Olivier Camp · Edgar Weippl Christophe Bidan · Esma Aïmeur (Eds.) Communications in Computer and Information Science 576 Information Systems Security and Privacy First International Conference, ICISSP 2015 Angers, France, February 9–11, 2015 Revised Selected Papers 123 Communications in Computer and Information Science 576 Commenced Publication in 2007 Founding and Former Series Editors: Alfredo Cuzzocrea, Dominik Ślęzak, and Xiaokang Yang Editorial Board Simone Diniz Junqueira Barbosa Pontifical Catholic University of Rio de Janeiro (PUC-Rio), Rio de Janeiro, Brazil Phoebe Chen La Trobe University, Melbourne, Australia Xiaoyong Du Renmin University of China, Beijing, China Joaquim Filipe Polytechnic Institute of Setúbal, Setúbal, Portugal Orhun Kara TÜBİTAK BİLGEM and Middle East Technical University, Ankara, Turkey Igor Kotenko St. Petersburg Institute for Informatics and Automation of the Russian Academy of Sciences, St. Petersburg, Russia Ting Liu Harbin Institute of Technology (HIT), Harbin, China Krishna M. Sivalingam Indian Institute of Technology Madras, Chennai, India Takashi Washio Osaka University, Osaka, Japan More information about this series at http://www.springer.com/series/7899 Olivier Camp Edgar Weippl (cid:129) ï Christophe Bidan Esma A meur (Eds.) (cid:129) Information Systems Security and Privacy First International Conference, ICISSP 2015 – Angers, France, February 9 11, 2015 Revised Selected Papers 123 Editors Olivier Camp Christophe Bidan MODESTE/ESEO Supélec Angers Cesson France France Edgar Weippl EsmaAïmeur SBAResearch UniversitédeMontréal Wien Montreal,QC Austria Canada ISSN 1865-0929 ISSN 1865-0937 (electronic) Communications inComputer andInformationScience ISBN 978-3-319-27667-0 ISBN978-3-319-27668-7 (eBook) DOI 10.1007/978-3-319-27668-7 LibraryofCongressControlNumber:2015957037 ©SpringerInternationalPublishingSwitzerland2015 Thisworkissubjecttocopyright.AllrightsarereservedbythePublisher,whetherthewholeorpartofthe material is concerned, specifically the rights of translation, reprinting, reuse of illustrations, recitation, broadcasting, reproduction on microfilms or in any other physical way, and transmission or information storageandretrieval,electronicadaptation,computersoftware,orbysimilarordissimilarmethodologynow knownorhereafterdeveloped. Theuseofgeneraldescriptivenames,registerednames,trademarks,servicemarks,etc.inthispublication doesnotimply,evenintheabsenceofaspecificstatement,thatsuchnamesareexemptfromtherelevant protectivelawsandregulationsandthereforefreeforgeneraluse. Thepublisher,theauthorsandtheeditorsaresafetoassumethattheadviceandinformationinthisbookare believedtobetrueandaccurateatthedateofpublication.Neitherthepublishernortheauthorsortheeditors give a warranty, express or implied, with respect to the material contained herein or for any errors or omissionsthatmayhavebeenmade. Printedonacid-freepaper ThisSpringerimprintispublishedbySpringerNature TheregisteredcompanyisSpringerInternationalPublishingAGSwitzerland Preface The present book includes extended and revised versions of a set of selected best papers from the First International Conference on Information Systems Security and Privacy (ICISSP), which was held in February 2015, in Angers, France. This confer- encereflectsacontinuingefforttoincreasethedisseminationofrecentresearchresults among professionals who work in the areas of information systems security and privacy. The program of this conference included several outstanding keynote lectures pre- sented by internationally renowned distinguished researchers who are experts in the variousICISSPareas.Theirkeynotespeechescontributedtowardincreasingtheoverall quality of the program and significance of the themes of the conference. The conference topics define a broad spectrum in the key areas of information systems security and privacy. This wide-view reporting made ICISSP appealing to a global audience of engineers, scientists, business practitioners, ICT managers, and policy experts. The papers accepted and presented at the conference demonstrated a numberofnewandinnovativesolutionsforinformationsystemssecurityandprivacy, showing that the technical problems in