Cipher Electronic Newsletter of the Technical Committe on    Security & Privacy A Technical Committee of the Computer Society of the IEEE  Electronic Issue (EI) 141,  November 30, 2017 Hilarie Orman,  Editor Sven Dietrich, Book Review Editor Sven Dietrich, Associate Editor Yong Guan, Calendar Editor

Contents:

• Letter from the Editor 
   

• Commentary and Opinion

  • NewsBits:  Announcements and correspondence from readers (please contribute!)

    • SEC's Edgar site hacked
    • GAO to SEC: "encrypt data" (repeat for 9 years)
    • Gotcha! WH Responds to Fake Emails
    • Firmware updates sometimes missed
    • The Rise and Fall of Mattel's Digital Nanny
    • Equifax --- blame the IT guy
    • States and voting security
    • Kaspersky works with Russian govmt
    • Israel blows the whistle on Kaspersky
    • Mining by visiting Politifact
    • S3 Buckets Leak Australian Data
    • WP2 nonce reuse, WiFi standard deeply flawed
    • North Korean cyberhacking is first-rate
    • RSA key generation not so good
    • Digital extortion targets schools
    • Utah Company and the Long Search
    • Forensics reveals details of years of Russian hacking
    • Little (No) Hope for Bill Limiting NSA Phone Surveillance
    • Major 4th amendment cell phone case before the US Supreme Court
    • We learn how vulnerability info is shared by the US govmt

  • Book reviews from past Cipher issues

  • Conference Reports and Commentary from past Cipher issues

  • News items from past Cipher issues

 

• Listing of academic positions available  by Cynthia Irvine
  

  Posted November 2017
  University of Gothenburg
  Gothenburg, Sweden
  PhD student
  Date position announcement closes: December 23, 2017
  URL of position description: https://goo.gl/pcdTAa
  

 

• Conference and Workshop Announcements

  • Cipher calls-for-papers and calendar
      Cipher calendar announcements are on Twitter; follow "ciphernews"
    Requests for inclusion in the list should sent per instructions.
      new calls or announcements added since Cipher E140 (the calls-for-papers and the calendar announcements may differ slightly in content or time of update): 

