Formal Aspects in Security and Trust [electronic resource] : 5th International Workshop, FAST 2008 Malaga, Spain, October 9-10, 2008, Revised Selected Papers /

Formal Certification of ElGamal Encryption -- Secure Information Flow as a Safety Property -- Who Can Declassify? -- Non-Interference for Deterministic Interactive Programs -- Information-Theoretic Modeling and Analysis of Interrupt-Related Covert Channels -- Causality and Accountability -- Dynamics, Robustness and Fragility of Trust -- Trust within the Context of Organizations: A Formal Approach -- Know What You Trust -- Privacy-Friendly Electronic Traffic Pricing via Commits -- A Formal Privacy Management Framework -- Parameterised Anonymity -- Automatic Methods for Analyzing Non-repudiation Protocols with an Active Intruder -- Petri Net Security Checker: Structural Non-interference at Work -- Verifying Multi-party Authentication Using Rank Functions and PVS -- The Append-Only Web Bulletin Board -- Secure Broadcast Ambients -- Extending Anticipation Games with Location, Penalty and Timeline -- Do You Really Mean What You Actually Enforced? -- Delegating Privileges over Finite Resources: A Quota Based Delegation Approach -- Access Control and Information Flow in Transactional Memory.

This book constitutes the thoroughly refereed post-workshop proceedings of the 5th International Workshop on Formal Aspects in Security and Trust, FAST 2008, held under the auspices of IFIP WG 1.7 in Malaga, Spain, in October 2008 as a satellite event of 13th European Symposium on Research in Computer Security. The 20 revised papers presented were carefully reviewed and selected from 59 submissions. The papers focus of formal aspects in security, trust and reputation, security protocol design and analysis, logics for security and trust, trust-based reasoning, distributed trust management systems, digital asset protection, data protection, privacy and id management issues, information flow analysis, language-based security, security and trust aspects in ubiquitous computing, validation/analysis tools, Web/grid services security/trust/privacy, security and risk assessment, resource and access control, as well as case studies.