these closely related fields are challenging and worth approaching from an interdisciplinary perspective such as that promoted by ICISSP. ICISSP 2015 received 56 papers, with contributions from 23 different countries in all continents, which demonstrates its success and global dimension. To evaluateeach submission,adouble-blindpaperevaluationmethodwasused:Eachpaperwasblindly reviewed by at least two experts from the international Program Committee. In fact, mostpapershadthreereviewsormore.Theselectionprocessfollowedstrictcriteriain all tracks. As a result only 10 papers were accepted and orally presented at ICISSP as full papers (18 % of submissions) and 19 as short papers (34 % of submissions). Additionally, 12 papers were accepted for poster presentation. The strict acceptance ratioshowstheintentiontopreservethehighqualityofthisevent,whichweexpectto improve even further in the years to come. We hope that you will find this collection of the best ICISSP 2015 papers an excellent source of inspiration as well as a helpful reference for research in the aforementioned areas. September 2015 Olivier Camp Edgar Weippl Christophe Bidan Esma Aïmeur Organization Conference Chair Olivier Camp MODESTE/ESEO, France Program Co-chairs Edgar Weippl SBA Research/TU Wien, Austria Christophe Bidan SUPELEC, France Esma Aïmeur University of Montreal, Canada Program Committee Carlisle Adams University of Ottawa, Canada Gordon Agnew University of Waterloo, Canada Anis Ben Aissa UniversitéTuniselManarÉcoleNationaled’ingenieursde Tunis, Tunisia Magnus Almgren Chalmers University of Technology, Sweden Mario Alvim Federal University of Minas Gerais (UFMG), Brazil Morteza Amini Sharif University of Technology, Islamic Republic of Iran Frederik Armknecht Mannheim University, Germany Elias Athanasopoulos FORTH, Greece Kensuke Baba Kyushu University, Japan Joonsang Baek Khalifa University of Science, Technology and Research, UAE Alessandro Barenghi Polytecnic University of Milan, Italy Catalin V. Birjoveanu Al.I. Cuza University of Iasi, Romania Simon R. Blackburn Royal Holloway University of London, UK Douglas Blough Georgia Institute of Technology, USA Carlo Blundo Università di Salerno, Italy Alessio Botta University of Naples Federico II, Italy Hervé Chabanne Morpho and Télécom ParisTech, France Serge Chaumette Université de Bordeaux, France Feng Cheng HassoPlattnerInstituteatUniversityofPotsdam,Germany Hung-Yu Chien National Chi Nan University, Taiwan, Taiwan Stelvio Cimato Università degli studi di Milano Crema, Italy Bernard Colbert Deakin University, Australia Miguel Correia UniversidadedoPorto,FaculdadedeEngenharia,Portugal Mathieu Cunche INSA-Lyon/Inria, France Mohammad Dastbaz Leeds Beckett University, UK Mingcong Deng Tokyo University of Agriculture and Technology, Japan VIII Organization Robert H. Deng SMU, Singapore Josée Desharnais Université Laval, Canada Andreas Dewald Friedrich-Alexander-Universität Erlangen-Nürnberg, Germany Xuhua Ding SMU, Singapore Josep Domingo-Ferrer Universitat Rovira I Virgili, Spain Changyu Dong University of Strathclyde, UK Naranker Dulay Imperial College London, UK Isao Echizen National Institute of Informatics, Japan Alekander Essex Western University, Canada Benjamin Fung McGill University, Canada Steven Furnell Plymouth University, UK Alban Gabillon Laboratoire GePaSud – Université de la Polynésie Française, French Polynesia Clemente Galdi Università di Napoli Federico II, Italy Debin Gao Singapore Management University, Singapore Catherine H. Gebotys University of Waterloo, Canada Ferrari Gianlugi University of Pisa, Italy Bok-Min Goi Universiti Tunku Abdul Rahman, Malaysia Dieter Gollmann TU Hamburg, Germany Ana I. González-Tablas University Carlos III of Madrid, Spain Gilles Guette University of Rennes, France Ragib Hasan University of Alabama at Birmingham, USA Kirstie Hawkey Dalhousie University, Canada Maritta Heisel Universität Duisburg-Essen, Germany Fu-Hau Hsu National Central University, Taiwan Sorin A. Huss Center for Advanced Security Research Darmstadt, Germany Dieter Hutter German Research Centre for Artificial Intelligence, Germany Tzonelih Hwang National Cheng Kung University, Taiwan