Calls for Papers

(see the Cipher Calendar for events sorted in date order)

Last Modified: 05/12/03  

Contents:

• Conference and workshop call for papers
• Special issues of journals and handbooks
• Upcoming conferences (submission date has passed)
• Archival journals regularly specializing in security and privacy
• Past conferences and journal special issues

Upcoming Conferences and Workshops
(the submission date has passed)

       

May 2003

The 2003 IEEE Symposium on Security and Privacy, Oakland, California, USA, May 11-14, 2003.  [posted here 9/17/02] Since 1980, the IEEE Symposium on Security and Privacy has been the premier forum for the presentation of developments in computer security and electronic privacy, and for bringing together researchers and practitioners in the field. Previously unpublished papers offering novel research contributions in any aspect of computer security or electronic privacy are solicited for submission to the 2003 symposium. Papers may represent advances in the theory, design, implementation, analysis, or empirical evaluation of secure systems, either for general use or for specific application domains. Topics of interest include, but are not limited to, the following:    - Commercial and Industrial Security Electronic Privacy    - Mobile Code and Agent Security Distributed Systems Security    - Network Security Anonymity    - Data Integrity Access Control and Audit    - Information Flow Security Verification    - Viruses and Other Malicious Code Security Protocols    - Authentication Biometrics    - Smartcards Peer-to-Peer Security    - Intrusion Detection Database Security    - Language-Based Security Denial of Service    - Security of Mobile Ad-Hoc Networks The full call for papers can be found at www.research.att.com/~smb/oakland03-cfp.html. For any questions, please contact the program chairs, at oakland-chairs03@research.att.com.

 

IRMA 2003  Information Resources Management Association International Conference, Philadelphia, PA, USA, May 18-21, 2003  [posted here 7/29/02] The theme of the conference is: Information Technology and Organizations: Trends, Issues, Challenges and Solutions.  The conference is made up of 45 tracks and includes an Information Security Management track.  Papers may be full length or research-in-progress.  Panel, workshop, tutorial, and symposium proposals are also welcomed.  Further details on the conference and individual tracks are available at www.irma-international.org.

 

WWW2003  The Twelfth International World Wide Web Conference, Security & Privacy Track, Budapest, Hungary, May 20-24, 2003   [posted here 7/17/02] The Security and Privacy Track at WWW2003 is soliciting papers on all computer scientific aspects of security and privacy as they relate to the Web in general, or more specifically to Web standards. ("Security and Privacy" is a new track to the International WWW Conference this year; last year this topic area was combined with "E-Commerce" into a single track.) We invite papers describing both theoretical and experimental research including (but not limited to) the following topics:   -  Active content security  -  Anonymity, pseudonymity & identity management  -  Data center security  -  Digital rights management  -  Digital signatures  -  Intrusion detection for e-commerce  -  Mobile code security  -  Public key infrastructure  -  Security in content distribution networks  -  Trust management  -  User interfaces for security and privacy  -  Web server and caching denial of service protection  -  Web services security  -  XML security and privacy More information may be found on the conference web page at www.www2003.org/.

   

WEIS2003   Workshop on Economics and Information Security, University of Maryland, College Park, MD, USA, May 29-30, 2003.  [posted here 2/15/03] A fundamental concern in today's information environment is information security. However, since information security requires the use of scarce resources, an equally important concern is the efficient allocation of funds to information security activities. Thus, questions like the following are continually being asked: Do we spend enough on protecting our computer systems? How should funds that are being spent on information security be most efficiently allocated among specific information security activities? Recognition of the importance of research that integrates economics and information security was highlighted at the Workshop on Economics and Information Security held at UC- Berkeley, in May 2002. The success of that Workshop has lead to an annual event, the second of which will be held at the University of Maryland at College Park. If you would like to present a paper at the Workshop, submit a detailed abstract (PDF format preferred) to Dr. Martin P. Loeb, General Chair by e-mail at (mloeb@rhsmith.umd.edu) by March 15, 2003. Approximately 20 papers will be selected for presentation and total workshop participants will be limited to 50. Notification of acceptance for the program will be sent by April 6, 2003.

 

June 2003

CISSE 2003   7th Colloquium for Information Systems Security Education, Washington DC, June 1-5, 2003.  [posted here 12/10/02] This colloquium, the seventh in an ongoing annual series, will bring together leading figures from academia, government, and industry to address the national need for security and assurance of our information and communications infrastructure. The colloquium solicits papers from practitioners, students, educators, and researchers. The papers should discuss course or lab development, INFOSEC curricula, standards, best practices, existing or emerging programs, trends, and future vision, as well as related issues. We are especially interested in novel approaches to teaching information security as well as what should be taught. This includes the following general topics:   -  Assessment of need (e.g. how many information security workers/ researchers/ faculty are needed?)   -  Integrating information assurance topics in existing graduate or undergraduate curricula   -  Experiences with course or laboratory development   -  Alignment of curriculum with existing information assurance education standards   -  Emerging programs or centers in information assurance   -  Late breaking topics   -  Best practices   -  Vision for the future We particularly encourage papers that discuss tools, demonstrations, case studies, course modules, shareware, and worked examples that participants (and others) can use to help educate people in computer security. Papers reporting work in progress are also welcomed, especially if enough information to evaluate the work will be available at the time of the colloquium. The complete call for papers can be found at cisse.info/call_for_papers.htm and the conference web site is at www.ncisse.org.

