Call for Paper: 2009 European Workshop on System Security (EuroSec'09)

Friday, November 14. 2008
The 2009 European Workshop on System Security (EuroSec'09) is a new workshop - now in the second year - associated with the Annual ACM SIGOPS EuroSys conference. The workshop aims to bring together researchers, practitioners, system administrators, system programmers, and others interested in the latest advances in the security of computer systems and networks. The focus of the workshop is on novel, practical, systems-oriented work.

EuroSec explicitly encourages members of the systems community to explore leading-edge topics and ideas before they are presented at a major conference. All submissions will be reviewed by the Program Committee. Only original, novel work will be considered for publication. Accepted papers will be published in the proceedings of EuroSec in the ACM Digital Library

You are hereby invited to submit papers of up to 8 single-spaced pages (including figures, tables and references). A LaTeX style files helps in preparing the submission.

Important Dates:
Deadline for paper submission: January 19th, 2009
Notification of acceptance or rejection: February 16th, 2009
Final paper camera ready copy: March 2nd, 2009
Workshop dates: March 31st, 2009 in Nuremberg, Germany

You can find more information at http://dcs.ics.forth.gr/eurosec09/

SSH Honeypot

Wednesday, November 12. 2008
Jan has some interesting statistics regarding SSH Honeypot on his blog:
In a period of two month from july to september of this year a total of 143 different attackers tried to compromise the Honeypot. In my opinion this is not really much considering the fake SSH daemon was listening on a few thousand IP addresses.

The network range Jan monitors seems to be rather quiet, 143 unique attacks does not seem to be much. It could be that attackers typically target other network ranges or some other effects could cause this low attack level - who knows... He also published some other statistics like the top bruteforced usernames (root, admin, test, guest, ...) and guessed passwords (123456, password, root, admin, ...). He also recently published new versions of his tools at Virus Blog.

And a good news: McColo is offline since a few hours.