Recent Advances in Intrusion Detection Symposium

[Peter Mell <peter.mell () nist gov>]

Below is the call for papers for the 5th annual Recent Advances in 
Intrusion Detection (RAID) symposium which will be held in Zurich 
Switzerland. I have found this symposium to contain some of the best 
research presentations for advancing the field of intrusion detection and I 
encourage paper submissions and attendance by anyone with a research 
interest in this area. For more information or to see the call for papers 
in html, please visit the RAID web site at 
http://www.raid-symposium.org/raid2002.

-----------------------------------------------------------
Peter Mell  (RAID Publicity Chair)
ICAT Vulnerability Index Project Lead, http://icat.nist.gov
NIST Computer Security Division
-----------------------------------------------------------

Call For Papers
RAID 2002
Fifth International Symposium on
Recent Advances in Intrusion Detection
Zurich, Switzerland
October 16-18, 2002
Organized by
Swiss Federal Institute of Technology and IBM Research Division
Held in conjunction with Esorics 2002

This symposium, the fifth in an annual series, brings together
leading figures from academia, government, and industry to discuss
state-of-the-art intrusion detection technologies and issues from the
research and commercial perspectives. The RAID International Symposium
series is intended to further advances in intrusion detection by
promoting the exchange of ideas in a broad range of topics.
The RAID 2002 program committee invites three types of submissions:
- Full papers presenting mature research results. Full papers accepted
for presentation at the Symposium will be published in the RAID 2002
proceedings published by Springer Verlag in its Lecture Notes in
Computer Science (LNCS) series.
Full papers are limited to 20 pages when formatted according to the
instructions provided by Springer Verlag. Papers must include an
abstract and a list of keywords.
- Extended abstracts presenting work-in progress, case studies and
implementation experiences. We welcome basically any type of
submission that is of general interest to the audience. Extended
abstracts accepted for presentation at the Symposium will be
published on the RAID web site.
Extended abstracts are limited to 1200 words in length.
- Panel proposals for presenting and discussing interesting topics in
the field of intrusion detection.
Panel proposals should include both an outline of the format of
the panel and a short rationale for the panel. Panels that include
time for general discussion and questions/answers between the
panelists and the Symposium attendees are preferred.

The following topics are within scope:
1. Assessing, measuring, and classifying intrusion detection
systems:
- Quantitative and qualitative assessment of IDSs
- Benchmarking techniques and technologies
- Relations to risk assessment and risk management plans
2. IDS cooperation and integration:
- IDS interoperability standards and standardization
- Alert correlation and attack scenario analysis
- Combining different types of IDSs
- Integration of intrusion detection
with system/network management frameworks
- Integration of intrusion detection
with business processes
3. IDS in high-performance and real-time environments:
- Large-scale/enterprise IDSs
- Intrusion detection in high-speed networks
- Managing high-volume data
- Intrusion detection in highly distributed and
heterogeneous environments
4. Vulnerabilities and Attacks:
- Vulnerability or attack databases
- Vulnerability or attack taxonomies
- Attack description languages
5. Intrusion management and reaction:
- Intrusion tolerance
- Adaptive IDS solutions
- Survivability and dependability
- Automated responses
6. Practical Considerations:
- Case studies
- Legal issues
- Handling of false positives
- Evidence storage/log requirements, handling, and exchange
- Commercial intrusion detection systems and their directions
- Real-time versus post-mortem IDSs

STEERING COMMITTEE
Chair: Marc Dacier (IBM Research, Switzerland)
Hervé Debar France Telecom R&D, France
Deborah Frincke University of Idaho, USA
Ming-Yuh Huang The Boeing Company, USA
Wenke Lee Georgia Institute of Technology, USA
Ludovic Mé Supélec, France
S. Felix Wu UC Davis, USA

PROGRAM COMMITTEE
Program chairs: Andreas Wespi (IBM Research, Switzerland)
Giovanni Vigna (UC Santa Barbara, USA)
General chairs: Günter Karjoth (IBM Research, Switzerland)
Jürg Nievergelt (ETH Zurich, Switzerland)
Publication chair: Luca Deri (University of Pisa, Italy)
Publicity chair: Peter Mell (NIST, USA)
Sponsor chair: Diego Zamboni (IBM Research, Switzerland)

Matt Bishop UC Davis, USA
Joachim Biskup University of Dortmund, Germany
Frédéric Cuppens ONERA, France
Luca Deri University of Pisa, Italy
Yves Deswarte LAAS-CNRS, France
Tim Grance NIST, USA
Erland Jonsson Chalmers University of Technology, Sweden
Richard Kemmerer UC Santa Barbara, USA
Calvin Ko NAI, USA
Jay Lala DARPA Information Technology Office, USA
Richard Lippmann MIT/Lincoln Lab, USA
Roy Maxion CMU, USA
John McHugh CMU/SEI CERT, USA
Peter Mell NIST, USA
George Mohay Queensland University, Australia
Vern Paxson ICSI/LBNL, USA
Phil Porras SRI, USA
Marty Roesch Sourcefire, USA
Stuart Staniford Silicon Defense, USA
Al Valdes SRI, USA
David Wagner UC Berkeley, USA
Diego Zamboni IBM Research, Switzerland

SUBMISSIONS
Submissions must not substantially duplicate work that any of the
authors has published elsewhere or has submitted in parallel to any
other conference or workshop with proceedings. The full papers and
extended abstracts must list all authors and their affiliations; in
case of multiple authors, the contact author must be indicated (note
that RAID does not require anonymized submissions).
Authors are invited to submit their papers electronically. A detailed
description of the electronic submission procedure will be made
available at http://www.raid-symposium.org/raid2002/submission.html by end
of February 2002. Submissions must conform to this procedure and be
received by end of March 2002 in order to be considered.
Each submission will be acknowledged by e-mail. If acknowledgment is
not received within seven days, please contact Andreas Wespi
(mailto:anw () zurich ibm com).
All submissions must be in English. Plan to give all presentations and
panels in English
A preliminary program will be available by July 31, 2002.

CORPORATE SPONSORS
We invite interested organizations to act as sponsors for RAID
2002. Sponsor contributions will be used to support student attendance
to RAID, and for other expenses. Please contact Diego Zamboni
(mailto:dza () zurich ibm com) for information regarding corporate
sponsorship of RAID 2002.

REGISTRATION
Detailed registration information (including fees, suggested hotels,
and travel directions) will be provided on the RAID 2002 web site
(http://www.raid-symposium.org/raid2002).

PROCEEDINGS
Accepted papers will be published by Springer Verlag in its Lecture
Notes in Computer Science (LNCS) series. Instructions for authors will
be made available at http://www.raid-symposium/raid2002/authors.
Extended abstracts (and their accompanying papers if available) and
slide presentations will be published on the Symposium's web site.

IMPORTANT DATES
Deadline for full paper submission : March 31, 2002
Deadline for extended abstract submission : March 31, 2002
Deadline for panel submission : April 30, 2002
Notification of acceptance or rejection : May 31, 2002
Final full paper camera ready copy due : July 5, 2002
RAID 2002 : October 16-18, 2002

MORE INFORMATION
Please contact the following people for more information:
On-site arrangements: Günter Karjoth (mailto:gka () zurich ibm com)
Corporate sponsorship: Diego Zamboni (mailto:dza () zurich ibm com)
General program information: Andreas Wespi (mailto:anw () zurich ibm com)