 

SACMAT'03  18th ACM Symposium on Access Control Models and Technologies, Como, Italy, June 2-3, 2003.   [posted here 9/27/02] The mission of the symposium is to share novel access control solutions that fulfill the needs of interesting applications and to identify new directions for future research and development work. SACMAT gives researchers and practitioners a unique opportunity to share their perspectives with others interested in the various aspects of access control. Areas of interest include:   -  Access control within the context of emerging standards   -  Access control models and extensions   -  Access control for innovative applications   -  Methodologies and tools for access control policy design   -  Administration of access policies   -  Authorization management   -  Access control mechanisms, systems and tools   -  Access control in distributed and mobile systems   -  Safety analysis and enforcement   -  Theoretical foundations for access control models See the Web page at www.acm.org/sigsac/sacmat/ for detailed calls for papers, panels, tutorials and other useful information.

 

IEEE Electro/Information Technology Conference, June 5-6, 2003, Indianapolis, Indiana, USA.  [posted here 10/5/02] Academic, industrial, and government researchers are invited to submit papers reporting both theoretical and applied research in topic areas broadly divided into four tracks: Information Technology Systems and Applications, Communications, Digital Signal Processing, and Professional Activities. Please visit the conference Web site at www.cis-ieee.org/eit2003 for information on announcement, registration, and preliminary program as they become available. The site also includes a Sample Paper under Call For Papers.

 

4th Annual IEEE Information Assurance Workshop, United States Military Academy, West Point, New York, June 18-20, 2003.  [posted here 12/15/02] The workshop is designed to provide a forum for Information Assurance researchers and practitioners to share their research and experiences. Attendees hail from industry, government, and academia. The focus of this workshop is on innovative, new technologies designed to address important Information Assurance issues. Papers will be divided into two broad categories. Approximately 2/3 of the papers will focus on innovative new research in Information Assurance. The remaining 1/3 of the papers will be recent experience and lessons learned from Information Assurance practitioners. Areas of particular interest at this workshop include, but are not limited to:    - Innovative intrusion detection and response methodologies    - Information warfare    - Information Assurance education and professional development    - Secure software technologies    - Computer forensics More details can be found at: www.itoc.usma.edu/workshop/2003/.

 

FCS'03   LICS Satellite Workshop on Foundations of Computer Security, Ottawa, Canada, June 26-27, 2003.  [posted here 1/3/03] Computer security is an established field of Computer Science of both theoretical and practical significance. In recent years, there has been increasing interest in logic-based foundations for various methods in computer security, including the formal specification, analysis and design of cryptographic protocols and their applications, the formal definition of various aspects of security such as access control mechanisms, mobile code security and denial-of-service attacks, and the modeling of information flow and its application to confidentiality policies, system composition, and covert channel analysis. The aim of this workshop is to provide a forum for continued activity in this area, to bring computer security researchers in contact with the LICS community, and to give LICS attendees an opportunity to talk to experts in computer security. We are interested both in new results in theories of computer security and also in more exploratory presentations that examine open questions and raise fundamental concerns about existing theories. Possible topics include, but are not limited to:     Formal specification                                               cryptographic protocols and applications     Foundations of verification                                     confidentiality and authentication     Logic-based design                                                  integrity and privacy     Information flow analysis                                        availability and denial of service     Security models                         --for--                    security policies     Language-based security                                          covert channels     Static analysis                                                            mobile code     Composition issues                                                  intrusion detection     Statistical methods malicious code                        confinement More information can be found at the workshop web page: www.cs.stanford.edu/~iliano/fcs03/.

 

PoDSy2003 Workshop on Principles of Dependable Systems (in conjunction with The International Conference on Dependable Systems and Networks), San Francisco, CA, USA, June 22,2003 (TBC).  [posted here 1/19/02] In this workshop we wish to bring together researchers and practitioners from both the fault-tolerance and security communities to discuss foundational topics (and related applied experiences) on the similarities and differences between both areas. The main research challenges in this context are to formulate consistent and mutually understandable notions of the relevant dependable system properties, to identify suitable models for studying these properties, and to assess fundamental abstractions of systems which are both fault-tolerant and secure. In this direction, papers are solicited which address foundational issues around the "principles" of dependable systems. Contributions of interest will address topics related to, but not limited by, the following:    - Relationship between areas of fault-tolerance and security    - Relationship between fault-tolerance and security properties    - Metrics for fault-tolerance and security    - Specification, modeling and analysis of fault-tolerant and secure systems    - Using fault-tolerance techniques to achieve security    - Using security techniques to achieve fault-tolerance    - Verification and validation of fault-tolerant and secure systems    - Experiences with fault-tolerant and secure systems More information can be found on the workshop web page at http://lpdwww.epfl.ch/fgaertner/podsy2003/.

