Contents:

• Letter from the Editor 
   

• Commentary and Opinion

  • Sven Dietrich's review of Practical Binary analysis : build your own Linux tools for binary instrumentation, analysis, and disassembly by Dennis Andriesse

  • NewsBits:  Announcements and correspondence from readers (please contribute!)

    • The Cyber Security Hall of Fame
    • The People's Root Certificate Authority
    • Dirty Cookies
    • VPNs that are Unprivate, Actually
    • Google Fine Not So Fine
    • Facebook is All Fine

  • Book reviews from past Cipher issues

  • Conference Reports and Commentary from past Cipher issues

  • News items from past Cipher issues

• Listing of academic positions available  by Cynthia Irvine
  
  No changes since Cipher E146. Send announcements to irvine@nps.edu with subject "Request for Cipher Job listing on CISR website"

 

• Conference and Workshop Announcements

  • Cipher calls-for-papers and calendar
      Cipher calendar announcements are on Twitter; follow "ciphernews"
    Requests for inclusion in the list should sent per instructions.
      new calls or announcements added since Cipher E146 (the calls-for-papers and the calendar announcements may differ slightly in content or time of update): 

  • 1/25/19: ACM WiSec, 12th ACM Conference on Security and Privacy in Wireless and Mobile Networks, Miami beach, FL, USA, Submissions are due
  • 1/28/19- 1/30/19: IFIP 11.9 DF, 15th Annual IFIP WG 11.9 International Conference on Digital Forensics, Orlando, Florida, USA
  • 1/30/19: Safethings, IEEE Workshop on the Internet of Safe Things, Held in conjunction with the 40th IEEE Symposium on Security and Privacy (SP 2019), San Francisco, California, USA, Submissions are due
  • 1/31/19: ACM-CCS 2019 26th ACM Conference on Computer and Communications Security, London, United Kingdom, Submissions are due
  • 2/ 1/19: SP, 41st IEEE Symposium on Security and Privacy, San Francisco, CA, USA, Submissions are due
  • 2/10/19: SACMAT, 24th ACM Symposium on Access Control Models and Technologies, Toronto, Canada, Submissions are due
  • 2/15/19: USENIX-Security, 28th USENIX Security Symposium, Santa Clara, CA, USA, Submissions are due
  • 2/18/19: DIMVA, 16th International Conference on Detection of Intrusions and Malware & Vulnerability Assessment, Gothenburg, Sweden, Submissions are due
  • 2/24/19- 2/27/19: NDSS, 26th Annual Network and Distributed System Security Symposium, San Diego, California, USA
  • 2/28/19: PET, 19th Privacy Enhancing Technologies Symposium, Stockholm, Sweden, Submissions are due
  • 2/28/19: SSIoT, 1st IEEE EuroS&P Workshop on Software Security for Internet of Things, Co-located with IEEE EuroS&P 2019, Stockholm, Sweden, Submissions are due
  • 3/ 1/19: SP, 41st IEEE Symposium on Security and Privacy, San Francisco, CA, USA, Submissions are due
  • 3/ 1/19: Blockchain, IEEE International Conference on Blockchain, Atlanta, GA, USA, Submissions are due
  • 3/ 1/19: CPSS, 5th ACM Cyber-Physical System Security Workshop, Held in conjunction with ACM AsiaCCS 2019, Auckland, New Zealand, Submissions are due
  • 3/ 1/19: DBSec, 33rd Annual IFIP WG 11.3 Conference on Data and Applications Security and Privacy, Charleston, SC, USA, Submissions are due
  • 3/15/19: TrustData, 10th International Workshop on Trust, Security and Privacy for Big Data, Atlanta, USA, Submissions are due
  • 3/25/19- 3/27/19: CODASPY, 9th ACM Conference on Data and Application Security and Privacy, Dallas, TX, USA
  • 3/27/19: IWSPA, 5th International Workshop on Security and Privacy Analytics, Co-located with ACM CODASPY 2019, Dallas, TX, USA
  • 3/30/19: AIBlock, 1st International Workshop on Application Intelligence and Blockchain Security, Held in Conjunction With ACNS 2019, Bogota, Colombia, Submissions are due
