[ The Types Forum (announcements only),
http://lists.seas.upenn.edu/mailman/listinfo/types-announce ]
Online submission for papers is now available through EasyChair, at
http://www.easychair.org/conferences/?conf=essos12
Abstracts should be submitted before September 18th, and papers before
September 25th!
Call For Papers
International Symposium on Engineering Secure Software and Systems (ESSoS)
http://distrinet.cs.kuleuven.be/events/essos2012/
February 16 - 17, 2012, Eindhoven, The Netherlands
In cooperation with ACM SIGSAC and SIGSOFT and (pending) IEEE CS (TCSE).
CONTEXT AND MOTIVATION
Trustworthy, secure software is a core ingredient of the modern world.
Unfortunately, the Internet is too. Hostile, networked environments, like
the Internet, can allow vulnerabilities in software to be exploited from
anywhere. To address this, high-quality security building blocks (e.g.,
cryptographic components) are necessary, but insufficient. Indeed, the
construction of secure software is challenging because of the complexity of
modern applications, the growing sophistication of security requirements,
the multitude of available software technologies and the progress of attack
vectors. Clearly, a strong need exists for engineering techniques that scale
well and that demonstrably improve the software's security properties.
GOAL AND SETUP
The goal of this symposium, which will be the fourth in the series, is to
bring together researchers and practitioners to advance the states of the
art and practice in secure software engineering. Being one of the few
conference-level events dedicated to this topic, it explicitly aims to
bridge the software engineering and security engineering communities, and
promote cross-fertilization. The symposium will feature two days of
technical program, and is also open to proposals for both tutorials and
workshops. In addition to academic papers, the symposium encourages
submission of high-quality, informative experience papers about successes
and failures in security software engineering and the lessons learned.
Furthermore, the symposium also accepts short idea papers that crisply
describe a promising direction, approach, or insight.
TOPICS
The Symposium seeks submissions on subjects related to its goals. This
includes a diversity of topics including (but not limited to):
- scalable techniques for threat modeling and analysis of vulnerabilities
- specification and management of security requirements and policies
- security architecture and design for software and systems
- model checking for security
- specification formalisms for security artifacts
- verification techniques for security properties
- systematic support for security best practices
- security testing
- security assurance cases
- programming paradigms, models and DLS's for security
- program rewriting techniques
- processes for the development of secure software and systems
- security-oriented software reconfiguration and evolution
- security measurement
- automated development
- trade-off between security and other non-functional requirements
- support for assurance, certification and accreditation
SUBMISSION AND FORMAT The proceedings of the symposium are published by
Springer-Verlag in the Lecture Notes in Computer Science Series
(http://www.springer.com/lncs). Submissions should follow the formatting
instructions of Springer LNCS. Submitted papers must present original,
non-published work of high quality. Online submission for papers is
available through EasyChair, at
http://www.easychair.org/conferences/?conf=essos12
Two types of papers will be accepted:
Full papers (max 12 pages without bibliography/appendices) - May describe
original technical research with a solid foundation, such as formal analysis
or experimental results, with acceptance determined mostly based on novelty
and validation. Or, may describe case studies applying existing techniques
or analysis methods in industrial settings, with acceptance determined
mostly by the general applicability of techniques and the completeness of
the technical presentation details.
Idea papers (max 8 pages with bibliography) - May crisply describe a novel
idea that is both feasible and interesting, where the idea may range from a
variant of an existing technique all the way to a vision for the future of
security technology. Idea papers allow authors to introduce ideas to the
field and get feedback, while allowing for later publication of complete,
fully-developed results. Submissions will be judged primarily on novelty,
excitement, and exposition, but feasibility is required, and acceptance will
be unlikely without some basic, principled validation (e.g., extrapolation
from limited experiments or simple formal analysis).
Proposals for both tutorials and workshops are welcome.
IMPORTANT DATES
Abstract submission: September 18, 2011
Paper submission:
