- NetSec - lists.gi.de

CfP: IEEE Joint Conferences CEC06 and EEE06
by netsec＠m-strasser.de 27 Oct '05

27 Oct '05

Apologies if you receive multiple copies of this message. The CFP is also available at http://linux.ece.uci.edu/cec06/doc/CEC-EEE-2006-CFP.pdf ********************************************************************* **************************************************** * * * Call For Paper * * * * CEC06 and EEE06 Joint Conferences * * June 26-29, 2006 * * San Francisco, California * * * * Theme: Real-Time Enterprises * * * * http://linux.ece.uci.edu/cec06/ * * * **************************************************** Sponsored by the IEEE Computer Society Technical Committee on Electronic Commerce The 8th IEEE Conference on E-Commerce Technology (CEC' 06) and the 3rd IEEE Conference on Enterprise Computing, E-Commerce and E-Services (EEE' 06) are the flagship annual conferences of the IEEE Computer Society Technical Committee on E-Commerce. The 2006 conference will be a joint event providing a platform for researchers interested in theory and practice of E-Commerce and Enterprise Computing. The conference focuses on new technologies and methods geared towards business process innovation (i.e., optimizing existing or creating new business processes) for the purpose of optimizing business objectives. The joint programs of CEC06 and EEE06 will consist of tutorials, invited talks, paper presentations, and panel discussions. Submissions of high quality papers describing mature results or on-going work are invited. Technical contributions should be accompanied by a thorough evaluation of the results. ********************************************************************* The theme for CEC 06 and EEE 06 will be Real-Time Enterprises. Topics for submission include but are not limited to: Commerce and trading technologies track: - Business services networks and interworkflow technology - EDI, workflow management, semantic web, e-Contracting, IPR/DRM - Marketing and advertising technology - Online shops, recommender systems, analytical CRM, pricing mechanism - Supply chain management and auction technology - E-auctions, combinatorial auctions, expressive bidding events, multi-agent negotiations, inventory management, supply chain and logistics optimization - Payment and privacy - Privacy enhancing technologies, payment protocols, reputation systems, identity management - M-Commerce and p-Commerce - Mobility management, context-dependent services, ubiquitous support Enterprise computing and engineering track: - Business process management and enterprise grid computing - Virtualization and enterprise grid infrastructures, provisioning and management of e-services, performance modeling and QoS analysis - Business intelligence and real-time business performance monitoring - Real-time data analysis (RFID / sensor data, etc.), data mining, risk and revenue management, forecasting, controlling - Collaborative engineering and knowledge management - CSCW, information retrieval, product data management, project management - Security and trust - trust and reputation, web services security - e-applications and services architecture - e-Learning, e-Government, e-Health, middleware, design experiences ** PAPER SUBMISSIONS ** Authors are invited to submit original, unpublished research papers that are not being considered in another forum. Manuscripts will be limited to 8 (IEEE style) pages. Please follow the IEEE Computer Society Press Proceedings Author Guidelines. At least one author is required to attend the conference and present the paper. Electronic submission of manuscripts (in PDF or Word formats) is required. All papers selected for this conference are peer-reviewed and will be published in the regular conference proceedings by the IEEE Computer Society Press. The best papers presented in the conference will be selected for journals such as the Journal on Information Systems and E-Business (ISeB), or the Electronic Commerce Research Journal (ECRJ). ** IMPORTANT DATES ** - December 9, 2005 Submission of conference papers - November 1, 2005 Workshop and tutorial proposals - March 14, 2006 Notification of acceptance - April 14, 2006 Camera-Ready copy of accepted papers due - June 26-29, 2006 Conference and workshop program ** Organizing Committee: ** General Co-Chairs - Umeshwar Dayal, HP Labs - Kwei-Jay Lin, Univ. of California, Irvine Program Chair - Philip Yu, IBM Research Program Vice Chairs "Commerce and trading technologies track": - Andreas Wombacher, Univ. of Twente, Netherlands - Arne Anderson, Uppsala University, Sweden "Enterprise computing and engineering track": - Ming-Syan Chen, National Taiwan Univ., Taiwan - Fabio Casati, HP Labs Tutorial Chair - Martin Bichler, TU Muenchen, Germany Workshop Chair - Kuo-Ming Chao, Coventry Univ., UK Panel Chair TBD Publicity Co-Chairs - William Cheung, Hong Kong Baptist Univ., Hong Kong - Moritz Strasser, Univ. of Freiburg, Germany Publication Chair - Kun-Lung Wu, IBM Research Web Chair - Yue Zhang, Univ. of California, Irvine Industrial Co-Chairs - Ramayya Krishnan, CMU - Christof Bornhoevd, SAP Local Arrangement Chair - Simon Shim, San Jose State Univ. International Liaison - Mike Shaw, Univ. of Illinois at Urbana-Champaign, (AIS SIGeBIZ) Steering Committee - Martin Bichler, TU Muenchen, - William Cheung, Hong Kong Baptist Univ. - Jen-Yao Chung, IBM Research (Chair) - David Cohn, IBM Research Meichun Hsu, HP Labs - Kwei-Jay Lin, Univ. of California, Irvine - Günter Müller, Univ. of Freiburg, - Soe-Tsyr Yuan, National Chengchi Univ., Taiwan *********************************************************************

1 0

CfP: International Conference on Emerging Trends in Information and Communication Security 2006
by netsec＠m-strasser.de 11 Oct '05