 

WISP 2003   Workshop on Issues in Security and Petri Nets, Eindhoven (NL), June 23, 2003.  [posted here 2/7/03] The first international Workshop on Issues in Security and Petri Nets (WISP) intends to promote research about theoretical foundations of security analysis and design with Petri Nets as system model. Hence, original papers as well as surveys on the use of Petri Nets for security issues are particularly welcome. Also original papers on security issues in other system models are welcome, provided that they either present new results or offer a new perspective to well-known problems. Suggested submission topics include:    - comparison and classification of security models    - formal definition and verification of the various aspects of security:            confidentiality, integrity, authentication and availability    - tools and techniques for the formal analysis of cryptographic protocols and their applications    - information flow security and related theories    - security issues in probabilistic and real-time models    - mobile code security    - applications to electronic commerce    - case studies    - surveys on security results in Petri Nets and related open problems    - surveys on analysis techniques for Petri Nets that could be used for security analysis More information can be found on the conference web page at www.iit.cnr.it/staff/fabio.martinelli/wisp-cfp.html.

 

Special session on Web Services Security, First International Conference on Web Services (ICWS'03), Las Vegas, Nevada, USA, June 23-26, 2003.  [posted here 12/15/02] As is the case in many other applications, the information processed in Web services might be commercially sensitive and it is similarly important to protect this information against security threats such as disclosure to unauthorized parties. This technical session mainly focuses on different theoretical and technical approaches to handle the security issues in Web services. More information can be found on the conference web page at tab.computer.org/tfec/icws03.

 

WISE 3/ WECS 5 Third World Conference on Information Security Education and, Workshop on Education in Computer Security, Naval Postgraduate School, Monterey California, USA, June 26-28, 2003.  [posted here 9/17/02] IFIP Working Group 11.8 -Information Security Education and the Workshop on Education in Computer Security invite you to contribute to their activities by submitting papers for presentation at their conference to be held at the Naval Postgraduate School in Monterey California, USA. The conference aims to address interested researchers and educators from universities, schools, industry or government. The theme for the conference is Teaching the Role of Information Assurance in Critical Infrastructure Protection. Relevant topics include, but are not limited to the following:    - New Programs in Information Security and Privacy Education    - Training the Cyberwarrior    - Information Security Education in Non-Academic Contexts    - Computer Security and Infrastructure Protection    - Education of Citizens in Information Security    - Information Security Education in Schools    - Teaching Cyber Ethics    - Education in Computer Forensics and the Law    - Education in Electronic Commerce Security    - Education of Information Security Professionals    - Teaching Information Systems Auditing    - International Standards of Security Education    - Evaluation of Security Education    - Programs to Raise Information Security Awareness    - Holistic Approaches in Information Security Education    - Practical and Experimental approaches to Information Security Education    - Information Security Distance Learning and Web-based teaching The conference web site can be found at cisr.nps.navy.mil/wise3/.

 

SecCo 2003   1st International Workshop on Security Issues in Coordination Models, Languages and Systems (affiliated with ICALP 2003), Eindhoven, the Netherlands, June 28-29, 2003.  [posted here 12/19/02] Coordination models and languages, which advocate a distinct separation between the internal behaviour of the entities and their interaction, represent a promising approach.  However, due to the openness of these systems, new critical aspects come into play, such as the need to deal with malicious components or with a hostile environment.  Current research on network security issues (e.g. secrecy, authentication, etc.) usually focuses on opening cryptographic tunnels between fully trusted entities. For this to work the structure of the system must be known beforehand. Therefore, the proposed solutions in this area are not always exploitable in this new scenario. The aim of the workshop is to cover the gap between the security and the coordination communities.  More precisely, we intend to promote the exchange of ideas, focus on common interests, gain in understanding/deepening of central research questions, etc. Topics of interest include, but are not limited to: Theoretical foundations, specification, analysis, case-studies, applications for:    -  authentication                                                coordination models    -  integrity                                                         open-distributed systems    -  privacy                                                            mobile ad-hoc networks    -  confidentiality                                               agent-based infrastructures    -  access control                    -in-                     peer-to-peer systems    -  denial of service                                            global computing    -  service availability                                         context-aware computing    -  safety aspects                                                 component-based systems   -   fault tolerance                                                ubiquitous computing More information can be found at cs.unibo.it/secco03

 

ECIW 2003   European Conference on Information Warfare and Security, University of Reading, United Kingdom, June 30-July 1, 2003.  [posted here 12/3/02] The second European Conference on Information Warfare and Security (ECIW) is an opportunity for academics, practitioners and consultants from Europe and elsewhere who are involved in the study, management, development and implementation of systems and concepts to combat information warfare or to improve information systems security to come together and exchange ideas.  The conference in July 2003 is seeking qualitative, experience-based and quantitative papers as well as case studies and reports of work in progress from academics, information systems practitioners, consultants and government departments.  Topics may include, but are not limited to, e-Intelligence/counter-intelligence, Perception management, Information warfare theory, Electro-magnetic pulse weapons, Information, computer and network security, Cryptography, Physical security, Security policy, Information warfare policy, Information warfare techniques, Hacking, Infra-structure warfare, National security policy, Corporate defence mechanisms, Security for small to medium enterprises, Cyber Terrorism, Ethical, Political and Social Issues relating to Information Warfare, Information warfare and security education, Legal issues concerned with information warfare and e-Crime, Cyber-terrorism. In addition to multiple streams of papers, the conference committee are inviting proposals for workshops and tutorials on topics related to Information Warfare and research methods applicable to this field. The full call-for-papers and registration details can be found www.mcil.co.uk/conf-management.htm.