  • 11/30/17: PETS, 18th Privacy Enhancing Technologies Symposium, Barcelona, Spain, Submissions are due
  • 12/ 1/17: Information & Communications Technology Express, Special Issue on Critical Infrastructure (CI) & Smart Grid Cyber Security; Submissions are due
  • 12/ 1/17: SP, 39th IEEE Symposium on Security and Privacy, San Francisco, CA, USA, Submissions are due
  • 12/ 4/17-12/ 8/17: ACSAC, 33rd Annual Computer Security Applications Conference, San Juan, Puerto Rico
  • 12/ 5/17: ICSS, Industrial Control System Security Workshop, Held in conjunction with the 33rd Annual Computer Security Applications Conference (ACSAC), San Juan, Puerto Rico
  • 12/ 6/17: ASIACCS, ACM Symposium on Information, Computer and Communications Security, Sungdo, Incheon, Korea, Submissions are due
  • 12/ 8/17: IWSPA, 4th International Workshop on Security and Privacy Analytics, Co-located with ACM CODASPY 2018, Tempe, AZ, USA, Submissions are due
  • 12/20/17: CNS, IEEE Conference on Communications and Network Security, Beijing, China, Submissions are due
  • 1/ 1/18: SP, 39th IEEE Symposium on Security and Privacy, San Francisco, CA, USA, Submissions are due
  • 1/ 3/18- 1/ 5/18: IFIP119-DF, 14th Annual IFIP WG 11.9 International Conference on Digital Forensics, New Delhi, India
  • 1/12/18: DFRWS, 18th Annual DFRWS USA 2018 Conference, Providence, Rhode Island, USA, Submissions are due
  • 1/15/18: BioSTAR, 3rd International Workshop on Bio-inspired Security, Trust, Assurance and Resilience, Co-located with 39th IEEE Symposium on Security and Privacy (IEEE S&P 2018), San Francisco, CA, USA, Submissions are due
  • 1/16/18: SADFE, 12th International Workshop on Systematic Approaches to Digital Forensics Engineering, Co-located with 39th IEEE Symposium on Security and Privacy (IEEE S&P 2018), San Francisco, CA, USA, Submissions are due
  • 1/17/18: HotSoS, 5th Annual Hot Topics in the Science of Security Symposium, Raleigh, North Carolina, USA, Submissions are due
  • 2/ 1/18: SP, 39th IEEE Symposium on Security and Privacy, San Francisco, CA, USA, Submissions are due
  • 2/ 8/18: USENIX Security, 27th USENIX Security Symposium, Baltimore, MD, USA, Submissions are due
  • 2/28/18: PETS, 18th Privacy Enhancing Technologies Symposium, Barcelona, Spain, Submissions are due
  • 3/ 1/18: SP, 39th IEEE Symposium on Security and Privacy, San Francisco, CA, USA, Submissions are due
  • 3/21/17: IWSPA, 4th International Workshop on Security and Privacy Analytics, Co-located with ACM CODASPY 2018, Tempe, AZ, USA
  • 3/25/18- 3/28/18: PKC, 21st IACR International Conference on Practice and Theory in Public-Key Cryptography, Rio de Janeiro, Brazil
  • 4/ 1/18: SP, 39th IEEE Symposium on Security and Privacy, San Francisco, CA, USA, Submissions are due
  • 4/10/18- 4/11/18: HotSoS, 5th Annual Hot Topics in the Science of Security Symposium, Raleigh, North Carolina, USA
  • 5/ 1/18: SP, 39th IEEE Symposium on Security and Privacy, San Francisco, CA, USA, Submissions are due
  • 5/ 2/18- 5/ 3/18: HST, 18th annual IEEE Symposium on Technologies for Homeland Security, Washington D.C., USA
  • 5/21/18- 5/23/18: SP, 39th IEEE Symposium on Security and Privacy, San Francisco, CA, USA
  • 5/ /18: HOST, IEEE International Symposium on Hardware-Oriented Security and Trust, Washington DC, USA
  • 5/24/18: BioSTAR, 3rd International Workshop on Bio-inspired Security, Trust, Assurance and Resilience, Co-located with 39th IEEE Symposium on Security and Privacy (IEEE S&P 2018), San Francisco, CA, USA
  • 5/2/18: SADFE, 12th International Workshop on Systematic Approaches to Digital Forensics Engineering, Co-located with 39th IEEE Symposium on Security and Privacy (IEEE S&P 2018), San Francisco, CA, USA
  • 5/30/18- 6/ 1/18: CNS 2018 IEEE Conference on Communications and Network Security, Beijing, China
  • 6/ 4/18- 6/ 8/18: ASIACCS, ACM Symposium on Information, Computer and Communications Security, Sungdo, Incheon, Korea
  • 7/15/18- 7/18/18: DFRWS, 18th Annual DFRWS USA 2018 Conference, Providence, Rhode Island, USA
  • 7/24/18- 7/27/18: PETS, 18th Privacy Enhancing Technologies Symposium, Barcelona, Spain
  • 8/15/18- 88/17/18: USENIX Security, 27th USENIX Security Symposium, Baltimore, MD, USA
  • new calls or announcements added since Cipher E140

  • PETS 2018 18th Privacy Enhancing Technologies Symposium, Barcelona, Spain, July 24-27, 2018. (Submissions Due 30 November 2017, 28 February 2018)

    The annual Privacy Enhancing Technologies Symposium (PETS) brings together privacy experts from around the world to present and discuss recent advances and new perspectives on research in privacy technologies. Papers undergo a journal-style reviewing process and accepted papers are published in Proceedings on Privacy Enhancing Technologies (PoPETs), a scholarly, open access journal. Submitted papers should present novel practical and/or theoretical research into the design, analysis, experimentation, or fielding of privacy-enhancing technologies. While PETS/PoPETs has traditionally been home to research on anonymity systems and privacy-oriented cryptography, we strongly encourage submissions on a number of both well-established and emerging privacy-related topics, for which examples are provided below. PoPETs also solicits submissions for Systematization of Knowledge (SoK) papers. These are papers that critically review, evaluate, and contextualize work in areas for which a body of prior literature exists, and whose contribution lies in systematizing the existing knowledge in that area. Authors are encouraged to view our FAQ about the submission process.