11 Oct '05

Apologies if you receive multiple copies of this message. The following CFP is also available at http://www.etrics.org/etrics-cfp.pdf ============================== Call for Papers ============================= International Conference on Emerging Trends in Information and Communication Security /\ ||__^_ /\ ETRICS 2006 _/\_| \_||______________________________________________________________ June 6-9, 2006, FREIBURG, GERMANY http://www.etrics.org ---------------------------------------------------------------------------- IN COOPERATION WITH: ACM SIGSAC IEEE DFG (German Research Foundation) GI (German Society for Computer Science) ---------------------------------------------------------------------------- CONFERENCE SCOPE: Protecting information and communication systems and services from malicious use is essential for their deployment and acceptance. In addition to applying techniques from traditional security research and security engineering, it is necessary to take into account the vulnerabilities originating from increased mobility at application level and the integration of security requirements into business processes. ETRICS solicits research contributions focusing on emerging trends in security and privacy. Submissions may present foundational research in security and privacy, report experiences from novel applications of security technologies, as well as discuss their changing impact on society and economy. ---------------------------------------------------------------------------- TOPICS of interest include but are not limited to: - Access control and secure audit - Analysis of security protocols - Anonymity services - Cryptographic primitives - Electronic payment systems - Enforcement of security policies - Language-based security - Privacy and identity management - Secure mobile code - Secure operating systems - Security requirements engineering - Security verification - Vulnerability and threat analysis ---------------------------------------------------------------------------- Affiliated WORKSHOPS: - Security and privacy in business services - Security in ubiquitous computing - Usable security - Security engineering ---------------------------------------------------------------------------- PAPER SUBMISSION: Papers submitted to ETRICS will be peer-reviewed and accepted papers will be published in a volume of Springers Lecture Notes in Computer Science. Submissions should clearly state the research contribution, their relevance to the conference theme, as well as their relation to prior research. Authors are invited to submit original, unpublished research papers limited to 15 pages following Springers guidelines. Papers must be submitted electronically in PS or PDF format through the online submission system at http://www.etrics.org/PC/ and be received by January 6, 2006. Authors of accepted papers must sign a copyright statement and guarantee that their paper will be presented at the conference. ---------------------------------------------------------------------------- IMPORTANT DATES: Submission deadline: January 6, 2006 Notification of authors: February 27, 2006 Final Submission due: March 17, 2006 ETRICS takes place: June 6-9, 2006 ---------------------------------------------------------------------------- PROGRAM COMMITTEE: - Günter Müller, U of Freiburg, Germany (Chair) - Gerhard Schneider, U of Freiburg, Germany (Co-Chair) Vijay Atluri, Rutgers University, USA Tuomas Aura, Microsoft Research, Cambridge, UK David Basin, ETHZ, Switzerland Elisa Bertino, Purdue University, USA Joachim Biskup, University of Dortmund, Germany Johannes Blömer, University of Paderborn, Germany Manfred Broy, TU München, Germany Jeremy Bryans, University of Newcastle, UK Johannes Buchmann, TU Darmstadt, Germany Jan Camenisch, IBM Research Lab., Switzerland Clemens Cap, University of Rostock, Germany David Chadwick, University of Kent, UK Richard Clayton, Cambridge University, UK Bruno Crispo, Vrije Universiteit Amsterdam, NL Frederic Cuppens, École Nationale Supérieure des Télécommunications de Bretagne, France Mads Dam, Swedish Institute of Computer Science, Sweden Yves Deswarte, LAAS-CNRS, France Simone Fischer-Hübner, Karlstad University, Sweden Willi Geiselmann, TH Karlsruhe, Germany Dieter Hutter, DFKI, Germany Sushil Jajodia, George Mason University, USA Matthias Jarke, RWTH Aachen, Germany Jan Jürjens, TU München, Germany George Kesidis, Pennsylvania State University, USA Hiroaki Kikuchi, Tokai University, Japan Hartmut König, BTU Cottbus, Germany Kaoru Kurosawa, Ibaraki University, Japan Klaus-Peter Löhr, FU Berlin, Germany Norbert Luttenberger, Christian-Albrechts University, Germany Patrick McDaniel, Pennsylvania State University, USA Chris Mitchell, Royal Holloway University of London, UK Yuko Murayama, Iwate Prefectural University, Japan Andreas Pfitzmann, TU Dresden, Germany Birgit Pfitzmann, IBM Research Lab., Switzerland Reinhard Posch, Graz University of Technology, Austria Jean-Jaques Quisquater, Université Catholique de Louvain, Belgium Kai Rannenberg, Goethe University of Frankfurt, Germany Erwin Rathgeb, University of Duisburg-Essen, Germany Wolfgang Reif, University of Ausgburg, Germany Yves Roudier, Institut Eurécom, France Ryoichi Sasaki, Tokyo Denki University, Japan Andreas Schaad, SAP Research, Germany Christoph Schuba, SUN Microsystems Inc., USA Wolfram Schulte, Microsoft Research, USA Rainer Steinwandt, TH Karlsruhe, Germany Werner Stephan, DFKI, Germany Stuart Stubblebine, Stubblebine Consultings LLC, USA Joachim Swoboda, TU München, Germany Tsuyoshi Takagi, Future University Hakodate, Japan Kazuo Takaragi, Hitachi Ltd., Japan Masato Terada, Hitachi Ltd., Japan Dirk Timmermann, University of Rostock, Germany Anna Vaccarelli, Istituto di informatica e Telematica - Consiglio Nazionale delle Ricerche, Italy Marianne Winslett, University of Illinois at Urbana-Champaign, USA Eric Yu, University of Toronto, Canada Alf Zugenmaier, Docomo Lab, München, Germany ---------------------------------------------------------------------------- ORGANIZING COMMITTEE: Markus Ruch (Organization Chair) Stefan Sackmann (Vice Organization Chair) Rafael Accorsi (Workshops) Lutz Lowis (Web) Oliver Prokein (Finance) Moritz Strasser (Exhibition & Events) Dirk von Suchodoletz (Equipment & Infrastructure) Sven Wohlgemuth (Program) ---------------------------------------------------------------------------- IN COOPERATION WITH: - DaimlerChrysler - Deutsche Bank - Deutsche Telekom - DoCoMo Euro-Labs - Endress + Hauser - Novartis - SAP - Siemens - Sparkasse Freiburg Nördlicher Breisgau ---------------------------------------------------------------------------- CONTACT: Albert-Ludwigs-Universitaet Freiburg, Telematics - http://www.telematik.uni-freiburg.de Friedrichstr. 50 - D-79098 Freiburg, Germany E-mail: info(a)etrics.org Web: http://www.etrics.org ============================================================================

1 0

CfP: IEEE Joint Conferences CEC06 and EEE06
by netsec＠m-strasser.de 27 Sep '05

27 Sep '05

Apologies if you receive multiple copies of this message. The CFP is also available at http://linux.ece.uci.edu/cec06/doc/CEC-EEE-2006-CFP.pdf ********************************************************************* **************************************************** * * * Call For Paper * * * * CEC06 and EEE06 Joint Conferences * * June 26-29, 2006 * * San Francisco, California * * * * Theme: Real-Time Enterprises * * * * http://linux.ece.uci.edu/cec06/ * * * **************************************************** Sponsored by the IEEE Computer Society Technical Committee on Electronic Commerce The 8th IEEE Conference on E-Commerce Technology (CEC' 06) and the 3rd IEEE Conference on Enterprise Computing, E-Commerce and E-Services (EEE' 06) are the flagship annual conferences of the IEEE Computer Society Technical Committee on E-Commerce. The 2006 conference will be a joint event providing a platform for researchers interested in theory and practice of E-Commerce and Enterprise Computing. The conference focuses on new technologies and methods geared towards business process innovation (i.e., optimizing existing or creating new business processes) for the purpose of optimizing business objectives. The joint programs of CEC06 and EEE06 will consist of tutorials, invited talks, paper presentations, and panel discussions. Submissions of high quality papers describing mature results or on-going work are invited. Technical contributions should be accompanied by a thorough evaluation of the results. ********************************************************************* The theme for CEC 06 and EEE 06 will be Real-Time Enterprises. Topics for submission include but are not limited to: Commerce and trading technologies track: - Business services networks and interworkflow technology - EDI, workflow management, semantic web, e-Contracting, IPR/DRM - Marketing and advertising technology - Online shops, recommender systems, analytical CRM, pricing mechanism - Supply chain management and auction technology - E-auctions, combinatorial auctions, expressive bidding events, multi-agent negotiations, inventory management, supply chain and logistics optimization - Payment and privacy - Privacy enhancing technologies, payment protocols, reputation systems, identity management - M-Commerce and p-Commerce - Mobility management, context-dependent services, ubiquitous support Enterprise computing and engineering track: - Business process management and enterprise grid computing - Virtualization and enterprise grid infrastructures, provisioning and management of e-services, performance modeling and QoS analysis - Business intelligence and real-time business performance monitoring - Real-time data analysis (RFID / sensor data, etc.), data mining, risk and revenue management, forecasting, controlling - Collaborative engineering and knowledge management - CSCW, information retrieval, product data management, project management - Security and trust - trust and reputation, web services security - e-applications and services architecture - e-Learning, e-Government, e-Health, middleware, design experiences ** PAPER SUBMISSIONS ** Authors are invited to submit original, unpublished research papers that are not being considered in another forum. Manuscripts will be limited to 8 (IEEE style) pages. Please follow the IEEE Computer Society Press Proceedings Author Guidelines. At least one author is required to attend the conference and present the paper. Electronic submission of manuscripts (in PDF or Word formats) is required. All papers selected for this conference are peer-reviewed and will be published in the regular conference proceedings by the IEEE Computer Society Press. The best papers presented in the conference will be selected for journals such as the Journal on Information Systems and E-Business (ISeB), or the Electronic Commerce Research Journal (ECRJ). ** IMPORTANT DATES ** - December 9, 2005 Submission of conference papers - November 1, 2005 Workshop and tutorial proposals - March 14, 2006 Notification of acceptance - April 14, 2006 Camera-Ready copy of accepted papers due - June 26-29, 2006 Conference and workshop program ** Organizing Committee: ** General Co-Chairs - Umeshwar Dayal, HP Labs - Kwei-Jay Lin, Univ. of California, Irvine Program Chair - Philip Yu, IBM Research Program Vice Chairs "Commerce and trading technologies track": - Andreas Wombacher, Univ. of Twente, Netherlands - Arne Anderson, Uppsala University, Sweden "Enterprise computing and engineering track": - Ming-Syan Chen, National Taiwan Univ., Taiwan - Fabio Casati, HP Labs Tutorial Chair - Martin Bichler, TU Muenchen, Germany Workshop Chair - Kuo-Ming Chao, Coventry Univ., UK Panel Chair TBD Publicity Co-Chairs - William Cheung, Hong Kong Baptist Univ., Hong Kong - Moritz Strasser, Univ. of Freiburg, Germany Publication Chair - Kun-Lung Wu, IBM Research Web Chair - Yue Zhang, Univ. of California, Irvine Industrial Co-Chairs - Ramayya Krishnan, CMU - Christof Bornhoevd, SAP Local Arrangement Chair - Simon Shim, San Jose State Univ. International Liaison - Mike Shaw, Univ. of Illinois at Urbana-Champaign, (AIS SIGeBIZ) Steering Committee - Martin Bichler, TU Muenchen, - William Cheung, Hong Kong Baptist Univ. - Jen-Yao Chung, IBM Research (Chair) - David Cohn, IBM Research Meichun Hsu, HP Labs - Kwei-Jay Lin, Univ. of California, Irvine - Günter Müller, Univ. of Freiburg, - Soe-Tsyr Yuan, National Chengchi Univ., Taiwan *********************************************************************

