X. Sean Wang

Bhavani Thuraisingham

Steve Furnell

This is the first joint working conference between the IFIP Working Groups 11. 1 and 11. 5. We hope this joint conference will promote collaboration among researchers who focus on the security management issues and those who are interested in integrity and control of information systems. Indeed, as management at any level may be increasingly held answerable for the reliable and secure operation of the information systems and services in their respective organizations in the same manner as they are for financial aspects of the enterprise, there is an increasing need for ensuring proper standards of integrity and control in information systems in order to ensure that data, software and, ultimately, the business processes are complete, adequate and valid for intended functionality and expectations of the owner (i. e. the user organization). As organizers, we would like to thank the members of the international program committee for their review work during the paper selection process. We would also like to thank the authors of the invited papers, who added valuable contribution to this first joint working conference. Paul Dowland X. Sean Wang December 2005 Contents Preface vii Session 1 - Security Standards Information Security Standards: Adoption Drivers (Invited Paper) 1 JEAN-NOEL EZINGEARD AND DAVID BIRCHALL Data Quality Dimensions for Information Systems Security: A Theorectical Exposition (Invited Paper) 21 GURVIRENDER TEJAY, GURPREET DHILLON, AND AMITA GOYAL CHIN From XML to RDF: Syntax, Semantics, Security, and Integrity (Invited Paper) 41 C. FARKAS, V. GowADiA, A. JAIN, AND D.

IFIP TC-11 WG 11.1 & WG 11.5 Joint Working Conference

Security Management, Integrity, and Internal Control in Information Systems

Bernhard Thalheim

James Bailey

Klaus-Dieter Schewe

David Maier

This book constitutes the proceedings of the 9th International Conference on Web Information Systems Engineering, WISE 2008, held in Auckland, New Zealand, in September 2008. The 17 revised full papers and 14 revised short papers presented together with two keynote talks were carefully reviewed and selected from around 110 submissions. The papers are organized in topical sections on grid computing and peer-to-peer systems; Web mining; rich Web user interfaces; semantic Web; Web information retrieval; Web data integration; queries and peer-to-peer systems; and Web services.

9th International Conference, Auckland, New Zealand, September 1-3, 2008, Proceedings

Web Information Systems Engineering - WISE 2008

Jian Pei

Xiaofang Zhou

Qing Li

Qiaoming Zhu

Ling Feng

This book constitutes the proceedings of the joint International Conference APWeb/WAIM 2009 which was held in Suzhou, China, during April 1-4, 2009. The 42 full papers presented together with 26 short papers and the abstracts of 2 keynote speeches were carefully reviewed and selected for inclusion in the book. The topics covered are query processing, topic-based techniques, Web data processing, multidimensional data analysis, stream data processing, data mining and its applications, and data management support to advanced applications.

Joint International Conferences, APWeb/WAIM 2009, Suzhou, China, April 2-4, 2009, Proceedings

Advances in Data and Web Management

Guangyan Huang

Alex Delis

Isabel Cruz

This book constitutes the proceedings of the 13th International Conference on Web Information Systems Engineering, WISE 2012, held in Paphos, Cyprus, in November 2012. The 44 full papers, 13 short papers, 9 demonstrations papers and 9 “challenge” papers were carefully reviewed and selected from 194 submissions. The papers cover various topics in the field of Web Information Systems Engineering.

13th International Conference, Paphos, Cyprus, November 28-30, 2012, Proceedings

Web Information Systems Engineering - WISE 2012

Cliff Wang

Sushil Jajodia

Vipin Swarup

Anup K. Ghosh

Moving Target Defense: Creating Asymmetric Uncertainty for Cyber Threats was developed by a group of leading researchers. It describes the fundamental challenges facing the research community and identifies new promising solution paths. Moving Target Defense which is motivated by the asymmetric costs borne by cyber defenders takes an advantage afforded to attackers and reverses it to advantage defenders. Moving Target Defense is enabled by technical trends in recent years, including virtualization and workload migration on commodity systems, widespread and redundant network connectivity, instruction set and address space layout randomization, just-in-time compilers, among other techniques. However, many challenging research problems remain to be solved, such as the security of virtualization infrastructures, secure and resilient techniques to move systems within a virtualized environment, automatic diversification techniques, automated ways to dynamically change and manage the configurations of systems and networks, quantification of security improvement, potential degradation and more. Moving Target Defense: Creating Asymmetric Uncertainty for Cyber Threats is designed for advanced -level students and researchers focused on computer science, and as a secondary text book or reference. Professionals working in this field will also find this book valuable.

Creating Asymmetric Uncertainty for Cyber Threats

Moving Target Defense

V.S. Subrahmanian

Our cyber defenses are static and are governed by lengthy processes, e.g., for testing and security patch deployment. Adversaries could plan their attacks carefully over time and launch attacks at cyber speeds at any given moment. We need a new class of defensive strategies that would force adversaries to continually engage in reconnaissance and re-planning of their cyber operations. One such strategy is to present adversaries with a moving target where the attack surface of a system keeps changing. Moving Target Defense II: Application of Game Theory and Adversarial Modeling includes contributions from world experts in the cyber security field. In the first volume of MTD, we presented MTD approaches based on software transformations, and MTD approaches based on network and software stack configurations. In this second volume of MTD, a group of leading researchers describe game theoretic, cyber maneuver, and software transformation approaches for constructing and analyzing MTD systems. Designed as a professional book for practitioners and researchers working in the cyber security field, advanced -level students and researchers focused on computer science will also find this book valuable as a secondary text book or reference.

Application of Game Theory and Adversarial Modeling

Moving Target Defense II

APWeb and WAIM are two leading international conferences on the research, development, and applications of Web technologies, database systems, infor- tion management and software engineering, with a focus on the Asia-Paci?c - gion. The previous APWeb conferences were held in Beijing (1998), Hong Kong (1999), Xi'an (2000), Changsha (2001), Xi'an (2003), Hangzhou (2004), Sha- hai (2005), Harbin (2006), Huangshan (2007), and Shenyang (2008); and the previous WAIM conferences were held in Shanghai (2000), Xi'an (2001), Beijing (2002), Chengdu (2003), Dalian (2004), Hangzhou (2005), Hong Kong (2006), Huangshan (2007), and Zhangjiajie (2008). For the second time, APWeb and WAIM were combined to foster closer collaboration and research idea sharing, and were held immediately after IEEE ICDE 2009 in Shanghai. This high-quality programwould not have been possible without the authors who chose APWeb+WAIM as a venue for their publications. Out of 189 subm- ted papers from 21 countries and regions, including Australia, Austria, Bengal, Brazil, Canada, France, Greece, Hong Kong, India, Iran, Japan, Korea, Macau, Mainland China, Myanmar, The Netherlands, Norway, Taiwan, Thailand, UK, and USA, we selected 42 full papers and 26 short papers for publication. The acceptancerate for regular full papers is 22%.The contributed papers addressed a wide scope of issues in the ?elds of Web-age information management and advanced applications, including Web data mining, knowledge discovery from streaming data, query processing,multidimensional data analysis, data mana- ment support to advanced applications, etc.

X. Sean Wang

Books

Your next favorite book is out there