 

CSFW16 16th IEEE Computer Security Foundations Workshop, Asilomar, Pacific Grove, CA, USA, June 30-July 2, 2003.  [posted here 10/5/02] This workshop series brings together researchers in computer science to examine foundational issues in computer security. We are interested both in new results in theories of computer security and also in more exploratory presentations that examine open questions and raise fundamental concerns about existing theories. Both papers and panel proposals are welcome. Possible topics include, but are not limited to:   - Access control          - Authentication                   - Data and system integrity   - Database security      - Network security              - Distributed systems security   - Anonymity                 - Intrusion detection            - Security for mobile computing   - Security protocols    - Security models                - Decidability issues   - Privacy                       - Executable content           - Formal methods for security   - Information flow       - Language-based security Information on submitting papers and panel proposals can be found on the workshop web page at www.csl.sri.com/csfw/csfw16.

 

July 2003

CEC2003   Special session at the Congress on Evolutionary Computation, Canberra, Australia, December 8-12, 2003. (submissions due July 7, 2003) [posted here 5/11/03] There is a growing interest from the computer security community toward Evolutionary Computation techniques, as a result of these recent successes, but there still are a number of open problems in the field that should be addressed. This special session will try to do it by asking for submissions in all areas of evolutionary computation dealing with applications to computer security, and by giving the interested researchers an opportunity to review the current state-of-art of the topic, exchange recent ideas, and explore promising new directions. We would like to invite your participation in the special session Evolutionary Computation in Computer Security at the CEC-2003, an opportunity to meet leading researchers in the field, exchange ideas and initiate collaborations. Relevant topics include, but are not limited to Cellular automata, Genetic Algorithms, Genetic Programming, Classifier Systems, Simulated Annealing, Evolutionary Strategies, Tabu Search,Bio-inspired systems, etc. in:    - Design of cryptographic primitives, including: pseudo-random number generators,       block ciphers, stream ciphers, hash functions, S-Boxes, etc...    - Analysis and/or cryptoanalysis of cryptographic primitives    - Cryptography    -  Improvement of cryptographic primitives    - Network security    - Intrusion detection systems    - Host security More information can be found at http://tracer.uc3m.es/CFP-SS-CEC2003.html/.

 

ACISP 2003   The Eighth Australasian Conference on Information Security and Privacy, Wollongong, Australia, July 9-11, 2003.  [posted here 2/15/03] Original papers pertaining to all aspects of computer systems and information security are solicited for submission to the Eighth Australasian Conference on Information Security and Privacy (ACISP 2003). Papers may present theory, techniques, applications and practical experiences on a variety of topics including:    - Cryptology                                                          - Mobile communications security    - Authentication and authorization                      - Secure operating systems    - Access control                                                   - Security management    - Network security                                               - Secure commercial applications    - Smart cards                                                         - Key management and auditing    - Risk assessment                                                 - Secure electronic commerce    - Copyright protection                                          - Security architectures and models    - Mobile agents security                                       - Evaluation and certification    - Software protection and viruses                         - Privacy and policy issues    - Security protocols                                               - Computer forensics    - Distributed system security                                - Intrusion detection    - Database security More information can be found on the conference web page at www.itacs.uow.edu.au/research/NSLabs/acisp03/.

 

Security in Distributed Computing (special track of the 22nd Annual ACM SIGACT-SIGOPS Symposium on Principles of Distributed Systems), Boston, Massachusetts, USA, July 13-16, 2003.   [posted here 10/15/02] We are soliciting research contributions on the design, specification, implementation, application and theory of secure distributed computing. We welcome submissions on any topic in the intersection of security and distributed computing, including but not limited to:    - Secure multiparty and two-party computations    - Secret sharing and verifiable secret sharing    - Resiliency to corruptions: distributed, forward and proactive security    - Security, privacy and anonymity in the Internet and in mobile communication systems    - Secure/security protocols and distributed algorithms    - Secure multicast and broadcast    - Denial of service (clogging) and its prevention    - Non-repudiation, certification and time stamping protocols    - Distribution of intellectual property and its (copyright) protection    - Secure distributed marketplaces, auctions, and gambling    - Cryptographic protocols, including: authentication, key management, etc.    - Secure electronic commerce, banking and payment protocols    - Security for Peer to Peer computing    - Secure bandwidth reservation and QOS    - Distributed access control and trust management    - Secure mobile agents and mobile code    - Security for Storage Area Networks The special track is an integral part of PODC; see www.podc.org/podc2003/ for additional information.

