2007 Publications of the Network Security and Cryptography Group
Disclaimer
The documents distributed by this server have been provided by the
contributing authors as a means to ensure timely dissemination of
scholarly and technical work on a noncommercial basis. Copyright and
all rights therein are maintained by the authors or by other copyright
holders, notwithstanding that they have offered their works here
electronically. It is understood that all persons copying this
information will adhere to the terms and constraints invoked by each
author's copyright.
These works may not be reposted without the explicit permission
of the copyright holder.
Carl Abrams, Jürg von Känel, Samuel Müller, Birgit Pfitzmann,
Susanne Ruschka-Taylor.
Optimized Enterprise Risk Management. IBM Systems Journal 46/2 (2007)
219-234.
Michael Backes, Birgit Pfitzmann.
Limits of the BRSIM/UC soundness of DolevYao-style XOR, to appear
in International Journal of Information Security (IJIS) 2007,
online preprint.
Michael Backes, Birgit Pfitzmann, Andre Scedrov.
Key-dependent Message Security under Active Attacks - BRSIM/UC-Soundness
of Symbolic Encryption with Key Cycles, 20th IEEE Computer Security
Foundations Symposium (CSF), June 2007. Preliminary version IACR
ePrint 2005/421.
Michael Backes, Birgit Pfitzmann, Michael Waidner.
The reactive simulatability (RSIM) framework for asynchronous systems,
to appear in Information and Computation, 2007.
J. Camenisch, S. Hohenberger, A. Lysyanskaya.
Balancing Accountability and Privacy using E-Cash. In Security and
Cryptography for Networks (SCN 2006), Roberto De Priscod, Moti Yung
(Eds.) (Springer Lecture Notes in Computer Science, vol. 4116, Berlin,
2007) 141-155.
Jan Camenisch, Birgit Pfitzmann.
Federated Identity Management, in Milan Petkovic, Willem Jonker (eds.):
Security, Privacy and Trust in Modern Data Management, Springer-Verlag,
Data-Centric Systems and Applications, Berlin 2007, 213-238.
J. Camenisch, B. Pfitzmann.
Federated Identity Management. In
Security, Privacy and Trust in Modern Data Management, Milan Petkovic,
Willem Jonker (Eds.) (Springer-Verlag, Data-Centric Systems and Applications,
Berlin, 2007) 213-238.
T. Grandson, M. Bilger, L. O'Connor, M. Graf, M. Swimmer, M. Schunter,
A. Wespi, N. Zunic.
Evaluating the Discussion on Security Management-The Data Centric Paradigm. 2nd
IEEE/IFIP Int'l Workshop on Business-driven IT Management "BDIM
2007," Munich, Germany, May 21, 2007.
A.Y. Liu, S. Müller, K. Xu.
A Static Compliance Checking Framework
for Business Process Models. Special Issue on Compliance
Management, IBM Systems Journal 46(2) (2007) pp. 335-361.
S. Müller, C. Supagiat.
A Quantitative Optimization Model for Dynamic
Risk-based Compliance Management. In IBM Journal
of Research and Development 51(3/4) (2007) pp. 295-308.
Birgit Pfitzmann.
Multi-layer Audit of Access Rights. Accepted for 4th VLDB Workshop
on Secure Data Management (SDM'07), Vienna, Sept. 2007, proc.
to appear in LNCS, Springer-Verlag.
Birgit Pfitzmann, Calvin Powers, Michael Waidner.
IBM’s Unified Governance Framework (UGF) Initiative, IBM
Research Report RZ 3699 (#99709) 10/12/2007, IBM Research Division,
Zurich, Oct. 2007
M. Schunter, M. Waidner.
Simplified Privacy Controls for Aggregated
Services-Suspend and Resume of Personal Data. Privacy
Enhancing Technologies 2007, Ottawa, Canada, June 2007.