Electronic Issue (EI) #57,  November 15, 2003

Contents:

• Letter from the Editor 
   
• Conference and Workshop Announcements

  • Cipher calls-for-papers and calendar have more detail about these and other events.

    • 11/14/03: World Wide Web (WWW), New York City, NY; Submissions are due; www2004-pc-chairs@cs.wpi.edu
      
    • 11/15/03: Radio Frequency Identifiers (RFID), Privacy, MIT, Cambridge, MA
    • 11/16/03-11/19/03: Grand Challenges in Security, Warrenton, Virginia;
    • 11/19/03: Privacy Preserving Data Mining (PPDM), Melbourne, FL
    • 11/19/03: Data Mining for Computer Security (DMSEC), Melbourne, Florida
    • 12/ 1/03-12/ 5/03: Communications Security Symposium (CSS) (inaugural meeting), San Francisco, CA;
    • 12/ 6/03: Workshop on Information Assurance (IAWS), Phoenix, Arizona, ; Submissions are due; dtipper@mail.sis.pitt.edu
    • 12/ 8/03-12/12/03: 19th Annual Computer Security Applications Conference (ACSAC), Las Vegas, Nevada
    • 12/ 8/03-12/10/03: Workshop on Security of Information Technologies (WSTI), Algiers
    • 12/10/03-12/12/03: Session on Architectures and Languages for Digital Rights Management and Access Control at Communication Systems and Networks, New York City, NY
    • 12/10/03: Dependable Computing and Communications Symposium (DCCS), Florence, Italy; Submissions are due; mootaz@us.ibm.com
    • 12/ 8/03-12/12/03: Special session at the Congress on Evolutionary Computation (CEC), Canberra, Australia;
    • 12/12/03: Information Hiding Workshop (IH), Toronto, Canada; Submissions are due, Jessica Fridrich, Mike Reiter
    • 12/15/03: Symposium On Access Control Models And Technologies (SACMAT), Yorktown Heights, NY; submissions are due
    • 12/15/03: Workshop on Issues in the Theory of Security (WITS), Barcelona, Spain, submissions are due
    • 12/16/03: USENIX 2004, Boston, Massachusetts; Submissions are due; conference@usenix.org
    • 12/19/03: Policy 2004 5th IEEE International Workshop on Policies for Distributed Systems and Networks, IBM Thomas J Watson Research Center, Yorktown Heights, NY, USA
    • 1/ 5/04: Special Issue of Computer Magazine, High-Speed Internet Security; Submissions are due; sshim@email.sjsu.edu
    • 1/ 5/03- 1/ 8/03: Security and Survivability of Networked Systems (in conjunction with HICSS-37), Big Island, Hawaii, USA, January 5-8, 2004
    • 1/11/04: Applied Cryptography and Network Security (ACNS), Yellow Mountain, China; submissions are due
    • 1/25/04: USENIX Security, San Diego, California; Submissions are due; conference@usenix.org
    • 1/26/04: Conference on Web Services (ICWS), San Diego, California; Submissions are due; jain@uwm.edu
    • 1/27/04: 17th Computer Security Foundations Workshop (CSFW), Pacific Grove, CA; Submissions are due; focardi@dsi.unive.it
    • 1/30/04- 1/31/04: A Multiple View of Individual Privacy in a Networked World (WHOLES), Stockholm, Sweden;
    • 1/30/04: ACM Special Interest Group on Communications (SIGCOMM), Portland, Oregon; ; Submissions are due; yavatkar@intel.com
    • 1/31/04: Detection of Intrusions and Malware and Vulnerability Assessment (DIMVA), Dortmund, Germany; submission are due

• Commentary and Opinion

  • From the Book Review Editor:
    Since 1996, my approach to Cipher book reviews has been to look at as many books as I can, reviewing the three best I have when in it comes time to publish. It is a personal choice that I do not review books that I do not think are up to snuff. This does not mean that bad books should not be reviewed. They should, even if it just to warn readers. Cipher welcomes other reviewers to contribute reviews and comments. In this issue three excellent books on code (secure and malware) are reviewed. Understanding secure coding and malicious code together will go a long way towards securing software.

    Bob Bruen, Cipher Book Review Editor

  • Robert Bruen's review of the book, Secure Coding. Principles and Practices by Mark Graff and Kenneth van Wyck

  • Robert Bruen's review of Secure Programming Cookbook for C and C++ by John Viega and Matt Messier

  • Robert Bruen's review of Fighting Malicious Code by Ed Skoudis with Lenny Zeltser

  • News from NSF, via Carl Landwehr:

    NSF plans a new Cyber Trust theme announcement (late) this fall. Thisannouncement will encompass a broad range of activities relating to trustworthy computing and communications and will subsume some existing programs, including Trusted Computing, Communications Network Security, and Data and Applications Security.

    The Cyber Trust announcement is currently under internal review within NSF. Although the release date is uncertain, it will probably be out within the next month. Deadlines for proposals will be at least 90 days after the announcement is officially released, probably placing them in late January or early February.

    To receive information relating to this announcement, you may sign up for the the Cyber Trust Announce mailing list by sending a blank email message to:
    join-cyber-trust-announce@lists.nsf.gov
    No subject or message body is necessary.

    Also for slides from the Cyber Trust PI meeting held August, 2003, see http://www.jhuisi.jhu.edu/institute/cybertrust.html (scroll down to "Meeting Follow-up Postings")

  • NewsBits:  Announcements and correspondence from readers
    (news of Purdue's CERIAS and the CERT Coordination Center)

  • Book reviews from past Cipher issues

  • Conference Reports and Commentary from past Cipher issues

  • News items from past Cipher issues

 

• Reader's guide to recent security and privacy literature
  (last updated March 15, 2002)

 

• Listing of academic positions available  by Cynthia Irvine
  

 

• Staying in touch....

  • Information for Subscribers and Contributors

  • Who's where: recent address changes

  • Changing your email address?  Please send updates to cipher@ieee-security.org

   
• Interesting links  and reports available via FTP and WWW