Data and Applications Security XX数据与应用安全 XX：第20届IFIP WG 11.3 年度工作会议/会议录

he LNCS series reports state-of-the-art results in computer science research, development, and education, at a high level and in both printed and electronic form. Enjoying tight cooperation with the R&D community,with numerous individuals, as well as with prestigious organizations and societies, LNCS has grown into the most comprehensive computer science research forum available.
The scope of LNCS, including its subseries LNAI and LNBI, spans the whole range of computer science and information technology including interdisciplinary topics in a variety of application fields. The type of material published traditionally includes
-proceedings (published in time for the respective conference)
-post-proceedings (consisting of thoroughly revised final full papers)
-research monographs (which may be based on outstanding PhD work,research projects, technical reports, etc.)

Creating Objects in the Flexible Authorization Framework
Detection and Resolution of Anomalies in Firewall Policy Rules
On Finding an Inference-Proof Complete Database for Controlled Query Evaluation
Consolidating the Access Control of Composite Applications and Workflows Authenticating Multi-dimensional Query Results in Data Publishing
XML Streams Watermarking
Aggregation Queries in the Database-As-a-Service Model
Policy Classes and Query Rewriting Algorithm for XML Security Views
Interactive Analysis of Attack Graphs Using Relational Queries
Notarized Federated Identity Management for Web Services
Resolving Information Flow Conflicts in RBAC Systems
Policy Transformations for Preventing Leakage of Sensitive Information in Email Systems
Term Rewriting for Access Control
Discretionary and Mandatory Controls for Role-Based Administration
A Distributed Coalition Service Registry for Ad-Hoc Dynamic Coalitions: A Service-Oriented Approach
Enhancing User Privacy Through Data Handling Policies
Efficient Enforcement of Security Policies Based on Tracking of Mobile Users
A Framework for Flexible Access Control in Digital Library Systems
Authrule: A Generic Rule-Based Authorization Module
Aspect-Oriented Risk Driven Development of Secure Applications
From Business Process Choreography to Authorization Policies
Information Theoretical Analysis of Two-Party Secret Computation
Author Index