WOOT'07

Monday, August 6. 2007
The First USENIX Workshop on Offensive Technologies (WOOT '07) takes place today and the workshop has a really nice schedule.This is the first workshop I am aware of that deals with mostly offensive techniques - good to see that also this field now has its own workshop :)

Virtual Honeypots

Tuesday, July 31. 2007
virtual-honeypots
Niels Provos and I have written a book on "Virtual Honeypots: From Botnet Tracking to Intrusion Detection" which was released a couple of days ago. The book deals with high- and low-interaction honeypots and focuses on Honeyd, malware collection, client-side honeypots, botnet tracking, and many more topics. You can order it now in your favorite bookstore, looking forward to your comments :-)


Continue reading "Virtual Honeypots"

USENIX Security '07

Wednesday, July 11. 2007
I was a bit busy in the last few weeks, some time passed since my last blog entry :-/ Now some updates, first an advertizement for USENIX Security'07:

"Don't miss the 16th USENIX Security Symposium to be held August 6-10, 2007, in Boston, MA.

The 3-day technical conference will kick off on Wednesday, August 8, and includes:

- Keynote address by Steven Levy, Senior Editor and Columnist, Newsweek, on "How the iPod Shuffled the World as We Know It"

- Invited talks featuring our most impressive slate of speakers to date, including:
-- David Dill, Stanford University, on "Computer Security and Voting"
-- Peter Gutmann, University of Auckland, New Zealand, on "Windows Vista Content Protection"

- 23 refereed papers, 1 panel, Work-in-Progress Reports (WiPs), and a
poster session on the latest research.

More information: http://www.usenix.org/events/sec07/tech/

Register by July 16 and save up to $300!"

Call for Paper: 1st USENIX Workshop on Offensive Technologies (WOOT '07)

Wednesday, May 2. 2007
The Call for Paper for the 1st USENIX Workshop on Offensive Technologies (WOOT '07) is now available.

Important dates:
  • Paper submissions due: Thursday, June 7th, 2007, 11:59 p.m. PDT

  • Notification to authors: July 7th, 2007

  • Final papers due: July 31st, 2007

The workshop will be will be co-located with the 16th USENIX Security Symposium (Security '07), which will take place August 6–10, 2007.

About WOOT:
Progress in the field of computer security is driven by a symbiotic relationship between our understanding of attack and of defense. The USENIX Workshop on Offensive Technologies aims to bring together researchers and practitioners in system security to present research advancing the understanding of attacks on operating systems, networks, and applications.

Computer security is unique among systems disciplines in that practical details matter and concrete case studies keep the field grounded in practice. WOOT provides a forum for high-quality peer-reviewed papers for discussing tools and techniques for attack.

Submissions should reflect the state of the art in offensive computer security technology—either surveying previously poorly known areas or presenting entirely new attacks.

We are interested in work that could be presented at more traditional security forums, as well as more applied work that informs the field about the state of security practice in offensive techniques.

A significant goal is producing published artifacts that will inform future work in the field. Submissions will be peer-reviewed and shepherded as appropriate.

Call for Paper: 5th ACM Workshop on Recurring Malware (WORM) 2007

Wednesday, April 18. 2007
The Call for Paper for the 5th ACM Workshop on Recurring Malware (WORM) 2007 is now available. I am very proud to be one of the members of the program committee and would love to see many submissions to the workshop.

Important dates:
  • Paper submissions due: Sunday, June 17th, 2007

  • Notification to authors: August 7th, 2007

  • Final papers due: August 22nd, 2007

The workshop will be held at November 2nd, 2007 at George Mason University, VA, USA, in association with the 14th ACM Conference on Computer and Communications Security (CCS).

About WORM:
Internet-wide infectious epidemics have emerged as one of the leading threats to information security and service availability. Self-propagating threats, often termed worms, exploit software weaknesses, hardware limitations, Internet topology, and the open Internet communication model to compromise large numbers of networked systems. Malware is increasingly used as a beachhead to launch further malicious activities, such as installing spyware, deploying phishing servers and spam relays, or performing information espionage. Unfortunately, current operational practices still face significant challenges in containing these threats as evidenced by the rise in automated botnet networks and the continued presence of worms released years ago. The goal of this workshop is to provide a forum for exchanging ideas, increasing understanding, and relating experiences on malicious code from a wide range of communities, including academia, industry, and the government.