| 2008 | An Operation-Based Metric for CPA Resistance. | Jing Pan, J. I. den Hartog, Erik P. de Vink |
| 2008 | A Security Protocol for Self-Organizing Data Storage. | Nouha Oualha, Melek nen, Yves Roudier |
| 2008 | Hiding in Groups: On the Expressiveness of Privacy Distributions. | Karsten Nohl, David Evans |
| 2008 | A Decentralized Bayesian Attack Detection Algorithm for Network Security. | Kien C. Nguyen, Tansu Alpcan, Tamer Basar |
| 2008 | Interactive Selection of ISO 27001 Controls under Multiple Objectives. | Thomas Neubauer, Andreas Ekelhart, Stefan Fenz |
| 2008 | ASTRA : A Security Analysis Method Based on Asset Tracking. | Daniel Le Mtayer, Claire Loiseaux |
| 2008 | Anomaly Detection with Diagnosis in Diversified Systems using Information Flow Graphs. | Frdric Majorczyk, Eric Totel, Ludovic M, Ayda Sadane |
| 2008 | Feasibility of Automated Information Security Compliance Auditing. | Dennis Longley, Mark Branagan, William J. Caelli, Lam-for Kwok |
| 2008 | An Integrity Lock Architecture for Supporting Distributed Authorizations in Database Federations. | Wei Li, Lingyu Wang, Bo Zhu, Lei Zhang |
| 2008 | Practical Privacy-Preserving Benchmarking. | Florian Kerschbaum |
| 2008 | Efficient Coalition Detection in Traitor Tracing. | Hongxia Jin, Jeffery Lotspiech, Nimrod Megiddo |
| 2008 | Protecting Financial Institutions from Brute-Force Attacks. | Cormac Herley, Dinei A. F. Florncio |
| 2008 | Using Virtualization to Create and Deploy Computer Security Lab Exercises. | Brian Hay, Ronald Dodge, Kara L. Nance |
| 2008 | HoneyID : Unveiling Hidden Spywares by Generating Bogus Events. | Jeheon Han, Jonghoon Kwon, Heejo Lee |
| 2008 | Adversary Modeling and Simulation in Cyber Warfare. | Samuel N. Hamilton, Wendy L. Hamilton |
| 2008 | User Session Modeling for Effective Application Intrusion Detection. | Kapil Kumar Gupta, Baikunth Nath, Kotagiri Ramamohanarao |
| 2008 | A Parallelization Framework for Exact Knowledge Hiding in Transactional Databases. | Aris Gkoulalas-Divanis, Vassilios S. Verykios |
| 2008 | A user survey on the sense of security, Anshin. | Yasuhiro Fujihara, Yuko Murayama, Kentarou Yamaguchi |
| 2008 | Robbing Banks with Their Own Software-an Exploit Against Norwegian Online Banks. | Yngve Espelid, Lars-Helge Netland, Andr N. Klingsheim, Kjell Jrgen Hole |
| 2008 | SPIT Identification Criteria Implementation: Effectiveness and Lessons Learned. | Stelios Dritsas, Yannis Soupionis, Marianthi Theoharidou, Yannis Mallios, Dimitris Gritzalis |
| 2008 | A Vulnerability Prioritization System Using A Fuzzy Risk Analysis Approach. | Maxwell G. Dondo |
| 2008 | Policies and Security Aspects For Distributed Scientific Laboratories. | Nicoletta Dess, Maria Grazia Fugini, R. A. Balachandar |
| 2008 | A Comparative Study of Anomaly Detection Techniques in Web Site Defacement Detection. | Giorgio Davanzo, Eric Medvet, Alberto Bartoli |
| 2008 | A B Formal Framework for Security Developments in the Domain of Smart Card Applications. | Frdric Dadeau, Marie-Laure Potet, Rgis Tissot |
| 2008 | Negotiation of Prohibition: An Approach Based on Policy Rewriting. | Nora Cuppens-Boulahia, Frdric Cuppens, Diala Abi Haidar, Herv Debar |