The Fifth International Workshop on Security (IWSEC 2010) was held at Kobe InternationalConferenceCenter,Kobe,Japan,November22–24,2010. Thewo- shop was co-organized by CSEC, a special interest group concerned with the computer security of the Information Processing Society of Japan (IPSJ) and ISEC,atechnicalgroupconcernedwiththe informationsecurityofTheInstitute of Electronics, Information and Communication Engineers (IEICE). The exc- lentLocalOrganizingCommitteewasledbytheIWSEC2010GeneralCo-chairs, Hiroaki Kikuchi and Toru Fujiwara. This year IWSEC 2010 had three tracks, the Foundations of Security (Track I), Security in Networks and Ubiquitous Computing Systems (Track II), and Security in Real Life Applications (Track III), and the review and selection processes for these tracks were independent of each other. We received 75 paper submissions including 44 submissions for Track I, 20 submissions for Track II, and 11 submissions for Track III. We would like to thank all the authors who submitted papers. Each paper was reviewed by at least three reviewers. In - dition to the Program Committee members, many external reviewers joined the review process from their particular areas of expertise. We were fortunate to have this energetic team of experts, and are grateful to all of them for their hard work. This hard work included very active discussions; the discussion phase was almost as long as the initial individual reviewing. The review and discussions weresupportedbyaveryniceWeb-basedsystem,iChair. Wewouldliketothank its developers. Following the review phases, 22 papers including 13 papers for Track I, 6 papers for Track II, and 3 papers for Track III were accepted for publication in this volume of Advances in Information and Computer Security.

Cyber-attacks on financial institutions and financial market infrastructures are becoming more common and more sophisticated. Risk awareness has been increasing, firms actively manage cyber risk and invest in cybersecurity, and to some extent transfer and pool their risks through cyber liability insurance policies. This paper considers the properties of cyber risk, discusses why the private market can fail to provide the socially optimal level of cybersecurity, and explore how systemic cyber risk interacts with other financial stability risks. Furthermore, this study examines the current regulatory frameworks and supervisory approaches, and identifies information asymmetries and other inefficiencies that hamper the detection and management of systemic cyber risk. The paper concludes discussing policy measures that can increase the resilience of the financial system to systemic cyber risk.

This book constitutes the thoroughly refereed post-conference proceedings of the 16th International Conference on Financial Cryptography and Data Security (FC 2012), held in Kralendijk, Bonaire, February 27–March 1, 2012. The 29 revised full papers presented were carefully selected and reviewed from 88 submissions. The papers cover all aspects of securing transactions and systems, including information assurance in the context of finance and commerce.

The role of the government in implementing security measures in cyberspace is examined in this textbook, which was designed for practical use by IT security specialists and managers in both the public and private sectors. Link (U. of North Carolina, Green

Cloud computing has gained paramount attention and most of the companies are adopting this new paradigm and gaining significant benefits. As number of applications and business operations are being facilitated by the cloud computing paradigm, it has become the potential target to attackers. The importance of well-organized architecture and security roles have become greater with the growing popularity. Cloud Security: Attacks, Techniques, Tools, and Challenges, provides an in-depth technical description about various key essential aspects of cloud security. We have endeavored to provide a technical foundation that will be practically useful not just for students and independent researchers but also for professional cloud security analysts for conducting security procedures, and all those who are curious in the field of cloud security The book offers comprehensive coverage of the most essential topics, including: Basic fundamentals of Cloud Computing Cloud security concepts, vulnerabilities, security standards and reference models Cloud security goals, key issues and privacy requirements Threat model, detailed taxonomy of cloud attacks, Attack feature analysis – case study A detailed taxonomy of IDS techniques and Cloud Intrusion Detection Systems (IDS) Attack and security tools, LibVMI – case study Advanced approaches: Virtual Machine Introspection (VMI) and Hypervisor Introspection (HVI) Container security: threat model, attacks and defense systems This book is intended for both academic and professional audience. It could also be used as a textbook, for a semester course at undergraduate and post graduate level in Computer Science, Information Technology, Information Security, and Information Science & Management. The book serves as basic reference volume for researchers in cloud security. It will be useful to practitioners, cloud security team, and the cloud security auditor as well. To get the most out of this book, the reader should have a working knowledge of various operating system environments, hypervisors, cloud computing fundamentals, programming languages like Python and a working knowledge of security tools.

Should we be doing—or trying to do—everything ourselves, or might it be better to contract some tasks out to others? Could they do them better and cheaper than we can? More and more state and local governments are asking these questions, and while there are many answers on the Federal level, these answers often don't apply lower down the line. Nevertheless, it is evident that contracting out is often the better strategy—but how best to go about it? What are the benefits and what are the hidden risks? Dr. O'Looney's book provides precisely the guidance that state and local managers need: first, how to decide to outsource a government service, then step-by-step how to proceed. Based on extensive interviews and other research, O'Looney takes managers through the intricacies of contract outsourcing and administration, but in doing so he makes clear that he appreciates the importance of government. His book is not an argument for privatization, as so many other books are; rather, it is an affirmation of government and the benefits of its many services. Readers will find theory and advice on the services that are most suitable for contracting out; a listing and review of the components of a high-quality analysis, including the analysis of often overlooked political, organizational, and functional aspects of government; advice on how to go from deciding to outsource to actually designing, implementing, and monitoring a contract in situations that could prove hazardous to the livelihoods of government workers. He also discusses the changes that need to be made in the organizational culture, management, and employee training as a result of the change to a contract-based system of providing services; the considerations in designing work specifications and other critical aspects of the government-vendor relationship, and how ideal contracting processes and ideal contracts can differ according to the nature of the service being contracted. The result is a thorough and highly practical volume for executives and managers in the public sector, and for those who hope to do business with them.

Do existing measures of state fragility measure fragility accurately? Based on commonly used fragility measures, South Africa (SA) is classified as a relatively stable state, yet rising violent crime, high unemployment, endemic poverty, eroding public trust, identity group based preferential treatment policies, and the rapid rise of the private security sector are all indications that SA may be suffering from latent state fragility. Based on a comprehensive view of security, this study examines the extent to which measures of political legitimacy and good governance, effectiveness in the security system – especially with respect to the police system – and mounting economic challenges may be undermining the stability of SA in ways undetected by commonly used measures of state fragility. Using a mixed-methods approach based on quantitative secondary data analysis and semi-structured interviews with government officials, security practitioners, and leading experts in the field, this study finds that the combination of colonization, apartheid, liberation struggle, transition from autocracy to democracy, high levels of direct and structural violence, stagnating social, political, and economic developments make South Africa a latently fragile state. Conceptually, the results of this research call into question the validity of commonly used measures of state fragility and suggest the need for a more comprehensive approach to assessing state fragility. Practically, this study offers a number of concrete policy recommendations for how South Africa may address mounting levels of latent state fragility.