Software Security - Theories and Systems(软件安全-理论与系统)

This book constitutes the thoroughly refereed post-proceedings of the Second Mext-NSF-JSPS Interntional Symposium on Software Security, ISSS 2003, held in Tokyo, Japan in November 2003.
The 18 revised full invited and selected papers presented were carefully reviewed and improved for inclusion in the book. The papers are organized in topical sections on analysis of protocols and cryptography, verification of security properties, safe implementation of programming languages, secure execution environments, and secure systems and security management.

The LNCS series reports state-of-the-art results in computer science research, development, and education, at a high level and in both printed and electronic form. Enjoying tight cooperation with the R&D community, with numerous individuals, as well as with prestigious organizations and Societies, LNCS has grown into the most comprehensive computer science research forum available.
The scope of LNCS, including its sub series LNAI, spans the whole range of computer science and information technology including interdisciplinary topics in a variety of application fields. The type of material published traditionally includes
　　- Proceedings（published in time for the respective conference）
　 - Post-proceedings（consisting of thoroughly revised final full papers）
　 -research monographs（which may be based on outstanding PhD work, research projects, technical reports, etc.）

Part1: Analysis of Protocols and Cryptography
Verifying Confidentiality and Authentication in Kerberos
A Cost Estimation Calculus for Analyzing the Resistance to Denial-of-Service Attack
Formal Analysis of the NetBill Electronic Commerce Protocol
Inferences on Honesty in compositional Loic for Protocol Analysis
A Formal System for Analysis of Cryptographic Encryption and Their Security Propertiex
Part 2:Verification of Security Properties
Formal Specification and Verification of Resource Bound Security Using PVS
Java Program Verification at Nijmegen : DEvelopments and Perspective
Decision Procedures for Several Properties of Reactive System Specifications
A Model for Delimited Information Release
Part 3: Safe Implementation of Programming Languages
The Interface Definition Language for Fail-Safe C
Lightweight Wrappers for Interfacing with Binary Code in CCured
Part 4: Secure Execution Environments
Detecting Unknown Computer Viruses-A New Approach
Security Policy Descriptions Through the Use of Control Structure of a Target Program
Securing RPC with a Reference Monitor for System Calls
UML Scrapbook and Realization of Snapshot Programming Environment
Part5: Secure Systems and Security Management
Managing Information Technology Security Risk
SEAS: A Secure E-Voting Applet System
The Design of a Secure Distributed Devices System Based on Immunity
Author Index