Financial Cryptography and Data Security

1. Front Matter

   PDF

2. Economics of Information Security I

   1. Mitigating Inadvertent Insider Threats with Incentives

      • Debin Liu, XiaoFeng Wang, L. Jean Camp

      Pages 1-16

   2. Deterring Online Advertising Fraud through Optimal Payment in Arrears

      • Benjamin Edelman

      Pages 17-31

3. Anonymity and Privacy I

   1. Privacy-Preserving Information Markets for Computing Statistical Data

      • Aggelos Kiayias, Bülent Yener, Moti Yung

      Pages 32-50

   2. Achieving Privacy in a Federated Identity Management System

      • Susan Landau, Hubert Le Van Gong, Robin Wilton

      Pages 51-70

   3. Data Hemorrhages in the Health-Care Sector

      • M. Eric Johnson

      Pages 71-89

4. Private Computation

   1. Solving Linear Programs Using Multiparty Computation

      • Tomas Toft

      Pages 90-107

   2. Private Intersection of Certified Sets

      • Jan Camenisch, Gregory M. Zaverucha

      Pages 108-127

   3. Privacy-Preserving Classifier Learning

      • Justin Brickell, Vitaly Shmatikov

      Pages 128-147

5. Economics of Information Security II

   1. Investments and Trade-offs in the Economics of Information Security

      • Christos Ioannidis, David Pym, Julian Williams

      Pages 148-166

   2. Blue versus Red: Towards a Model of Distributed Security Attacks

      • Neal Fultz, Jens Grossklags

      Pages 167-183

6. Authentication and Identification

   1. Optimised to Fail: Card Readers for Online Banking

      • Saar Drimer, Steven J. Murdoch, Ross Anderson

      Pages 184-200

   2. Expecting the Unexpected: Towards Robust Credential Infrastructure

      • Shouhuai Xu, Moti Yung

      Pages 201-221

   3. Optical DNA

      • Deepak Vijaywargi, Dave Lewis, Darko Kirovski

      Pages 222-229

7. Panel

   1. Passwords: If We’re So Smart, Why Are We Still Using Them?

      • Cormac Herley, P. C. van Oorschot, Andrew S. Patrick

      Pages 230-237

8. Fraud Detection

   1. Defeating Cross-Site Request Forgery Attacks with Browser-Enforced Authenticity Protection

      • Ziqing Mao, Ninghui Li, Ian Molloy

      Pages 238-255

   2. Evil Searching: Compromise and Recompromise of Internet Hosts for Phishing

      • Tyler Moore, Richard Clayton

      Pages 256-272

   3. Detecting Denial of Service Attacks in Tor

      • Norman Danner, Danny Krizanc, Marc Liberatore

      Pages 273-284

9. Auctions

   1. Cryptographic Combinatorial Securities Exchanges

      • Christopher Thorpe, David C. Parkes

      Pages 285-304

   2. Cryptographic Combinatorial Clock-Proxy Auctions

      • David C. Parkes, Michael O. Rabin, Christopher Thorpe

      Pages 305-324

This volume contains the proceedings of the 13th International Conference on Financial Cryptography and Data Security, held at the Accra Beach Hotel and Resort, Barbados, February 23–26, 2009. Financial Cryptography and Data Security (FC) is a well-established int- national forum for research, advanced development, education, exploration and debate regarding information assurance in the context of ?nance and commerce. The conference covers all aspects of securing transactions and systems. The goal of FC is to bring security and cryptography researchers and pr- titioners together with economists, bankers, and policy makers. This year, we assembled a vibrant program featuring 21 peer-reviewed research paper pres- tations, two panels (on the economics of information security and on authen- cation), and a keynote address by David Dagon. Despite a proliferation of security and cryptography venues, FC continues to receive a large number of high-quality submissions. This year, we received 91 submissions(75full-lengthpapers,15shortpapersand1panel).Eachsubmission was reviewed by at least three reviewers. Following a rigorous selection, ranking and discussion process, the Program Committee accepted 20 full-length papers, 1 short paper and 1 panel. The overall acceptance rate was 24%.

• authentication
• authenticity
• chip card
• credential systems
• credit card
• cryptography
• data leaks
• data security
• digital signatures
• e-commerce
• electro
• electronic crime
• identity management
• information security
• privacy
• algorithm analysis and problem complexity

• The Tor Project, Dedham, USA

  Roger Dingledine

• Palo Alto Research Center, Palo Alto, USA

  Philippe Golle

Policies and ethics