Cipher Electronic Newsletter of the Technical Committe on    Security & Privacy A Technical Committee of the Computer Society of the IEEE  Electronic Issue (EI) 83,  March 17, 2008 Hilarie Orman,  Editor Book Reviews Sven Dietrich, Associate Editor Yong Guan, Calendar Editor

Contents:

• Letter from the Editor 
   

• News, Commentary and Opinion

  • News: A Heart Device Is Found Vulnerable to Hacker Attacks

  • News: Chinese hackers: No site is safe

  • News: Electronic gadgets latest sources of computer viruses

  • Richard Austin's review of The dotCrime Manifesto: How to Stop Internet Crime by Philip Hallam-Baker

  • Richard Austin's review of Mechanics of User Identification and Authentication: Fundamentals of Identity Management by Dobromir Todorov

  • News Briefs Archive:  Announcements and correspondence from readers (please contribute!)

  • Book reviews from past Cipher issues

  • Conference Reports and Commentary from past Cipher issues

  • News items from past Cipher issues

• Conference and Workshop Announcements

  • Cipher calls-for-papers and calendar
      (the calls-for-papers and the calendar announcements may differ slightly in content or time of update):  this month's newsletter does not have the topics from recent calls-for-papers, but the website always has all the information.

  • Notation regarding proceedings:
         NP = No proceedings
         AO = Proceedings are distributed to attendees only
         BP = Only "best papers" will be published
         No notation means that the proceedings will be published for distribution outside the conference.
    • 2/15/08: Smart Card Research and Advanced Application Conference (CARDIS), Surrey, UK; Submissions are due;
    • 3/ 4/08- 3/ 7/08: Secure Software Engineering (SecSE), Barcelona, Catalonia; info SecSE08 "replace with at-character" gmail.com
    • 3/15/08: IEEE Computer and Communications Network Security Symposium (Globecom), New Orleans, LA; Submissions are due; info: abderrahim.benslimane@univ-avignon.fr;
    • 3/15/08: Security and Multimodality in Pervasive Environments (SMPE), Dublin, Ireland; Submissions are due; info: coronato.a@na.ica.cnr.it;
    • 3/16/08- 3/20/08: Symposium on Applied Computing, Track on Trust, Recommendations, Evidence and other Collaboration Know-how (SAC-TRECK), Ceará, Brazil; info: Jean-Marc.Seigneur@trustcomp.org
    • 3/17/08: Digital Forensic Research Workshop (DFRWS), Baltimore, MD; Submissions are due;
    • 3/17/08: Cyber Security and Information Intelligence Research Workshop (CSIIRW), Oak Ridge, TN; Submissions are due; NP;
    • 3/17/08: Interdisciplinary Studies in Information Privacy and Security (ISIPS), New Brunswick, New Jersey; Submissions are due;
    • 3/18/08- 3/20/08: Symposium on Information, Computer and Communications Security (ASIACCS), Tokyo, Japan;
    • 3/21/08: Workshop in Information Security Theory and Practices (WISTP), Sevilla, Spain; Submissions are due; info: wistp2008sec@xlim.fr;
    • 3/24/08: Security and Privacy for Communication Networks (Securecomm), Istanbul, Turkey; Submissions are due; NP;
    • 3/31/08- 4/ 2/08: Wireless Network Security (WiSec), Alexandria, VA;
    • 3/31/08: European Symposium on Research in Computer Security (ESORICS), Malaga, Spain; Submissions are due;
    • 4/ 4/08: Recent Advances in Intrusion Detection (RAID), Cambridge, MA; Submissions are due; info: rkc@ll.mit.edu;
    • 4/ 7/08- 4/11/08: Asynchronous Circuits and Systems (ASYNC), Newcastle upon Tyne, UK;
    • 4/11/08: New Security Paradigms Workshop (NSPW), Squaw Valley, CA; Submissions are due;
    • 4/14/08: Usability, Psychology, and Security (UPSEC), San Francisco, CA; info: upsec08chairs@usenix.org;
    • 4/14/08: Conference on Embedded Networked Sensor Systems (SenSys), Raleigh, NC; Submissions are due;
    • 4/18/08: Workshop on Security (IWSEC), Kagawa, Japan; Submissions are due;
    • 4/21/08: IFIP International Workshop on Network and System Security (NSS), Shanghai, China; Submissions are due; info: wanlei@deakin.edu.au;
    • 4/25/08: International Conference on Network Protocols (ICNP), Orlando, Florida; Submissions are due; proceedings to attendees only (AO); info: icnp2008@cs.purdue.edu;
    • 4/25/08: Advances in Computer Security and Forensics (ACSF), Liverpool, UK; Submissions are due; info: J.Haggerty@ljmu.ac.uk; AO;
    • 4/30/08: Digital Forensics and Incident Analysis (WDFIA), Malaga, Spain; Submissions are due; info: wdfia08@aegean.gr;
    • 4/30/08: IWACO Paphos, Cyprus; Submissions are due; info: mueller@microsoft.com; BP;
    • 4/30/08: Conference on Risks and Security of Internet and Systems (CRiSIS), Tozeur, Tunisia; Submissions are due; NP;
    • 5/ 9/08: Workshop on Artificial Intelligence for Security (AISec), Alexandria, VA; Submissions are due;
    • 5/12/08- 5/14/08: Cyber Security and Information Intelligence Research Workshop (CSIIRW), Oak Ridge, TN; NP