1 0

Fwd: PERVASIVE 2006: Call for Papers
by Matthias Jaenichen 12 Aug '05

12 Aug '05

>Delivered-To: mj(a)percomp.de >From: Rene Mayrhofer (PERVASIVE 2006 Publicity Co-Chair) ><rene(a)soft.uni-linz.ac.at> >To: <mj(a)percomp.de> >Subject: PERVASIVE 2006: Call for Papers >Date: Mon, 8 Aug 2005 11:18:31 +0200 (CEST) >X-Scanned-By: MIMEDefang 2.44 > >CALL FOR PAPERS PERVASIVE 2006 > >The 4th International Conference on Pervasive Computing > >Dublin, Ireland >May 7--10, 2006 > >http://www.pervasive2006.org/ > >v >The PERVASIVE 2006 Chairs and Organising Committee are pleased to >announce the call for papers for the 4th International >Conference on Pervasive Computing to be held in Dublin Ireland from >the 7th to the 10th of May 2006 in the Burlington Hotel. > >PERVASIVE is an international conference held annually which aims to >present significant research contributions in the area of pervasive >computing technologies, systems and applications. The last three >conferences in this series were held in Munich (May 2005), Linz/Vienna >(April 2004) and Zurich (August 2002). It provides a forum for >researchers, developers, and users throughout the world to present >advances in computing technology toward new modes of operation >(ubiquitous, continuous, and self-organised) and toward new usage >models (ambient, context-aware, and closely integrated into human >activities and environments). In addition to a highly selective >single-track program for technical papers, PERVASIVE 2006 will >include a keynote address, late breaking results, videos, poster >presentations, workshops, demonstrations, an outreach public lecture >and a doctoral colloquium. > >Authors are invited to submit manuscripts of original unpublished >research work in all areas. Relevant topics include (but are not >limited to) the following: > >* Device, communication, and interaction technologies for pervasive > computing >* Pervasive sensing, perception and inference for context technologies >* Software infrastructure, middleware and frameworks for pervasive > computing systems and environments >* Analysis, design, implementation and evaluation of pervasive systems > and applications >* Deployment and management of pervasive systems and services and > emerging industrial scenarios >* Pervasive computing interaction models, user interfaces and > user experience >* Privacy, security and trust in pervasive computing. > >Important Dates: > September 30, 2005 : Paper Submission Deadline > December 16, 2005 : Notification of Acceptance/Rejection > February 10, 2006 : Camera-Ready Paper Deadline > May 7, 2006 : Workshops > May 8 - 9, 2006 : Main Conference > May 10, 2006 : Doctoral Colloquium > >Submissions: >Papers should be a maximum of 15 pages and adhere to the LNCS style as >the main conference proceedings wiull be published in the Springer >Verlag LNCS series. > >Full papers should be submitted via the EDAS system. Once logged in >select the Pervasive 2006 conference to submit your paper. If you do not >already have an account with EDAS you can register at >http://www.edas.info/Conferences.cgi > > >General Chair >Paddy Nixon, University College Dublin, Ireland > >Conference Chair >Aaron Quigley, University College Dublin, Ireland > >Program Committee Co-Chairs >Ken Fishkin, Intel Research, USA >Bernt Schiele, Darmsadt University of Technology, Germany > >Program Committee >Gregory Abowd(Georgia Tech) >Matthew Chalmers (Glasgow) >Michael Beigl (Karlsruhe) >Nigel Davies (Lancaster) >Anind Dey(CMU) >Hans Gellersen (Lancaster) >Ken Hinckley (Microsoft) >Antonio Krueger(Muenster) >John Krumm (Microsoft) >Anthony LaMarca (Intel Research) >Marc Langheinrich (ETH) >Paul Lukowicz (ETH) >Chandra Narayanaswami (IBM) >Brian Noble (Michigan) >Don Patterson (UC Irvine) >Dan Russell (IBM) >Albrecht Schmidt (Munich) >Thomas Strang (DLR, Germany) >Paris Smaragdis (MERL) >Joshua Smith (Intel Research) >Mirjana Spasojevic (Yahoo) >Yoshito Tobe (Dendai) >Khai Troung (Toronto) > >Late-Breaking Results Co-Chairs >Tom Pfeifer, Waterford Institute of Technology, Ireland >Albrecht Schmidt, University of Munich, Germany >Woontack Woo, GIST, S. Korea > >Workshops Co-Chairs >Vinny Cahill, Trinity College Dublin, Ireland >Thomas Strang, German Aerospace Centre, Germany > >Video Co-Chairs >Gavin Doherty, Trinity College Dublin, Ireland >Frederic Vernier, l'UniversitÃ© Paris-Sud, France > >Demonstrations Chair >Kieran Delaney, Cork Institute of Technology, Ireland >Bill Yerazunis, MERL, USA > >Doctoral Colloquium Co-Chairs >Matthew Chalmers, University of Glasgow, UK >Joe Kiniry, University College Dublin, Ireland > >Volunteers Co-Chairs >Lorcan Coyle, University College Dublin, Ireland >Steven Neely, University College Dublin, Ireland > >Publicity Co-Chairs >Simon Dobson, University College Dublin, Ireland >Rene Mayhofer, Johannes Kepler UniversitÃ¤t Linz, Austria > >Local Organising Committee >Vinny Cahill, Trinity College Dublin, Ireland >Simon Dobson, University College Dublin, Ireland >Gareth Jones, Dublin City University, Ireland >Paddy Nixon, University College Dublin, Ireland >Gregory O'Hare, University College Dublin, Ireland >Tom Pfeifer, Waterford Institute of Technology, Ireland >Aaron Quigley, University College Dublin, Ireland > >Full Details: http://www.pervasive2006.org/ Matthias Jänichen

