=====================================================================
Call for Paper for the 1st International Workshop on
QUALITY of PROTECTION - QoP 2005
Security Measurements and Metrics
http://dit.unitn.it/~qop/
Milano, Italy, Thu. 15 September 2005.
Affiliated with 10th European Symposium on Research in Computer
Security (ESORICS 2005) in Milano (12-14 Sep).
http://esorics05.dti.unimi.it
and the 11th IEEE International Software Metrics Symposium (METRICS
2005) in Como (19-22 Sep)
http://www.swmetrics.org/metrics2005
=======================================================================
WORKSHOP OVERVIEW
Information Security in Industry has matured in the last few decades.
Standards such as ISO17799, the Common Criteria, a number of
industrial certification and risk analysis methodologies have raised
the bar on what is considered a good security solution from a business
perspective.
Yet, if we compare Information Security with Networking or Empirical
Software Engineering we find a major difference. Networking research
has introduced concepts such as Quality of Service and Service Level
Agreements. Conferences and Journals are frequently devoted to
performance evaluation, QoS and SLAs. Empirical Software Engineering
has made similar advances. Notions such as software metrics and
measurements are well established. Processes to measure the quality and
reliability of software exist and are appreciated in industry.
Security looks different. Even a fairly sophisticated standard such as
ISO17799 has an intrinsically qualitative nature. Notions such as
Security Metrics, Quality of Protection (QoP) or Protection Level
Agreement (PLA) have surfaced in the literature but still have a
qualitative flavour. The "QoP field" in WS-Security is just a data
field to specify a cryptographic algorithm. Indeed, neither ISO17799
nor ISO15408 (the Common Criteria) addresses QoP sufficiently.
ISO17799 is a management standard, not directly concerned with the
actual quality of protection achieved; ISO15408 is instead a product
assessment standard and yet does not answer the question of how a user
of a product assessed by it can achieve a high QoP within his/her
operational environment. Both standards cover just one aspect of an
effective QoP and even the combination of both would not address the
aspect sufficiently. "Best practice" standards, such as the baseline
protection standard published by many government agencies, also belong
to the category of standards that are useful, but not sufficient, for
achieving a good QoP.
Security is different also in another respect. A very large proportion
of recorded security incidents has a non-IT cause. Hence, while the
networking and software communities may concentrate on technical
features (networks and software), security requires a much wider notion
of "system", including users, work processes, organisational structures
in addition to the IT infrastructure.
The QoP Workshop intends to discuss how security research can progress
towards a notion of Quality of Protection in Security comparable to the
notion of Quality of Service in Networking, Software Reliability, or
Software Measurements and Metrics in Empirical Software Engineering.
SUBMISSION TOPICS:
Original submissions are solicited from industry and academic experts
to presents their work, plans and views related to Quality of
Protection. The topics of interest include but are not limited to:
* Industrial Experience
* Security Risk Analysis
* Security Quality Assurance
* Measurement-based decision making and risk management
* Empirical assessment of security architectures and solutions
* Mining data from attacks and vulnerabilities repositories
* Security metrics
* Measurement theory and formal theories of security metrics
* Security measurement and monitoring,
* Experimental verification and validation of models,
* Simulation and statistical analysis, stochastic modeling
* Reliability analysis
INVITED SPEAKERS
- Stefano De Panfilis - Engineering SpA (IT)
- TBA
IMPORTANT DATES:
- Fri 10 June - Paper submissions
- Fri 8 July - Notification of acceptance
- Mon 12 Sep - Wed 14 Sep ESORICS
- Thu 15 Sep - QoP Workshop
- Mon 19 Sep - Thu 22 Sep IEEE METRICS in Como
PAPER SUBMISSION:
Original RESEARCH PAPERS are solicited in any of the above mentioned
topics. Research papers should be limited to 12 pages in the standard
Springer Verlag format, describing significant research results based
on sound theory or experimental assessment.
We also solicit INDUSTRY EXPERIENCE REPORTS, limited to 6 pages, about
the use of security measurements and metrics in industrial
environments. Industry papers should have at least one author from
industry or government, and will be considered for their industrial
relevance.
PUBLICATION:
Authors of accepted papers will be expected to give full presentations
at the workshop. Revised versions of the papers presented at the
workshop will be published by Kluwer/Springer in the Applied Security
Series.
PROGRAMME COMMITTEE
Alessandro Acquisti - Carnegie Mellon University (USA)
Matt Bishop - U. California Davis (USA)
Imrich Chlamtac - CreateNet (IT)
Yves Deswarte - LAAS-CNRS (FR)
Paolo Donzelli - University of Maryland (USA)
Gerhard Eschelbeck - QUALYS (USA)
Dieter Gollmann - TU Hamburg-Harburg (DE) --- Co-chair
Erland Jonsson - Chalmers University of Technology (SW)
Svein Johan Knapskog - The Norwegian University of Science and
Technology (NOR)
Helmut Kurth - ATSEC (DE)
Bev Littlewood - City University, London (UK)
Fabio Massacci - Univ. di Trento (IT) --- Co-Chair
Flemming Nielson - Technical University of Denmark (DE)
Mario Piattini - Polytechnical University of Madrid (SP)
Ketil Stшlen - SINTEF (NO) & Univ. of Oslo (NO)
Lorenzo Strigini - City University, London (UK)
Edgar Weippl - Vienna University of Technology (AU)
Jeannette Wing - Carnegie Mellon University (USA)
Marvin Zelkowitz - University of Maryland (USA)
Dear friends,
Can you broadcast the information concerning LANC05 through your
distributions lists?
Thank you in advance.
Best regards
Ramon
=========================================================================
Ramon Puigjaner
Universitat de les Illes Balears
Departament de Ciencies Matematiques i Informatica
07122 PALMA (Spain)
Phone: +34-971173288 Fax: +34-971173003
e-mail: putxi(a)uib.es
=========================================================================
Please excuse if you received that Call for Participation several times.
========================================================================
CALL FOR PARTICIPATION
DAIS 2005
The 5th IFIP Conference on Distributed Applications
and Interoperable Systems
To be held in conjunction with
FMOODS 2005
Formal Methods for Open Object-Based Distributed Systems
Athens, Greece
June 15-17, 2005
http://www.di.uoa.gr/dais-fmoods-2005/
========================================================================
Dear colleague,
enclosed please find the Call for Participation for the 5th IFIP
Conference DAIS 2005 held in Athens, the capitol of Greece, June 15th -
17th, 2005. DAIS 2005 is organized by the University of Athens.
It is co-located with the IFIP Conference FMOODS 2005 (Formal Methods
for Open Object-Based Distributed Systems).
Lower-prise registration deadline is May 30, 2005. You can find more
information on the conference programme, registration, and hotels at
the DAIS web site
http://www.di.uoa.gr/dais-fmoods-2005/
DAIS 2005 features are:
* 3 Invited talks by Gordon Blair (Univ. of Lancaster), Rocco de Nicola
(Univ. of Florenz), and Andreas Reuter (European Media Laboratory
Heidelberg),
* 2 and a half-day single track of peer-reviewed papers on context and
location awareness, configuration and adaptability,
interoperability
issues, grid, performance evaluation, and methodological aspects,
* Proceedings and free access to FMOODS 2005,
* Social event in the Acropolis area.
We are looking forward to meeting you at DAIS 2005,
Nancy Alonistioti and Lea Kutvonen.
Dear all,
>
>Meeting; TC-6 meeting 2005/2; TC-6;
>October 29+30, 2005; Wroclaw (Poland)
>
>Is this still correct?
>
We had two options but since a number of delegates had considerable
difficulties with the Friday option, it has been approved that the
next meeting will be on Saturday, Oct. 29 + Sunday, Oct. 30, 2005
in Wroclav, Poland. The conference on E-Commerce will be held during
Wednesday, 26 til Friday, 28 October in Poznan. Woclav can be reached
by train from Poznan in 2 hours.
Best regards
Otto
Please excuse if you received that Call for Participation several times.
========================================================================
CALL FOR PARTICIPATION
DAIS 2005
The 5th IFIP Conference on Distributed Applications
and Interoperable Systems
To be held in conjunction with
FMOODS 2005
Formal Methods for Open Object-Based Distributed Systems
Athens, Greece
June 15-17, 2005
http://www.di.uoa.gr/dais-fmoods-2005/
========================================================================
Dear colleague,
enclosed please find the Call for Participation for the 5th IFIP
Conference DAIS 2005 held in Athens, the capitol of Greece, June 15th -
17th, 2005. DAIS 2005 is organized by the University of Athens.
It is co-located with the IFIP Conference FMOODS 2005 (Formal Methods
for Open Object-Based Distributed Systems).
Advanced registration deadline is May 16, 2005. You can find more
information on the conference programme, registration, and hotels at
the DAIS web site
http://www.di.uoa.gr/dais-fmoods-2005/
DAIS 2005 features are:
* 3 Invited talks by Gordon Blair (Univ. of Lancaster), Rocco de Nicola
(Univ. of Florenz), and Andreas Reuter (European Media Laboratory
Heidelberg),
* 2 and a half-day single track of peer-reviewed papers on context and
location awareness, configuration and adaptability, interoperability
issues, grid, performance evaluation, and methodological aspects,
* Proceedings and free access to FMOODS 2005,
* Social event in the Acropolis area.
We are looking forward to meeting you at DAIS 2005,
Nancy Alonistioti and Lea Kutvonen.
--
________________________________________________________________________
Hartmut König Tel: +49 355 69 22 36
koenig(a)informatik.tu-cottbus.de Fax: +49 355 69 21 27
BTU Cottbus
LS Rechnernetze und Kommunikationssysteme
PF 10 13 44, D-03013 Cottbus, Germany
http://www-rnks.informatik.tu-cottbus.de
________________________________________________________________________
FYI.
--raouf
-------------------------------------------
[Some excerpts from original article -- BSA]
http://www.theregister.co.uk/2005/05/11/open_access_research/
Dutch academics declare research free-for-all
Scientists from all major Dutch universities officially launched a website
on Tuesday where all their research material can be accessed for free.
Interested parties can get hold of a total of 47,000 digital documents from
16 institutions the Digital Academic Repositories. No other nation in the
world offers such easy access to its complete academic research output in
digital form, the researchers claim. Obviously, commercial publishers are
not amused.
DAREnet was already launched about a year ago, but for demonstration
purposes only. The €2m DARE programme - a joint initiative by all the Dutch
universities, the National Library of the Netherlands, the Royal Netherlands
Academy of Arts and Sciences (KNAW) and the Netherlands Organisation for
Scientific Research (NWO) - harvests all digital available material from
local repositories, making it fully searchable. Aside from bibliographical
information, the content can be full text, or even audio and video files.
The initiative is clearly not welcomed by commercial scientific publishers
such as Elsevier Science. Increasingly, universities complain about the high
cost of scientific journals and many argue that the research results should
be distributed freely or at significantly less cost to library subscribers.
Dear all,
to those of you who organise events (or want to help an
organisor with the corresponding form):
There is a trial to produce a new form which should be much clearer and
much easier to use than the old one.
A first sample of it which is based on my proposal made in Bangkok
has been sent by Eduard Dundler from IFIP secretariat to Niko Schlamberger
who is responsible for the renewal. Niko couldn't finalize it until now.
Thus the old form is still valid. It is obtainable via:
http://www.ifip.or.at/events/ifip_event_form.rtf
or via:
www.ifip.or.at >>> Events (left side) >>> Event Approval Guidelines
>>> Event Form (including Statement of Understanding).
If the delegates agree we might informally use the modified version for
our purposes.
Once again: No payment will be made by IFIP secretariat for events which
have not submitted an ERF and which, therefore, are not in the IFIP
database.
There are 19 (!) such events for the moment being for TC6. We'll discuss them
all in Toronto.
Best regards
Otto
Best regards
Otto
Dear Eduard:
Please find below a 200 Words description of the NOMS conference to include
in the "News from IFIP" June issue.
Thanks
Raouf Boutaba, Chair
IFIP WG6.6
----------------------------------------------------------------------------
---------------------
The 10th IEEE/IFIP Network Operations and Management Symposium (NOMS 2006)
will be held 3-7 April 2006 in the Vancouver Convention and Exhibition
Center, Vancouver, Canada. NOMS serves as the primary technical forum for
the exchange of information on integrated systems and services among the
research, standards, development, systems integration, service provider, and
user communities with interests in communication networks, host systems,
enterprise applications, service-oriented architectures, and delivery of
management services. The scope of NOMS 2006 encompasses provisioning,
operation, and maintenance for end-to-end communications and services as
well as dependability, resilience, quality-of-service, mobility management,
and services billing. The conference provides a peer-reviewed program of
technical sessions, application sessions, tutorials, posters, and panels as
well as vendor exhibits. Acceptance of technical papers is quite
competitive, with an acceptance rate of 20% to 25%. For further information
check the web site noted above or contact one of the TPC Co-chairs Joe
Hellerstein, IBM, U.S.A. or Burkhard Stiller, University of Zurich and ETH
Zurich, Switzerland. The conference URL is http://www.noms2006.org.
----------------------------------------------------------------------------
---------------------
-----Original Message-----
From: Eduard Dundler [mailto:eduard.dundler@IFIP.or.at]
Sent: Tuesday, April 26, 2005 9:11 AM
To: ifip-tc6(a)informatik.rwth-aachen.de
Subject: News from IFIP
Dear IFIP members,
We are sending out another News from IFIP in early June and we would be
happy to have contributions of "news items" (up to 200 words) for inclusion
by the end of May.
Best regards
Eduard Dundler
(Our apologies if you receive multiple copies of this document)
CALL FOR PAPERS
***************
The First International Conference on
Communication Systems Software and Middleware
COMSWARE 2006
http://www.comsware.org
-----------------------
January 8 - 12, 2006
Taj Palace Hotel, New Delhi, India
Technical Co-Sponsor: IEEE Communications Society,
Indian Institute of Technology, Delhi
In Co-operation with: ACM SIGMOBILE
Sponsored by: CreateNet (Italy), ICST (USA),
IBM, Microsoft Research, NOKIA,
Lucent Technologies, Sasken
The convergence of the communications, information technologies and the Internet
has ushered in a revolution in the way people communicate with each other. The key
enabler for this convergence has been the advancement of software technology in
various communication sectors, as evident by the high levels of activity in the
industry, academia, and standards bodies, coupled with the increasing dependence of
this convergence to sustain and improve growth rates in many countries around the
world.
This new international conference will provide a forum to exchange ideas, techniques,
and applications, discuss best practices and challenging issues, raise awareness and
share experiences among researchers, practitioners, standard developers and policy
makers in the field of software techniques in communications. The conference will
bring leading researchers and practitioners in areas ranging from communications
software and software engineering aspects of communications software, to middleware
and networking protocols. The objective of the conference is to provide a high
degree of collaboration, participation and discussions of the various topics among
multi-national participants from the industrial, governmental and academic sectors.
COMSWARE will include a regular paper track and an industry track. The paper track
will include a highly selective technical program. The conference solicits original,
previously unpublished research work, experimental efforts, and practical experiences
for the technical program. COMSWARE will also feature panel discussions from experts
in academia and industry, workshops and tutorials featuring the state-of-the-art in
various communications software and related areas. There will be demos and exhibits
that will expose the delegates to exciting products and software solutions from
industry and academia. Accepted papers will be published by IEEE Computer Society.
The top papers accepted to the conference will be published in a reputed journal.
Areas of interest include, but are not limited to:
� Communications Software
� Reconfigurable Software Stacks
� Software Engineering Aspects of Communications Software
� Context-Based and Implicit Computing
� Telecommunications Services and QoS
� Software for Billing and Pricing
� User Interfaces and Interaction Models
� Multi-Agent Systems
� Client-Server Applications
� Mobile and Intermittently Connected Applications
� Mobile Data Management
� Middleware Services and Agent Technologies
� Middleware for Wireless Sensor Networks
� Middleware for P2P Systems
� Middleware for Future Communication Networks
� Information Infrastructure and Security
� Security and Privacy Issues of Pervasive Computing Systems
� Network Operations and Management
� Policy and Workflow-based Network Operations
� Reliability Support Software
� Resource Management in Pervasive Computing Platforms
� Management Software for Optical Networks
� Network Monitoring Software
� Internet and IP based Services
� Dynamic Service Composition and Deployment
� Service Discovery Mechanisms
� Wireless/Mobile Service Management and Delivery
� Mobile / Wireless Computing Systems and Services
� Performance Evaluation Techniques
� Location Determination
� Positioning and Tracking Technologies
� Smart Devices and Smart Spaces
� Enterprise Networking
� Personal Area Networks
� Integration of Wired and Wireless Networks
� Next Generation Networks and Services
Deadlines
*********
Paper Submission: June 4, 2005 (Instructions at http://www.comsware.org)
Notification of Acceptance: August 15, 2005
Camera-ready due: September 26, 2005
Conference Organizing Committee
*******************************
General Chairs: Victor Bahl, Microsoft Research, USA
Bijendra Nath Jain, IIT, Delhi, India
Henning Schulzrinne, Columbia University, USA
Alfred Spector, IBM Research, USA
Steering Committee: Imrich Chlamtac, University of Trento, Italy
Rajeev Shorey, IBM Research, India
Prasant Mohapatra, University of California, Davis, USA
Program Chairs: Sanjoy Paul, Lucent Technologies, USA
G. Venkatesh, SASKEN Technologies, India
Jim Woodcock, University of York, UK
Tutorial Chair: Archan Misra, IBM Research, USA
Workshop Chairs: Ashwin Gumaste, Fujitsu Research, USA
Gaurav Sharma, University of Rochester, USA
Demos/Exhibit Chair: Huzur Saran, IIT, Delhi, India
Demos/Exhibit Co-Chair: Jaijit Bhattacharya, Oracle, India
Publicity Chair: Thyaga Nandagopal, Lucent Technologies, USA
Publicity Co-Chairs: Sunghyun Choi, Seoul National University, Korea
Marco Conti, IIT, Pisa, Italy
Ben Lancini, LinLan, Brisbane, Australia
Prashant Pradhan, IBM Research, USA
Hemant Chaskar, Airtight Networks, India
Local Arrangement
Co-Chairs: Sudipta Maitra, IBM, Delhi
Laurent Mignet, IBM Research, Delhi
Finance Chair: Karen Decker, USA
___________________________________________________________________
Apologies for the multiple copies of CFP
___________________________________________________________________
Dear All,
Please find attached the Call for papers for the 2nd International Symposium on Wireless Communication Systems (ISWCS) 2005 (http://www.iswcs.org/iswcs2005) to be held in Siena, Italy, from 5 - 7 September 2005. The symposium is technically sponsored by IEEE Communication Society and is endorsed by the technical committee on Personal Communications. Proceedings of the conference will be available on the IEEEXplore after the event.
Important date:
NEW DEADLINE: 15 May 2005 (extended abstract) via EDAS due.
We look forward to receiving your papers.
Many thanks
Best regards,
Boon
General co-chair