| 查看: 193 | 回复: 0 | |||
| 当前主题已经存档。 | |||
[交流]
【2009-5-15】DISP09会议and IEEE PASSAT-09
|
|||
|
CALL FOR PAPERS Workshop on Information Security and Privacy in a De-Perimeterised World (DISP09) (www.disp09.info) Associated with the 2009 IEEE International Conference on Information Privacy, Security, Risk and Trust (PASSAT-09) (http://cse.stfx.ca/~passat09/) Vancouver, Canada, August 29, 2009 De-perimeterisation is the process in which the boundary around the trusted environment inside organisations is disappearing due to joint ventures and the use of distributed resources. Examples of such developments include outsourcing, cloud computing, mobile workforce and the effects of insider abuse. Instead of well-defined organisational and system boundaries, in a de-perimeterised world organisations have to protect their information in a situation of increased connectivity and dependency. Similar developments take place with respect to information about individuals, which is stored in social networking sites, personal health records, etc. rather than in a clearly located system. Organisations as well as individuals thus need to protect their information without relying on security boundaries, which challenges various aspects of information security and privacy. In the field of security modelling and threat analysis, models will have to include the mobility of data, people and systems typical of de-perimeterised settings. In the field of security mechanisms, protection mechanisms have to be developed that must function in a potentially hostile environment. And in the field of security requirements engineering and policy specification, methods have to be developed that do not assume well-defined boundaries between systems and organisations. The perspectives of requirements engineering, modelling and mechanisms are interrelated. What is possible in modelling depends on the mechanisms available for security, and the way security is modelled also influences the degrees of freedom one has in the requirements engineering process. These connections lead to the following major research goals: - techniques for including the increased uncertainties due to de-perimeterisation in both security models and security requirements engineering; - integrated combinations of de-perimeterised security policies that can be described in security models and de-perimeterised security mechanisms that can be implemented in practice; - directions for research in security primitives based on new security requirements induced by de-perimeterisation. In this workshop, we bring together researchers from the mechanisms, modelling and requirement engineering communities to study the security and privacy problems induced by the process of de-perimeterisation, and to discuss integrated solutions that transcend these disciplines. Topics of interest include, but are not limited to: - access control - applied crypto and protocols for de-perimeterised security and privacy - auditing de-perimeterised systems - centralised vs. decentralised security architectures - data-centric security and data classification - de-perimeterised trust management - economic, social and legal aspects of de-perimeterisation - identity-centric security and identity management - incident identification and management - interaction between the physical, digital and social security domains - risk analysis and risk management of de-perimeterised systems - security and privacy in cloud computing - security and privacy in outsourcing - security and privacy in virtual worlds - security and privacy in Web 2.0 - security modelling and threat analysis for de-perimeterised systems - security requirements engineering for de-perimeterised systems We especially encourage the submission of papers that connect two or more of these topics. Papers should be PDF, 8 pages maximum, in IEEE conference proceedings style, without author identification, and should be submitted through the EasyChair website by May 15. Submission implies that, should the paper be accepted, at least one author will attend the workshop and present the paper. Papers will be selected based on blind review. Accepted papers will be published by IEEE in the workshop section of the conference proceedings. IMPORTANT DATES: Paper submission: May 15, 2009, 23:59 GMT (firm) Notification: June 3, 2009 Final papers & registration: June 15, 2009 Workshop: August 29, 2009 ORGANISING COMMITTEE: dr. Wolter Pieters Prof.dr. Pieter Hartel (program chair) Prof.dr. Roel Wieringa University of Twente, Netherlands Prof.dr. Sandro Etalle Eindhoven University of Technology, Netherlands Prof.dr. Bart Jacobs Radboud University Nijmegen, Netherlands Prof.dr. Sjouke Mauw University of Luxembourg, Luxembourg PROGRAM COMMITTEE: Pieter Hartel, University of Twente, Netherlands (chair) Yudis Asnar, University of Trento, Italy Travis Breaux, North Carolina State University, USA Ruth Breu, University of Innsbruck, Austria Sandro Etalle, Eindhoven University of Technology, Netherlands David Evans, University of Cambridge, UK Paul de Hert, Free University Brussels, Belgium Bart Jacobs, Radboud University Nijmegen, Netherlands Ronald Leenes, University of Tilburg, Netherlands Fabio Massacci, University of Trento, Italy Sjouke Mauw, University of Luxembourg, Luxembourg Bashar Nuseibeh, Open University, UK Wolter Pieters, University of Twente, Netherlands Joachim Posegga, University of Passau, Germany Geraint Price, Royal Holloway University of London, UK Christian W. Probst, Technical University of Denmark, Denmark Simon Rogerson, De Montfort University, UK Eric Verheul, PWC & Radboud University Nijmegen, Netherlands Roel Wieringa, University of Twente, Netherlands Sheng Zhong, State University of New York at Buffalo, USA |
回复此楼» 猜你喜欢
国社科又开始会评了，不知道这次命运如何
已经有12人回复
-
麻烦专家们看看评委们的意见（F口面上）
已经有13人回复
-
售SCI-T0P文章，我:8O.5.5.1.O.54,科目齐全,可+急
已经有4人回复
-
售SCI文章，我:8O5.5.1.O.54,科目齐全,可+急
已经有6人回复
-
为什么资助数各大高校都创新高，自己申请怎么就这么难
已经有15人回复
-
科研人应该花精力去思考如何解决问题，而不是去凝练问题
已经有14人回复
-
要骂人了，新模版改版就是要淡化问题凝练这种虚的东西，结果有个评委还在说凝练得不够
已经有17人回复
-
基金系统什么内容也没有
已经有10人回复
-
学科评审组评审是指会评吗？
已经有5人回复
-
面上函评意见出来了，像什么等级？
已经有17人回复
30