Mariusz Jakubowski Microsoft Research, USA Rasool Jalili Sharif University of Technology, Islamic Republic of Iran Christian Damsgaard Technical University of Denmark, Denmark Jensen Thomas Jensen University of Copenhagen, Denmark Eduard A. Jorswieck Dresden University of Technology, Germany RafaelTimoteodeSousa University of Brasilia, Brazil Junior Ghassan Karame NEC Laboratories, Germany Hiroaki Kikuchi Meiji University, Japan Dong Seong Kim University of Canterbury, New Zealand Kwangjo Kim KAIST, Republic of Korea Joseph Migga Kizza University of Tennessee-Chattanooga, USA Jiejun Kong University of California Los Angeles, USA Organization IX Elisavet Konstantinou University of the Aegean, Greece Hristo Koshutanski University of Malaga, Spain Sanjeev Kumar University of Texas - RGV, USA Nadira Lammari Conservatoire National des Arts et Métiers, France Gabriele Lenzini SnT - University of Luxembourg, Luxembourg Ming Li East China Normal University, China Zhiqiang Lin University of Texas at Dallas, USA Flamina Luccio Università Ca’ Foscari Venezia, Italy Federico Maggi Politecnico di Milano, Italy Ilaria Matteucci ConsiglioNazionale delleRicerche, Istituto diInformatica e Telematica, Italy Catherine Meadows US Naval Research Laboratory, USA Florian Mendel TU Graz, Austria Nele Mentens Katholieke Universiteit Leuven, Belgium Ali Miri Ryerson University, Canada Mattia Monga Università degli Studi di Milano, Italy Paolo Mori Consiglio Nazionale delle Ricerche, Italy Charles Morisset Newcastle University, UK Kirill Morozov Kyushu University, Japan Paliath Narendran State University of New York at Albany, USA Mehrdad Nojoumian Southern Illinois University Carbondale, USA Gabriele Oligeri Università di Roma Tre, Italy Donal O’Mahony Trinity College Dublin, Ireland Carles Padro Universitat Politecnica de Catalunya, Spain Andreas Peter University of Twente, The Netherlands Makan Pourzandi Ericsson Research, Canada Vassilis Prevelakis Technische Universität Braunschweig, Germany Robert Proctor Purdue University, USA Kenneth Radke Information Security Institute, Queensland University of Technology, Australia Wolfgang Reif Universität Augsburg, Germany Eike Ritter University of Birmingham, UK Jean-Marc Robert ETS Montreal, Canada Neil Rowe Naval Postgraduate School, USA Giovanni Russello University of Auckland, New Zealand Hossein Saiedian University of Kansas, USA Steve A. Schneider University of Surrey, UK Michael Scott Certivox Ltd., Ireland Kent Seamons Brigham Young University, USA Roberto Segala Università di Verona, Italy Abdulhadi Shoufan Khalifa University of Science, UAE Alexander Shvartsman University of Connecticut, USA Alexander Sideridis Agricultural University of Athens, Greece Nicolas Sklavos Technological Educational Institute of Western Greece, Greece Rainer Steinwandt Florida Atlantic University, USA X Organization Hung-Min Sun National Tsing Hua University, Taiwan Shamik Sural IIT Kharagpur, India Tsuyoshi Takagi Kyushu University, Japan Nadia Tawbi Université Laval, Canada Cihangir Tezcan Middle East Technical University, Turkey Raylin Tso National Chengchi University, Taiwan Yasuyuki Tsukada Nippon Telegraph and Telephone Corporation, Japan Udaya Tupakula Macquarie University, Australia Shambhu J. Upadhyaya University at Buffalo, USA Adriano Valenzano Consiglio Nazionale delle Ricerche, Italy Craig Valli Edith Cowan University, Australia Rakesh M. Verma University of Houston, USA Hongjun Wu Nanyang Technological University, Singapore Ching-Nung Yang National Dong Hwa University, Taiwan Neil Y. Yen University of Aizu, Japan Amr Youssef Concordia University, Canada Moti Yung Google Inc. and Columbia University, USA Jianhong Zhang North China University of Technology, China Jie Zhang Nanyang Technological University, Singapore Wenbing Zhao Cleveland State University, USA Huafei Zhu Institute for Infocomm Research (I2R), A-Star, Singapore Additional Reviewer Franck Youssef NEC Europe Ltd., Switzerland Invited Speakers Steven Furnell Plymouth University, UK Bryan Ford Yale University, USA Günther Pernul University of Regensburg, Germany Edgar Weippl SBA Research/TU Wien, Austria Philippe Desfray SOFTEAM, France