.3 Working Conference on Data and Applications Security, Sophia Antipolis, France, July 31-August 2, 2006, Proceedings

Data and Applications Security XX

Vijay Atluri

CCS 2003 : October 27-31, 2003, Washington, DC, USA

Proceedings of the 10th ACM Conference on Computer and Communications Security

This book constitutes the thoroughly refereed post-conference proceedings of the 4th International Conference on Information Security and Cryptology, Inscrypt 2008, held in Beijing, China, in December 2008. The 28 revised full papers presented together with 3 invited talks were carefully reviewed and selected from 183 submissions. The papers are organized in topical sections on digital signature and signcryption schemes, privacy and anonymity, message authentication code and hash function, secure protocols, symmetric cryptography, certificateless cryptography, hardware implementation and side channel attack, wireless network security, public key and identity based cryptography, access control and network security, as well as trusted computing and applications.

Cliff Wang

Sushil Jajodia

Vipin Swarup

Motivation for the Book This book seeks to establish the state of the art in the cyber situational awareness area and to set the course for future research. A multidisciplinary group of leading researchers from cyber security, cognitive science, and decision science areas elab orate on the fundamental challenges facing the research community and identify promising solution paths. Today, when a security incident occurs, the top three questions security admin istrators would ask are in essence: What has happened? Why did it happen? What should I do? Answers to the ?rst two questions form the core of Cyber Situational Awareness. Whether the last question can be satisfactorily answered is greatly de pendent upon the cyber situational awareness capability of an enterprise. A variety of computer and network security research topics (especially some sys tems security topics) belong to or touch the scope of Cyber Situational Awareness. However, the Cyber Situational Awareness capability of an enterprise is still very limited for several reasons: • Inaccurate and incomplete vulnerability analysis, intrusion detection, and foren sics. • Lack of capability to monitor certain microscopic system/attack behavior. • Limited capability to transform/fuse/distill information into cyber intelligence. • Limited capability to handle uncertainty. • Existing system designs are not very “friendly” to Cyber Situational Awareness.

Issues and Research

Cyber Situational Awareness

Peng Liu

Books

Your next favorite book is out there