  • 3/30/19: CLOUDS&P, 1st Workshop on Cloud Security and Privacy, Held in Conjunction With ACNS 2019, Bogota, Colombia, Submissions are due
  • 4/ 1/19: SP, 41st IEEE Symposium on Security and Privacy, San Francisco, CA, USA, Submissions are due
  • 4/22/19: ESORICS, 24th European Symposium on Research in Computer Security, Luxembourg, Submissions are due
  • 5/ 1/19: SP, 41st IEEE Symposium on Security and Privacy, San Francisco, CA, USA, Submissions are due
  • 5/15/19: ACM-CCS 2019 26th ACM Conference on Computer and Communications Security, London, United Kingdom, Submissions are due
  • 5/15/19- 5/17/19: ACM WiSec, 12th ACM Conference on Security and Privacy in Wireless and Mobile Networks, Miami beach, FL, USA
  • 5/20/19- 5/22/19: SP, 40th IEEE Symposium on Security and Privacy, San Francisco, CA, USA
  • 5/23/19: Safethings, IEEE Workshop on the Internet of Safe Things, Held in conjunction with the 40th IEEE Symposium on Security and Privacy (SP 2019), San Francisco, California, USA
  • 6/ 1/19: SP, 41st IEEE Symposium on Security and Privacy, San Francisco, CA, USA, Submissions are due
  • 6/ 4/19- 6/ 6/19: SACMAT, 24th ACM Symposium on Access Control Models and Technologies, Toronto, Canada
  • 6/ 5/19- 6/ 7/19: AIBlock, 1st International Workshop on Application Intelligence and Blockchain Security, Held in Conjunction With ACNS 2019, Bogota, Colombia
  • 6/ 5/19- 6/ 7/19: CLOUDS&P, 1st Workshop on Cloud Security and Privacy, Held in Conjunction With ACNS 2019, Bogota, Colombia
  • 6/10/19- 6/12/19: CNS, IEEE Conference on Communications and Network Security, Washington, D.C., USA
  • 6/16/19: SSIoT, 1st IEEE EuroS&P Workshop on Software Security for Internet of Things, Co-located with IEEE EuroS&P 2019, Stockholm, Sweden
  • 6/17/19- 6/19/19: EuroSP, 4th IEEE European Symposium on Security and Privacy, Stockholm, Sweden
  • 6/19/19- 6/20/19: DIMVA, 16th International Conference on Detection of Intrusions and Malware & Vulnerability Assessment, Gothenburg, Sweden
  • 7/ 1/19: SP, 41st IEEE Symposium on Security and Privacy, San Francisco, CA, USA, Submissions are due
  • 7/ 8/19: CPSS, 5th ACM Cyber-Physical System Security Workshop, Held in conjunction with ACM AsiaCCS 2019, Auckland, New Zealand
  • 7/14/19- 7/17/19: Blockchain, IEEE International Conference on Blockchain, Atlanta, GA, USAe
  • 7/14/19- 7/17/19: TrustData, 10th International Workshop on Trust, Security and Privacy for Big Data, Atlanta, USA
  • 7/15/19- 7/17/19: DBSec, 33rd Annual IFIP WG 11.3 Conference on Data and Applications Security and Privacy, Charleston, SC, USA
  • 7/16/19- 7/20/19: PET, 19th Privacy Enhancing Technologies Symposium, Stockholm, Sweden
  • 8/ 1/19: SP, 41st IEEE Symposium on Security and Privacy, San Francisco, CA, USA, Submissions are due
  • 8/14/19- 8/16/19: USENIX-Security, 28th USENIX Security Symposium, Santa Clara, CA, USA
  • 9/ 1/19: SP, 41st IEEE Symposium on Security and Privacy, San Francisco, CA, USA, Submissions are due
  • 9/ 1/19: ACM-CCS 2019 26th ACM Conference on Computer and Communications Security, London, United Kingdom, Submissions are due
  • 9/23/19- 9/27/19: ESORICS, 24th European Symposium on Research in Computer Security, Luxembourg
  • 10/ 1/19: SP, 41st IEEE Symposium on Security and Privacy, San Francisco, CA, USA, Submissions are due
  • 11/ 1/19: SP, 41st IEEE Symposium on Security and Privacy, San Francisco, CA, USA, Submissions are due
  • 11/11/19-11/15/19: ACM-CCS 2019 26th ACM Conference on Computer and Communications Security, London, United Kingdom
  • 12/ 1/19: SP, 41st IEEE Symposium on Security and Privacy, San Francisco, CA, USA, Submissions are due
  • 1/ 1/20: SP, 41st IEEE Symposium on Security and Privacy, San Francisco, CA, USA, Submissions are due
  • 5/18/20- 5/20/20: SP, 41st IEEE Symposium on Security and Privacy, San Francisco, CA, USA
  
