The Ninth International Conference on Emerging Security Information, Systems and Technologies

SECURWARE 2014, The Eighth International Conference on Emerging Security Information Systems and Technologies, is an event covering related topics on theory and practice on security, cryptography, secure protocols, trust, privacy, confidentiality, vulnerability, intrusion detection and other areas related to low enforcement, security data mining, malware models, etc. <br> <br>Security, defined for ensuring protected communication among terminals and user applications across public and private networks, is the core for guaranteeing confidentiality, privacy, and data protection. Security affects business and individuals, raises the business risk, and requires a corporate and individual culture. In the open business space offered by Internet, it is a need to improve defences against hackers, disgruntled employees, and commercial rivals. There is a required balance between the effort and resources spent on security versus security achievements. Some vulnerability can be addressed usin... Read more

SECURWARE 2014, The Eighth International Conference on Emerging Security Information Systems and Technologies, is an event covering related topics on theory and practice on security, cryptography, secure protocols, trust, privacy, confidentiality, vulnerability, intrusion detection and other areas related to low enforcement, security data mining, malware models, etc. <br> <br>Security, defined for ensuring protected communication among terminals and user applications across public and private networks, is the core for guaranteeing confidentiality, privacy, and data protection. Security affects business and individuals, raises the business risk, and requires a corporate and individual culture. In the open business space offered by Internet, it is a need to improve defences against hackers, disgruntled employees, and commercial rivals. There is a required balance between the effort and resources spent on security versus security achievements. Some vulnerability can be addressed using the rule of 80:20, meaning 80% of the vulnerabilities can be addressed for 20% of the costs. Other technical aspects are related to the communication speed versus complex and time consuming cryptography/security mechanisms and protocols. <br> <br>Digital Ecosystem is defined as an open decentralized information infrastructure where different networked agents, such as enterprises (especially SMEs), intermediate actors, public bodies and end users, cooperate and compete enabling the creation of new complex structures. In digital ecosystems, the actors, their products and services can be seen as different organisms and species that are able to evolve and adapt dynamically to changing market conditions. <br> <br>Digital Ecosystems lie at the intersection between different disciplines and fields: industry, business, social sciences, biology, and cutting edge ICT and its application driven research. They are supported by several underlying technologies such as semantic web and ontology-based knowledge sharing, self-organizing intelligent agents, peer-to-peer overlay networks, web services-based information platforms, and recommender systems. <br> <br>To enable safe digital ecosystem functioning, security and trust mechanisms become essential components across all the technological layers. The aim is to bring together multidisciplinary research that ranges from technical aspects to socio-economic models. <br> <br>As a multi-track event, SECURWARE 2014 will serve as a forum for researchers from the academia and the industry, professionals, standard developers, policy makers and practitioners to exchange ideas. The topics could be on techniques and applications, best practices, awareness and experiences as well as future trends and needs (both in research and practices) related to all aspects of information security, security systems and technologies. <br> <br>SECURWARE 2014 has the following tracks: <br> <br>SERVICES: Cyber Laboratory Services <br>SOLUTIONS: Cyber Laboratory Solutions <br>ARCH: Security frameworks, architectures and protocols <br>METRICS: Security, trust and privacy measurement <br>SECMAN: Security management <br>SECTECH: Security technologies <br>SYSSEC: System security <br>INFOSEC: Information security <br>RISK: Risk and security <br>MALWA: Malware and Anti-malware <br>ANTIFO: Anti-forensics <br>PRODAM: Profiling data mining <br>SECHOME: Smart home security <br>SECDYN: Security and privacy in dynamic environments <br>ECOSEC: Ecosystem security and trust <br>CRYPTO: Cryptography <br>CYBER-Threat <br> <br> <br> <br>We solicit both academic, research, and industrial contributions. We welcome technical papers presenting research and practical results, position papers addressing the pros and cons of specific proposals, such as those being discussed in the standard fora or in industry consortia, survey papers addressing the key problems and solutions on any of the above topics short papers on work in progress, and panel proposals. <br> <br>Industrial presentations are not subject to the format and content constraints of regular submissions. We expect short and long presentations that