 

ECOOP 2003   Workshop on Exception Handling in Object Oriented Systems: towards Emerging Application Areas and New Programming Paradigms, Darmstadt, Germany, July 21-25, 2003.  [posted here 1/3/03] The workshop will provide a forum for discussing the unique requirements for exception handling in the existing and emerging applications, including pervasive computing, ambient intelligence, the Internet, e-science, self-repairing systems, collaboration environments. We invite submissions on research in all areas of exception handling related to object oriented systems, in particular: formalisation, distributed and concurrent systems, practical experience, mobile object systems, new paradigms (e.g. object oriented workflows, transactions, multithreaded programs), design patterns and frameworks, practical languages (Java, Ada 95, Smalltalk, Beta), open software architectures, aspect oriented programming, fault tolerance, component-based technologies. We encourage participants to report their experiences of both benefits and obstacles in using exception handling, reporting, practical results in using advanced exception handling models and the best practice in applying exception handling for developing modern applications in the existing practical settings. To participate in the workshop, the prospective attendees are required to submit 4-7 page position papers (in the LNCS format) to Alexander Romanovsky (alexander.romanovsky@ncl.ac.uk) by April 25. Additional information can be found on the workshop web page: www.cs.ncl.ac.uk/~alexander.romanovsky/home.formal/ehoos2003.html.

 

August 2003

USENIX Security 2003 12th USENIX Security Symposium, Washington, DC, USA August 4-8, 2003 [posted here 9/17/02] The USENIX Security Symposium brings together researchers, practitioners, system administrators, system programmers, and others interested in the latest advances in security of computer systems. Refereed paper submissions are being solicited in all areas relating to systems and network security, including:   - Adaptive security and system management   - Analysis of malicious code   - Analysis of network and security protocols   - Applications of cryptographic techniques   - Attacks against networks and machines   - Automated tools for source code analysis   - Authentication and authorization of users, systems, and applications   - Denial-of-service attacks   - File and file system security   - Firewall technologies   - Intrusion detection   - Privacy preserving (and compromising) systems   - Public key infrastructure   - Rights management and copyright protection   - Security in heterogeneous and large-scale environments   - Security of agents and mobile code   - Security of Internet voting systems   - Techniques for developing secure systems   - World Wide Web security Since USENIX Security is primarily a systems security conference, papers regarding new cryptographic algorithms or protocols, or electronic commerce primitives, are in general discouraged.

 

IFIP WG11.2 2003   7th Annual IFIP WG 11.3 Working Conference on Data and Applications Security Estes Park, Colorado, U.S.A., August 4-6, 2003  [posted here 1/3/03] The conference provides a forum for presenting original unpublished research results, practical experiences, and innovative ideas in data and applications security. Papers and panel proposals are solicited. Topics of interest include but is not limited to:    - Critical Infrastructure Protection    - Cyber Terrorism    - Information Warfare    - Intrusion Protection    - Damage assessment and repair    - Database Forensics    - PTN security    - Electronic Commerce Security. More information about the conference can be found at www.cs.colostate.edu/~ifip03.

 

ECC 2003 The 7th Workshop on Elliptic Curve Cryptography, University of Waterloo, Waterloo, Ontario, Canada, August 11-13, 2003 [posted here 2/15/03] ECC 2003 is the seventh in a series of annual workshops dedicated to the study of elliptic curve cryptography and related areas. The main themes of ECC 2003 will be:    - The discrete logarithm.    - Efficient parameter generation and point counting.    - Provably secure cryptographic protocols.    - Efficient software and hardware implementation.    - Side-channel attacks.    - Deployment of elliptic curve cryptography. There will be approximately 15 invited lectures (and no contributed talks), with the remaining time used for informal discussions. There will be both survey lectures as well as lectures on latest research developments. More information can be found at www.cacr.math.uwaterloo.ca.

 

NSPW 2003   New Security Paradigms Workshop, Centro Stefano Francini, Ascona, Switzerland, August 18-21, 2003.  [posted here 2/22/03] For eleven years the New Security Paradigms Workshop has provided a stimulating and highly interactive forum for innovative approaches to computer security.  In order to preserve the small, focused nature of the workshop, participation is limited to authors of accepted papers and conference organizers. NSPW is highly interactive in nature. Authors are encouraged to present ideas that might be considered risky in some other forum. All participants are charged with providing feedback in a constructive manner. The resulting brainstorming environment has proven to be an excellent medium for furthering the development of these ideas. The proceedings, which are published after the workshop, have consistently benefited from the inclusion of workshop feedback. Because we expect new paradigms, we accept wide-ranging topics in information security. Papers that present a significant shift in thinking about difficult security issues or builds on a previous shift are welcomed. Our program committee particularly looks for new paradigms, innovative approaches to older problems, early thinking on new topics, and controversial issues that might not make it into other conferences but deserve to have their try at shaking and breaking the mold. More information can be found on the conference web page at www.nspw.org.

 

ICET'03   The 2003 International Conference on Emerging Technologies, Minneapolis, Minnesota, USA, August 25-26, 2003.  [posted here 3/9/03] The goal of this conference is to foster cross-disciplinary interaction in emerging technologies that are approaching sufficient maturity for initial commercialization. By providing insights from academia, research, industry, and funding communities the conference will foster discussions on interactions of emerging technologies, and the insights that can be harvested from other disciplines. Major areas of interest for this conference are: Trusted and Reliable Systems; Interconnected Computing; and Integrated Bio/hardware/software Systems. More information is available at www.rfbinternational.com.