  
• new calls or announcements added since Cipher E146

• SP 2020 41st IEEE Symposium on Security and Privacy, San Francisco, CA, USA, May 18-20, 2020. (Submissions are due first day of each month)

  Since 1980 in Oakland, the IEEE Symposium on Security and Privacy has been the premier forum for computer security research, presenting the latest developments and bringing together researchers and practitioners. We solicit previously unpublished papers offering novel research contributions in any aspect of security or privacy. Papers may present advances in the theory, design, implementation, analysis, verification, or empirical evaluation and measurement of secure systems. Topics of interest include:

  • Access control and authorization
  • Anonymity
  • Application security
  • Attacks and defenses
  • Authentication
  • Blockchains and distributed ledger security
  • Censorship resistance
  • Cloud security
  • Cyber physical systems security
  • Distributed systems security
  • Economics of security and privacy
  • Embedded systems security
  • Forensics
  • Hardware security
  • Intrusion detection and prevention
  • Malware and unwanted software
  • Mobile and Web security and privacy
  • Language-based security
  • Machine learning and AI security
  • Network and systems security
  • Privacy technologies and mechanisms
  • Protocol security
  • Secure information flow
  • Security and privacy for the Internet of Things
  • Security and privacy metrics
  • Security and privacy policies
  • Security architectures
  • Usable security and privacy
  • Trustworthy computing
  • Web security
  This topic list is not meant to be exhaustive; S&P is interested in all aspects of computer security and privacy. Papers without a clear application to security or privacy, however, will be considered out of scope and may be rejected without full review.
  
  Systematization of Knowledge Papers As in past years, we solicit systematization of knowledge (SoK) papers that evaluate, systematize, and contextualize existing knowledge, as such papers can provide a high value to our community. Suitable papers are those that provide an important new viewpoint on an established, major research area, support or challenge long-held beliefs in such an area with compelling evidence, or present a convincing, comprehensive new taxonomy of such an area. Survey papers without such insights are not appropriate. Submissions will be distinguished by the prefix 'SoK:' in the title and a checkbox on the submission form. They will be reviewed by the full PC and held to the same standards as traditional research papers, but they will be accepted based on their treatment of existing work and value to the community, and not based on any new research results they may contain. Accepted papers will be presented at the symposium and included in the proceedings.
  
  Workshops The Symposium is also soliciting submissions for co-located workshops. Further details on submissions can be found at https://www.ieee-security.org/TC/SP2020/workshops.html.
  
  Ongoing Submissions To enhance the quality and timeliness of the scientific results presented as part of the Symposium, and to improve the quality of our reviewing process, IEEE S&P now accepts paper submissions 12 times a year, on the first of each month. The detailed process can be found at the conference call-for-papers page.

• ACM WiSec 2019 12th ACM Conference on Security and Privacy in Wireless and Mobile Networks, Miami beach, FL, USA, May 15-17, 2019. (Submissions are due 25 January 2019)

  ACM WiSec is the leading ACM and SIGSAC conference dedicated to all aspects of security and privacy in wireless and mobile networks and their applications. In addition to the traditional ACM WiSec topics of physical, link, and network layer security, we welcome papers focusing on the increasingly diverse range of mobile or wireless applications such as Internet of Things, and Cyber-Physical Systems, as well as the security and privacy of mobile software platforms, usable security and privacy, biometrics, and cryptography. The conference welcomes both theoretical as well as systems contributions. Topics of interest include, but are not limited to:

  • Security protocols for wireless networking
  • Security and privacy for smart devices (e.g., smartphones)
  • Security of mobile applications for smartphones and wearables
  • Wireless and mobile privacy and anonymity
  • Secure localization and location privacy
  • Cellular network fraud and security
  • Jamming attacks and defenses
  • Key management (agreement or distribution) for wireless or mobile systems
  • Theoretical and formal approaches for wireless and mobile security
  • Physical layer and Information-theoretic security schemes for wireless systems
  • Cryptographic primitives for wireless and mobile security
  • NFC and smart payment applications
  • Security and privacy for mobile sensing systems
  • Wireless or mobile security for Cyber-Physical Systems (e.g, healthcare, smart grid, or IoT applications)
  • Vehicular networks security (e.g., drones, automotive, avionics, autonomous driving)
  • Physical tracking security and privacy
  • Usable mobile security and privacy
  • Economics of mobile security and privacy
  • Mobile malware and platform security
  • Security for cognitive radio and dynamic spectrum access systems

• Safethings 2019 IEEE Workshop on the Internet of Safe Things, Held in conjunction with the 40th IEEE Symposium on Security and Privacy (SP 2019), San Francisco, California, USA, May 23, 2019. (Submissions are due 30 January 2019)

  The Internet of Things (IoT) has become increasingly popular and innovative. With the rise of connected devices, we have an opportunity to significantly improve the safety of legacy systems. For instance, insights from data across systems can be exploited to reduce accidents, improve air quality and support disaster events. IoT based cyber-physical systems (CPS) also bring new risks that arise due to the unexpected interaction between systems and the larger number of attack vectors on these systems. These safety risks can arise in the context of use of medical devices, smart home appliance control, smart car design or conflicts in policy execution at a societal scale. The Internet of Safe Things workshop seeks to bring together researchers to create solutions for the development of safe cyber-physical systems. As safety is inherently linked with the security and privacy of a system, we also seek contributions in these areas that address safety concerns. We seek to develop a community that systematically dissects the vulnerabilities and risks exposed by these emerging CPSes, and creates tools, algorithms, frameworks, and systems that help in the development of safe systems. We seek contributions across domains - autonomous vehicles, smart homes, medical devices, smart grid; and across disciplines - systems, control, human-computer interaction, security, reliability, machine learning, and verification.

• ACM-CCS 2019 26th ACM Conference on Computer and Communications Security, London, United Kingdom, November 11-15, 2019. (Submissions are due 31 January 2019, 15 May 2019, 1 September 2019)

  The ACM Conference on Computer and Communications Security (CCS) is the flagship annual conference of the Special Interest Group on Security, Audit and Control (SIGSAC) of the Association for Computing Machinery (ACM). The conference brings together information security researchers, practitioners, developers, and users from all over the world to explore cutting-edge ideas and results. It provides an environment to conduct intellectual discussions. From its inception, CCS has established itself as a high standard research conference in its area. The Conference on Computer and Communications Security (CCS) seeks submissions presenting novel contributions related to all real-world aspects of computer security and privacy. Theoretical papers must make a convincing case for the relevance of their results to practice. Authors are encouraged to write the abstract and introduction of their paper in a way that makes the results accessible and compelling to a general computer-security researcher. In particular, authors should bear in mind that anyone on the program committee may be asked to give an opinion about any paper.
  
  IMPORTANT: CCS will have three review cycles in 2019: the first with a submission deadline of January 31, the second with a submission deadline of May 15, and the third with a tentative submission deadline of September 1. The third review cycle is only for papers invited for resubmission from the first two cycles; no new submissions will be considered. Papers rejected from the first review cycle may not be submitted again (even in revised form) to the second review cycle.