    • Behavioural targeting
    • Building and deploying privacy-enhancing systems
    • Crowdsourcing for privacy
    • Cryptographic tools for privacy
    • Data protection technologies
    • Differential privacy
    • Economics of privacy and game-theoretical approaches to privacy
    • Empirical studies of privacy in real-world systems
    • Forensics and privacy
    • Human factors, usability and user-centered design for PETs
    • Information leakage, data correlation and generic attacks to privacy
    • Interdisciplinary research connecting privacy to economics, law, ethnography, psychology, medicine, biotechnology
    • Location and mobility privacy
    • Machine learning and privacy
    • Measuring and quantifying privacy
    • Mobile devices and privacy
    • Obfuscation-based privacy
    • Policy languages and tools for privacy
    • Privacy in cloud and big-data applications
    • Privacy in social networks and microblogging systems
    • Privacy-enhanced access control, authentication, and identity management
    • Profiling and data mining
    • Reliability, robustness, and abuse prevention in privacy systems
    • Surveillance
    • Systems for anonymous communications and censorship resistance
    • Traffic analysis
    • Transparency enhancing tools
    • Web privacy

  • Information & Communications Technology Express, Special Issue on Critical Infrastructure (CI) & Smart Grid Cyber Security, (Submissions Due 1 December 2017)

    Guest Editors: Leandros A. Maglaras (De Montfort University, UK), Ki-Hyung Kim (Ajou University, Korea), Helge Janicke (De Montfort University, UK), Mohamed Amine Ferrag, Guelma University, Algeria), Artemios G. Voyiatzis (SBA Research, Austria), Pavlina Fragkou (T.E.I of Athens, Greece), Athanasios Maglaras (T.E.I. of Thessaly, Greece), and Tiago J. Cruz (University of Coimbra, Portugal).
    
    Cyber-physical systems are becoming vital to modernizing the national critical infrastructure (CI) systems. A smart grid is an energy transmission and distribution network enhanced through digital control, monitoring, and telecommunications capabilities. It provides a real-time, two-way flow of energy and information to all stakeholders in the electricity chain, from the generation plant to the commercial, industrial, and residential end user. Each smart grid subsystem and its associated assets require specific security functions and solutions. For example, the solution to secure a substation is not the same as the solution to secure demand response and home energy management systems. Usual cyber security technologies and best practices - such as antivirus, firewalls, intrusion prevention systems, network security design, defense in depth, and system hardening - are necessary to protect the smart grid. However, history showed they are only part of the solution. Owing to the rapid increase of sophisticated cyber threats with exponentially destructive effects advanced cyber security technologies must be developed. The title of this special issue of ICT Express is therefore coined concisely as "Special Issue on CI & Smart Grid Cyber Security". This special issue focuses on innovative methods and techniques in order to address unique security issues relating to CI and smart grids. Original submissions reflecting latest research observation and achievement in the following areas are invited:

    • Hardware Security Solutions
    • Incident response
    • Real-time threat intelligence
    • Situation Awareness
    • Security information and event management (SIEM) systems
    • Machine Learning Techniques
    • Safety-Security Interactions
    • System Vulnerabilities
    • Cyber Security Engineering
    • Human Awareness & Training
    • Intrusion Detection Systems
    • Trust and privacy
    • Malware Analysis
    • Behavioral Modeling
    • Secure Communication Protocols
    • Malware analysis
    • Network security and protocols
    • Hardware enforced virtualization

  • SP 2018 39th IEEE Symposium on Security and Privacy, San Francisco, CA, USA, May 21-23, 2018. (Submissions Due first day of each month)

    Since 1980 in Oakland, the IEEE Symposium on Security and Privacy has been the premier forum for computer security research, presenting the latest developments and bringing together researchers and practitioners. We solicit previously unpublished papers offering novel research contributions in any aspect of security or privacy. Papers may present advances in the theory, design, implementation, analysis, verification, or empirical evaluation and measurement of secure systems. Topics of interest include:

    • Access control and authorization
    • Accountability
    • Anonymity
    • Application security
    • Attacks and defenses
    • Authentication
    • Censorship resistance
    • Cloud security
    • Distributed systems security
    • Economics of security and privacy
    • Embedded systems security
    • Forensics
    • Hardware security
    • Intrusion detection and prevention
    • Malware and unwanted software
    • Mobile and Web security and privacy
    • Language-based security
    • Network and systems security
    • Privacy technologies and mechanisms
    • Protocol security
    • Secure information flow
    • Security and privacy for the Internet of Things
    • Security and privacy metrics
    • Security and privacy policies
    • Security architectures
    • Usable security and privacy
    This topic list is not meant to be exhaustive; S&P is interested in all aspects of computer security and privacy. Papers without a clear application to security or privacy, however, will be considered out of scope and may be rejected without full review.
    
