=================================================================== Message du CERT-RENATER (certsvp@renater.fr) =================================================================== Bonjour, La prochaine conférence du FIRST aura lieu en France, à Toulouse du 17 au 22 juin 2001. Cette conférence qui rassemble beaucoup d'experts mondiaux en sécurité Internet représente une excellente occasion de prouver que la France a des choses à dire dans le domaine. Le président du comité de programme encourage donc fortement les membres de la communauté Renater à faire des propositions de présentations et/ou de tutoriels. Cordialement, ========================================================= + CERT-RENATER | tel : 01-53-94-20-44 + + 151 bd de l'Hopital | fax : 01-53-94-20-41 + + 75013 Paris | email: certsvp@renater.fr + ========================================================= ====================================================================== THE 13th ANNUAL FIRST CONFERENCE on COMPUTER SECURITY and INCIDENT HANDLING TOULOUSE, FRANCE - June 17-22, 2001 FUTURE INCIDENT RESPONSE: OPTIMIZING THE ANSWERS NOW CALL FOR PAPERS OVERVIEW ======== The Forum of Incident Response and Security Teams (FIRST, http://www.first.org/) brings security incident response teams together including government, commercial, and academic organizations. World-wide, FIRST aims to foster cooperation and coordination in incident prevention, to prompt rapid response to incidents, and to promote information sharing among members and the global community. The FIRST conference (http://www.first.org/conference/2001/) brings together IT managers, system and network administrators, security specialists, academia, security solutions vendors, computer security incident response team (CSIRT) personnel and anyone interested in - the most advanced techniques in detecting and responding to computer security incidents - the latest advances in computer security tools, methodologies, and practice - sharing their views and experiences with those in the computer security incident response field THE CONFERENCE ============== The conference is a five day event, comprising two days of tutorials and three days of technical sessions which include refereed paper presentations, invited talks, and panel discussions. The conference will tackle the most recent practical issues in computer security, focusing on incident response. The program committee is soliciting original papers analyzing topics dealing with: * Incident Response - intrusion detection, analysis, and response automation - responding to Distributed Denial-of-Service (DDOS) attacks - collecting evidence - computer and network forensics * CSIRT Operation and Tools - automation of CSIRT operations - informing customers of new security threats (vulnerabilities, exploitation tools, viruses, etc.) - pros and cons of both commercial and experimental pro-active security tools - experiences with commercial security tools - proactive security tools - vulnerability analysis and advisory process - using incident response expertise to effectively build a tiger team - methodologies for drafting suitable incident response security policies * Response Team Cooperation and Legal Issues - coordinating international incident handling - issues of trust relationships in incident response - international legal and liability issues in incident response - dealing with black hats * New Technologies and Vulnerability Issues - impact of new technologies (IPv6 and others) on incident response - experience with PKI: incident detection and response - vulnerabilities in WAP enabled web applications - vulnerabilities in PDA and Pocket PC's * Other Topics - competition, espionage, and information warfare - secure network administration - secure programming techniques and practices - Internet service providers and security TUTORIAL SUBMISSION =================== Three tutorial tracks are planned: - The first track is oriented toward IT managers and will deal with topics such as drafting security policies incorporating policies for incident response, computer forensics, setting up security infrastructures, etc. - The second track is oriented toward technical staff and will provide information on security tools, designing security architectures, intrusion detection and monitoring tools, web security, etc. - The third track is tailored for people interested in building and organising an incident response team or related services like security advisories, vulnerability analysis, etc. Proposals are solicited from individuals interested in giving a tutorial. Tutorials may be half or full day in length and can cover topics either at an introductory or advanced level. All tutorial submissions will be handled electronically. Authors should email the completed submission form (attached below) to tuto2001@first.org. Individuals interested in submitting tutorial proposals are encouraged to contact the program chair before the deadline to discuss the proposed content. PANEL SUBMISSION ================ Panels are solicited that examine innovative, controversial, or otherwise provocative issues of interest. All panel submissions will be handled electronically. Authors should e-mail the completed submission form (attached below) to panel2001@first.org. A reduction of the conference fee will be offered to panel organizers. PAPER SUBMISSION ================ Authors are invited to submit papers, preferably in Post Script or PDF format (RTF and HTML are also accepted). The length should not exceed 15 double spaced typeset pages. The paper format will be A4 (210x297mm) or letter (8.5x11 in). Detailed synthesis (2 pages minimum) will be considered if it gives a clear reflection of the contents and key points of the coming paper. All paper submissions will be handled electronically. Authors should email a version of their paper and the completed submission form (attached below) to paper2001@first.org Authors will receive an immediate notification of the successful receipt