IEEE Cipher: Newsletter of the IEEE Computer Society Technical Committee on Security and Privacy, Issue 58 Jan 15, 2004

Electronic Issue (EI) #58, Jan 15, 2004

Hilarie Orman, Editor	Robert Bruen, Book Review Editor
Sven Dietrich, Associate Editor	Editor, Reader's Guide

ACNS'04 The 2nd conference of Applied Cryptography and Network Security, Yellow Mountain, China, June 8-11, 2004. (Extended submission deadline: January 28, 2004).
PET'2004 4th Workshop on Privacy Enhancing Technologies, Toronto, Canada, May 26-28, 2004. (Submission deadline: January 26, 2004).
Privacy and anonymity are increasingly important in the online world. Corporations and governments are starting to realize their power to track users and their behavior, and restrict the ability to publish or retrieve documents. Approaches to protecting individuals, groups, and even companies and governments from such profiling and censorship have included decentralization, encryption, and distributed trust. Building on the success of the previous workshops, this workshop addresses the design and realization of such privacy and anti-censorship services for the Internet and other communication networks. A list of topics of interest along with instructions for submitting a paper can be found at the workshop web site at http://petworkshop.org/2004/
CEC'2004 IEEE CEC 2004 Special Session on Evolutionary Computation in Cryptology and Computer Security, Portland, Oregon, USA, June 20-23, 2004. (Submission deadline: January 31, 2004).
Techniques taken from the field of Evolutionary Computation (especially Genetic Algorithms, Genetic Programming, Artificial Immune Systems, but also others) are steadily gaining ground in the area of cryptology and computer security. In recent years, algorithms which take advantage of approaches based on Evolutionary Computation have been proposed, for example, in the design and analysis of a number of new cryptographic primitives, ranging from pseudorandom number generators to block ciphers, in the cryptanalysis of state-of-the-art cryptosystems, and in the detection of network attack patterns, to name but a few. The special session encourages the submission of novel research at all levels of abstraction (from the design of cryptographic primitives through to the analysis of security aspects of "systems of systems"). This special session will promote further co-operation between specialists in evolutionary computation (and its current partners such as biology), computer security, cryptography and other disciplines, and will give interested researchers an opportunity to review the current state-of-art of the topic, exchange recent ideas, and explore promising new directions. A list of topics of interest along with instructions for submitting a paper can be found at the workshop web site at http://tracer.uc3m.es/cec2004ss.html
I-NetSec04 Third Working Conference on Privacy and Anonymity Issues in Networked and Distributed Systems (special track at the 19th IFIP International Information Security Conference), Toulouse, France, August 23-26, 2004. (submissions due February 9, 2004)
Privacy and anonymity are increasingly important aspects in electronic services. The workshop will focus on these aspects in advanced distributed applications, such as m-commerce, agent-based systems, P2P, ... Suggested topics include, but are not restricted to:
- Models for threats to privacy/anonymity
- Models and measures for privacy/anonymity
- Secure protocols that preserve privacy/anonymity
- Privacy, anonymity and peer-to-peer systems
- Privacy, anonymity and mobile agents
- Privacy/anonymity in payment systems
- Privacy/anonymity in pervasive computing applications
- Anonymous communication systems
- Legal issues of anonymity
- Techniques for enhancing privacy in existing systems
More information can be found at http://www.sec2004.org
1st Euro PKI 1st European PKI Workshop Research and Applications, Samos island, Greece, June 25-26, 2004. (submissions due February 15, 2004)
The 1st European PKI Workshop: Research and Applications is focusing on research and applications on all aspects of Public Key Infrastructure. Submitted papers may present theory, applications or practical experiences on topics including, but not limited to:
- Modeling and Architecture - Key Management and Recovery
- Bridge CA - Certificate Status Information
- Cross Certification - Interoperability
- Directories - Repository Protocols
- Mobile PKI - Timestamping
- Authentication - Verification
- Reliability in PKI - Standards
- Certificate Policy - Certification Practice Statements
- Privacy - Legal issues, Policies & Regulations
- Fault-Tolerance in PKI - Case Studies
- Privilege Management - Trust
- PKI and eCommerce, eBusinees, eGovernment applications
More information can be found on the conference web site at http://www.aegean.gr/EuroPKI2004
Cybercrime and Digital Law workshop, Yale University Law School, New Haven, CT, USA, March 26-28, 2004. (submissions due February 15, 2004)
The Information Society Project at Yale Law School is pleased to announce its upcoming conference on Cybercrime and Digital Law Enforcement entitled: "Digital Cops in Virtual Environment." This ground-breaking conference will bring together policy makers, security experts, law enforcement personnel, social activists and academics to discuss the emerging phenomena of cybercrime and law enforcement. The conference will question both the efficacy of fighting cybercrime and the civil liberties implications arising from innovations in law enforcement methods of operation. For further information, see the call for papers and writing competition at http://islandia.law.yale.edu/isp
Trustbus'04 Trust and Privacy in Digital Business, Zaragoza, Spain, August 30 - September 3, 2004. (submissions due February 28, 2004)
The First International Conference on Trust and Privacy in Digital Business (TrustBus '04) will be held in conjunction with the 15th International Conference on Database and Expert Systems Applications (DEXA'04), (http://dexa.org/dexa2004/).