express industrial position and status. <br> <br>Tutorials on specific related topics and panels on challenging areas are encouraged. <br> <br>The topics suggested by the conference can be discussed in term of concepts, state of the art, research, standards, implementations, running experiments, applications, and industrial case studies. Authors are invited to submit complete unpublished papers, which are not under review in any other conference or journal in the following, but not limited to, topic areas. <br> <br>All topics and submission formats are open to both research and industry contributions. <br> <br>SERVICES: Cyber Laboratory Services <br> <br>Cyber intelligence systems <br>Global defense <br>Security-awareness <br>Data sanitization and end-of-lifecycle solutions <br>Compliance solutions with PCI DSS standard from PCI DSS certified datacenters <br>Mobile Device Management (MDM) and Mobile Application Management (MAM) <br>Identity and Access Management (IAM) <br>Risk and security management <br>IT-Governance, Risks and compliance <br>Public safety and professional communications and solutions for situational awareness, command and control <br>Data security services <br> <br>SOLUTIONS: Cyber Laboratory Solutions <br> <br>Cyber intelligence technologies <br>Global threat correlation and reputation services; credentials, expiration time for client installations, feature restrictions, Web-console audit logging, etc. <br>Advanced testing software, for known and unknown flaws in software; identifying the weaknesses and vulnerabilities <br>E-mail communication confidentiality protection <br>Protect of enterprises and government agencies for their confidential data against leaks <br>Internet security and content cloud services <br>Risk and security management <br>IT-Governance, Risks and compliance <br>SCADA-based information security systems <br>Guideline on advising, building, developing and inspecting/auditing <br>information security practices and systems <br> <br>ARCH: Security frameworks, architectures and protocols <br> <br>Formal aspects of security <br>Security analysis methodologies <br>Security verification <br>Security protocols <br>Security architectures and formalisms <br>Security and design vulnerability <br>Security and privacy protection <br>Performance and security <br>Secure group communication/multicast <br>Software design security <br>Middleware security <br>Security for nomadic code <br>Intrusion detection systems <br>Static analysis for software security <br>Security modeling <br> <br>METRICS: Security, trust and privacy measurement <br> <br>Security, trust and privacy metrics; <br>Security assurance metrics <br>Security measurement architectures <br>Metrics for adaptive security systems <br>Taxonomical and ontological support of security metrics <br>Experiments and benchmarks for security measurements <br>Embedding security measurability in software and service architectures <br>Risk-driven assessment of security <br>Assessment of effectiveness, efficiency and correctness of security <br>Mapping security metrics and security assurance metrics <br>Mapping security measurements and non-functional requirements <br> <br>SECMAN: Security management <br> <br>Identity management <br>Security law enforcement <br>PKI <br>PKI Key management <br>Incident response planning <br>Intrusion detection and event correlation <br>Firewalls <br>Trust management <br>Software security assurance <br> <br>SECTECH: Security technologies <br> <br>Secure protocols <br>Applied cryptography <br>Smart cards <br>Biometrics <br>Digital rights management <br>Electronic surveillance <br>Database security <br> <br>SYSSEC: System security <br> <br>Internet security <br>Security in wireless <br>Sensor/cellular network security <br>Ad hoc network security <br>Security in peer-to-peer networks <br>Security in wireless multimedia systems <br>Security in different networks (mesh, personal, local, metropolitan, GSM, Bluetooth, WiMax, IEEE 802.x, etc.) <br>Security of emergency services <br> <br>INFOSEC: Information security <br> <br>Information hiding <br>Anonymity <br>Authentication <br>Data Integrity <br>Security data mining <br>Data confidentiality and integrity <br>Information flow protection <br>Trustworthy networks: authentication, privacy and security models <br>Secure service discovery <br>Secure location-based service <br>Information survivability <br> <br>RISK: Risk and security <br> <br>Operational risk (opRisk) <br>OpRisk and field studies <br>Reputation risk <br>Risk and security-awareness <br>Business continuity and disaster recovery <br>Privacy-awareness <br>Security and trust <br> <br>MALWA: Malware and Anti-malware <br> <br>Threat taxonomies and modeling <br>Security threats <br>Threats propagation <br>Anti-malware technologies <br>Engineering anti-malware <br>Anti-virus, anti-spyware, anti-phishing <br>Malware propagation models <br>Profiling security information <br>Vulnerability analysis and countermeasures <br>Denial of service attacks <br>Measurements and metrics <br>Testing samples and techniques <br>Quarantine/reuse decisions <br>Anti-malware tool performance <br>Anti-malware tool suites <br>Open-source anti-malware <br>Host-based anti-malware <br>On-line anti-malware scanning <br> <br>Messaging, viruses, spyware <br> <br>Advanced misuse detection techniques /machine learning, natural language processing, challenge-response, etc./ <br>Message filtering, blocking, authentication <br>Digital signatures <br>Generalized spamming /over email, Internet telephony, instant messaging, mobile phone, phishing, etc. / <br>Spam compression and recognition <br>Learning misuse patterns <br>Payment schemes <br>Economics of generalized spam <br>Tracking abuse tactics and patterns <br>Protecting legitimate use patterns <br>Methods for testing protection robustness <br>Costs and benefits of messaging use and misuse <br>Standards for messaging and misuse reporting <br>Legal aspects /identity theft, privacy, freedom of speech, etc./ <br> <br>ANTIFO: Anti-forensics <br> <br>Advanced anti-forensics mechanisms <br>Smart anti-forensics <br>e-discovery industry and anti-forensics <br>Overwriting data and metadata <br>Data hiding approaches <br>Detecting forensics analysis <br>Anti-forensics tools <br>Unix-, Windows-, and Linux anti-forensics techniques <br>Open source anti-forensics tools <br>Network anti-forensics tools <br> <br>PRODAM: Profiling data mining <br> <br>User and traffic profiling <br>Data mining and visualization <br>Profile mining and knowledge discovery <br>Mining lifecycle for profile collections <br>Profile warehouse construction <br>Profile portfolio and profile discovery <br>Profiling game users and game traffic <br>Profiling transactions <br>Simpson'd paradox <br>Real-time profiling mechanisms <br>Patterns for information profiling <br>Profiling engines <br>Profiling metrics <br>Forensics <br>Profiling applications (banks, on-line shopping, etc.) <br>Data mining-based user profile prediction <br> <br>SECHOME: Smart home security <br> <br>Fundamentals for SHS <br>Privacy and protection for SHS <br>Identify and location management in SHS <br>Authentication and authorization in SHS <br>Access control and security policies in SHS <br>Trust and reputation management <br>Security context-based interfaces for SHS <br>SHS for accessibility and elderly/disabled people <br>Real-time challenges for SHS in eHealth environments <br>Architectures and systems for SHS <br>Network technologies and protocols for SHS <br>Ubiquitous/pervasive platform and middleware for SHS <br>Services and applications for SHS <br>SHS on campuses and hotels <br>SHS for mission critical laboratories <br>Content protection and digital rights management for SHS <br>Intelligent devices, sensor network/RFID for SHS <br>Intrusion detection and computer forensics for SHS <br>SHS and Homeland security <br>Personal data privacy and protection in SHS <br>Emerging standards and technologies for SHS <br>Commercial and industrial for SHS <br>Case studies, prototypes and experience <br> <br>SECDYN: Security and privacy in dynamic environments <br> <br>Fundamentals on highly dynamic environments <br>Privacy and predefined access control dilemma <br>Privacy police, provisions and obligations <br>Dependability in dynamic environments <br>Protection of digital documents in dynamic environments, <br>On-line activities in high dynamic systems <br>Law enforcement in high dynamic systems <br>Personalization <br>Privacy and transparency <br>Distributed usage control <br>Privacy compliance <br>Secure ambient intelligence <br>Secure embedded microprocessor architectures <br>Secure compilation techniques <br> <br>ECOSEC: Ecosystem security and trust <br> <br>Secure and trusted service compositions in peer-to-peer networks <br>Secure data management in collaborative peer-to-peer networks <br>Security and reputation models for self-adaptive overlay networks <br>Identity and trust management in dynamic, self-organizing environments <br>Social institutional-based trust models for self-evolving communities <br> <br>CRYPTO: Cryptography <br> <br>Foundations of cryptography <br>Applied cryptography <br>Cryptanalysis <br>Signatures schemes and trust models <br>Cryptographic algorithms <br>Electronic payment systems <br>High-performance encryption methods <br>Group-oriented cryptography <br>Identity-based cryptography <br>Anonymous authentication <br>Cryptography for multi-user environments <br>Cryptography and secure localization systems <br>Attacks on cryptosystems <br> <br>CYBER-Threat <br> <br>e-Crime <br>Epidemiological models for warware and cyber-crime propagation <br>Record and retrieval of cyber-crimes <br>Cyber-crime prevention <br>Cyber-crime vulnerabilities <br>Cyber-counterattack at source <br>Distributed cyber-attacks <br>Orchestrated cyber-attacks <br>Recursion attacks <br>Cyber-storm attacks <br>Cyber-pranks, hoaxes <br>Phishing/Pharming and anti-phishing <br>Cyber-terrorism <br>Online cyber-crime reporting <br>Accuracy and security of cyber-reports <br>Fighting cyber-crimes <br>Cyber-crime laws <br> <br> <br> <br>INSTRUCTION FOR THE AUTHORS <br> <br>Authors of selected papers will be invited to submit extended versions to one of the IARIA Journals. <br> <br>Publisher: XPS (Xpert Publishing Services) <br>Archived: ThinkMindTM Digital Library (free access) <br>Prints available at Curran Associates, Inc. <br>Articles will be submitted to appropriate indexes. <br> <br>Important deadlines: <br>Submission (full paper) <br> <br>March 24, 2015 <br>Notification <br> <br>May 24, 2015 <br>Registration <br> <br>June 12, 2015 <br>Camera ready <br> <br>July 12, 2015 <br> <br>Only .pdf or .doc files will be accepted for paper submission. All received submissions will be acknowledged via an automated system. <br> <br>Contribution types <br> <br> regular papers [in the proceedings, digital library] <br> short papers (work in progress) [in the proceedings, digital library] <br> ideas: two pages [in the proceedings, digital library] <br> extended abstracts: two pages [in the proceedings, digital library] <br> posters: two pages [in the proceedings, digital library] <br> posters: slide only [slide-deck posted on www.iaria.org] <br> presentations: slide only [slide-deck posted on www.iaria.org] <br> demos: two pages [posted on www.iaria.org] <br> doctoral forum submissions: [in the proceedings, digital library] <br> <br>Proposals for: <br> <br> mini symposia: [in the proceedings, digital library] <br> workshops: [in the proceedings, digital library] <br> tutorials: [slide-deck posted on www.iaria.org] <br> panels: [slide-deck posted on www.iaria.org] <br> <br>FORMATS <br> <br>Only .pdf or .doc files will be accepted for paper submission. All received submissions will be acknowledged via an automated system. <br> <br>Final author manuscripts will be 8.5" x 11", not exceeding 6 pages; max 4 extra pages allowed at additional cost. The formatting instructions can be found on the Instructions page. Helpful information for paper formatting can be found on the here. Latex templates are also available. <br> <br>Slides-based contributions can use the corporate/university format and style. <br> <br>Your paper should also comply with the additional editorial rules. <br> <br>Once you receive the notification of contribution acceptance, you will be provided by the publisher an online author kit with all the steps an author needs to follow to submit the final version. The author kits URL will be included in the letter of acceptance. <br> <br>We would recommend that you should not use too many extra pages, even if you can afford the extra fees. No more than 2 contributions per event are recommended, as each contribution must be separately registered and paid for. At least one author of each accepted paper must register to ensure that the paper will be included in the conference proceedings and in the digital library, or posted on the www.iaria.org (for slide-based contributions). <br> <br>CONTRIBUTION TYPE <br> <br>Regular Papers (up to 6-10 page article -6 pages covered the by regular registration; max 4 extra pages allowed at additional cost- ) (oral presentation) <br>These contributions could be academic or industrial research, survey, white, implementation-oriented, architecture-oriented, white papers, etc. They will be included in the proceedings, posted in the free-access ThinkMind digital library and sent for indexing. Please submit the contributions following the instructions for the regular submissions using the "Submit a Paper" button and selecting the appropriate contribution type. 12-14 presentation slides are suggested. <br> <br>Short papers (work in progress) (up to 4 pages long) (oral presentation) <br>Work-in-progress contributions are welcome. These contributions represent partial achievements of longer-term projects. They could be academic or industrial research, survey, white, implementation-oriented, architecture-oriented, white papers, etc. Please submit the contributions following the instructions for the regular submissions using the "Submit a Paper" button and selecting the contribution type as work in progress. Contributors must follow the conference deadlines, describing early research and novel skeleton ideas in the areas of the conference topics. The work will be published in the conference proceedings, posted in the free-access ThinkMind digital library and sent for indexing. For more details, see the Work in Progress explanation page. 12-14 presentation slides are suggested. <br> <br>Ideas contributions (2 pages long) (oral presentation) <br>This category is dedicated to new ideas in their very early stage. Idea contributions are expression of yet to be developed approaches, with pros/cons, not yet consolidated. Ideas contributions are intended for a debate and audience feedback. Please submit the contributions following the instructions for the regular submissions using the "Submit a Paper" button and selecting the contribution type as Idea. Contributors must follow the conference deadlines, describing early research and novel skeleton ideas in the areas of the conference topics. The work will be published in the conference proceedings, posted in the free-access ThinkMind digital library and sent for indexing. For more details, see the Ideas explanation page. 12-14 presentation slides are suggested. <br> <br>Extended abstracts (2 pages long) (oral presentation) <br>Extended abstracts summarize a long potential publication with noticeable results. It is intended for sharing yet to be written, or further on intended for a journal publication. Please submit the contributions following the instructions for the regular submissions using the "Submit a Paper" button and selecting the contribution type as Extended abstract. Contributors must follow the conference deadlines, describing early research and novel skeleton ideas in the areas of the conference topics. The work will be published in the conference proceedings, posted in the free-access ThinkMind digital library and sent for indexing. 