of the file containing their paper. Subsequently, a formal notification will be sent after verifying that the paper can be printed successfully. A reduction of the conference fee will be offered to one author of each selected paper. PROCESS OF SELECTION ==================== Papers, tutorials, and panels will be evaluated by the program committee based on their quality and relevance. Each proposal will be reviewed by at least three independent reviewers, whose reviews will be relayed to the corresponding author. All submissions are held in confidentiality prior to publication in the proceedings. Papers, tutorials and panels submitted after the deadline will not be accepted unless an extension has been granted. Authors must obtain employer, client, or government releases prior to submitting the final manuscript. Accepted papers will be presented by their authors and will be published in the conference proceedings. The proceedings are provided free of charge to conference attendees. Additional copies will be available for purchase at the conference. Presenters that provide their materials by the stated deadline will be eligible to take part in a prize drawing. COPYRIGHT ========= FIRST requires a non exclusive copyright license for all the papers presented at the conference and for the presentation material. IMPORTANT DATES =============== Submission deadline: November 22, 2000 Notification of acceptance: January 19, 2001 Final version of the paper due: March 12, 2001 Final presentation material (slides) due: May 15, 2001 Note that tutorial and panel proposals, as well as paper abstracts (or full papers, if possible) are expected to arrive prior to the submission deadline (November 22) in order to be considered. QUESTIONS ========= If you have questions about the submission process, don't hesitate to send them to the appropriate email address: - paper2001@first.org - tuto2001@first.org - panel2001@first.org PROGRAM COMMITTEE ================= David CROCHEMORE (Chair), chair2001@first.org - CERT-Renater - France Gorazd BOZIC (Vice Chair) - SI-CERT - Slovenia Peter BIVESAND - NSIC - Sweden Marc DACIER - IBM - Switzerland Dan GARRETT - InterTech - USA Stephen E HANSEN - SUNSET - USA Kent HOOKER - U. of Wisconsin - USA Kevin J. HOULE - CERT/CC - USA Alfredo Jose JIMENEZ - ITESM - Mexico Klaus-Peter KOSSAKOWSKI - Germany Xing LI - CCERT - China Chaeho LIM - CERTCC-KR - Korea Francisco MONSERRAT COLL - IRIS-CERT - Spain Claudia NATANSON - BT-CERT - UK Marcus PATTLOCH - DFN-Verein - Germany Cristina SERBAN - AT&T - USA Gordon R. STEELE - PARA-PROTECT - USA Don STIKVOORT - Stelvio - The Netherlands Hironobu SUZUKI - JP-CERT/CC - Japan Moira J. WEST-BROWN - USA ====================================================================== PROPOSAL SUBMISSION FORM FIRST CONFERENCE 2001 Name __________________________________________ Address __________________________________________ __________________________________________ __________________________________________ Phone _______________ Fax ________________ E-mail _______________ URL ________________ Title of Presentation ____________________________ Presentation Type ( please check one ) ( ) Paper ( ) Half-day Tutorial ( ) Panel ( ) Full-day Tutorial Presentation Length (excluding breaks) ______ Presentation media requirements (other than one overhead projector and a microphone) : ______________________________________________________ ______________________________________________________ ______________________________________________________ ______________________________________________________ ______________________________________________________ Paper/Panel Abstract (75-100 words): (1) (*) ______________________________________________________ ______________________________________________________ ______________________________________________________ ______________________________________________________ ______________________________________________________ ______________________________________________________ ______________________________________________________ ______________________________________________________ or Tutorial Details (must include): (2) - the topic and objectives, - a detailed outline of the content, - a description of the intended audience - the type of compensation you are expecting according to the presentation you propose ______________________________________________________ ______________________________________________________ ______________________________________________________ ______________________________________________________ ______________________________________________________ ______________________________________________________ ______________________________________________________ ______________________________________________________ Brief biography (50-75 words) - for each author/panelist:(*) ______________________________________________________ ______________________________________________________ ______________________________________________________ ______________________________________________________ ______________________________________________________ ______________________________________________________ ______________________________________________________ (1) For paper/panel submission only (2) For tutorial submission only (*) If accepted, abstract and biography/biographies will be included in the conference proceedings. Note that tutorial and panel proposals, as well as paper abstracts (or full papers, if possible) are expected to arrive prior to the submission deadline (November 22) in order to be considered. FIRST is granted a non exclusive right to copy and redistribute conference material including the submissions of the author(s). This includes potential distribution on a conference CD and/or the FIRST website. Authors are requested to use an actively used email address for all email correspondence regarding their conference submission. =================================================================