Principles of Security and Trust: 4th International Conference, POST 2015, Held as Part of the European Joint Conferences on Theory and Practice of Software, ETAPS 2015, London, UK, April 11-18, 2015, Proceedings

367 Pages·2015·7.06 MB·English

by  Riccardo Focardi

Riccardo Focardi
Andrew Myers (Eds.)
S
S
o
C
R
A
6 Principles of Security
3
0
9

S
and Trust
C
N
L
4th International Conference, POST 2015
Held as Part of the European Joint Conferences
on Theory and Practice of Software, ETAPS 2015
London, UK, April 11–18, 2015, Proceedings
123
Lecture Notes in Computer Science 9036
CommencedPublicationin1973
FoundingandFormerSeriesEditors:
GerhardGoos,JurisHartmanis,andJanvanLeeuwen
EditorialBoard
DavidHutchison,UK TakeoKanade,USA
JosefKittler,UK JonM.Kleinberg,USA
JohnC.Mitchell,USA FriedemannMattern,Switzerland
BernhardSteffen,Germany MoniNaor,Israel
DemetriTerzopoulos,USA C.PanduRangan,India
GerhardWeikum,Germany DougTygar,USA
Advanced Research in Computing and Software Science
SublineofLectureNotesin ComputerScience
SublineSeries Editors
GiorgioAusiello,UniversityofRome‘LaSapienza’,Italy
VladimiroSassone,UniversityofSouthampton,UK
SublineAdvisoryBoard
SusanneAlbers,TUMunich,Germany
BenjaminC.Pierce,UniversityofPennsylvania,USA
BernhardSteffen,UniversityofDortmund,Germany
DengXiaotie,CityUniversityofHongKong
JeannetteM.Wing,MicrosoftResearch,Redmond,WA,USA
Moreinformationaboutthisseriesathttp://www.springer.com/series/7410
·
Riccardo Focardi Andrew Myers (Eds.)
Principles of Security
and Trust
4th International Conference, POST 2015
Held as Part of the European Joint Conferences
on Theory and Practice of Software, ETAPS 2015
London, UK, April 11–18, 2015
Proceedings
ABC
Editors
RiccardoFocardi AndrewMyers
Ca’FoscariUniversity CornellUniversity
Venice Ithaca
Italy NewYork
USA
ISSN0302-9743 ISSN1611-3349 (electronic)
LectureNotesinComputerScience
ISBN978-3-662-46665-0 ISBN978-3-662-46666-7 (eBook)
DOI10.1007/978-3-662-46666-7
LibraryofCongressControlNumber:2015933999
LNCSSublibrary:SL4–SecurityandCryptology
SpringerHeidelbergNewYorkDordrechtLondon
(cid:2)c Springer-VerlagBerlinHeidelberg2015
Thisworkissubjecttocopyright.AllrightsarereservedbythePublisher,whetherthewholeorpartofthe
materialisconcerned,specificallytherightsoftranslation,reprinting,reuseofillustrations,recitation,broad-
casting,reproduction onmicrofilmsorinanyotherphysicalway,andtransmissionorinformationstorage
andretrieval,electronicadaptation,computersoftware,orbysimilarordissimilarmethodologynowknown
orhereafterdeveloped.
Theuseofgeneraldescriptivenames,registerednames,trademarks,servicemarks,etc.inthispublication
doesnotimply,evenintheabsenceofaspecificstatement,thatsuchnamesareexemptfromtherelevant
protectivelawsandregulationsandthereforefreeforgeneraluse.
Thepublisher, theauthorsandtheeditorsaresafetoassumethattheadviceandinformationinthisbook
arebelievedtobetrueandaccurateatthedateofpublication. Neitherthepublishernortheauthorsorthe
editorsgiveawarranty,expressorimplied,withrespecttothematerialcontainedhereinorforanyerrorsor
omissionsthatmayhavebeenmade.
Printedonacid-freepaper
Springer-VerlagGmbHBerlinHeidelbergispartofSpringerScience+BusinessMedia
(www.springer.com)
Foreword
ETAPS2015wasthe18thinstanceoftheEuropeanJointConferencesonTheoryand
Practice of Software. ETAPS is an annual federated conference that was established
in 1998, and this year consisted of six constituting conferences (CC, ESOP, FASE,
FoSSaCS,TACAS,andPOST)includingfiveinvitedspeakersandtwotutorialspeakers.
Prior to and after the main conference, numeroussatellite workshops took place and
attractedmanyresearchersfromallovertheworld.
ETAPSisaconfederationofseveralconferences,eachwithitsownProgramCom-
mitteeanditsownSteeringCommittee(ifany).Theconferencescovervariousaspects
of software systems, ranging from theoretical foundations to programming language
developments, compiler advancements, analysis tools, formal approaches to software
engineering, and security. Organizing these conferences into a coherent, highly syn-
chronizedconferenceprogramenablestheparticipationinanexcitingevent,havingthe
possibilitytomeetmanyresearchersworkingindifferentdirectionsinthefield,andto
easilyattendtalksatdifferentconferences.
