Financial Cryptography and Data Security

This volume contains the main proceedings of the 14th Financial Cryptograpy and Data Security International Conference 2010, held in Tenerife, Canary - lands, Spain, January 25 28, 2010. FinancialCryptographyandData Securityis a majorinternationalforumfor research, advanced development, education, exploration, and debate regarding information assurance, with a speci?c focus on commercial contexts. The c- ference covers all aspects of securing transactions and systems and especially encourages original works focusing on both fundamental and applied real-world deployments on all aspects surrounding commerce security. Despite the dire economic climate as well as strong competition from other top-tier related security conferences, the ProgramCommittee received 130 hi- quality submissions and accepted 19 full-length papers (14.6% acceptance rate), 15 short papers (26.1% acceptance rate), 7 posters and 1 panel. Three workshops were co-located with FC 2010: the Workshop on Real-Life CryptographicProtocolsandStandardization(RLCPS),theWorkshoponEthics in Computer Security Research (WECSR), and the Workshop on Lightweight Cryptography for Resource-Constrained Devices (WLC). Intimateandcolorfulbytradition,thehigh-qualityprogramwasnottheonly attraction of FC. In the past, FC conferences have been held in highly resear- synergisticlocationssuchasTobago,Anguilla,Dominica,KeyWest,Guadelupe, Bermuda,the GrandCayman,and CozumelMexico.2010wasthe?rst yearthat the conference was held on European soil, on the Spanish Canary Islands, in Atlantic waters, a few miles across from Morocco. Over 100 researchers from more than 20 countries were in attendance.

up-to-date results

Klappentext

This book constitutes the thoroughly refereed post-conference proceedings of the 14th International Conference on Financial Cryptography and Data Security, FC 2010, held in Tenerife, Canary Islands, Spain in January 2010. The 19 revised full papers and 15 revised short papers presented together with 1 panel report and 7 poster papers were carefully reviewed and selected from 130 submissions. The papers cover all aspects of securing transactions and systems and feature current research focusing on both fundamental and applied real-world deployments on all aspects surrounding commerce security.

Inhalt
Constructive Cryptography A Primer.- Security Mechanisms with Selfish Players in Wireless Networks.- Users Do the Darndest Things: True Stories from the CyLab Usable Privacy and Security Laboratory.- Multichannel Protocols to Prevent Relay Attacks.- A Traceability Attack against e-Passports.- Secure Computation with Fixed-Point Numbers.- Implementing a High-Assurance Smart-Card OS.- Unlinkable Priced Oblivious Transfer with Rechargeable Wallets.- Multiple Denominations in E-cash with Compact Transaction Data.- What's in a Name?.- Cryptographic Protocol Analysis of AN.ON.- A CDH-Based Ring Signature Scheme with Short Signatures and Public Keys.- Practical Private Set Intersection Protocols with Linear Complexity.- Design and Implementation of a Key-Lifecycle Management System.- Measuring the Perpetrators and Funders of Typosquatting.- A Learning-Based Approach to Reactive Security.- Embedded SFE: Offloading Server and Network Using Hardware Tokens.- The Phish-Market Protocol: Securely Sharing Attack Data between Competitors.- Building Incentives into Tor.- Tree-Homomorphic Encryption and Scalable Hierarchical Secret-Ballot Elections.- Automatically Preparing Safe SQL Queries.- PKI Layer Cake: New Collision Attacks against the Global X.509 Infrastructure.- Three-Round Abuse-Free Optimistic Contract Signing with Everlasting Secrecy.- Designing for Audit: A Voting Machine with a Tiny TCB.- Attacking of SmartCard-Based Banking Applications with JavaScript-Based Rootkits.- Security Applications of Diodes with Unique Current-Voltage Characteristics.- Verified by Visa and MasterCard SecureCode: Or, How Not to Design Authentication.- All You Can Eat or Breaking a Real-World Contactless Payment System.- Shoulder-Surfing Safe Login in a Partially Observable Attacker Model.-Using Sphinx to Improve Onion Routing Circuit Construction.- Secure Multiparty AES.- Modulo Reduction for Paillier Encryptions and Application to Secure Statistical Analysis.- On Robust Key Agreement Based on Public Key Authentication.- A Formal Approach for Automated Reasoning about Off-Line and Undetectable On-Line Guessing.- Signatures of Reputation.- Intention-Disguised Algorithmic Trading.- When Information Improves Information Security.- BetterThanPin: Empowering Users to Fight Phishing (Poster).- Certification Intermediaries and the Alternative (Poster).- SeDiCi: An Authentication Service Taking Advantage of Zero-Knowledge Proofs.- Poster Abstract: Security in Commercial Applications of Vehicular Ad-Hoc Networks.- Domain Engineering for Automatic Analysis of Financial Applications of Cryptographic Protocols.- hPIN/hTAN: Low-Cost e-Banking Secure against Untrusted Computers.