• SACMAT 2019 24th ACM Symposium on Access Control Models and Technologies, Toronto, Canada, June 4-6, 2019. (Submissions are due 10 February 2019)

  The organizing committee of the 24th ACM Symposium on Access Control Models and Technologies (SACMAT 2019) invites contributions in all aspects of access control. The symposium will provide participants the opportunity to present work at different levels of development, from early work on promising ideas to fully developed technical results as well as system demonstrations. Papers offering novel research contributions are solicited for submission. Accepted papers will be presented at the symposium and published by the ACM in the symposium proceedings. In addition to the regular research track, this year SACMAT will again host a special track -- "Blue Sky/Vision Track". Researchers are invited to submit papers describing promising new ideas and challenges of interest to the community as well as access control needs emerging from other fields. We are particularly looking for potentially disruptive and new ideas which can shape the research agenda for the next 10 years. We encourage submissions that present ideas that may have not been completely developed and experimentally evaluated. Submissions to the regular track covering any relevant area of access control are welcomed. Areas include, but are not limited to, the following:

  • Access control for edge computing
  • Applications
  • Applied machine learning for access management
  • Attribute-based systems
  • Authentication
  • Big data
  • Biometrics
  • Blockchain
  • Cloud computing and network access control management
  • Cryptographic approaches
  • Cyber attacks and network dynamics
  • Cyber-physical systems and Internet of Things (IoT)
  • Databases and data management
  • Data protection on untrusted infrastructure
  • Design methodology
  • Distributed and mobile systems
  • Economic models and game theory
  • Enforcement mechanisms
  • Hardware enhanced security
  • Identity management
  • Identification of and protection from data leakage
  • Mechanisms, systems, and tools
  • Models and extensions
  • Obligations
  • Privacy-aware access control
  • Policy engineering and analysis
  • Requirements
  • Risk and uncertainty
  • Safety analysis
  • Theoretical foundations
  • Trust management
  • Usability

• USENIX-Security 2019 28th USENIX Security Symposium, Santa Clara, CA, USA, August 14-16, 2019. (Submissions are due 15 November 2018, 15 February 2019)

  The USENIX Security Symposium brings together researchers, practitioners, system administrators, system programmers, and others interested in the latest advances in the security and privacy of computer systems and networks. The USENIX Security Symposium is moving to multiple submission deadlines for USENIX Security '19. This change includes changes to the review process and submission policies. Detailed information is available on the USENIX Security Publication Model Changes web page at http://www.usenix. org/conference/usenixsecurity19/publication-model-change. All researchers are encouraged to submit papers covering novel and scientifically significant practical works in computer security. There will be two quarterly submission deadlines for USENIX Security '19. The fall quarter submissions deadline is Thursday, November 15, 2018, 5:00 pm PST. The winter quarter submissions deadline is Friday, February 15, 2019, 5:00 pm PST. The Symposium will span three days with a technical program including refereed papers, invited talks, posters, panel discussions, and Birds-of-a-Feather sessions. Co-located events will precede the Symposium on August 12 and 13.

• DIMVA 2019 16th International Conference on Detection of Intrusions and Malware & Vulnerability Assessment, Gothenburg, Sweden, June 19-20, 2019. (Submissions are due 18 February 2019)

  The annual DIMVA conference serves as a premier forum for advancing the state of the art in the broader areas of intrusion detection, malware analysis, and vulnerability assessment. Each year, DIMVA brings together international experts from academia, industry, and government to present and discuss novel research in these areas. DIMVA is organized by the special interest group Security - Intrusion Detection and Response (SIDAR) of the German Informatics Society (GI). DIMVA solicits submissions of high-quality, original scientific papers presenting novel research on malware analysis, intrusion detection, vulnerability assessment, and related systems security topics.

• SSIoT 2019 1st IEEE EuroS&P Workshop on Software Security for Internet of Things, Co-located with IEEE EuroS&P 2019, Stockholm, Sweden, June 16, 2019. (Submissions are due 28 February 2019)

