Journal: J. Information Security