| Vol-1298 urn:nbn:de:0074-1298-1 Copyright © 2014 for the individual papers by the papers' authors. Copying permitted for private and academic purposes. This volume is published and copyrighted by its editors.

# ESSoS-DS 2014
ESSoS Doctoral Symposium

### Proceedings of the 2014 ESSoS Doctoral Symposium
co-located with the International Symposium on Engineering Secure Software and Systems (ESSoS 2014)

### Munich, Germany, February 26, 2014.

Edited by

### Wouter Joosen *
Fabio Martinelli **
Thomas Heyman *

* iMinds-Distrinet, Dept. of Computer Science, KU Leuven, Belgium
** Istituto di Informatica e Telematica - IIT, National Research Council - C.N.R., Italy

## Table of Contents

### Session 1: Security specifications and contracts

- Enforcing Mobile Application Security Through Probabilistic Contracts
  Fabio Martinelli, Ilaria Matteucci, Andrea Saracino, Daniele Sgandurra
- Security (Hyper-)properties in Workflow Systems: From Specification to Verification
  Thomas Bauereiss, Dieter Hutter

### Session 2: Privacy and attacker models

- The Privacy Issue for Pseudonymized Customers in the Smart Grid
  Hartmut Richthammer
- Evaluation of Adaptive Attacker Models
  Leanid Krautsevich, Artsiom Yautsiukhin
- Detecting Privacy Leaks in Android Apps
  Li Li, Alexandre Bartel, Jacques Klein, Yves Le Traon
- Enforcing Privacy in Decentralized Mobile Social Networks
  Hiep H. Nguyen, Abdessamad Imine, Michaël Rusinowitch

### Session 3: Applications

- Modeling, Composing, and Testing of Security Concerns in a Model-Driven Security Approach
  Phu H. Nguyen, Jacques Klein, Yves Le Traon
- An Architecture for the Analysis and Management of Security in Industrial Control Systems
  Laurens Lemaire, Jorn Lapon, Vincent Naessens
- Cross-Layer Data-Centric Usage Control
  Enrico Lovat

### Session 4: Authorization and access control

- Towards an Authorization Framework for App Security Checking
  Joseph Hallett, David Aspinall
- Model-Based Policy Derivation for Usage Control Enforcement
  Prachi Kumari
- Improving Manageability of Access Control Policies
  Jasper Bogaerts, Bert Lagaisse
- Towards a Reference Architecture for Access Control in Distributed Web Applications
  Worachet Uttha, Clara Bertolissi, Silvio Ranise

2014-11-19: submitted by Thomas Heyman, metadata incl. bibliographic data published under Creative Commons CC0
2014-11-20: published on CEUR-WS.org |valid HTML5|