1 0

CfP: International Conference on Emerging Trends in Information and Communication Security 2006
by netsec＠m-strasser.de 11 Jul '05

11 Jul '05

Apologies if you receive multiple copies of this message. The following CFP is also available at http://www.etrics.org/etrics-cfp.pdf ============================== Call for Papers ============================= International Conference on Emerging Trends in Information and Communication Security /\ ||__^_ /\ ETRICS 2006 _/\_| \_||______________________________________________________________ June 6-9, 2006, FREIBURG, GERMANY http://www.etrics.org ---------------------------------------------------------------------------- IN COOPERATION WITH: ACM SIGSAC IEEE DFG (German Research Foundation) GI (German Society for Computer Science) ---------------------------------------------------------------------------- CONFERENCE SCOPE: Protecting information and communication systems and services from malicious use is essential for their deployment and acceptance. In addition to applying techniques from traditional security research and security engineering, it is necessary to take into account the vulnerabilities originating from increased mobility at application level and the integration of security requirements into business processes. ETRICS solicits research contributions focusing on emerging trends in security and privacy. Submissions may present foundational research in security and privacy, report experiences from novel applications of security technologies, as well as discuss their changing impact on society and economy. ---------------------------------------------------------------------------- TOPICS of interest include but are not limited to: - Access control and secure audit - Analysis of security protocols - Anonymity services - Cryptographic primitives - Electronic payment systems - Enforcement of security policies - Language-based security - Privacy and identity management - Secure mobile code - Secure operating systems - Security requirements engineering - Security verification - Vulnerability and threat analysis ---------------------------------------------------------------------------- Affiliated WORKSHOPS: - Security and privacy in business services - Security in ubiquitous computing - Usable security - Security engineering ---------------------------------------------------------------------------- PAPER SUBMISSION: Papers submitted to ETRICS will be peer-reviewed and accepted papers will be published in a volume of Springers Lecture Notes in Computer Science. Submissions should clearly state the research contribution, their relevance to the conference theme, as well as their relation to prior research. Authors are invited to submit original, unpublished research papers limited to 15 pages following Springers guidelines. Papers must be submitted electronically in PS or PDF format through the online submission system at http://www.etrics.org/PC/ and be received by January 6, 2006. Authors of accepted papers must sign a copyright statement and guarantee that their paper will be presented at the conference. ---------------------------------------------------------------------------- IMPORTANT DATES: Submission deadline: January 6, 2006 Notification of authors: February 27, 2006 Final Submission due: March 17, 2006 ETRICS takes place: June 6-9, 2006 ---------------------------------------------------------------------------- PROGRAM COMMITTEE: - Günter Müller, U of Freiburg, Germany (Chair) - Gerhard Schneider, U of Freiburg, Germany (Co-Chair) Tuomas Aura, Microsoft Research, Cambridge, UK David Basin, ETHZ, Switzerland Elisa Bertino, Purdue U, USA Joachim Biskup, U of Dortmund, Germany Johannes Blömer, U of Paderborn, Germany Johannes Buchmann, TU Darmstadt, Germany Jan Camenisch, IBM Research Lab., Switzerland Clemens Cap, U of Rostock, Germany David Chadwick, U of Kent, UK Richard Clayton, Cambridge U, UK Simone Fischer-Hübner, Karlstad U, Sweden Willi Geiselmann, TH Karlsruhe, Germany Robert Harper, Carnegie Mellon U, USA Dieter Hutter, DFKI, Germany Sushil Jajodia, George Mason U, USA Matthias Jarke, RWTH Aachen, Germany Hiroaki Kikuchi, Tokai U, Japan Hartmut König, BTU Cottbus, Germany Carl Landwehr, U of Maryland, USA* Klaus-Peter Löhr, FU Berlin, Germany Tsutomu Matsumoto, Yokohama National U, Japan Yuko Murayama, Iwate Prefectural University George Necula, U of California Berkeley, USA Andreas Pfitzmann, TU Dresden, Germany Birgit Pfitzmann, IBM Research Lab., Switzerland Reinhard Posch, Graz U of Technology, Austria* Kai Rannenberg, Goethe U of Frankfurt, Germany Erwin Rathgeb, U of Duisburg-Essen, Germany Wolfgang Reif, U of Ausgburg, Germany Ryoichi Sasaki, Tokyo Denki U, Japan Wolfram Schulte, Microsoft Research, USA* Rainer Steinwandt, TH Karlsruhe, Germany Kazuo Takaragi, Hitachi Ltd., Japan Masato Terada, Hitachi Ltd., Japan Dirk Timmermann, U of Rostock, Germany Giovanno Vigna, U of California, USA Marianne Winslett, U of Illinois, USA * confirmation pending ---------------------------------------------------------------------------- ORGANIZING COMMITTEE: Stefan Sackmann (Organisation Chair) Rafael Accorsi (Workshops) Lutz Lowis (Web) Oliver Prokein (Finance) Markus Ruch (Contact & Operation) Moritz Strasser (Exhibition & Events) Dirk von Suchodoletz (Equipment & Infrastructure) Sven Wohlgemuth (Program) ---------------------------------------------------------------------------- IN COOPERATION WITH: - DaimlerChrysler - Deutsche Bank - Endress + Hauser - IBM* - Novartis - SAP - Siemens - Sparkasse Freiburg Nördlicher Breisgau ---------------------------------------------------------------------------- CONTACT: University of Freiburg, Telematics - http://www.telematik.uni-freiburg.de Friedrichstr. 50 - D-79098 Freiburg, Germany E-mail: info(a)etrics.org Web: http://www.etrics.org ============================================================================

1 0

Call for Participation Workshop SKVU 22.Sep.2005 Bonn
by Ulrich Flegel 22 Jun '05

22 Jun '05

Liebe Kollegen, anbei zu Ihrer Information die Ankündigung des SIDAR-Workshops SKVU: "Sicherheit in komplexen, vernetzten Umgebungen (SKVU2005)" statt. Mit den besten Grüßen, Ihr Ulrich Flegel [Für eventuelle Mehrfachzusendung dieser Nachricht bitten wir um Entschuldigung!] Ankündigung (Call for Participation): Am 22. September 2005 findet im Rahmen der GI-Jahrestagung in Bonn (Hauptgebäude der Universität) der Workshop "Sicherheit in komplexen, vernetzten Umgebungen (SKVU2005)" statt. Details zum Workshop inklusive Vortragsprogramm finden Sie unter http://www.gi-fg-sidar.de/skvu2005/ Informationen zur GI-Jahrestagung erhalten Sie unter der Adresse http://www.informatik2005.de/ Mit freundlichen Grüßen, Jens Tölle für die SKVU-Organisation. -- Ulrich Flegel | Voice: +49 231 755-4775 (secretary: -2641) Computer Science Dpt. | Fax : +49 231 755-2405 Chair VI, ISSI | Email: ulrich.flegel(a)udo.edu University of Dortmund | WWW: http://ls6-www.cs.uni-dortmund.de/~flegel/ D-44221 Dortmund | office: Universität Dortmund, Campus Süd, GB V/R431 Germany | August-Schmidt-Strasse 12, D-44227 Dortmund