 

First International Mobile IPR Workshop: Rights Management of Information Products on the Mobile Internet, Helsinki, Finland, August 27-28, 2003.  [posted here 3/23/03] MobileIPR Workshop welcomes papers on all aspects of rights management related to information products such as music, electronic books, videos, multimedia, games, or software distributed on the Mobile Internet commercially or otherwise. Relevant topics include, but are not limited to:    - Digital rights management (DRM) and technical tools to protect and manage rights,         e.g. cryptographic systems, watermarking, rights expression languages, and rights         management databases.    - Intellectual property rights (IPR) copyright, database right, patent, and trademark.    - Privacy in relation to rights management, including protection of confidential information.    - Contracts, especially open source licensing models in software and content production.    - Societal and policy issues, including the effect of non-governmental organizations and         citizens activism.    - Control of information products - economic and ethical rationales too.    - Business models related to rights management.    - User-contributed content and rights management.    - Rights management in peer-to-peer, super-distribution, and other new distribution models.    - Related enabling technologies and their impact on digital rights management. We welcome both full and short (experience) papers as well as extended abstracts that address different aspects of rights management. More information can be found on the workshop web page at www.hiit.fi/de/mobileipr/workshop/.

 

Sept 2003

TrustBus'03   Trust and Privacy in Digital Business (in conjunction with DEXA 2003), Prague, Czech Republic, September 1-5, 2003.  [posted here 12/23/02] The purpose of this workshop is twofold: First, all issues of digital business, focusing on trust and privacy problems will be discussed. In particular, we are interested in papers that deal with trust and privacy, confidence and security, reliability and consistency, fairness and legality, and other issues critical for the success of future digital business. Second, the workshop should be a forum for the exchange of results and ongoing work performed in R&D projects, either on a national or international level.  We invite papers, work-in-progress reports, industrial experiences describing advances in all areas of digital business applications, including, but not limited to:   - Privacy & confidentiality management   - Trust architectures and underlying infrastructures   - Electronic cash, wallets and pay-per-view systems   - Businesses models with security requirements   - Enterprise management and consumer protection   - Trust and privacy issues in mobile environments   - Global security architectures and infrastructures   - Protocols and transactional models   - Trustful management and negotiation   - Public administration, governmental services   - Anonymous or pseudonymous access to Web services   - Reliability and security of content and data   - Intellectual property rights, watermarking and fingerprinting   - Common practice, legal and regulatory issues   - Trust issues in E-Services, E-Voting and E-Polling   - PKI, biometrics, smart cards   - Intrusion detection and information filtering More information can be found on the conference web page at www.uni-regensburg.de/Fakultaeten/WiWi/pernul/dexa03ws/.

 

7th International Conference on Knowledge-Based Intelligent Information & Engineering Systems (special session on Artificial Intelligence Applications to Information Security), St Anne's College, University of Oxford, U.K., September 3-5, 2003.   [posted here 11/11/02] In spite of the efforts from Information Security researchers, there are still a considerable number of unsolved problems that may benefit from the application of Artificial Intelligence techniques. The increasing awareness in solving such problems has resulted in a concerted effort of Artificial Intelligence and Information Security researchers. Therefore, AI techniques like agents, evolutionary computation, neural networks, cellular automata, classic and fuzzy logic and machine learning may play an important role in specific problems concerning Information Security. We particularly encourage the discussion of the following topics:    - Semantic analysis of cryptologic protocols,    - Security of mobile agents,    - Security through agents,    - Representation and use of trust induced by PKIs,    - Optimisation heuristics in cryptanalysis    - Machine Learning techniques in cryptanalysis - AI techniques in cryptology    - Any other work addressing information security problems by means of AI techniques This session aims at bringing together members from the two research communities, information security and artificial intelligence. Consequently, discussion papers, conceptual papers, theoretical papers and application papers will be welcomed. Please visit the conference web site at scalab.uc3m.es/~docweb/AIIS_KES03.html for more detail on the topics of interest as well as general conference information.

 

RAID'2003   Sixth International Symposium on Recent Advances in Intrusion Detection, Pittsburgh, PA, USA, September 8-10, 2003  [posted here 3/20/03] The RAID International Symposium series is intended to further advances in intrusion detection by promoting the exchange of ideas in a broad range of topics. Paper submission and panel proposals are invited on the following types of topics:   - Assessing, measuring, and classifying intrusion-detection systems   - IDS cooperation and integration   - IDS interoperability standards and standardization   - IDSs in high-performance and real-time environments   - Vulnerabilities and attacks   - Innovative Approaches   - Practical Considerations More information can be found on the conference web page at www.raid-symposium.org/raid2003.

