Tutorials and Workshops

9:00 - 12:00 (Aria Room) Tutorial 1: Topics in Intrusion Detection: Correlation and Network-based Approachs

(Vern Paxson and Stuart Staniford)

13:00 - 16:00 (Aria Room) Tutorial 2: Security and Software Engineering

(Stuart Stubblebine and Prem Devanbu)

8:30 - 21:30 (Concerto Room) Workshop: Security and Privacy in Digital Rights Management

13:30 - 18:30 (Sonata-3 Room) Workshop: Data Mining for Security Applications

Preliminary Conference Program

8:30 - 8:45 Opening Remarks by Chairs

Mike Reiter (Bell Labs, Lucent Technologies, USA)
Pierangela Samarati (Università di Milano, Italy)

8:45 - 10:00 Invited Talk

Brian Snow
(Technical Director, Information Assurance Directorate, National Security Agency, USA)
We Need Assurance

10:00 - 10:30 Coffee Break

10:30 - 12:30 Password Management and Digital Signatures

Error Tolerant Password Recovery
Niklas Frykholm, Ari Juels
(RSA Laboratories, USA)

Delegation of Cryptographic Servers for Capture-Resilient Devices
Philip MacKenzie, Michael K. Reiter
(Bell Labs, Lucent Technologies, USA)

Twin Signatures: An Alternative to the Hash-and-Sign Paradigm
David Naccache, David Pointcheval, Jacques Stern
(Ecole Normale Superieure, France)

BiBa: A New Signature Scheme for Broadcast Authentication
Adrian Perrig (UC Berkeley, USA)

12:30 - 14:00 Lunch

14:00 - 15:30 Access Control

Policy Algebras for Access Control - The Propositional Case
Duminda Wijesekera, Sushil Jajodia
(George Mason University, USA)

A Chinese Wall Security Model for Decentralized Workflow Systems
Vijayalakshmi Atluri, Soon Ae Chun, Pietro Mazzoleni
(Rutgers University, USA)

Design and Implementation of a Flexible RBAC-Service in an Object-Oriented Scripting Language
Gustaf Neumann, Mark Strembeck
(Vienna University of Economics and BA, Austria)

15:30 - 16:00 Coffee Break

16:00 - 17:30 Mobile Code and Distributed Systems

An Efficient Security Verification Method for Programs with Stack Inspection
Naoya Nitta, Yoshiaki Takata, Hiroyuki Seki
(Nara Institute of Science and Technology, Japan)

The Performance of Public Key-Enabled Kerberos Authentication in Mobile Computing Applications
Alan Harbitter, Daniel A. Menascè
(PEC Solutions Inc., USA - George Mason University, USA)

A New Approach to DNS Security (DNSSEC)
Giuseppe Ateniese, Stefan Mangard
(The Johns Hopkins University, USA)

19:00 Reception

8:30 - 10:00 Protocols

Events in Security Protocols
Federico Crazzolara, Glynn Winskel
(University of Cambridge, England)

On the Relationship between Strand Spaces and Multi-Agent Systems
Joseph Y. Halpern, Riccardo Pucella
(Cornell University, USA)

Verifiable, Secret Shuffles of ElGamal Encrypted Data for Secure Multi-Authority Elections
C. Andrew Neff (VoteHere Inc., USA)

10:00 - 10:30 Coffee Break

10:30 - 12:30 Secure Data Publishing and Certificate Management

Tangler - A Censorship Resistant Publishing System Based On Document Entanglements
Marc Waldman, David Mazieres
(New York University, USA)

Flexible Authentication of XML documents
Prem Devanbu, Michael Gertz, April Kwong, Chip Martel, Glen Nuckolls, Stuart G. Stubblebine
(UC Davis, USA and Stubblebine Consulting, USA)

Interoperable Strategies in Automated Trust Negotiation
Ting Yu, Marianne Winslett, Kent Seamons
(University of Illinois at Urbana-Champaign, USA, and Brigham Young Univeristy, USA)

Distributed Credential Chain Discovery in Trust Management
Ninghui Li, William H. Winsborough, John C. Mitchell
(Stanford University, USA, and NAI Labs, USA)

12:30 - 14:00 Lunch

14:00 - 15:30 Protocol Analysis

Bounded-Process Cryptographic Protocol Analysis
Jonathan Millen, Vitaly Shmatikov
(SRI International, USA)

Inductive Methods and Contract-Signing Protocols
Rohit Chadha, Max Kanovich, Andre Scedrov
(University of Pennsylvania, USA)

The Faithfulness of Abstract Encryption
Joshua D. Guttman, F. Javier Thayer Fabrega, Lenore D. Zuck
(MITRE, USA - New York University, USA)

15:30 - 16:00 Coffee Break

16:00 - 17:30 Panel - The Digital Millenium Copyright Act: An Informal Debate

Moderator:	Mike Reiter (Bell Labs, Lucent Technologies, USA)
Panelists:	Allan Adler (Vice President, Legal and Governmental Affairs American Association of Publishers, USA)
	Fred von Lohmann (Senior Intellectual Property Attorney, Electronic Frontier Foundation, USA)

8:30 - 10:00 Cryptosystems

OCB: An Authenticated-Encryption Mode for Emerging Cryptographic Standards
Phillip Rogaway, Mihir Bellare, John Black, Ted Krovetz
(UC Davis, USA - UC San Diego, USA - University of Nevada, USA)

Paillier's Cryptosystem Revisited
Dario Catalano, Rosario Gennaro, Nick Howgrave-Graham, Phong Q. Nguyen
(Università di Catania, Italy - IBM Research Yorktown Heights, USA - Ecole Normale Superieure, France)

Securely Combining Public-Key Cryptosystems
Stuart Haber, Benny Pinkas
(InterTrust STAR Lab, USA)

10:00 - 10:30 Coffee Break

10:30 - 12:30 Group key Management and Signatures

A Practical Forward Secure Group Signature Scheme
Dawn Song (UC Berkeley, USA)

Formalizing GDOI Group Key Management Requirements in NPATRL
Catherine Meadows, Paul Syverson, Iliano Cervesato
(Naval Research Laboratory, USA)

Accountable-Subgroup Multisignatures
Silvio Micali, Kazuo Ohta, Leonid Reyzin
(MIT, USA - University of Electoro-Communications, Japan)

Provably Authenticated Group Diffie-Hellman Key Exchange
Emmanuel Bresson, Olivier Chevassut, David Pointcheval, Jean-Jacques Quisquater
(Ecole Normale Superieure, France - Lawrence Berkeley National Laboratory, USA - Microelectronic laboratory, Belgium)

12:30 Closing