1 0

Reminder: AG VoIP - Konstituierende Sitzung
by Matthias Jaenichen 13 Jun '05

13 Jun '05

Reminder und Ergänzung ---------------------- Sehr geehrte Kollegen und Kolleginnen, inzwischen kann ich Ihnen eine grobe Agenda geben: 09:30 Begrüßung und Einführung 10:00 Vorträge von Mitarbeitern der Universitäten Hamburg, Aachen - und Saarbrücken zum Stand der Forschungen, Vortrag über Sicher- 12:30 heitsprobleme bei TK-Anlagen Mittagessen 14:00 Bericht aus Sicht eines Carriers; weiteres Vorgehen; - Sicherheit 2006; Diskussion 16:xx Zur endgültigen Raumplanung ist Ihre Anmeldung bis MORGEN, Dienstag den 14.6.2005 zwingend erforderlich. Der genaue Veranstaltungsort in Hamburg, sowie Anreise Informationen, ggfs. eine Möglichkeit für Übernachtungen erhalten Sie mit der Bestätigung Ihrer Anmeldung am Mittwoch dieser Woche. Alle bisherigen Anmeldungen haben eine Mail zur Bestätigung erhalten, sollte diese nicht vorliegen schreiben oder rufen Sie mich bitte an. Mit freundlichen Grüßen Matthias Jänichen >Sehr geehrte Kollegen und Kolleginnen, > >am 20.06.2005, (10:00- 16:00) wollen wir in Hamburg ein konstituierendes >Treffen der GI-Arbeitsgruppe "VoIP" durchführen. Der genaue Tagungsort >hängt von der Anzahl der Teilnehmer ab. > >Thema: >Durch die zunehmende Vernetzung und die Verschmelzung von IT und Telfonie >werden eine Reihe neuer Fragen rund um die ITK-Sicherheit aufgeworfen. Es >gibt schon jetzt einige Arbeitsgruppen (auch in anderen Organisationen) >die sich mit der "Sicherheit VON VoIP" befassen, der Aspekt "Gefährdung >der IT-Sicherheit DURCH VoIP" wird dabei jedoch nicht erörtert. > >Agenda: >Wir haben Vorträge in Planung zu folgenden Themen: > >- VoIP-Protokolle im Vergleich >- Sicherheit von TK-Anlagen >- Demo des Gefährdungspotentials am Beispiel >- ... ( weitere Ideen willkommen) > >Wir wollen diskutieren über >- Anwendbarkeit bestehender ITS-Kriterien >- weiteres Vorgehen >- Session auf der Sicherheit 2006 in Magdeburg > >Anmeldung: >Bitte melden Sie sich umgehend verbindlich bei mir an ( mj-VoIP(a)percomp.de >) , wenn Sie an diesem Treffen teilnehmen möchten, damit wir die Planungen >schnellstmöglich abschließen können. Telefonische Rückfragen bitte unter >Tel: 0177/2423511. > >Kosten: >Von den Teilnehmern wird eine Catering-Umlage in Höhe von ca. 15 Euro erhoben. > >Anbei die Gedanken und Fragestellungen von Manfred Reitenspieß (Sprecher >des Fachbereichs Sicherheit): > >>Hintergrund >>----------- >>VoIP Komponenten werden heute auf Basis von Standard IT implementiert >>unter Benutzung von off-the-shelf Hardware und Software. Damit >>unterliegen diese Systeme einem ähnlichen Gefährdungspotential wie >>kritische Systeme im Rechenzentrum (z.B. SAP Systeme, Abrechnungssysteme, >>Produktionssteuerungen etc). >> >>VoIP Einsatz >>------------ >>Das Einsatzgebiet von VoIP-Systemen deckt bereits heute eine grosse >>Bandbreite ab und reicht von kleinen residential Anwendungen zuhause über >>die Anbindung von kleinen bis mittleren grossen Firmen an das öffentliche >>Telefonnetz (und die Kommunikation zwischen verschiedenen Standorten >>einer Firma über das meist vorhandene IP-Netz - öffentlich oder privat) >>bis zum Einsatz bei öffentlichen Netzbetreibern. Als Beispiel sei hier >>der aktuelle AOL-Auftritt erwähnt, wo AOL als Telefonnetzbetreiber >>auftritt unter Nutzung der VoIP-Technik. >> >>Das bedeutet auch, dass die Verfügbarkeit von Telefonieleistungen nicht >>mehr automatisch dadurch gewährleistet ist, dass diese auf separater >>Netz- und Rechnerhardware laufen. Im Gegenteil, Telefonie kann mehr und >>mehr zu einem von vielen Services auf dem installierten Rechnerpark >>werden. Allerdings sieht es im Augenblick eher danach aus, als ob gerade >>im öffentlichen Netzbereich, aber auch bei grossen Firmen, dedizierte >>Systeme dafür eingesetzt werden (schon aus Gründen der Performance). >> >>Durch die veränderte "konvergente" Implementierungsstruktur ist die >>Verfügbarkeit auch böswilligen Angriffen ausgesetzt. >> >>Es ist besonders zu bemerken, dass die Akzeptanz dieser Dienstleistungen >>wegen der damit verbundenen Preissenkungen sehr hoch sein wird (siehe >>z.B. Nutzung von Skype). >> >>Fragestellungen >>--------------- >>Aus den beschriebenen Szenarien ergeben sich einige neue Fragestellungen, >>die in bisherigen Implementierungen eher im Hintergrund geblieben sind. >> >>a: Die Anwendungen unterliegen damit auch den Regularien der >>Telekommunikationsgesetze, sobald damit öffentliche Netzdienstleistungen >>angeboten werden (siehe Beispiel AOL). >> >>b: Inwieweit können Sicherheitszertifizierungen die Sicherheit des >>VoIP-Anwendungen verbessern oder kontrollieren - vermutlich muss man hier >>die oben genannten Einsatz- und Implementierungsszenarien unterscheiden. >> >>c: Welche (neuen) Risiken ergeben sich aus den geänderten Einsatz- und >>Implementierungsszenarien? Und wie ist diesen Risiken zu begegnen? >> >>d: Gibt es einige einfache Massnahmen, z.B. auf Protokollebene oder durch >>Separierung der IT-Ressourcen, die eine einfache Trennung des >>Sprachverkehrs von anderen Verkehren erlauben? >> >>Dr. Manfred Reitenspiess >>Speaker GI Computer Society Security and Safety Division MfG Matthias Jänichen Sprecher der Fachgruppe "NETSEC - Sicherheit in festen und mobilen Netzten" Matthias Jänichen

