Conference announcements

Call for Participation -
15th European Symposium on Research in Computer Security (ESORICS'2010)


To: Computational Science Mailing List <computational.science@lists.iccsa.org>
From: sara.foresti@unimi.it
Date: Wed, 07 Jul 2010 11:26:29 +0200
Subject: [computational.science] ESORICS 2010 - call for participation (program now available)

[Apologies if you receive multiple copies of this message]

CALL FOR PARTICIPATION

***********************************************************************
15th European Symposium on Research in Computer Security
Hotel AMARILIA, Vouliagmeni, Athens, Greece
20-22 September 2010
www.esorics2010.org
***********************************************************************

ABOUT THE CONFERENCE

ESORICS is the annual European research event in Computer Security.
The Symposium started in 1990 and has been held in several European
countries, attracting a wide international audience from both the
academic and industrial communities.

Computer security is concerned with the protection of information in
environments where there is a possibility of intrusion or malicious
action. The aim of ESORICS is to further the progress of research in
computer security by establishing a European forum for bringing
together researchers in this area, by promoting the exchange of ideas
with system developers and by encouraging links with researchers in
related areas.

Progressively organized in a series of European countries, the
symposium is confirmed as the European research event in computer
security.

The Symposium is under the aegis of the Greek:
 * Ministry of of Infrastructure, Transport and Networks
 * Ministry of Economy and Finance:
   General Secretariat for Information Systems
 * Ministry of Interior, Decentralization and e-Government:
   General Secretariat for Electronic Governance


REGISTRATION

Registration information is available at:
https://www.triaenatours.gr/esorics.php


PROGRAM

Sunday, 19 September 2010
-------------------------

18:30 - 20:00  Registration

______________________________________________________________________


Monday, 20 September 2010
-------------------------

09:00 - 10:00  Registration

10:00 - 10:30  Opening

* Welcome address
  S. Katsikas, ESORICS-2010 General Chair

* Technical Program Overview
  B. Preneel and D. Gritzalis, Program Committee Chairs

* Local arrangements
  N. Kyrloglou and M. Theoharidou, Organizing Committee Chairs

10:30 - 11:00  Coffee/tea

11:00 - 13:00  Session 1: RFID and Privacy

* Deng R., Li Y., Yung M., Zhao Y.
  "A New Framework for RFID Privacy"

* Nithyanand R., Tsudik G., Uzun E.,
  "Readers Behaving Badly: Reader Revocation in PKI-Based
   RFID Systems"

* Androulaki E., Vo B., Bellovin S.,
  "Privacy-Preserving, Taxable Bank Accounts"

* Dahl M., Delaune S., Steel G.,
  "Formal Analysis of Privacy for Vehicular Mix-Zones"

13:00 - 14:00  Lunch

14:00 - 16:00  Session 2: Software Security

* Zhang C., Wang T., Wei T., Chen Y., Zou W.,
  "IntPatch: Automatically Fix Integer Overflow-to-Buffer-Overflow
   Vulnerability at Compile-Time"

* Ligatti J., Reddy S.,
  "A Theory of Runtime Enforcement, with Results"

* Hubert L., Jensen T., Monfort V., Pichardie D.,
  "Enforcing Secure Object Initialization in Java"

* Mantel H., Sudbrock H.,
  "Flexible Scheduler-Independent Security"

16:00 - 16:30  Coffee/tea

16:30 - 18:30  Session 3: Cryptographic Protocols

* Catrina O., de Hoogh S.,
  "Secure Multiparty Linear Programming Using Fixed-Point Arithmetic"

* Almeida J.-B., Bangerter E., Barbosa M., Krenn S.,
  Sadeghi A.-R., Schneider T.,
  "A Certifying Compiler for Zero-Knowledge Proofs of
   Knowledge based on S-Protocols"

* Liu J., Au M.-H., Susilo W., Zhou J.,
  "Short Generic Transformation to Strongly Unforgeable
   Signature in the Standard Model"

* Xu W., Ahn G.-J., Hu H., Zhang X., Seifert J.-P.,
  "DR@FT: Efficient Remote Attestation Framework for Dynamics Systems"

20:00 - 22:00  Symposium Dinner

______________________________________________________________________

Tuesday, 21 September 2010
--------------------------

08:30 - 10:30  Session 4: Traffic Analysis

* Lu L., Chang E.-C., Chan M.-C.,
  "Website Fingerprinting and Identification Using Ordered
   Feature Sequences"

* Janc A., Olejnik L.,
  "Web Browser History Detection as a Real-World Privacy Threat"

* Luo X., Zhang J., Perdisci R., Lee W.,
  "On the Secrecy of Spread-Spectrum Flow Watermarks"

* Chakravarty S., Stavrou A., Keromytis A.,
  "Traffic Analysis against Low-Latency Anonymity Networks
   Using Available Bandwidth Estimation"

10:30 - 11:00  Coffee/tea

11:00 - 12:00  Invited talk
Chairperson: Gritzalis D., AUEB

* Helmbrecht U., ENISA,
  "Cryptography and Privacy in Cloud Computing"

12:00 - 13:00  Session 5: End-User Security

* Xiang G., Pendleton B., Hong J., Rose C.,
  "A Hierarchical Adaptive Probabilistic Approach
   for Zero Hour Phish Detection"

* Bojinov H., Bursztein E., Boneh D., Boyen X.,
  "Kamouflage: Loss-Resistant Password Management"

13:00 - 14:00  Lunch

14:00 - 16:00  Session 6: Formal Analysis

* Escobar S., Meadows C., Meseguer J., Santiago S.,
  "Sequential Protocol Composition in Maude-NPA"

* Dinh T.-T.-A., Ryan M.,
  "Verifying Security Property of Peer-to-Peer Systems Using CSP"

* Basin D., Cremers C.,
  "Modeling and Analyzing Security in the Presence of
   Compromising Adversaries"

* Yasuoka H., Terauchi T.,
  "On Bounding Problems of Quantitative Information Flow"

16:00 - 16:30  Coffee/tea

16:30 - 18:30  Session 7: E-voting and Broadcast

* Heiberg S., Lipmaa H., van Laenen F.,
  "On E-Vote Integrity in the Case of Malicious Voter Computers"

* Kremer S., Smyth B., Ryan M.,
  "Election Verifiability in Electronic Voting Protocols"

* Heather J., Ryan P., Teague V.,
  "Pretty Good Democracy for more expressive voting schemes"

* Blanton M., Frikken K.,
  "Efficient Multi-Dimensional Key Management in Broadcast Services"

______________________________________________________________________

Wednesday, 22 September 2010
----------------------------

08:30 - 10:30  Session 8: Authentication, Access Control,
                          Authorization and Attestation

* Meier J., Gollmann D.,
  "Caught in the Maze of Security Standards"

* Gofman M., Luo R., Yang P.,
  "User-Role Reachability Analysis of Evolving Administrative
   Role Based Access Control"

* Crampton J., Huth M.,
  "An Authorization Framework Resilient to Policy Evaluation Failures"

* Kupcu A., Lysyanskaya A.,
  "Optimistic Fair Exchange with Multiple Arbiters"

10:30 - 11:00  Coffee/tea

11:00 - 13:00  Session 9: Anonymity and Unlinkability

* Backes M., Doychev G., Duermuth M., Koepf B.,
  "Speaker Recognition in Encrypted Voice Streams"

* Pashalidis A., Schiffner S.,
  "Evaluating Adversarial Partitions"

* Ardagna C., Jajodia S., Samarati P., Stavrou A.,
  "Providing Mobile Users' Anonymity in Hybrid Networks"

* Tiplea F.-L., Vamanu L., Varlan C.,
  "Complexity of Anonymity for Security Protocols"

13:00 - 14:00  Lunch

14:00 - 16:00  Session 10: Network Security and Economics

* Wang L., Jajodia S., Singhal A., Noel S.,
  "k-Zero Day Safety: Measuring the Security Risk of
   Networks against Unknown Attacks"

* Johnson B., Grossklags J., Christin N., Chuang J.,
  "Are Security Experts Useful? Bayesian Nash Equilibria for Network
   Security Games with Limited Information"

* Backes M., Ciobotaru O., Krohmer A.,
  "RatFish: A File Sharing Protocol Provably Secure
   Against Rational Users"

* Kheir N., Cuppens-Boulahia N., Cuppens F., Debar H.,
  "A Comprehensive Approach for Cost-Sensitive Intrusion Response"

16:00 - 16:30  Coffee/tea

16:00 - 18:00 Session 11: Secure Update, DOS and Intrusion Detection

* Perito D., Tsudik G.,
  "Secure Code Update for Embedded Devices via Proofs of
   Secure Erasure"

* Kapravelos A., Polakis I., Athanasopoulos E., Ioannidis S.,
  Markatos E.,
  "D(e|i)aling with VoIP: Robust Prevention of DIAL Attacks"

* Karame G., Capkun S.,
  "Low-Cost Client Puzzles based on Modular Exponentiation"

* Tokhtabayev A., Skormin V., Dolgikh A.,
  "Expressive, Efficient and Obfuscation Resilient Behavior Based IDS"

18:00  Farewell



MORE INFORMATION

Additional information about the conference can be found at:
www.esorics2010.org

Call for Participation -
15th European Symposium on Research in Computer Security (ESORICS'2010)


To: Computational Science Mailing List <computational.science@lists.iccsa.org>
From: sara.foresti@unimi.it
Date: Mon, 14 Jun 2010 10:21:39 +0200
Subject: [computational.science] ESORICS 2010 - call for participation

[Apologies if you receive multiple copies of this message]

CALL FOR PARTICIPATION

registration now open!!!! (early bird deadline July 1)

***********************************************************************
15th European Symposium on Research in Computer Security
Hotel AMARILIA, Vouliagmeni, Athens, Greece
20-22 September 2010
www.esorics2010.org
***********************************************************************

ABOUT THE CONFERENCE

ESORICS is the annual European research event in Computer Security. The
Symposium started in 1990 and has been held in several European
countries, attracting a wide international audience from both the
academic and industrial communities.

Computer security is concerned with the protection of information in
environments where there is a possibility of intrusion or malicious
action. The aim of ESORICS is to further the progress of research in
computer security by establishing a European forum for bringing together
researchers in this area, by promoting the exchange of ideas with system
developers and by encouraging links with researchers in related areas.

Progressively organized in a series of European countries, the symposium
is confirmed as the European research event in computer security.

The Symposium is under the aegis of the Greek:
 * Ministry of of Infrastructure, Transport and Networks
 * Ministry of Economy and Finance:
   General Secretariat for Information Systems
 * Ministry of Interior, Decentralization and e-Government:
   General Secretariat for Electronic Governance


REGISTRATION

Registration information is available at:
https://www.triaenatours.gr/esorics.php

Early registration fees apply, from now until July 1.


LIST OF ACCEPTED PAPERS
(listed alphabetically)

- Privacy-Preserving, Taxable Bank Accounts
  (Androulaki, Elli; Vo, Binh; Bellovin, Steven)

- Speaker Recognition in Encrypted Voice Streams
  (Backes, Michael; Koepf, Boris; Duermuth, Markus; Doychev, Goran)

- Efficient Multi-Dimensional Key Management in Broadcast Services
  (Blanton, Marina; Frikken, Keith)

- Kamouflage: Loss-Resistant Password Management
  (Bojinov, Hristo; Boneh, Dan; Bursztein, Elie; Boyen, Xavier)

- Traffic Analysis Against Low-Latency Anonymity Networks Using
  Available Bandwidth Estimation
  (Chakravarty, Sambuddho; Keromytis, Angelos D.; Stavrou, Angelos)

- Are Security Experts Useful? Bayesian Nash Equilibria for Network
  Security Games with Limited Information
  (Christin, Nicolas; Chuang, John; Johnson, Benjamin;
   Grossklags, Jens)

- RatFish: A File Sharing Protocol Provably Secure
  Against Rational Users
  (Ciobotaru, Oana-Madalina; Backes, Michael; Krohmer, Anton)

- Modeling and Analyzing Security in the Presence of
  Compromising Adversaries
  (Cremers, Cas; Basin, David)

- Formal Analysis of Privacy for Vehicular Mix-Zones
  (Dahl, Morten; Delaune, Stephanie; Steel, Graham)

- Verifying Security Property of Peer-to-Peer Systems Using CSP
  (Dinh, Tien Tuan Anh; Ryan, Mark)

- Enforcing Secure Object Initialization in Java
  (Hubert, Laurent; Monfort, Vincent; Pichardie, David;
   Jensen, Thomas)

- An Authorization Framework Resilient to Policy Evaluation Failures
  (Huth, Michael; Crampton, Jason)

- Web Browser History Detection as a Real-World Privacy Threat
  (Janc, Artur; Olejnik, Lukasz)

- D(e|i)aling with VoIP: Robust Prevention of DIAL Attacks
  (Kapravelos, Alexandros; Markatos, Evangelos P.; Polakis, Iasonas;
   Ioannidis, Sotiris; Athanasopoulos, Elias)

- Low-Cost Client Puzzles based on Modular Exponentiation
  (Karame, Ghassan; Capkun, Srdjan)

- A Comprehensive Approach for Cost-Sensitive Intrusion Response
  (Kheir, Nizar; Cuppens, Nora; Cuppens, Frederic; Debar, Herve)

- Election Verifiability in Electronic Voting Protocols
  (Kremer, Steve; Smyth, Ben; Ryan, Mark)

- A Certifying Compiler for Zero-Knowledge Proofs of Knowledge
  based on S-Protocols
  (Krenn, Stephan; Barbosa, Manuel; Schneider, Thomas;
   Bangerter, Endre; Sadeghi, Ahmad-Reza; Almeida, Jose Bacelar)

- Optimistic Fair Exchange with Multiple Arbiters
  (Kupcu, Alptekin; Lysyanskaya, Anna)

- A New Framework for RFID Privacy
  (Li, Yingjiu; Zhao, Yunlei; Yung, Moti; Deng, Robert)

- A Theory of Runtime Enforcement, with Results
  (Ligatti, Jay; Reddy, Srikar)

- On E-Vote Integrity in the Case of Malicious Voter Computers
  (Lipmaa, Helger; Van Laenen, Filip; Heiberg, Sven)

- Short Generic Transformation to Strongly Unforgeable
  Signature in the Standard Model
  (Liu, Joseph; Au, Man Ho; Susilo, Willy; Zhou, Jianying)

- Website Fingerprinting And Identification Using Ordered
  Feature Sequences
  (Lu, Liming; Chang, Ee-Chien; Chan, Mun Choon)

- On the Secrecy of Spread-Spectrum Flow Watermarks
  (Luo, Xiapu; Zhang, Junjie; Lee, Wenke)

- Sequential Protocol Composition in Maude-NPA
  (Meadows, Catherine; Meseguer, Jose; Escobar, Santiago;
   Santiago, Sonia)

- Caught in the Maze of Security Standards
  (Meier, Jan; Gollmann, Dieter)

- Secure Multiparty Linear Programming Using Fixed-Point Arithmetic
  (Octavian, Catrina; de Hoogh, Sebastiaan)

- Evaluating Adversarial Partitions
  (Pashalidis, Andreas; Schiffner, Stefan)

- Proving Mobile Users' Anonymity in Hybrid Networks
  (Ardagna, Claudio; Jajodia, Sushil; Samarati, Pierangela
   Stavrou, Angelos)

- Flexible Scheduler-Independent Security
  (Sudbrock, Henning; Mantel, Heiko)

- Pretty Good Democracy for More Expressive Voting Schemes
  (Teague, Vanessa; Ryan, Peter Y.A.; Heather, James)

- Complexity of Anonymity for Security Protocols
  (Tiplea, Ferucio Laurentiu; Vamanu, Loredana; Varlan, Cosmin)

- Expressive, Efficient and Obfuscation Resilient Behavior Based IDS
  (Tokhtabayev, Arnur; Skormin, Victor; Dolgikh, Andrey)

- Readers Behaving Badly: Reader Revocation in PKI-Based RFID Systems
  (Uzun, Ersin; Nithyanand, Rishab; Tsudik, Gene)

- k-Zero Day Safety: Measuring the Security Risk of Networks against
  Unknown Attacks
  (Wang, Lingyu; Jajodia, Sushil; Singhal, Anoop; Noel, Steven)

- A Hierarchical Adaptive Probabilistic Approach for Zero Hour
  Phish Detection
  (Xiang, Guang; Rose, Carolyn; Hong, Jason; Pendleton, Bryan)

- DR@FT: Efficient Remote Attestation Framework for Dynamics Systems
  (Xu, Wenjuan; Ahn, Gail-Joon; Hu, Hongxin; Zhang, Xinwen;
   Seifert, Jean-Pierre)

- On Bounding Problems of Quantitative Information Flow
  (Yasuoka, Hirotoshi; Terauchi, Tachio)

- IntPatch: Automatically Fix Integer-Overflow-to-Buffer-Overflow
  Vulnerability at Compile-Time
  (Zhang, Chao; Zou, Wei; Wei, Tao; Wang, Tielei; Cheng, Yu)



MORE INFORMATION

Additional information about the conference can be found at:
www.esorics2010.org

Deadline Extended -
15th European Symposium on Research in Computer Security (ESORICS'2010)


To: Computational Science Mailing List <computational.science@lists.iccsa.org>
Date: Thu, 01 Apr 2010 13:46:16 +0200
From: sara.foresti@unimi.it
Subject: [computational.science] ESORICS 2010 - Deadline extension to April 7, 2010

[Apologies if you receive multiple copies of this message]

CALL FOR PAPERS

***********************************************************************
15th European Symposium on Research in Computer Security
Hotel AMARILIA, Vouliagmeni, Athens, Greece
20-22 September 2010
www.esorics2010.org
***********************************************************************

ESORICS is the annual European research event in Computer Security. The
Symposium started in 1990 and has been held in several European
countries, attracting a wide international audience from both the
academic and industrial communities.
Papers offering novel research contributions in computer security are
solicited for submission to the Symposium. The primary focus is on
original, high quality, unpublished research and implementation
experiences. We encourage submissions of papers discussing industrial
research and development.
Papers should focus on topics such as:

- Access Control
- Accountability
- Anonymity
- Applied Cryptography
- Attacks and Viral Software
- Authentication and Delegation
- Data Integrity
- Database Security
- Inference Control
- Identity Management
- Information Flow Control
- Intrusion Tolerance
- Formal Security Methods
- Language-based Security
- Network Security
- Privacy Enhancing Technologies
- Risk Analysis and Management
- Secure Electronic Voting
- Security Architectures
- Security Economics
- Security for Mobile Code
- Security for Dynamic Coalitions
- Security in Location Services
- Security in Social Networks
- Security Models
- Security Verification
- System Security
- Trust Models and Management
- Trust Theories
- Trustworthy User Devices

After the symposium, extended versions of selected papers will be
considered for publication in a major security-focused journal. Those
papers will need to undergo another round of review.


INSTRUCTIONS FOR PAPER SUBMISSION
The proceedings will be published by Springer in the LNCS Series. All
submissions should follow the LNCS template from the time they are
submitted. They should be at most 16 pages (using 11-point font),
excluding the bibliography and well-marked appendices. Committee members
are not required to read the appendices, so the paper should be
intelligible without them.
All submissions must be written in English.
Authors must submit their papers by the deadline indicated below, using
the symposium web site (www.esorics2010.org) and following the
requirements stated there.
All accepted papers should be presented at the Symposium; therefore,
their authors must be prepared to sign a copyright transfer statement.
At least one author of each accepted paper must register to the
symposium, by the early date indicated by the organizers, and present
the paper.


IMPORTANT DATES
Submission of papers: April 7, 2010 (22:00 UTC) *Extended*
Notification to authors: June 10, 2010
Camera-ready copies: June 30, 2010

GENERAL CHAIR
Sokratis Katsikas, University of Piraeus (GR)

PROGRAMME COMMITTEE CHAIRS
Dimitris Gritzalis, AUEB (GR)
Bart Preneel, K.U. Leuven (B)

PROGRAMME COMMITTEE MEMBERS
V. Atluri, Rutgers University (US)
M. Backes, Saarland University and MPI-SWS (D)
F. Bao, Institute for Infocomm Research (SG)
J. Biskup, University of Dortmund (D)
C. Blundo, Universita' di Salerno (I)
X. Boyen, Stanford University (US)
J. Camenisch, IBM Research Zurich (CH)
S. Capkun, ETH Zurich (CH)
R. Clayton, Cambridge University (UK)
V. Cortier, LORIA-CNRS (F)
F. Cuppens, IT TELECOM Bretagne (F)
G. Danezis, Microsoft Research (UK)
S. De Capitani di Vimercati, Universita' degli Studi di Milano (I)
C. Diaz, K.U.Leuven (B)
S. Foley, University College Cork (IE)
C. Fournet, Microsoft Research (UK)
D. Frincke, Pacific Northwest National Lab (US)
D. Kesdogan, University of Siegen (D)
D. Gollmann, Hamburg Univ. of Technology (D)
T. Holz, Vienna University of Technology (A)
B. Jacobs, University of Nijmegen (NL)
S. Jajodia, George Mason University (US)
T. Karygiannis, NIST (US)
S. Katzenbeisser, T.U. Darmstadt (D)
A. Kiayias, University of Athens (GR)
M. Kudo, IBM Research Tokyo (J)
K. Kursawe, Philips Research (NL)
C. Lambrinoudakis, University of Piraeus (GR)
J. Lopez, University of Malaga (E)
W. Lee, Georgia Institute of Technology (US)
I. Mavridis, University of Macedonia (GR)
C. Mitchell, University of London (UK)
J. Mitchell, Stanford University (US)
A. Oprea, RSA Laboratories (US)
R. Perlman, SUN Microsystems (US)
A. Pfitzmann, T.U. Dresden (D)
B. Pinkas, University of Haifa (IL)
P. Ryan, University of Luxembourg (LU)
M. Reiter, University of North Carolina (US)
R. Safavi-Naini, University of Calgary (CA)
P. Samarati, Universita' degli Studi di Milano (I)
E. Snekkenes, Gjovik University College (NO)
G. Spanoudakis, City University London (UK)
I. Stamatiou, University of Ioannina (GR)
P. Syverson, Naval Research Laboratory (US)
B. Tsoumas, Ernst & Young and AUEB (GR)
M. Waidner, IBM Corporation (US)
D. Westhoff, HAW Hamburg (D)

ORGANIZING COMMITTEE CHAIRS
Nikolaos Kyrloglou, ACCI (GR)
Marianthi Theoharidou, AUEB (GR)

PUBLICITY CHAIR
Sara Foresti, Universita' degli Studi di Milano (I)

Deadline Approaching -
15th European Symposium on Research in Computer Security (ESORICS'2010)


To: Computational Science Mailing List <computational.science@lists.iccsa.org>
Date: Tue, 16 Mar 2010 12:07:13 +0200
From: sara.foresti@unimi.it
Subject: [computational.science] ESORICS 2010 - Deadline Approaching

[ 144 lines deleted; see updated version above -- dc ]

Call for Papers -
15th European Symposium on Research in Computer Security (ESORICS'2010)


To: Computational Science Mailing List <computational.science@lists.iccsa.org>
Date: Mon, 15 Feb 2010 10:54:01 +0200
From: sara.foresti@unimi.it
Subject: [computational.science] ESORICS 2010 - Call for Papers

[ 144 lines deleted; see updated version above -- dc ]

Call for Papers -
15th European Symposium on Research in Computer Security (ESORICS'2010)


To: Computational Science Mailing List <computational.science@lists.iccsa.org>
Date: Thu, 08 Oct 2009 10:22:48 +0200
From: Sara Foresti <sara.foresti@unimi.it>
Subject: [computational.science] ESORICS 2010 - Call for Papers

[ 144 lines deleted; see updated version above -- dc ]

[Ada-Belgium] To the Ada-Belgium home page.

Last update: 2010/09/17.

Dirk Craeynest