12-14 presentation slides are suggested. <br> <br>Posters (paper-based, two pages long) (oral presentation) <br>Posters are intended for ongoing research projects, concrete realizations, or industrial applications/projects presentations. The poster may be presented during sessions reserved for posters, or mixed with presentation of articles of similar topic. A two-page paper summarizes a presentation intended to be a POSTER. This allows an author to summarize a series of results and expose them via a big number of figures, graphics and tables. Please submit the contributions following the instructions for the regular submissions using the "Submit a Paper" button and selecting the contribution type as Poster Two Pages. Contributors must follow the conference deadlines, describing early research and novel skeleton ideas in the areas of the conference topics. The work will be published in the conference proceedings, posted in the free-access ThinkMind digital library and sent for indexing. 8-10 presentation slides are suggested. Also a big Poster is suitable, used for live discussions with the attendees, in addition to the oral presentation. <br> <br>Posters (slide-based, only) (oral presentation) <br>Posters are intended for ongoing research projects, concrete realizations, or industrial applications/projects presentations. The poster may be presented during sessions reserved for posters, or mixed with presentation of articles of similar topic. The slides must have comprehensive comments. This type of contribution only requires a 8-10 slide-deck. Please submit the contributions following the instructions for the regular submissions using the "Submit a Paper" button and selecting the contribution type as Poster (slide-only). The slide-deck will be posted, post-event, on www.iaria.org. <br>8-10 presentation slides are suggested. Also a big Poster is suitable, used for live discussions with the attendees, additionally to the oral presentation. <br> <br>Presentations (slide-based, only) (oral presentation) <br>These contributions represent technical marketing/industrial/business/positioning presentations. This type of contribution only requires a 12-14 slide-deck. Please submit the contributions following the submission instructions by using the "Submit a Paper" button and selecting the contribution type as Presentation (slide-only). The slide-deck will be posted, post-event, on www.iaria.org. <br>12-14 presentation slides are suggested. <br> <br>Demos (two pages) [posted on www.iaria.org] <br>Demos represent special contributions where a tool, an implementation of an application, or a freshly implemented system is presented in its alfa/beta version. It might also be intended for thsoe new application to gather the attendee opinion. A two-page summary for a demo is intended to be. It would be scheduled in special time spots, to ensure a maximum attendance from the participants. Please submit the contributions following the submission instructions by using the "Submit a Paper" button and selecting the contribution type as Demos. The Demos paper will be posted, post-event, on www.iaria.org. <br> <br>Doctoral forum submissions: (up to 6-10 page article -6 pages covered the by regular registration; max 4 extra pages allowed at additional cost- ) (oral presentation) <br>There contributions refer to PhD dissertations, new PhD approaches, and PhD out-of-the-book thinking, etc. They will be included in the proceedings, posted in the free-access ThinkMind digital library and sent for indexing. Please submit the contributions following the instructions for the regular submissions using the "Submit a Paper" button and selecting the appropriate contribution type Doctoral forum. 12-14 presentation slides are suggested. <br> <br>Tutorial proposals <br>Tutorials provide overviews of current high interest topics. Proposals should be for 2-3 hour long. Proposals must contain the title, the summary of the content, and the biography of the presenter(s). The tutorials' slide decks will be posted on the IARIA site. <br>Please send your proposals to tutorial proposal <br> <br>Panel proposals <br>The organizers encourage scientists and industry leaders to organize dedicated panels dealing with controversial and challenging topics and paradigms. Panel moderators are asked to identify their guests and manage that their appropriate talk supports timely reach our deadlines. Moderators must specifically submit an official proposal, indicating their background, panelist names, their affiliation, the topic of the panel, as well as short biographies. The panel's slide deck will be posted on the IARIA site. <br>Please send your proposals to panel proposal <br> <br>Workshop proposals <br>See http://www.iaria.org/workshop.html <br> <br>Mini Symposium proposal <br>See http://www.iaria.org/symposium.html