ESSoS-DS 2014
ESSoS Doctoral Symposium

Table of Contents

Session 1: Security specifications and contracts

• Enforcing Mobile Application Security Through Probabilistic Contracts
  Fabio Martinelli, Ilaria Matteucci, Andrea Saracino, Daniele Sgandurra
• Security (Hyper-)properties in Workflow Systems: From Specification to Verification
  Thomas Bauereiss, Dieter Hutter

Session 2: Privacy and attacker models

• The Privacy Issue for Pseudonymized Customers in the Smart Grid
  Hartmut Richthammer
• Evaluation of Adaptive Attacker Models
  Leanid Krautsevich, Artsiom Yautsiukhin
• Detecting Privacy Leaks in Android Apps
  Li Li, Alexandre Bartel, Jacques Klein, Yves Le Traon
• Enforcing Privacy in Decentralized Mobile Social Networks
  Hiep H. Nguyen, Abdessamad Imine, Michaël Rusinowitch

Session 3: Applications

• Modeling, Composing, and Testing of Security Concerns in a Model-Driven Security Approach
  Phu H. Nguyen, Jacques Klein, Yves Le Traon
• An Architecture for the Analysis and Management of Security in Industrial Control Systems
  Laurens Lemaire, Jorn Lapon, Vincent Naessens
• Cross-Layer Data-Centric Usage Control
  Enrico Lovat

Session 4: Authorization and access control

• Towards an Authorization Framework for App Security Checking
  Joseph Hallett, David Aspinall
• Model-Based Policy Derivation for Usage Control Enforcement
  Prachi Kumari
• Improving Manageability of Access Control Policies
  Jasper Bogaerts, Bert Lagaisse
• Towards a Reference Architecture for Access Control in Distributed Web Applications
  Worachet Uttha, Clara Bertolissi, Silvio Ranise