 

CHES 2003   Workshop on Cryptographic Hardware and Embedded Systems, Cologne, Germany, September 8-10, 2003.  [posted here 12/6/02] The focus of this workshop is on all aspects of cryptographic hardware and security in embedded systems. The workshop will be a forum of new results from the research community as well as from the industry. Of special interest are contributions that describe new methods for efficient hardware implementations and high-speed software for embedded systems, e.g., smart cards, microprocessors, DSPs, etc. We hope that the workshop will help to fill the gap between the cryptography research community and the application areas of cryptography. Consequently, we encourage submissions from academia, industry, and other organizations. All submitted papers will be reviewed.  The topics of CHES 2002 include but are not limited to:     - Computer architectures for public-key and secret-key cryptosystems     - Efficient algorithms for embedded processors     - Reconfigurable computing in cryptography     - Cryptographic processors and co-processors     - Cryptography in wireless applications (mobile phone, LANs, etc.)     - Security in pay-TV systems     - Smart card attacks and architectures     - Tamper resistance on the chip and board level     - True and pseudo random number generators     - Special-purpose hardware for cryptanalysis     - Embedded security     - Device identification Additional information can be found on the conference web page at www.chesworkshop.org

 

ETFA'2003   The 9th IEEE International Conference on Emerging Technologies and Factory Automation (Special session on IT Security for Automation Systems), September 16-19, 2003, Lisbon, Portugal.  [posted here 2/22/03] Due to the increased interconnection between plant-floor systems and enterprise-level computer systems up to and including public networks like the Internet, and based on Internet protocols (HTTP/TCP/IP), IT security issues and concerns have also reached the domains of automation IT systems and automation communication networks. IT security needs, constraints, and mechanisms for automation systems are in various ways different from those of the office computing environment, which creates the necessity, but also the opportunity, for novel approaches. For this special session papers are solicited which are concerned with: Specific security needs of automation systems, e.g. with respect to security objectives, usage scenarios, system topologies/architectures or operating environment. Specific security mechanisms, devices, processes, protocols and architectures for automation systems. IT security audits for automation devices and systems. More information can be found at www.uninova.pt/etfa2003.

 

SEFM'2003   International Conference on Software Engineering and Formal Methods, Brisbane, Australia, September 22-27, 2003.  [posted here 3/20/03] The objective of the conference is to bring together practitioners and researchers from academia, industry and government to exchange views on the theoretical foundation of formal methods, their application to software engineering and the socio-economic impact of their use. Authors are invited to submit both research and tool papers. The scientific program will include paper and tool presentations, tool demonstrations, tutorials and invited talks. More information can be found on the conference web page at www.svrc.uq.edu.au/Events/SEFM03/cfp.html.

 

October 2003

ISC'03   6th Information Security Conference, Bristol, United Kingdom, October 1-3, 2003.  [posted here 12/7/02] Original papers are solicited for submission to ISC 2003. ISC aims to bring together individuals involved in multiple disciplines of information security to foster exchange of ideas. Topics of interest include, but are not limited to:      Access Control                                                    Key Management      Applied Cryptography                                         Legal and Regulatory Issues      Cryptographic Protocols                                    Mobile Code & Agent Security      Digital Rights Management                                Network & Wireless Security      E-Commerce Protocols                                      Software Security      Formal Aspects of Security                                Security Analysis Methodologies      Information Hiding                                              Trust Management      Intrusion Detection More information can be found on the conference web page at www.hpl.hp.com/conferences/isc03.

 

CMS 2003   The Seventh IFIP Communications and Multimedia Security Conference (joint working conference IFIP TC6 and TC11), Turin, Italy, October 2-3, 2003.  [posted here 11/20/02] CMS 2003 is the seventh working conference on Communications and Multimedia Security since 1995. State-of-the-art issues as well as practical experiences and new trends in these areas are the topics of interest of the conference:    -  applied cryptography    -  biometry    -  multimedia security    -  digital signature and digital watermarking    -  infrastructure protection    -  network and communication security    -  security policies    -  security of e-commerce This year the organizers especially encourage submissions on advanced topics such as security of wireless networks, survivability of critical communication infrastructures, and protection of electronic documents. Visit the web site for further information, or download the PDF call for papers at security.polito.it/cms2003/cfp.pdf.

 

ESORICS 2003   8th European Symposium on Research in Computer Security, Gjøvik, Norway, October 13-15, 2003  [posted here 1/11/03] Papers offering novel research contributions in any aspect of computer security are solicited for submission to the Eighth European Symposium on Research in Computer Security (ESORICS 2003). Organized in a series of European countries, ESORICS is confirmed as the European research event in computer security. The symposium started in 1990 and has been held on alternate years in different European countries and attracts an international audience from both the academic and industrial communities. From 2002 it will be held yearly. The Symposium has established itself as one of the premiere, international gatherings on Information Assurance. Papers may present theory, technique, applications, or practical experience on topics including:    - access control                                              - network security    - accountability                                               - non-interference    - anonymity                                                     - privacy-enhancing technology    - applied cryptography                                   - pseudonymity    - authentication                                               - security as quality of service    - covert channels                                             - secure electronic commerce    - cryptographic protocols                              - security administration    - cybercrime                                                    - security evaluation    - data integrity                                                 - security management    - denial of service attacks                               - security models    - dependability                                                 - security metrics    - firewalls                                                         - security requirements engineering    - formal methods in security                          - security verification    - inference control                                          - smartcards    - information flow control                              - steganography    - information warfare                                      - subliminal channels    - intellectual property protection                   - survivability    - intrusion detection                                         - system security    - intrusion tolerance                                         - transaction management    - language-based security                                 - trustworthy user devices More information about the conference can be found at www.hig.no/esorics2003/.