    Systematization of Knowledge Papers As in past years, we solicit systematization of knowledge (SoK) papers that evaluate, systematize, and contextualize existing knowledge, as such papers can provide a high value to our community. Suitable papers are those that provide an important new viewpoint on an established, major research area, support or challenge long-held beliefs in such an area with compelling evidence, or present a convincing, comprehensive new taxonomy of such an area. Survey papers without such insights are not appropriate. Submissions will be distinguished by the prefix ?SoK:? in the title and a checkbox on the submission form. They will be reviewed by the full PC and held to the same standards as traditional research papers, but they will be accepted based on their treatment of existing work and value to the community, and not based on any new research results they may contain. Accepted papers will be presented at the symposium and included in the proceedings.
    
    Workshops The Symposium is also soliciting submissions for co-located workshops. Further details on submissions can be found at https://www.ieee-security.org/TC/SP2018/workshops.html.
    
    Ongoing Submissions To enhance the quality and timeliness of the scientific results presented as part of the Symposium, and to improve the quality of our reviewing process, IEEE S&P now accepts paper submissions 12 times a year, on the first of each month. The detailed process can be found at the conference call-for-papers page.

  • ASIACCS 2018 ACM Symposium on Information, Computer and Communications Security, Sungdo, Incheon, Korea, Jun 4-8, 2018. (Submissions Due 6 December 2017)

    We invite submissions from academia, government, and industry presenting novel research on all theoretical and practical aspects of computer and network security. Areas of interest for ASIACCS 2018 include, but are not limited to:

    • Access control
    • Accounting and audit
    • Applied cryptography
    • Authentication
    • Big data security and privacy
    • Biometrics
    • Blockchain and alternatives
    • Cloud computing security
    • Computer forensics
    • Cyber-physical system security
    • Data and application security
    • Embedded systems security
    • Formal methods for security
    • Hardware-based security and applications
    • IoT security and privacy
    • Key management
    • Malware and botnets
    • Mobile computing security
    • Network security
    • Operating system security
    • Practical post-quantum security
    • Privacy-enhancing technology
    • Runtime attacks and defenses
    • Secure computation
    • Security architectures
    • Security of critical infrastructures
    • Security metrics
    • Software security
    • Threat modeling
    • Trusted computing
    • Usable security and privacy
    • Web security
    • Wireless security and privacy

  • IWSPA 2018 4th International Workshop on Security and Privacy Analytics, Co-located with ACM CODASPY 2018, Tempe, AZ, USA, March 21, 2018. (Submissions Due 8 December 2017)

    Increasingly, sophisticated techniques from machine learning, data mining, statistics and natural language processing are being applied to challenges in security and privacy fields. However, experts from these areas have no medium where they can meet and exchange ideas so that strong collaborations can emerge, and cross-fertilization of these areas can occur. Moreover, current courses and curricula in security do not sufficiently emphasize background in these areas and students in security and privacy are not emerging with deep knowledge of these topics. Hence, we propose a workshop that will address the research and development efforts in which analytical techniques from machine learning, data mining, natural language processing and statistics are applied to solve security and privacy challenges ("security analytics"). Submissions of papers related to methodology, design, techniques and new directions for security and privacy that make significant use of machine learning, data mining, statistics or natural language processing are welcome. Furthermore, submissions on educational topics and systems in the field of security analytics are also highly encouraged.

  • CNS 2018 IEEE Conference on Communications and Network Security, Beijing, China, May 30 - June 1, 2018. (Submissions Due 20 December 2017)

    IEEE Conference on Communications and Network Security (IEEE CNS) is a conference series in IEEE Communications Society (ComSoc) core conference portfolio and the only ComSoc conference focusing solely on cybersecurity. IEEE CNS provides a premier forum for security researchers, practitioners, policy makers, and users to exchange ideas, techniques and tools, raise awareness, and share experience related to all practical and theoretical aspects of cybersecurity. Building on the success of the past five years' conferences, IEEE CNS 2018 seeks original high-quality technical papers from academia, government, and industry. Topics of interest encompass all practical and theoretical aspects of communications and network security, from the physical layer to the network layer to the variety of applications reliant on a secure communication substrate. Topics of interest include:

    • Anonymity and privacy technologies
    • Computer and network forensics
    • Cyber deterrence strategies
    • Game-theoretic security technologies
    • Implementation and evaluation of networked security systems
    • Information-theoretic security
    • Intrusion detection, prevention, and response
    • Key management, public key infrastructures, certification, revocation, and authentication
    • Malware detection and mitigation
    • Security metrics and models
    • Physical-layer and cross-layer security technologies
    • Security and privacy for big data
    • Security and privacy for data and network outsourcing services
    • Security and privacy for mobile and wearable devices
    • Security and privacy in cellular networks
    • Security and privacy in cloud and edge computing
    • Security and privacy in crowdsourcing
    • Security and privacy in emerging wireless technologies (dynamic spectrum sharing, cognitive radio networks, millimeter wave communications, MIMO systems, etc.)
    • Security and privacy in peer-to-peer and overlay networks
    • Security and privacy in Wi-Fi, ad hoc, mesh, sensor, vehicular, body-area, disruption/delay tolerant, and social networks
    • Security and privacy in smart cities, smart and connected health, IoT, and RFID systems
    • Security for critical infrastructures (smart grids, transportation systems, etc.)
    • Security for future Internet architectures and designs
    • Security for software-defined and data center networks
    • Social, economic, and policy issues of trust, security, and privacy
    • Traffic analysis
    • Usable security and privacy
    • Web, e-commerce, m-commerce, and e-mail security

  • DFRWS 2018 18th Annual DFRWS USA 2018 Conference, Providence, Rhode Island, USA, July 15-18, 2018. (Submissions Due 12 January 2018)

    We invite contributions in five categories: research papers, presentation proposals, panel proposals, workshop proposals, and demo proposals. Topics of Interest:

    • Memory analysis and snapshot acquisition
    • Storage forensics, including solid state
    • "Big data" forensics, related to collection, analysis, and visualization
    • Incident response and live analysis
    • Forensics of cloud and virtualized environments
    • Malware and targeted attacks (analysis and attribution)
    • Network and distributed system forensics
    • Event reconstruction methods and tools
    • Mobile and embedded device forensics
    • Digital evidence storage and preservation
    • Data recovery and reconstruction
    • Multimedia analysis
    • Database forensics
    • Tool testing and development
    • Digital evidence and the law
    • Case studies and trend reports
    • Data hiding and discovery
    • Anti-forensics and anti-anti-forensics
    • Interpersonal communications and social network analysis
    • Non-traditional forensic scenarios and approaches (e.g. vehicles, Internet of Things, industrial control systems, and SCADA)
    • Archival preservation & reconstruction

  • BioSTAR 2018 3rd International Workshop on Bio-inspired Security, Trust, Assurance and Resilience, Co-located with 39th IEEE Symposium on Security and Privacy (IEEE S&P 2018), San Francisco, CA, USA, May 24, 2018. (Submissions Due 15 January 2018)

    As computing and communication systems continue to expand and offer new services, these advancements require more dynamic, diverse, and interconnected computing infrastructures. Unfortunately, defending and maintaining resilient and trustworthy operation of these complex systems are increasingly difficult challenges. Conventional approaches to Security, Trust, Assurance and Resilience (STAR for short) are often too narrowly focused and cannot easily scale to manage large, coordinated and persistent attacks in these environments. Designs found in nature are increasingly used as a source of inspiration for STAR and related networking and intelligence solutions for complex computing and communication environments. Nature's footprint is present in the world of Information Technology, where there are an astounding number of computational bio-inspired techniques. These well-regarded approaches include genetic algorithms, neural networks, ant algorithms, immune systems just to name a few. For example several networking management and security technologies have successfully adopted some of nature's approaches, such as swarm intelligence, artificial immune systems, sensor networks, moving target defense, diversity-based software design, etc. Nature has also developed an outstanding ability to recognize individuals or foreign objects and adapt/evolve to protect a group or a single organism. Solutions that incorporate these nature-inspired characteristics often have improved performance and/or provided new capabilities beyond more traditional methods. The aim of this workshop is to bring together the research accomplishments provided by the researchers from academia and the industry. The other goal is to show the latest research results in the field of nature-inspired STAR aspects in computing and communications. Topics of interests include, but are not limited to:

    • Nature-inspired anomaly and intrusion detection
    • Adaptation algorithms
    • Biometrics
    • Nature-inspired algorithms and technologies for STAR
    • Biomimetics
    • Artificial Immune Systems
    • Adaptive and Evolvable Systems
    • Machine Learning, neural networks, genetic algorithms for STAR
    • Nature-inspired analytics and prediction
    • Cognitive systems
    • Sensor and actuator networks and systems
    • Information hiding solutions (steganography, watermarking) for network traffic
    • Cooperative defense systems
    • Cloud-supported nature-inspired STAR
    • Theoretical development in heuristics
    • Management of decentralized networks
    • Nature-inspired algorithms for dependable networks
    • Platforms for STAR services
    • Diversity in computing and communications
    • Survivable and sustainable systems
    • STAR management systems
    • Autonomic cyber defenses