  The Internet of Things (IoT), connecting large numbers of small embedded devices to the internet, is currently being deployed in critical infrastructures, factories, hospitals, smart buildings, and so on. Compromised or faulty IoT components and systems can cause catastrophic damage to individuals, companies, and society. However, existing software for IoT has not been designed with security as a main objective, but rather to cope with constrained memory, power, processing, and bandwidth resources. Consequently, techniques are needed by which software for IoT can achieve a highest level of security and safety. Such techniques are getting mature for other domains, in particular for mainstream computing systems, but IoT devices feature peculiar characteristics that hinder employing conventional software security techniques. There is a great push to bring advanced software security to IoT. At the same time, a targeted scientific IoT software security forum for discussions, publications and networking is currently lacking. The IEEE Workshop on Software Security for IoT (SSIoT) 2019 is the first international conference focusing primarily on the software security for the Internet of Things (IoT). SSIoT aims to provide a forum for exploring and evaluating ideas on bringing secure software to IoT and a venue to publish novel research ideas on this topic. SSIoT strongly encourages proposals of new, speculative ideas, evaluations of new or known techniques in practical settings, and discussions of emerging threats and important problems. We are especially interested in position papers that are radical, forward-looking, and likely to lead to lively and insightful discussions that will influence future research on IoT security.

• Blockchain 2019 IEEE International Conference on Blockchain, Atlanta, GA, USA, July 14-17, 2019. (Submissions are due 1 March 2019)

  The emergence and popularity of blockchain techniques will significantly change the way of digital and networking systems' operation and management. In the meantime, the application of blockchain will exhibit a variety of complicated problems and new requirements, which brings more open issues and challenges for research communities. The goal of this conference is to promote community-wide discussion identifying the advanced applications, technologies and theories for blockchain. We seek submissions of papers that invent novel techniques, investigate new applications, introduce advanced methodologies, propose promising research directions and discuss approaches for unsolved issues.

• CPSS 2019 5th ACM Cyber-Physical System Security Workshop, Held in conjunction with ACM AsiaCCS 2019, Auckland, New Zealand, July 8, 2019. (Submissions are due 1 March 2019)

  Cyber-Physical Systems (CPS) of interest to this workshop consist of large-scale interconnected systems of heterogeneous components interacting with their physical environments. There exist a multitude of CPS devices and applications deployed to serve critical functions in our lives thus making security an important non-functional attribute of such systems. This workshop will provide a platform for professionals from academia, government, and industry to discuss novel ways to address the ever-present security challenges facing CPS. We seek submissions describing theoretical and practical solutions to security challenges in CPS. Submissions pertinent to the security of embedded systems, IoT, SCADA, smart grid, and other critical infrastructure are welcome.

• DBSec 2019 33rd Annual IFIP WG 11.3 Conference on Data and Applications Security and Privacy, Charleston, SC, USA, July 15-17, 2019. (Submissions are due 1 March 2019)

  DBSec is an annual international conference covering research in data and applications security and privacy. The conference seeks submissions from academia, industry, and government presenting novel research on all theoretical and practical aspects of data protection, privacy, and applications security. Topics of interest include, but are not limited to:

  • access control
  • anonymity
  • applied cryptography in data security
  • authentication
  • big data security
  • data and system integrity
  • data protection
  • database security
  • digital rights management
  • distributed and decentralised security
  • identity management
  • intrusion detection
  • knowledge discovery and privacy
  • methodologies for data and application security
  • network security
  • organisational and social aspects of security
  • privacy
  • secure cloud computing
  • secure distributed systems
  • secure information integration
  • security and privacy in crowdsourcing
  • security and privacy in IT outsourcing
  • security and privacy in the Internet of Things
  • security and privacy in location-based services
  • security and privacy in P2P scenarios and social networks
  • security and privacy in pervasive/ubiquitous computing
  • security and privacy policies
  • security management and audit
  • security metrics
  • threats, vulnerabilities, and risk management
  • trust and reputation systems
  • trust management
  • Web security
  • wireless and mobile security

• TrustData 2019 10th International Workshop on Trust, Security and Privacy for Big Data, Atlanta, USA, July 14-17, 2019. (Submissions are due 15 March 2019)

  The proliferation of new technologies such as Internet of Things and cloud computing calls for innovative ideas to retrieve, filter, and integrate data from a large number of diverse data sources. Big Data is an emerging paradigm applied to datasets whose volume/velocity/variability is beyond the ability of commonly used software tools to manage and process the data within a tolerable period of time. More importantly, Big Data has to be of high value, and should be protected in an efficient way. Since Big Data involves a huge amount of data that is of high-dimensionality and inter-linkage, existing trust, security, and privacy measures for traditional databases and infrastructures cannot satisfy its requirements. Novel technologies for protecting Big Data are attracting researchers and practitioners with more and more attention. The 10th International Workshop on Trust, Security and Privacy for Big Data (TrustData 2019) aims to bring together people from both academia and industry to present their most recent work related to trust, security and privacy issues in Big Data, and exchange ideas and thoughts in order to identify emerging research topics and define the future of Big Data.