    • 5/12/08: Interdisciplinary Studies in Information Privacy and Security (ISIPS), New Brunswick, New Jersey;
    • 5/13/08- 5/16/08: Workshop in Information Security Theory and Practices (WISTP), Sevilla, Spain; info: wistp2008sec@xlim.fr;
    • 5/16/08: Workshop on Security and Privacy in Wireless and Mobile Computing, Networking and Communications (SecPri_WiMob), Avignon, France; Submissions are due;
    • 5/18/08- 5/21/08: Symposium on Security and Privacy (IEEE S&P), Berkeley/Oakland, CA; info: oakland08-generalchair @ ieee-security.org
    • 5/18/08: Asia-Pacific Trusted Infrastructure Technologies Conference (APTC), Yangtze River Cruiser, China; Submissions are due;
    • 5/22/08: Systematic Approaches to Digital Forensic Engineering (SADFE), Oakland, CA; info: guha@eecs.ucf.edu;
    • 6/ 3/08- 6/ 4/08: Applications of Pairing-Based Cryptography: IBE and Beyond (NIST-IBE), Gaithersburg, MD; info: ibe@nist.gov;
    • 6/ 4/08- 6/ 5/08: Symposium on Information Assurance (IASymp), Albany, NY; AO
    • 6/20/08: Workshop on Wireless Security and Privacy (WISP), Beijing, China; info: zjiang@wcupa.edu;
    • 6/22/08- 6/27/08: USENIX Annual Technical Conference (USENIX), Boston MA; info: conference@usenix.org;
    • 6/23/08- 6/25/08: Computer Security Foundations Symposium (CSF), Pittsburgh, PA;
    • 6/25/08- 6/27/08: Workshop on the Economics of Information Security (WEIS), Hanover, New Hampshire; proceedings to attendees only (AO)
    • 7/ 7/08: (or 7/8/08) Workshop on Aliasing, Confinement and Ownership (IWACO, Paphos, Cyprus; info: mueller@microsoft.com; BP; (see the ieee-security.org website calendar)
    • 7/ 8/08- 7/18/08: Human Aspects of Information Security & Assurance (HAISA), Plymouth, UK; info: info@haisa.org;
    • 7/10/08- 7/11/08: Detection of Intrusions and Malware and Vulnerability Assessment (DIMVA), Paris, France;
    • 7/10/08- 7/11/08: Advances in Computer Security and Forensics (ACSF), Liverpool, UK; info: J.Haggerty@ljmu.ac.uk; AO
    • 7/14/08- 7/16/08: Australasian Conference on Information Security and Privacy (ACISP), Wollongong, Australia;
    • 7/21/08- 7/25/08: Security and Multimodality in Pervasive Environments (SMPE), Dublin, Ireland; info: coronato.a@na.ica.cnr.it;
    • 7/23/08- 7/25/08: Symposium On Usable Privacy and Security (SOUPS), Carnegie Mellon University, Pittsburgh, PA;
    • 7/28/08- 8/ 1/08: USENIX Security Symposium (USENIXSec), San Jose, CA; info: sec08chair@usenix.org;
    • 8/11/08- 8/13/08: Digital Forensic Research Workshop (DFRWS), Baltimore, MD;
    • 9/ 8/08- 9/10/08: Information Security Conference (SEC), Milan, Italy;
    • 9/ 8/08- 9/11/08: Smart Card Research and Advanced Application Conference (CARDIS), Surrey, UK;
    • 9/15/08- 9/17/08: Recent Advances in Intrusion Detection (RAID), Cambridge, MA; info: rkc@ll.mit.edu;
    • 9/22/08- 9/25/08: New Security Paradigms Workshop (NSPW), Squaw Valley, CA;
    • 9/22/08- 9/25/08: Security and Privacy for Communication Networks (Securecomm), Istanbul, Turkey; NP
    • 10/ 6/08-10/ 8/08: European Symposium on Research in Computer Security (ESORICS), Malaga, Spain;
    • 10/ 9/08: Digital Forensics and Incident Analysis (WDFIA), Malaga, Spain; info: wdfia08@aegean.gr;
    • 10/12/08: Workshop on Security and Privacy in Wireless and Mobile Computing, Networking and Communications (SecPri_WiMob), Avignon, France;
    • 10/14/08-10/17/08: Asia-Pacific Trusted Infrastructure Technologies Conference (APTC), Yangtze River Cruiser, China;
    • 10/18/08-10/19/08: IFIP International Workshop on Network and System Security (NSS), Shanghai, China; info: wanlei@deakin.edu.au;
    • 10/19/08-10/22/08: International Conference on Network Protocols (ICNP), Orlando, Florida; proceedings to attendees only (AO); info: icnp2008@cs.purdue.edu;
    • 10/27/08: Workshop on Artificial Intelligence for Security (AISec), Alexandria, VA;
    • 10/28/08-10/30/08: Conference on Risks and Security of Internet and Systems (CRiSIS), Tozeur, Tunisia; NP
    • 10/31/08: NIST SHA3 Hash Functio Competition (NIST-SHA3),; info: bstein@nist.gov; Submissions are due;
    • 10/31/08: Workshop on Digital Identity Management (DIM), Fairfax, VA; info: ccs2008-dim_at_lab.ntt.co.jp; NP
    • 11/ 5/08-11/ 7/08: Conference on Embedded Networked Sensor Systems (SenSys), Raleigh, NC;
    • 11/25/08-11/27/08: Workshop on Security (IWSEC), Kagawa, Japan
    • 11/30/08-12/ 4/08: IEEE Computer and Communications Network Security Symposium (Globecom),, New Orleans, LA; info: abderrahim.benslimane@univ-avignon.fr
   

• The Technical Committee on Security and Privacy

 

• Listing of academic positions available  by Cynthia Irvine
  

 

• Staying in touch....

  • Information for Subscribers and Contributors

  • Who's where: recent address changes

  • Changing your email address?  Please send updates to cipher@ieee-security.org