2 1

DIMVA 2005 - IT-Security Conference in Vienna, 7-8 July
by Marc Heuse 02 Jun '05

02 Jun '05

====================================================================== C A L L F O R P A R T I C I P A T I O N ====================================================================== ########## Early Bird Rates available until June 1, 2005 ######### ====================================================================== Detection of Intrusions and Malware & Vulnerability Assessment DIMVA 2005 July 7-8 2005 Technical University Vienna, Austria Conference of SIG SIDAR of the German Informatics Society (GI) in cooperation with IEEE Task Force on Information Assurance and IEEE Computer Society Technical Committee on Security and Privacy http://www.dimva.org/dimva2005/ mailto:dimva2005{at}gi-fg-sidar.de ====================================================================== The special interest group SIDAR (Security - Intrusion Detection and Response) of the German Informatics Society (GI) engages in the detection and management of information security incidents. In cooperation with the IEEE Task Force on Information Assurance and the IEEE Computer Society Technical Committee on Security and Privacy, the special interest group SIDAR organizes a conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA 2005), taking place 7/8-07-2005 in Vienna, Austria. The conference brings together leading researchers and practitioners from academia, government, and industry to discuss the topics intrusion detection, malicious agents (malware) and vulnerability assessment. The presentations aim particularly at results from research, development and integration, relevant applications, new technologies and resulting product developments on a conceptual level. This year's program features a single technical track with 14 papers and 3 practical industry reports (from a total of 51 submissions). It also features Philip Attfield from the Northwest Security Institute as the invited speaker. Registration and Travel ======================= The DIMVA 2005 conference will be held in room "Hoersaal 6" of the "Freihaus" building of the Technical University Vienna (Wiedner Hauptstrasse 8-10, A-1040 Vienna, Austria). The registration is now open. Please check the DIMVA web site for information on the rates, registration, travel and accommodation: http://www.dimva.org/dimva2005/ Conference Program ================== Thursday, July 7th ------------------ 08.30 - 09.45 Registration 09.45 - 10.00 Welcome 10.00 - 11.00 Keynote Philip Attfield (Northwest Security Institute) 11.00 - 11.30 Coffee Break 11.30 - 12.30 Session 1: Obfuscated Code Detection Analyzing Memory Accesses in Obfuscated x86 Executables / Michael Venable, Mohamed Chouchane, Md Enamul Karim, and Arun Lakhotia (University of Louisiana at Lafayette, USA) Hybrid Engine for Polymorphic Shellcode Detection / Udo Payer, Peter Teufl, and Mario Lamberger (Institute of Applied Information Processing and Communications, Austria) 12.30 - 14.00 Lunch Break 14.00 - 15.00 Session 2: Honeypots Experiences Using Minos as a Tool for Capturing and Analyzing Novel Worms for Unknown Vulnerabilities / Jedidiah R. Crandall, S. Felix Wu, and Frederic T. Chong (UC Davis, USA) A Pointillist Approach for Comparing Honeypots / Fabien Pouget (Institut Eurecom, France) and Thorsten Holz (RWTH Aachen University, Germany) 15.00 - 15.30 Coffee Break 15.30 - 17.00 Session 3: Vulnerability Assessment and Exploit Analysis Automatic Detection of Attacks on Cryptographic Protocols: A Case Study / Ivan Cibrario B., Luca Durante, Riccardo Sisto, and Adriano Valenzano (Politecnico di Torino, Italy) METAL - A Tool for Extracting Attack Manifestations / Ulf Larson, Emilie Lundin-Barse, and Erland Jonsson (Chalmers University of Technology, Sweden) Flow-Level Traffic Analysis of the Blaster and Sobig Worm Outbreaks in an Internet Backbone / Thomas Dübendorfer, Theus Hossmann, Arno Wagner, and Bernhard Plattner (ETH Zurich, Switzerland) 17.00 - 18.30 Meeting of GI - Special Interest Group SIDAR 19.00 - 24.00 Reception at Festsaal of Vienna Town Hall (Rathaus) Friday, July 8th ---------------- 09.30 - 11.00 Session 4: Anomaly Detection A Learning-Based Approach to the Detection of SQL Attacks / Fredrik Valeur, Darren Mutz, and Giovanni Vigna (UC Santa Barbara, USA) Masquerade Detection via Customized Grammars / Mario Latendresse (Volt Services/Northrop Grumman, FNMOC U.S. Navy, USA) A Prevention Model for Algorithmic Complexity Attacks / Suraiya Khan and Issa Traore (University of Victoria, Canada) 11.00 - 11.30 Coffee Break 11.30 - 12.30 Session 5: Misuse Detection Detecting Malicious Code by Model Checking / Johannes Kinder, Stefan Katzenbeisser, Christian Schallhart, and Helmut Veith (Technical University Munich, Germany) Improving the Efficiency of Misuse Detection / Michael Meier, Sebastian Schmerl, and Hartmut Koenig (Technical University of Cottbus, Germany) 12.30 - 14.00 Lunch Break 14.00 - 15.00 Session 6: Distributed Intrusion Detection and Testing Enhancing the Accuracy of Network-based Intrusion Detection with Host-based Context / Holger Dreger (Technical University Munich, Germany), Christian Kreibich (University of Cambridge, UK), Vern Paxson (ICSI and LBNL, USA), and Robin Sommer (Technical University Munich, Germany) TCPtransform: Property-Oriented TCP Traffic Transformation / Seung-Sun Hong, Fiona Wong, S. Felix Wu (UC Davis, USA), Bjorn Lilja, Tony Y. Jansson, Henric Johnson, and Arne Nelsson (Blekinge Institute of Technology, Sweden) 15.00 - 15.30 Lunch Break 15.30 - 17.00 Session 7: Industry Session Implementation of Honeytoken Module in DBMS Oracle 9iR2 Enterprise Edition for Internal Malicious Activity Detection / Antanas Cenys, Darius Rainys, Lukas Radvilavicius (Informtion Systems Laboratory, Lithuania), and Nikolaj Goranin (Vilnius Gediminas Technical University, Lithuania) Function Call Tracing Attacks To Kerberos 5 / Julian Rrushi and Emilia Rosti (Universita degli Studi di Milano, Italy) Combining IDS and Honeynet Methods for Improved Detection and Automatic Isolation of Compromised Systems / Stephan Riebach, Birger Toedtmann, and Erwin Rathgeb (University Duisburg-Essen, Germany) 17.00 - 17.15 Closing Remarks Program Committee ================= Dominique Alessandri (IBM, Switzerland) Thomas Biege (SUSE LINUX AG, Germany) Roland Bueschkes (T-Mobile, Germany) Marc Dacier (Institut Eurecom, France) Herve Debar (France Telecom R&D, France) Luca Deri (ntop.org, Italy) Sven Dietrich (CMU, USA) Toralv Dirro (McAfee, Germany) Ulrich Flegel (University of Dortmund, Germany) Steven Furnell (University of Plymouth, UK) Detlef Guenther (CERT-VW, Germany) Dirk Haeger (BSI, Germany) Bernhard Haemmerli (HTA Luzern, Switzerland) Oliver Heinz (arago AG, Germany) Peter Herrmann (University of Dortmund, Germany) Marc Heuse (n.runs, Germany) Erland Jonsson (Chalmers University of Technology, Sweden) Engin Kirda (Vienna University of Technology, Austria) Hartmut Koenig (Technical University of Cottbus, Germany) Klaus-Peter Kossakowski (Presecure, Germany) Hannes Lubich (Computer Associates, Switzerland) Michael Meier (Technical University of Cottbus, Germany) Martin Naedele (ABB Corporate Research, Switzerland) Marc Rennhard (ETH Zurich, Switzerland) Dirk Schadt (Computer Associates, Germany) Robin Sommer (Technical University Munich, Germany) Axel Tanner (IBM Research, Switzerland) Stephen Wolthusen (Fraunhofer-IGD, Germany) Steering Committee ================== Ulrich Flegel, University of Dortmund, Germany Michael Meier, Technical University of Cottbus, Germany Roland Bueschkes, T-Mobile, Germany Marc Heuse, n.runs, Germany Organization ============ Christiane Tronigger (Registration Office) NetHotels Reisebuero Betrieb-GmbH Neulinggasse 31, A-1080 Vienna, Austria Tel.: (+43-1)710 19 19, Fax.: (+43-1)710 19 20 Email: dimva2005{at}gi-fg-sidar.de (General Questions) office{at}nethotels.com (Registration, Hotel) Christopher Kruegel (Conference Chair) Technical University Vienna, Institut for Automation Treitlstrasse 3/4. Stock, A-1040 Vienna, Austria Tel.: (+43-1)58 801-183 25, Fax.: (+43-1)58 801-183 91 Email: chris{at}auto.tuwien.ac.at Klaus Julisch (Program Committee Chair) IBM Research GmbH, Saeumerstrasse 4, CH-8803 Rueschlikon, Switzerland Tel.: (+41-44)724 8608, Fax.: (+41-44)724 8953 Email: kju{at}zurich.ibm.com

1 0

AG VoIP - Konstituierende Sitzung
by Matthias Jaenichen 24 May '05

24 May '05

Sehr geehrte Kollegen und Kolleginnen, am 20.06.2005, (10:00- 16:00) wollen wir in Hamburg ein konstituierendes Treffen der GI-Arbeitsgruppe "VoIP" durchführen. Der genaue Tagungsort hängt von der Anzahl der Teilnehmer ab. Thema: Durch die zunehmende Vernetzung und die Verschmelzung von IT und Telfonie werden eine Reihe neuer Fragen rund um die ITK-Sicherheit aufgeworfen. Es gibt schon jetzt einige Arbeitsgruppen (auch in anderen Organisationen) die sich mit der "Sicherheit VON VoIP" befassen, der Aspekt "Gefährdung der IT-Sicherheit DURCH VoIP" wird dabei jedoch nicht erörtert. Agenda: Wir haben Vorträge in Planung zu folgenden Themen: - VoIP-Protokolle im Vergleich - Sicherheit von TK-Anlagen - Demo des Gefährdungspotentials am Beispiel - ... ( weitere Ideen willkommen) Wir wollen diskutieren über - Anwendbarkeit bestehender ITS-Kriterien - weiteres Vorgehen - Session auf der Sicherheit 2006 in Magdeburg Anmeldung: Bitte melden Sie sich umgehend verbindlich bei mir an ( mj-VoIP(a)percomp.de ) , wenn Sie an diesem Treffen teilnehmen möchten, damit wir die Planungen schnellstmöglich abschließen können. Telefonische Rückfragen bitte unter Tel: 0177/2423511. Kosten: Von den Teilnehmern wird eine Catering-Umlage in Höhe von ca. 15 Euro erhoben. Anbei die Gedanken und Fragestellungen von Manfred Reitenspieß (Sprecher des Fachbereichs Sicherheit): >Hintergrund >----------- >VoIP Komponenten werden heute auf Basis von Standard IT implementiert >unter Benutzung von off-the-shelf Hardware und Software. Damit unterliegen >diese Systeme einem ähnlichen Gefährdungspotential wie kritische Systeme >im Rechenzentrum (z.B. SAP Systeme, Abrechnungssysteme, >Produktionssteuerungen etc). > >VoIP Einsatz >------------ >Das Einsatzgebiet von VoIP-Systemen deckt bereits heute eine grosse >Bandbreite ab und reicht von kleinen residential Anwendungen zuhause über >die Anbindung von kleinen bis mittleren grossen Firmen an das öffentliche >Telefonnetz (und die Kommunikation zwischen verschiedenen Standorten einer >Firma über das meist vorhandene IP-Netz - öffentlich oder privat) bis zum >Einsatz bei öffentlichen Netzbetreibern. Als Beispiel sei hier der >aktuelle AOL-Auftritt erwähnt, wo AOL als Telefonnetzbetreiber auftritt >unter Nutzung der VoIP-Technik. > >Das bedeutet auch, dass die Verfügbarkeit von Telefonieleistungen nicht >mehr automatisch dadurch gewährleistet ist, dass diese auf separater Netz- >und Rechnerhardware laufen. Im Gegenteil, Telefonie kann mehr und mehr zu >einem von vielen Services auf dem installierten Rechnerpark werden. >Allerdings sieht es im Augenblick eher danach aus, als ob gerade im >öffentlichen Netzbereich, aber auch bei grossen Firmen, dedizierte Systeme >dafür eingesetzt werden (schon aus Gründen der Performance). > >Durch die veränderte "konvergente" Implementierungsstruktur ist die >Verfügbarkeit auch böswilligen Angriffen ausgesetzt. > >Es ist besonders zu bemerken, dass die Akzeptanz dieser Dienstleistungen >wegen der damit verbundenen Preissenkungen sehr hoch sein wird (siehe z.B. >Nutzung von Skype). > >Fragestellungen >--------------- >Aus den beschriebenen Szenarien ergeben sich einige neue Fragestellungen, >die in bisherigen Implementierungen eher im Hintergrund geblieben sind. > >a: Die Anwendungen unterliegen damit auch den Regularien der >Telekommunikationsgesetze, sobald damit öffentliche Netzdienstleistungen >angeboten werden (siehe Beispiel AOL). > >b: Inwieweit können Sicherheitszertifizierungen die Sicherheit des >VoIP-Anwendungen verbessern oder kontrollieren - vermutlich muss man hier >die oben genannten Einsatz- und Implementierungsszenarien unterscheiden. > >c: Welche (neuen) Risiken ergeben sich aus den geänderten Einsatz- und >Implementierungsszenarien? Und wie ist diesen Risiken zu begegnen? > >d: Gibt es einige einfache Massnahmen, z.B. auf Protokollebene oder durch >Separierung der IT-Ressourcen, die eine einfache Trennung des >Sprachverkehrs von anderen Verkehren erlauben? > >Dr. Manfred Reitenspiess >Speaker GI Computer Society Security and Safety Division MfG Matthias Jänichen Sprecher der Fachgruppe "NETSEC - Sicherheit in festen und mobilen Netzten" Matthias Jänichen

1 0

DIMVA 2005 - Call for Participation - IT-Security Conference in Vienna, 7-8 July
by Marc Heuse 09 May '05

09 May '05

====================================================================== C A L L F O R P A R T I C I P A T I O N ====================================================================== ########## Early Bird Rates available until June 1, 2005 ######### ====================================================================== Detection of Intrusions and Malware & Vulnerability Assessment DIMVA 2005 July 7-8 2005 Technical University Vienna, Austria Conference of SIG SIDAR of the German Informatics Society (GI) in cooperation with IEEE Task Force on Information Assurance and IEEE Computer Society Technical Committee on Security and Privacy http://www.dimva.org/dimva2005/ mailto:dimva2005{at}gi-fg-sidar.de ====================================================================== The special interest group SIDAR (Security - Intrusion Detection and Response) of the German Informatics Society (GI) engages in the detection and management of information security incidents. In cooperation with the IEEE Task Force on Information Assurance and the IEEE Computer Society Technical Committee on Security and Privacy, the special interest group SIDAR organizes a conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA 2005), taking place 7/8-07-2005 in Vienna, Austria. The conference brings together leading researchers and practitioners from academia, government, and industry to discuss the topics intrusion detection, malicious agents (malware) and vulnerability assessment. The presentations aim particularly at results from research, development and integration, relevant applications, new technologies and resulting product developments on a conceptual level. This year's program features a single technical track with 14 papers and 3 practical industry reports (from a total of 51 submissions). It also features Philip Attfield from the Northwest Security Institute as the invited speaker. Registration and Travel ======================= The DIMVA 2005 conference will be held in room "Hoersaal 6" of the "Freihaus" building of the Technical University Vienna (Wiedner Hauptstrasse 8-10, A-1040 Vienna, Austria). The registration is now open. Please check the DIMVA web site for information on the rates, registration, travel and accommodation: http://www.dimva.org/dimva2005/ Conference Program ================== Thursday, July 7th ------------------ 08.30 - 09.45 Registration 09.45 - 10.00 Welcome 10.00 - 11.00 Keynote Philip Attfield (Northwest Security Institute) 11.00 - 11.30 Coffee Break 11.30 - 12.30 Session 1: Obfuscated Code Detection Analyzing Memory Accesses in Obfuscated x86 Executables / Michael Venable, Mohamed Chouchane, Md Enamul Karim, and Arun Lakhotia (University of Louisiana at Lafayette, USA) Hybrid Engine for Polymorphic Shellcode Detection / Udo Payer, Peter Teufl, and Mario Lamberger (Institute of Applied Information Processing and Communications, Austria) 12.30 - 14.00 Lunch Break 14.00 - 15.00 Session 2: Honeypots Experiences Using Minos as a Tool for Capturing and Analyzing Novel Worms for Unknown Vulnerabilities / Jedidiah R. Crandall, S. Felix Wu, and Frederic T. Chong (UC Davis, USA) A Pointillist Approach for Comparing Honeypots / Fabien Pouget (Institut Eurecom, France) and Thorsten Holz (RWTH Aachen University, Germany) 15.00 - 15.30 Coffee Break 15.30 - 17.00 Session 3: Vulnerability Assessment and Exploit Analysis Automatic Detection of Attacks on Cryptographic Protocols: A Case Study / Ivan Cibrario B., Luca Durante, Riccardo Sisto, and Adriano Valenzano (Politecnico di Torino, Italy) METAL - A Tool for Extracting Attack Manifestations / Ulf Larson, Emilie Lundin-Barse, and Erland Jonsson (Chalmers University of Technology, Sweden) Flow-Level Traffic Analysis of the Blaster and Sobig Worm Outbreaks in an Internet Backbone / Thomas Dübendorfer, Theus Hossmann, Arno Wagner, and Bernhard Plattner (ETH Zurich, Switzerland) 17.00 - 18.30 Meeting of GI - Special Interest Group SIDAR 19.00 - 24.00 Reception at Festsaal of Vienna Town Hall (Rathaus) Friday, July 8th ---------------- 09.30 - 11.00 Session 4: Anomaly Detection A Learning-Based Approach to the Detection of SQL Attacks / Fredrik Valeur, Darren Mutz, and Giovanni Vigna (UC Santa Barbara, USA) Masquerade Detection via Customized Grammars / Mario Latendresse (Volt Services/Northrop Grumman, FNMOC U.S. Navy, USA) A Prevention Model for Algorithmic Complexity Attacks / Suraiya Khan and Issa Traore (University of Victoria, Canada) 11.00 - 11.30 Coffee Break 11.30 - 12.30 Session 5: Misuse Detection Detecting Malicious Code by Model Checking / Johannes Kinder, Stefan Katzenbeisser, Christian Schallhart, and Helmut Veith (Technical University Munich, Germany) Improving the Efficiency of Misuse Detection / Michael Meier, Sebastian Schmerl, and Hartmut Koenig (Technical University of Cottbus, Germany) 12.30 - 14.00 Lunch Break 14.00 - 15.00 Session 6: Distributed Intrusion Detection and Testing Enhancing the Accuracy of Network-based Intrusion Detection with Host-based Context / Holger Dreger (Technical University Munich, Germany), Christian Kreibich (University of Cambridge, UK), Vern Paxson (ICSI and LBNL, USA), and Robin Sommer (Technical University Munich, Germany) TCPtransform: Property-Oriented TCP Traffic Transformation / Seung-Sun Hong, Fiona Wong, S. Felix Wu (UC Davis, USA), Bjorn Lilja, Tony Y. Jansson, Henric Johnson, and Arne Nelsson (Blekinge Institute of Technology, Sweden) 15.00 - 15.30 Lunch Break 15.30 - 17.00 Session 7: Industry Session Implementation of Honeytoken Module in DBMS Oracle 9iR2 Enterprise Edition for Internal Malicious Activity Detection / Antanas Cenys, Darius Rainys, Lukas Radvilavicius (Informtion Systems Laboratory, Lithuania), and Nikolaj Goranin (Vilnius Gediminas Technical University, Lithuania) Function Call Tracing Attacks To Kerberos 5 / Julian Rrushi and Emilia Rosti (Universita degli Studi di Milano, Italy) Combining IDS and Honeynet Methods for Improved Detection and Automatic Isolation of Compromised Systems / Stephan Riebach, Birger Toedtmann, and Erwin Rathgeb (University Duisburg-Essen, Germany) 17.00 - 17.15 Closing Remarks Program Committee ================= Dominique Alessandri (IBM, Switzerland) Thomas Biege (SUSE LINUX AG, Germany) Roland Bueschkes (T-Mobile, Germany) Marc Dacier (Institut Eurecom, France) Herve Debar (France Telecom R&D, France) Luca Deri (ntop.org, Italy) Sven Dietrich (CMU, USA) Toralv Dirro (McAfee, Germany) Ulrich Flegel (University of Dortmund, Germany) Steven Furnell (University of Plymouth, UK) Detlef Guenther (CERT-VW, Germany) Dirk Haeger (BSI, Germany) Bernhard Haemmerli (HTA Luzern, Switzerland) Oliver Heinz (arago AG, Germany) Peter Herrmann (University of Dortmund, Germany) Marc Heuse (n.runs, Germany) Erland Jonsson (Chalmers University of Technology, Sweden) Engin Kirda (Vienna University of Technology, Austria) Hartmut Koenig (Technical University of Cottbus, Germany) Klaus-Peter Kossakowski (Presecure, Germany) Hannes Lubich (Computer Associates, Switzerland) Michael Meier (Technical University of Cottbus, Germany) Martin Naedele (ABB Corporate Research, Switzerland) Marc Rennhard (ETH Zurich, Switzerland) Dirk Schadt (Computer Associates, Germany) Robin Sommer (Technical University Munich, Germany) Axel Tanner (IBM Research, Switzerland) Stephen Wolthusen (Fraunhofer-IGD, Germany) Steering Committee ================== Ulrich Flegel, University of Dortmund, Germany Michael Meier, Technical University of Cottbus, Germany Roland Bueschkes, T-Mobile, Germany Marc Heuse, n.runs, Germany Organization ============ Christiane Tronigger (Registration Office) NetHotels Reisebuero Betrieb-GmbH Neulinggasse 31, A-1080 Vienna, Austria Tel.: (+43-1)710 19 19, Fax.: (+43-1)710 19 20 Email: dimva2005{at}gi-fg-sidar.de (General Questions) office{at}nethotels.com (Registration, Hotel) Christopher Kruegel (Conference Chair) Technical University Vienna, Institut for Automation Treitlstrasse 3/4. Stock, A-1040 Vienna, Austria Tel.: (+43-1)58 801-183 25, Fax.: (+43-1)58 801-183 91 Email: chris{at}auto.tuwien.ac.at Klaus Julisch (Program Committee Chair) IBM Research GmbH, Saeumerstrasse 4, CH-8803 Rueschlikon, Switzerland Tel.: (+41-44)724 8608, Fax.: (+41-44)724 8953 Email: kju{at}zurich.ibm.com

1 0