Thesixmainconferencestogetherreceived544submissionsthisyear,152ofwhich
wereaccepted(including10tooldemonstrationpapers),yieldinganoverallacceptance
rateof27.9%.IthankallauthorsfortheirinterestinETAPS,allreviewersforthepeer-
reviewingprocess,thePCmembersfortheirinvolvement,andinparticularthePCCo-
chairsforrunningthisentireintensiveprocess.Lastbutnotleast,mycongratulationsto
allauthorsoftheacceptedpapers!
ETAPS2015wasgreatlyenrichedbytheinvitedtalksbyDanielLicata(Wesleyan
University,USA)andCatusciaPalamidessi(InriaSaclayandLIX,France),bothunify-
ingspeakers,andtheconference-specificinvitedspeakers[CC]KeshavPingali(Univer-
sity of Texas, USA), [FoSSaCS] Frank Pfenning(CarnegieMellon University,USA),
and[TACAS]WangYi(UppsalaUniversity,Sweden).Invitedtutorialswereprovided
byDanielBernstein(EindhovenUniversityofTechnology,theNetherlandsandtheUni-
versityofIllinoisatChicago,USA),andFlorentKirchner(CEA,theAlternativeEner-
giesandAtomicEnergyCommission,France).Mysincerethankstoallthesespeakers
fortheirinspiringtalks!
ETAPS2015tookplacein thecapitalofEngland,thelargestmetropolitanareain
the UK and the largesturbanzone in the EuropeanUnion by mostmeasures.ETAPS
2015 was organized by the Queen Mary University of London in cooperation with
the following associations and societies: ETAPS e.V., EATCS (EuropeanAssociation
for Theoretical Computer Science), EAPLS (European Association for Programming
LanguagesandSystems),andEASST(EuropeanAssociationofSoftwareScienceand
Technology).Itwassupportedbythefollowingsponsors:Semmle,Winton,Facebook,
MicrosoftResearch,andSpringer-Verlag.
VI Foreword
Theorganizationteamcomprised:
– GeneralChairs:PasqualeMalacariaandNikosTzevelekos
– WorkshopsChair:PauloOliva
– Publicitychairs:MichaelTautschnigandGretaYorsh
– Members:DinoDistefano,EdmundRobinson,andMehrnooshSadrzadeh
TheoverallplanningforETAPSistheresponsibilityoftheSteeringCommittee.The
ETAPSSteeringCommitteeconsistsofanExecutiveBoard(EB)andrepresentativesof
theindividualETAPSconferences,aswellasrepresentativesofEATCS,EAPLS,and
EASST.TheExecutiveBoardcomprisesGillesBarthe(satelliteevents,Madrid),Hol-
gerHermanns(Saarbrücken),Joost-PieterKatoen(Chair,AachenandTwente),Gerald
Lüttgen(Treasurer,Bamberg),andTarmoUustalu(publicity,Tallinn).Othermembersof
theSteeringCommitteeare:ChristelBaier(Dresden),DavidBasin(Zurich),Giuseppe
Castagna(Paris),MarshaChechik(Toronto),AlexanderEgyed(Linz),RiccardoFocardi
(Venice),BjörnFranke(Edinburgh),JanFrisoGroote(Eindhoven),ReikoHeckel(Le-
icester),BartJacobs(Nijmegen),PaulKlint(Amsterdam),JensKnoop(Vienna),Christof
Löding(Aachen),InaSchäfer(Braunschweig),PasqualeMalacaria(London),Tiziana
Margaria (Limerick), Andrew Myers (Boston), Catuscia Palamidessi (Paris), Frank
Piessens (Leuven), Andrew Pitts (Cambridge), Jean-Francois Raskin (Brussels), Don
Sannella(Edinburgh),VladimiroSassone(Southampton),PerditaStevens(Edinburgh),
Gabriele Taentzer (Marburg), Peter Thiemann (Freiburg), Cesare Tinelli (Iowa City),
LucaVigano(London),JanVitek(Boston),IgorWalukiewicz(Bordeaux),AndrzejWa˛-
sowski(Copenhagen),andLenoreZuck(Chicago).
IsincerelythankallETAPSSCmembersforalltheirhardworktomakethe18th
edition of ETAPS a success. Moreover, thanks to all speakers, attendants, organizers
of the satellite workshops, and to Springer for their support. Finally, many thanks
to Pasquale and Nikos and their local organization team for all their efforts enabling
ETAPStotakeplaceinLondon!