TrustBus '04 shall bring together researchers from different disciplines, developers, and users all interested in the critical success factors of digital business systems. We invite papers, work-in-progress reports, industrial experiences describing advances in all areas of digital business applications. A complete list of topics of interest and instructions for submitting a paper can be found on the conference web site at http://www-ifs.uni-regensburg.de/trustbus04/
CHES 2004 Cryptographic Hardware and Embedded Systems, Cambridge (Boston), USA, August 11-13,2004. (submissions due March 2, 2004)
The focus of this workshop is on all aspects of cryptographic hardware and security in embedded systems. Of special interest are contributions that describe new methods for efficient hardware implementations and high-speed software for embedded systems, e.g., smart cards, microprocessors, DSPs, etc. We hope that the workshop will help to fill the gap between the cryptography research community and the application areas of cryptography. The topics of CHES 2004 include but are not limited to:
- Computer architectures for public-key and secret-key cryptosystems
- Efficient algorithms for embedded processors
- Reconfigurable computing in cryptography
- Cryptographic processors and co-processors
- Cryptography in wireless applications (mobile phone, LANs, etc.)
- Security in pay-TV systems
- Smart card attacks and architectures
- Tamper resistance on the chip and board level
- True and pseudo random number generators
- Special-purpose hardware for cryptanalysis
- Embedded security
- Device identification
More information can be found at http://www.chesworkshop.org
WSEG 2004 Fourth Brazilian Workshop on Security of Computing Systems, Gramado, Brazil, May 10th, 2004. (submissions due March 11, 2004)
The 4th Brazilian Workshop on Security of Computing Systems (WSeg 2004) will be held in conjunction with the 22nd Brazilian Symposium on Computer Networks (SBRC 2004) on May 10, 2004 in Gramado. Its main purpose is to promote discussions of research and relevant activities in security-related subjects. Authors are invited to submit papers describing research projects, experimental results and recent developments related, but not limited, to the following topics:
- Adaptive security - Analysis of malicious code
- Analysis of network and security protocols
- Attacks against networks and machines
- Auditing - Biometry and biometric systems
- Computer forensics - Cryptography and digital certification
- Firewall technologies - Internet security
- Intrusion detection - Public key infrastructure
- Security against intrusions - Security legal issues
- Security of distributed systems - Security of agents and mobile code
- Security of e-commerce - Security of networks
- Security of operating systems - Security of voting systems
- Techniques for developing secure systems
- Security policies
- Authentication and authorization of users, systems, and applications
More information can be found at the workshop web site at http://www.sbrc2004.ufrgs.br/
ESORICS 2004 9th European Symposium on Research in Computer Security, Institut Eurecom, Sophia-Antipolis, French Riviera, France, September 13-15, 2004. (submissions due March 26, 2004)
Papers offering novel research contributions in any aspect of computer security are solicited for submission to ESORICS 2004. Organized in a series of European countries, ESORICS is confirmed as the European research event in computer security. The primary focus is on high-quality original unpublished research, case studies and p implementation experiences. We encourage submissions of papers discussing industrial research and development. Information on topics of interest, and instructions for submitting a paper can be found at http://esorics04.eurecom.fr
RAID'2004 Seventh International Symposium on Recent Advances in Intrusion Detection, Institut Eurecom, Sophia-Antipolis, French Riviera, France, September 15-17, 2004. (submissions due March 31, 2004)
For RAID 2004 there is a special theme: the interdependence between intrusion detection and society. Thus, we will also welcome papers that address issues that arise when studying intrusion detection, including information gathering and monitoring, as a part of a larger, not necessarily purely technical, perspective. The RAID 2004 program committee invites three types of submissions: full papers presenting mature research results; practical experience reports describing a valuable experience or a case study; and panel proposals for presenting and discussing hot topics in intrusion detection systems. The RAID 2004 web site elaborates on these themes and also provides a full list of topics of interest (http://raid04.eurecom.fr)
EAS The First Conference on Email and Anti-Spam, Mountain View, CA, USA, July 30-31, August 1, 2004. (submissions due April 16, 2004)
The Conference on Email and Anti-Spam invites the submission of papers for its first meeting, held in cooperation with AAAI (the American Association for Artificial Intelligence). Papers are invited on all aspects of email and spam, including research papers (Computer science oriented academic-style research), industry reports (Descriptions of important or innovative products), and law and policy papers. A full list of topics can be found on the conference web site at http://www.ceas.cc
CCS 2004 11th ACM Conference on Computer and Communications Security, Washington, DC, USA, October 25-29, 2004. (submissions due May 3, 2004)
Research track papers are due May 3, 2004. Industry track proposals are due July 15, 2004 (see the separate call at http://www.acm.org/sigsac/ccs/CCS2004 for details). Proposals for 90-minute tutorials are due May 3, 2004. Proposals for full-day or half-day workshops are due December 1, 2003 (see the separate call at http://www.acm.org/sigsac/ccs/CCS2004 for details).