  • SADFE 2018 12th International Workshop on Systematic Approaches to Digital Forensics Engineering, Co-located with 39th IEEE Symposium on Security and Privacy (IEEE S&P 2018), San Francisco, CA, USA, May 24, 2018. (Submissions Due 16 January 2018)

    SADFE (Systematic Approaches to Digital Forensic Engineering) promotes systematic approaches to digital forensic investigation on failures of today's cyber systems and networks. SADFE furthers Digital Forensic Engineering (DFE) advancement as a disciplined and holistic scientific practice. The 12th International Conference on Systematic Approaches to Digital Forensic Engineering (SADFE) is calling for paper submissions in the broad field of Digital Forensics from both practitioner and researcher's perspectives. With the dynamic change and rapid expansion of the types of electronic devices, networked applications, and investigation challenges, systematic approaches for automating the process of gathering, analyzing and presenting digital evidence are in unprecedented demands. The SADFE conference aims at promoting solutions for related problems. Past speakers and attendees of SADFE have included computer scientists, social scientists, forensic practitioners, lawyers and judges. The synthesis of hard technology and science with social science and practice forms the foundation of this conference. Papers focusing on any of the system, legal, or practical aspects of digital forensics are solicited. Topics to be Addressed:

    • Digital Data and Evidence Management: advanced digital evidence discovery, collection, management, storage and preservation
    • Digital Evidence, Data Integrity and Analytics: advanced digital evidence and digitized data analysis, correlation, and presentation
    • Forensics of embedded or non-traditional devices (e.g. digicams, cell phones, SCADA, obsolete storage media)
    • Forensic and digital data integrity issues for digital preservation and recovery
    • Scientific Principle-Based Digital Forensic Processes: systematic engineering processes supporting digital evidence management which are sound on scientific, technical and legal grounds
    • Legal/technical aspects of admissibility and evidence tests
    • Legal, Ethical and Technical Challenges

  • HotSoS 2018 5th Annual Hot Topics in the Science of Security Symposium, Raleigh, North Carolina, USA, April 10-11, 2018. (Submissions Due 17 January 2018)

    HoTSoS draws together researchers, practitioners, and thought leaders from government, industry, and academia. The conference provides a forum for dialogue centered upon the development and advancement of scientific foundations in cybersecurity. The technical emphasis of HoTSoS is on scientific methods, data gathering and analysis, experimental approaches, mathematical models, and the interactions among those approaches to build a foundational science of security. The HoTSoS vision is one of engaging and growing a community - including researchers and skilled practitioners from diverse disciplines - that is focused around the advancement of scientific methods. We invite submissions on any topic related to science of security that aligns with the conference scope and goals listed above. The 2018 HoTSoS will highlight the following themes:

    • Scalability and composability in the construction of secure systems
    • Policy-governed collaboration for handling data across different domains of authority while ensuring security and privacy
    • Security metrics to guide choice-making in security engineering and response
    • Resilient architectures that can deliver service despite compromised components
    • Analysis of human behavior, including modeling users, operators, and adversaries, to support improved design and analysis
    • Foundational research related to privacy that allows for the ability to use (i.e., collect, store, and share) data in accordance with requirements
    • Foundations for the security of cyber-physical systems, including applications to the Internet of Things

  • USENIX Security 2018 27th USENIX Security Symposium, Baltimore, MD, USA, August 15-17, 2018. (Submissions Due 8 February 2018)

    The USENIX Security Symposium brings together researchers, practitioners, system administrators, system programmers, and others interested in the latest advances in the security and privacy of computer systems and networks. All researchers are encouraged to submit papers covering novel and scientifically significant practical works in computer security. USENIX Security is interested in all aspects of computing systems security and privacy. Papers without a clear application to security or privacy, however, will be considered out of scope and may be rejected without full review.

 

• The Technical Committee on Security and Privacy

 

• Staying in touch....

  • Information for Subscribers and Contributors

  • Who's where: recent address changes

  • Changing your email address?  Please send updates to cipher@ieee-security.org