 

Dec 2003

Communications Security Symposium (part of the IEEE GLOBECOM 2003 workshop), San Francisco, CA, USA, December 1-5, 2003.   [posted here 11/13/02] The inaugural symposium on Communications Security solicits submissions of new results in all security topics for wireless, mobile, ad hoc, peer-to-peer, or landline communication networks.  Please see the complete call posted at www.globecom2003.com/CFP1.html (under GLOBECOM 2003 Symposia Titles).

Archival Journals Regularly Specializing
in Security and Privacy

IEEE Security and Privacy Magazine,   Editor-in-Chief: George Cybenko
IEEE Security & Privacy provides a unique combination of research articles, case studies, tutorials, and regular departments covering diverse aspects of information assurance such as legal and ethical issues, privacy concerns, tools to help secure information, analysis of vulnerabilities and attacks, trends and new developments, pedagogical and curricular issues in educating the next generation of security professionals, secure operating systems and applications, security issues in wireless networks, design and test strategies for secure and survivable systems, and cryptology.  More information can be found at http://computer.org/security/.

ACM Transactions on Information and System Security,   Editor-in-Chief: Ravi Sandhu
ACM invites submissions for its Transactions on Information and System Security, inaugurated in November 1998. TISSEC publishes original archival-quality research papers and technical notes in all areas of information and system security including technologies, systems, applications, and policies. Papers should have practical relevance to the construction, evaluation, application, or operation of secure systems. Theoretical papers will be accepted only if there is convincing argument for the practical significance of the results. Theory must be justified by convincing examples illustrating its application. More information is given on the journal web page at www.acm.org/tissec.

The Kluwer International Series on ADVANCES IN INFORMATION SECURITY.
The purpose of the Advances in Information Security book series is to establish the state of the art and set the course for future research in information security. The scope of this series includes not only all aspects of computer and network security, but related areas such as fault tolerance and software assurance. The series will serve as a central source of reference for information security research and developments. The series aims to publish thorough and cohesive overviews on specific topics in Information Security, as well as works that are larger in scope than survey articles and that will contain more detailed background information. The series also provides a single point of coverage of advanced and timely topics and a forum for topics that may not have reached a level of maturity to warrant a comprehensive textbook. Prospective Authors or Editors: If you have an idea for a book that would fit in this series, we would welcome the opportunity to review your proposal. Should you wish to discuss any potential project further or receive specific information regarding book proposal requirements, please contact either Sushil Jajodia (jajodia@gmu.edu,703-993-1653) or Lance Wobus (lance.wobus@wkap.com, 781-681-0602)
 
Journal of Computer Security
JCS is an archival research journal for significant advances in computer security. Subject areas include architecture, operating systems, database systems, networks, authentication, distributed systems, formal models, verification, algorithms, mechanisms, and policies. Submissions: send six copies to one of the editors in chief: Sushil Jadodia, ISSE Dept., George Mason University, 440 University Drive, Fairfax, VA 22030, or Jonathan Millen, SRI International, 333 Ravenswood Ave., Menlo Park, CA 94025. Subscriptions: contact IOS Press, Niewe Hemweg 6B, 1013 CN Amsterdam, Netherlands, (e-mail: order@iospress.nl) for information about individual or institutional subscriptions or back issues. More information is given on the journal web page at www.csl.sri.com/jcs.
 
Computers & Security
Computers & Security aims to satisfy the needs of managers and experts involved in computer security by providing a blend of research developments, innovations, and practical management advice. Original submissions on all computer security topics are invited, particularly those of practical benefit to the practitioner. Four copies of papers from 5-10,000 words should be sent to the editor, John Meyer, at Elsevier Advanced Technology, P.O. Box 150, Kidlington, Oxford, OX5 1AS, United Kingdom. Telephones: voice +44(0)1865 843848 / 843000; fax +44 (0) 1865 843971.
 
International Journal of Digital Libraries
International Journal of Digital Libraries aims to advance the theory and practice of acquisition, definition, organization, management and dissemination of digital information via global networking. In particular, the journal will emphasize technical issues in digital information production, management and use, issues in high-speed networks and connectivity, inter-operability, and seamless integration of information, people, profiles, tasks and needs, security and privacy of individuals and business transactions and effective business processes in the Information Age. The first issue will appear in Summer 1996 (see announcement). Electronic submission is encouraged to speed up the process (for details please send email to dlib@adam.rutgers.edu). For hard copy submission, please mail five copies to: Prof. Nabil R. Adam, CIMIC, Rutgers University, Newark, NJ 07102, (201) 648-5239, adam@adam.rutgers.edu.
 
International Journal of Information Security
The International Journal of Information Security, IJIS, aims to provide prompt publication of important technical work in information security, attracting any person interested in communications, commerce, banking, medicine, or other areas of endeavor affected by information security. Any research submission on theory, applications, and implementations of information security is welcomed. This includes, but is not limited to, system security, network security, content protection, applications and foundations of information security. More information is given on the journal web page at link.springer.de/link/service/journals/10207/index.htm.