• AIBlock 2019 1st International Workshop on Application Intelligence and Blockchain Security, Held in Conjunction With ACNS 2019, Bogota, Colombia, Jun 5-7, 2019. (Submissions due 30 March 2019)

  This workshop attempts to provide a platform for professionals from academia and industry to discuss challenges and potential solutions in this direction. We seek submissions describing either theoretical or practical solutions in relation to application intelligence security and blockchain security. Topics of interest include, but are not limited to:

  • Authentication
  • Blockchain Platforms
  • Blockchain-based Applications
  • Cryptocurrency Analysis
  • Data and System Integrity
  • Data Protection
  • Database Security
  • Decentralized Application Development
  • Formal Method
  • Intrusion Detection
  • Smart Contracts
  • Trust and Privacy of Applications
  • Vulnerability Analysis

• CLOUDS&P 2019 1st Workshop on Cloud Security and Privacy, Bogota, Colombia, June 5-7, 2019. (Submissions due 30 March 2019)

  Cloud computing is emerging as a promising IT solution for enabling ubiquitous, convenient, and on-demand accesses to a shared pool of configurable computing resources. However, the widespread adoption of cloud is still being hindered by various serious security and privacy concerns. CLOUD S&P aims to provide a platform for researchers and practitioners to present and discuss a wide-range of security and privacy issues and their solutions to ensure better protection in a cloud ecosystem. This workshop invites submissions on new attacks and solutions on various cloud-centric technologies, as well as short surveys and case studies that shed light on the security implications of clouds.

• ESORICS 2019 24th European Symposium on Research in Computer Security, Luxembourg, September 23-27, 2019. (Submissions due 22 April 2019)

  ESORICS is the annual European research event in Computer Security. The Symposium started in 1990 and has been held in several European countries, attracting a wide international audience from both the academic and industrial communities. Papers offering novel research contributions in computer security are solicited for submission to the 2019 Symposium, to be held in Luxembourg. The primary focus is on original, high quality, unpublished research and implementation experiences. We encourage submissions of papers discussing industrial research and development. Topics of interest include, but are not limited to:

  • access control
  • accountability
  • ad hoc networks
  • anonymity
  • applied cryptography
  • authentication
  • biometrics
  • blockchain and finance security
  • data and computation integrity
  • database security
  • data protection
  • deep learning for attack and defense
  • digital content protection
  • digital forensics
  • distributed systems security
  • embedded systems security
  • inference control
  • information hiding
  • identity management
  • information flow control
  • information security governance and management
  • intrusion detection
  • formal security methods
  • language-based security
  • network security
  • phishing and spam prevention
  • privacy
  • privacy preserving data mining
  • risk analysis and management
  • secure electronic voting
  • security architectures
  • security economics
  • security metrics
  • security models
  • security and privacy for big data
  • security and privacy in cloud scenarios
  • security and privacy in complex systems
  • security and privacy in content centric networking
  • security and privacy in crowdsourcing
  • security and privacy in the IoT
  • security and privacy in location services
  • security and privacy for mobile code
  • security and privacy in pervasive / ubiquitous computing
  • security and privacy policies
  • security and privacy in social networks
  • security and privacy in web services
  • security and privacy in cyber-physical systems
  • security, privacy and resilience in critical infrastructures
  • security verification
  • software security
  • systems security
  • trust models and management
  • trustworthy user devices
  • usable security and privacy
  • web security
  • wireless security

 

• The Technical Committee on Security and Privacy

 

• Staying in touch....

  • Information for Subscribers and Contributors

  • Who's where: recent address changes

  • Changing your email address?  Please send updates to cipher@ieee-security.org