Appologies if you received multiple copies of this message. ----------------------------------------------------------------- First Workshop on Quality of protection (QoP 2005) Security Measurements and Metrics 15 September 2005. Milan, Italy. Affiliated with ESORICS'05 and METRICS'05 http://dit.unitn.it/~qop/index.htm Call For Participation Early Bird Registration Deadline: Aug 31, 2005 TECHNICAL PROGRAM ================= Thursday , September 15th 09:00 - 10:15 Invited Talk Stefano De Panfilis - R&D Head of Engineering SpA - Software Quality and Metrics: an Industrial Experience 10:15 - 10:30 Security Metrics Andrea Atzeni, Antonio Lioy - Why to adopt a security metric? A little survey (short presentation) 10:30 - 11:00 Coffee Break 11:00 - 12:30 Measuring Reliability vs Security Andy Ozment - Software Security Growth Modeling: Examining Vulnerabilities with Reliability Growth Models Swapna Gokhale, Robert Mullen - A Discrete Lognormal Model for Software Defects affecting QoP Alata Eric, Dacier Marc, Deswarte Yves, Kaaniche Mohamed, Kortchinsky Kostya, Nicomette Vincent, Pham Van-Hau, Pouget Fabien - Collection and analysis of attack data based on honeypots deployed on the Internet (short presentation) Davide Balzarotti, Mattia Monga, Sabrina Sicari - Assessing the risk of using vulnerable components (short presentation) 12:30 - 14:00 Lunch 14:00 - 15:30 Metrics for Anonymity and Confidentiality Dogan Kesdogan and Lexi Pimenidis - The Lower Bound of Attacks on Anonymity Systems -- A Unicity Distance Approach Reine Lundin, Stefan Lindskog, Anna Brunstrom, Simone Fischer-Hubner - Using Guesswork as a Measure for Confidentiality of Selectively Encrypted Messages Dogan Kesdogan, Lexi Pimenidis, Tobias Kolsch. - Intersection Attacks on Web-Mixes: Bringing the Theory into Praxis (short presentation) Ernesto Damiani, Sabrina De Capitani di Vimercati, Sara Foresti, Pierangela Samarati, Marco Viviani - Measuring Inference Exposure in Outsourced Encrypted Databases (short presentation) 15:30 - 16:00 Coffee Break 16:00 - 18:00 Quantitative Security Models Simon Foley, Stefano Bistaelli, Barry O'Sullivan, John Herbert and Garret Swart - Multilevel Security and Quality of Protection Judith E. Y. Rossebo, Mass Soldal Lund, Knut Eilif Husa and Atle Refsdal - A Conceptual Model for Service Availability Miles McQueen, Wayne Boyer, Mark Flynn and George Beitel. - Time-to-compromise Model for Cyber Risk Reduction Estimation Valentina Casola, Antonino Mazzeo, Nicola Mazzocca and Massimiliano Rak - A SLA evaluation methodology in Service Oriented Architectures (short presentation) Gunter Karjoth, Birgit Pfitzmann, Matthias Schunter and Michael Waidner - Service-oriented Assurance - Comprehensive Security by Explicit Assurances (short presentation) Iliano Cervesato - Towards a Notion of Quantitative Security Analysis STEERING COMMITTEE ================== - Imrich Chlamtac - UTDallas (US) & CreateNet (IT) - Gerhard Eschelbeck - QUALYS (US) - Dieter Gollmann - TU Hamburg-Harburg (DE) - Helmut Kurth - ATSEC (DE) - Bev Littlewood - City University, London (UK) - Fabio Massacci - Univ. di Trento (IT) - Ketil Stolen - SINTEF (NO) & Univ. of Oslo (NO) - Lorenzo Strigini - City University, London (UK) - Jeannette Wing - CMU (USA) PROGRAM COMMITTEE: ================== Alessandro Acquisti - Carnegie Mellon University (USA) Matt Bishop - University of California (USA) Imrich Chlamtac - UTDallas (US) & CreateNet (IT) Yves Deswarte - LAAS-CNRS (FR) Paolo Donzelli - University of Maryland (USA) Gerhard Eschelbeck - QUALYS (USA) Dieter Gollmann - TU Hamburg-Harburg (DE) Erland Jonsson - Chalmers University of Technology (SW) Audun Josang - University of Queensland, (AUS) Svein Johan Knapskog - The Norwegian University of Science and Technology (NOR) Helmut Kurth - ATSEC (DE) Bev Littlewood - City University, London (UK) Fabio Martinelli - Institute of Informatics and Telematics (IT) Fabio Massacci - Univ. di Trento (IT) Roy Maxion - Carnegie Mellon University (USA) Flemming Nielson - Technical University of Denmark (DE) Mario Piattini - University of Castilla-La Mancha (SP) Ketil Stolen - SINTEF (NO) & Univ. of Oslo (NO) Lorenzo Strigini - City University, London (UK) Edgar Weippl - Vienna University of Technology (AUT) Jeannette Wing- CMU (USA) Marvin Zelkowitz - University of Maryland (USA) REGISTRATION ============ REGISTRATION FORM - http://esorics05.dti.unimi.it/regworkshops.php TRAVEL DIRECTION - http://esorics05.dti.unimi.it/travel.php HOTELS - at http://esorics05.dti.unimi.it/hotel.php