Risks and Security of Internet and Systems: 13th International Conference, CRiSIS 2018, Arcachon, France, October 16-18, 2018, Revised Selected Papers

DescriptionThis book constitutes the revised selected papers from the 13th International Conference on Risks and Security of Internet and Systems, CRiSIS 2018, held in Arcachon, France, in October 2018.The 12 full papers and 6 short papers presented in this volume were carefully reviewed and selected from 34 submissions. They cover diverse research themes that range from classic topics, such as vulnerability analysis and classification; apps security; access control and filtering; cloud security; cyber-insurance and cyber threat intelligence; human-centric security and trust; and risk analysis.Table of Contents An Empirical Study on the Comprehensibility of Graphical Security Risk Models Based on Sequence Diagrams – Vetle Volden-Freberg, Gencer ErdoganAre Third-Party Libraries Secure? A Software Library Checker for Java – Fabien Patrick Viertel, Fabian Kortum, Leif Wagner, Kurt SchneiderA Prediction-Based Method for False Data Injection Attacks Detection in Industrial Control Systems – Lyes Bayou, David Espes, Nora Cuppens-Boulahia, Frédéric CuppensOutsourcing Signatures of Confidential Documents – Hervé Chabanne, Julien Keuffer, Emmanuel ProuffTrust Evaluation Model for Attack Detection in Social Internet of Things – Wafa Abdelghani, Corinne Amel Zayani, Ikram Amous, Florence SèdesA Certificate-Less Key Exchange Protocol for IoT – Ivan Marco Lobe Kome, Nora Cuppens-Boulahia, Frédéric Cuppens, Vincent FreyPersonalized, Browser-Based Visual Phishing Detection Based on Deep Learning – Alberto Bartoli, Andrea De Lorenzo, Eric Medvet, Fabiano TarlaoPrivacy Preserving Data Offloading Based on Transformation – Shweta Saharan, Vijay Laxmi, Manoj Singh Gaur, Akka ZemmariDSTC: DNS-Based Strict TLS Configurations – Eman Salem Alashwali, Pawel SzalachowskiAuthenticated Quality of Service Aware Routing in Software Defined Networks – Samet Aytaç, Orhan Ermiş, Mehmet Ufuk Çağlayan, Fatih AlagözOn Consent in Online Social Networks: Privacy Impacts and Research Directions (Short Paper) – Sourya Joyee De, Abdessamad ImineEnhancing Collaboration Between Security Analysts in Security Operations Centers – Damien Crémilleux, Christophe Bidan, Frédéic Majorczyk, Nicolas PrigentRIICS: Risk Based IICS Segmentation Method – Khaoula Es-Salhi, David Espes, Nora CuppensEffectiveness and Impact Measurements of a Diversification Based Moving Target Defense – Manel Smine, Nora Cuppens, Frédéric CuppensPractical Security Exploits of the FlexRay In-Vehicle Communication Protocol – Pal-Stefan Murvay, Bogdan GrozaConnection Dumping Vulnerability Affecting Bluetooth Availability – Karim Lounis, Mohammad ZulkernineA Systematic Method to Describe and Identify Security Threats Based on Functional Requirements – Roman Wirtz, Maritta HeiselOptimal Distribution of Privacy Budget in Differential Privacy – Anis Bkakria, Aimilia Tasidou, Nora Cuppens-Boulahia, Frédéric Cuppens, Fatma Bouattour, Feten Ben FredjEditors BiographyAkka Zemmari, Mohamed Mosbah University of Bordeaux, Talence, FranceNora Cuppens-Boulahia, Frédéric Cuppens IMT Atlantique, Brest, France