Appologies if you received multiple copies of this message. -----------------------------------------------------------------
First Workshop on Quality of protection (QoP 2005) Security Measurements and Metrics 15 September 2005. Milan, Italy.
Affiliated with ESORICS'05 and METRICS'05
http://dit.unitn.it/%7Eqop/index.htm
Call For Participation Early Bird Registration Deadline: Aug 31, 2005
TECHNICAL PROGRAM ================= Thursday , September 15th
09:00 - 10:15 Invited Talk
Stefano De Panfilis - R&D Head of Engineering SpA - Software Quality and Metrics: an Industrial Experience
10:15 - 10:30 Security Metrics
Andrea Atzeni, Antonio Lioy - Why to adopt a security metric? A little survey (short presentation)
10:30 - 11:00 Coffee Break
11:00 - 12:30 Measuring Reliability vs Security
Andy Ozment - Software Security Growth Modeling: Examining Vulnerabilities with Reliability Growth Models
Swapna Gokhale, Robert Mullen - A Discrete Lognormal Model for Software Defects affecting QoP
Alata Eric, Dacier Marc, Deswarte Yves, Kaaniche Mohamed, Kortchinsky Kostya, Nicomette Vincent, Pham Van-Hau, Pouget Fabien - Collection and analysis of attack data based on honeypots deployed on the Internet (short presentation)
Davide Balzarotti, Mattia Monga, Sabrina Sicari - Assessing the risk of using vulnerable components (short presentation)
12:30 - 14:00 Lunch
14:00 - 15:30 Metrics for Anonymity and Confidentiality
Dogan Kesdogan and Lexi Pimenidis - The Lower Bound of Attacks on Anonymity Systems -- A Unicity Distance Approach
Reine Lundin, Stefan Lindskog, Anna Brunstrom, Simone Fischer-Hubner - Using Guesswork as a Measure for Confidentiality of Selectively Encrypted Messages
Dogan Kesdogan, Lexi Pimenidis, Tobias Kolsch. - Intersection Attacks on Web-Mixes: Bringing the Theory into Praxis (short presentation)
Ernesto Damiani, Sabrina De Capitani di Vimercati, Sara Foresti, Pierangela Samarati, Marco Viviani - Measuring Inference Exposure in Outsourced Encrypted Databases (short presentation)
15:30 - 16:00 Coffee Break
16:00 - 18:00 Quantitative Security Models
Simon Foley, Stefano Bistaelli, Barry O'Sullivan, John Herbert and Garret Swart - Multilevel Security and Quality of Protection
Judith E. Y. Rossebo, Mass Soldal Lund, Knut Eilif Husa and Atle Refsdal - A Conceptual Model for Service Availability
Miles McQueen, Wayne Boyer, Mark Flynn and George Beitel. - Time-to-compromise Model for Cyber Risk Reduction Estimation
Valentina Casola, Antonino Mazzeo, Nicola Mazzocca and Massimiliano Rak - A SLA evaluation methodology in Service Oriented Architectures (short presentation)
Gunter Karjoth, Birgit Pfitzmann, Matthias Schunter and Michael Waidner - Service-oriented Assurance - Comprehensive Security by Explicit Assurances (short presentation)
Iliano Cervesato - Towards a Notion of Quantitative Security Analysis
STEERING COMMITTEE ==================
- Imrich Chlamtac - UTDallas (US) & CreateNet (IT) - Gerhard Eschelbeck - QUALYS (US) - Dieter Gollmann - TU Hamburg-Harburg (DE) - Helmut Kurth - ATSEC (DE) - Bev Littlewood - City University, London (UK) - Fabio Massacci - Univ. di Trento (IT) - Ketil Stolen - SINTEF (NO) & Univ. of Oslo (NO) - Lorenzo Strigini - City University, London (UK) - Jeannette Wing - CMU (USA)
PROGRAM COMMITTEE: ==================
Alessandro Acquisti - Carnegie Mellon University (USA) Matt Bishop - University of California (USA) Imrich Chlamtac - UTDallas (US) & CreateNet (IT) Yves Deswarte - LAAS-CNRS (FR) Paolo Donzelli - University of Maryland (USA) Gerhard Eschelbeck - QUALYS (USA) Dieter Gollmann - TU Hamburg-Harburg (DE) Erland Jonsson - Chalmers University of Technology (SW) Audun Josang - University of Queensland, (AUS) Svein Johan Knapskog - The Norwegian University of Science and Technology (NOR) Helmut Kurth - ATSEC (DE) Bev Littlewood - City University, London (UK) Fabio Martinelli - Institute of Informatics and Telematics (IT) Fabio Massacci - Univ. di Trento (IT) Roy Maxion - Carnegie Mellon University (USA) Flemming Nielson - Technical University of Denmark (DE) Mario Piattini - University of Castilla-La Mancha (SP) Ketil Stolen - SINTEF (NO) & Univ. of Oslo (NO) Lorenzo Strigini - City University, London (UK) Edgar Weippl - Vienna University of Technology (AUT) Jeannette Wing- CMU (USA) Marvin Zelkowitz - University of Maryland (USA)
REGISTRATION ============
REGISTRATION FORM - http://esorics05.dti.unimi.it/regworkshops.php TRAVEL DIRECTION - http://esorics05.dti.unimi.it/travel.php HOTELS - at http://esorics05.dti.unimi.it/hotel.php