January2015 Joost-PieterKatoen
Preface
This volume contains the paperspresented at POST 2015: 4th Conferenceon Princi-
plesofSecurityandTrust,heldduringApril16–17,2015inLondon,UK.Principlesof
SecurityandTrustisabroadforumrelatedtothetheoreticalandfoundationalaspects
ofsecurityandtrust.Papersofmanykindsarewelcome:newtheoreticalresults,prac-
ticalapplicationsofexistingfoundationalideas,andinnovativetheoreticalapproaches
stimulatedbypressingpracticalproblems.
POSTwascreatedin2012tocombineandreplaceanumberofsuccessfulandlong-
standing workshopsin this area: Automated Reasoning and Security ProtocolAnaly-
sis (ARSPA), FormalAspectsof Securityand Trust(FAST),Securityin Concurrency
(SecCo), and the Workshop on Issues in the Theory of Security (WITS). A subset of
theseeventsmetjointlyasaneventaffiliatedwithETAPS2011underthenameTheory
ofSecurityandApplications(TOSCA).
There were 57 submissions to POST 2015, including 55 research papers and two
tooldemonstrationpapers.EachsubmissionwasreviewedbythreeProgramCommittee
members,whoinmanycasessolicitedthehelpofoutsideexpertstoreviewthepapers.
Electronicdiscussionwas used to decidewhichpapersto select forthe program.The
papersthatappearinthisvolumemaydifferfromtheinitialsubmissions;itisexpected
that some will be further revised and submitted for publication in refereed archival
journals.
TheCommitteedecidedtoaccept17papers.Inadditiontothesepapers,thevolume
includes a contribution from the POST invited speaker Catuscia Palamidessi, who is
alsooneoftheETAPSunifyingspeakers.
We wouldliketothankthemembersoftheProgramCommittee,theExternalRe-
viewers,thePOSTSteeringCommittee,theETAPSSteeringCommittee,andLocalOr-
ganizingCommittee,whoallcontributedtothesuccessofPOST2015.Wealsothank
allauthorsofsubmittedpapersfortheirinterestinPOSTandcongratulatetheauthors
ofacceptedpapers.Finally,wegratefullyacknowledgetheuseofEasyChairfororga-
nizingthesubmissionprocess,theProgramCommittee’swork,andthepreparationof
thisvolume.
January2015 RiccardoFocardi
AndrewMyers
Organization
Program Committee
PedroAdão SQIG,IST,Lisboa,Portugal
AlessandroArmando DIBRIS-UniversityofGenoa,Italy
DavidBasin ETHZurich,Switzerland
LujoBauer CarnegieMellonUniversity,USA
KarthikeyanBhargavan Inria,France
JamesCheney UniversityofEdinburgh,UK
StephenChong HarvardUniversity,USA
VeroniqueCortier CNRS,Loria,France
RiccardoFocardi UniversitàCa’Foscari,Venezia,Italy
JoshuaGuttman WorcesterPolytechnicInstitute,USA
SomeshJha UniversityofWisconsin,USA
RalfKuesters UniversityofTrier,Germany
BorisKöpf IMDEASoftwareInstitute,Spain
PeeterLaud CyberneticaAS,Estonia
NinghuiLi PurdueUniversity,USA
MatteoMaffei CISPA,SaarlandUniversity,Germany
SergioMaffeis ImperialCollegeLondon,UK
HeikoMantel TechnischeUniversitätDarmstadt,Germany
AndrewMyers CornellUniversity,USA
DavidNaumann StevensInstituteofTechnology,USA
TamaraRezk Inria,France
MarkRyan UniversityofBirmingham,UK
PierangelaSamarati UniversitàdegliStudidiMilano,Italy
GrahamSteel Cryptosense,France
Additional Reviewers
Arapinis,Myrto Denzel,Michael
Carbone,Roberto Dougherty,Daniel
Cheval,Vincent Eigner,Fabienne
Chowdhury,Omar Foresti,Sara
Chudnov,Andrey FragosoSantos,José
Costa,Gabriele Fredrikson,Matt
Davidson,Drew Gay,Richard
DeCapitaniDiVimercati,Sabrina Gazeau,Ivan
DeCarli,Lorenzo Hammer,Christian
Delignat-Lavaud,Antoine Harris,William
X Organization
Hu,Jinwei Rausch,Daniel
Jia,Limin Rowe,Paul
Kordy,Piotr Sasse,Ralf
Kremer,Steve Schneider,David
Laur,Sven Solhaug,Bjørnar
Liu,Jia Strub,Pierre-Yves
Livraga,Giovanni TorabiDashti,Mohammad
Lortz,Steffen Traverso,Riccardo
Melissen,Matthijs Truderung,Tomasz
Mohammadi,Esfandiar VanDerMeyden,Ron
Novakovic,Chris Weber,Alexandra
Perner,Matthias Willemson,Jan
Pironti,Alfredo Yu,Jiangshan
Radomirovic,Sasa Zalienscu,Eugen
Rafnsson,Willard