Commentary and Opinion

Review of the 19th Annual Computer Security Applications Conference (ACSAC) (Las Vegas, NV, USA, December 8-12, 2003) by Jeremy Epstein
From our book review editor: It is becoming clear that the field is moving past simple hack books into the realm of code. We've had some good books on writing secure code and architecting secure environments. This issue has a couple of books about code, but from the other side: how to attack software and how to build tools. A Linux Security Cookbook is also included to round it all out.
- Robert Bruen's review of Exploiting Software. How to Break Code by Greg Hoglund and Gary McGraw
- Robert Bruen's review of Building Open Source Network Security Tools. Components and Techniques by Mike D. Schiffman
- Robert Bruen's review of Linux Security Cookbook. Security Tools & Techniques by Daniel Barrett, Richard Silverman and Robert Byrnes
News Items from the UN/ITU World Summit on the Information Society report; Voice Over IP security flaws
Announcements, news, and correspondence from readers are always welcome. Send to cipher-editor @ ieee-security.org
Book reviews from past Cipher issues
Conference Reports and Commentary from past Cipher issues
News items from long past Cipher issues

Reader's guide to recent security and privacy literature
(last updated March 15, 2002)

Listing of academic positions available by Cynthia Irvine

Academic position at Purdue University

Staying in touch....

Information for Subscribers and Contributors

Who's where: recent address changes

Changing your email address? Please send updates to cipher@ieee-security.org

Interesting links and reports available via FTP and WWW (new contributions are welcome)

IEEE Computer Society's Technical Committee on Security and Privacy

	TC home page	TC Officers
	How to join the TC	TC publications available online
	TC Publications for sale	Cipher past issues archive
	IEEE Computer Society	Cipher Privacy Policy

Contents: