The 5th ACM Workshop on
Formal Methods in Security Engineering:
From Specifications to Code

Friday November 2nd, 2007,
George Mason University, USA

held in conjunction with the
14th ACM Conference on Computer and Communications Security (ACM CCS'07)

Program * Scope * Committee * Submission * Important dates * Registration
Call for Papers (pdf version) * Call for Papers (ps version) * Call for Papers (txt version) * Call for Papers (html version)
Deadline for Submissions: June 10, 2007 (submission is closed)

Registration is open now!

Follow this link to register for FMSE on the CCS webpage.

How to get to the workshop on GMU campus (from Vijay Atluri):

The workshops at GMU will be held on the upper level in the Student Union Building II. The exact address is 10423 Rivanna River Way. Vijay Atluri will be arranging for shuttles to take participants to and from the hotel and GMU. There is visitor parking in the Sandy Creek parking deck which is very by the building. Vijay Atluri can get validations if necessary. It costs $8.00 a day.

Program

8:50am - 9:00am Welcome

Heiko Mantel

9:00am - 10:30am SESSION 1 (CHAIR: Heiko Mantel)

Invited Talk Formal Methods in Security Engineering: Where We've Been, Where We Are, Where We Need to Go
John D. McLean (NRL, USA)
Verification Condition Generation for Conditional Information Flow SLIDES
Torben Amtoft (Kansas State, USA) and Anindya Banerjee (IBM Watson, USA)

11:00am - 12:30pm SESSION 2 (CHAIR: John McLean)

A Simple and Expressive Semantic Framework for Policy Composition in Access Control
Glenn Bruns (Bell Labs, USA), Daniel S. Dantas (Princeton, USA) and Michael Huth (Imperial, UK)
Formal Correctness of Conflict Detection for Firewalls
Venanzio Capretta (Nijmegen, Netherlands), Bernard Stepien (Ottawa, Canada), Amy Felty (Ottawa, Canada), Stan Matwin (Ottawa, Canada)
Security Policy Compliance with Violation Management SLIDES
Julien Brunel (Toulouse, France), Frederic Cuppens (Rennes, France), Nora Cuppens-Boulahia (Rennes, France), Thierry Sans (Rennes, France), Jean-Paul Bodeveix (Toulouse, France) and Mamoun Filali-Amine (Toulouse, France)

2:00pm - 3:30pm SESSION 3 (CHAIR: Joshua Guttman)

Invited Talk Cryptol: Specification, Implementation and Verification of High-Grade Cryptographic Applications
Jeff Lewis (Galois Inc., USA)
Security Policy Analysis using Deductive Spreadsheets SLIDES
Anu Singh (Stony Brook, USA), C. R. Ramakrishnan (Stony Brook, USA), I. V. Ramakrishnan (Stony Brook, USA), Scott D. Stoller (Stony Brook, USA) and David S. Warren (Stony Brook, USA)

4:00pm - 5:30pm SESSION 4 (CHAIR: Amy Felty)

A Calculus of Challenges and Responses SLIDES
Michael Backes (Saarbrücken, Germany), Agostino Cortesi (Venice, Italy), Riccardo Focardi (Venice, Italy), and Matteo Maffei (Saarbrücken, Germany)
Selecting Theories and Nonce Generation for Recursive Protocols SLIDES
Klaas Ole Kürtz (Kiel, Germany), Ralf Küsters (ETH Zurich, Switzerland) and Thomas Wilke (Kiel, Germany)
Weaving Rewrite-Based Access Control Policies SLIDES
Anderson Santana de Oliveira (INRIA & LORIA, France) , Eric Ke Wang (Hong Kong/INRIA & LORIA), Claude Kirchner (INRIA & LORIA, France) and Helene Kirchner (CNRS & LORIA, France)

5:30pm - 5:40pm Closing

Heiko Mantel

Scope

Information security has become a crucial concern for the commercial deployment of almost all applications and middleware. Although this is commonly recognized, the incorporation of security requirements in the software development process is not yet well understood. The deployment of security mechanisms is often ad hoc, without a formal security specification or analysis, and practically always without a formal security validation of the final product. Progress is being made, but there remains a wide gap between high-level security models and actual code development.

We aim to bring together researchers and practitioners from both the security and the software engineering communities, from academia and industry, who are working on applying formal methods to the design and validation of large-scale systems.

We seek original research papers addressing foundational issues in formal methods in security engineering. Topics covered include, but are not limited to:

security requirements and risk analysis;
access control models, information flow models, and trust models;
specification and analysis of security properties;
stepwise development by refinement and composition;
computationally sound abstraction;
program logics and type systems for security;
other techniques for verification and static analysis;
tool support for the development and analysis of security-critical systems;
design and analysis of security protocols;
security aspects of operating systems and middleware;
case studies

As in previous years, FMSE 2007 is co-located with the ACM Conference on Computer and Communications Security.

All submissions will be peer-reviewed. Authors of accepted papers must guarantee that their paper will be presented at the workshop. Final proceedings will be published by the ACM (Previous proceedings).

Program Chairs

Virgil D. Gligor, University of Maryland, USA
Heiko Mantel, TU Darmstadt, Germany

Program Committee

Michael Backes, Saarland University, Germany
Gilles Barthe, INRIA Sophia-Antipolis, France
Veronique Cortier, CNRS & LORIA Nancy, France
Anupam Datta, CMU, USA
Amy Felty, University of Ottawa, Canada
Andy Gordon, Microsoft Research Cambridge, UK
Joshua Guttman, MITRE, USA
Peeter Laud, Tartu University, Estonia
Fabio Martinelli, IIT Pisa, Italy
Cathy Meadows, NRL, USA
Jon Millen, MITRE, USA
David Naumann, Stevens Institute of Technology, USA
Vitaly Shmatikov, University of Texas at Austin, USA
Luca Vigano, University of Verona, Italy

FMSE Steering Committee

Michael Backes, Saarland University, Germany
David Basin, ETH Zurich, Switzerland
Michael Waidner, IBM Zurich Research Lab, Switzerland

Submission Guidelines

Submissions must be received by Sunday June 10, 2007 to be considered. If you have problems, please contact the program chairs.

Click here to submit an article via EasyChair.
Submissions must not substantially overlap with papers that have been published or that are simultaneously submitted to a journal or a conference with proceedings. The article must list all authors and their affiliations. It should begin with a title, a short abstract, and a list of key words, and its introduction should summarize the contributions of the paper at a level appropriate for a non-specialist reader. The submitted paper should be at most 12 pages excluding the bibliography and clearly marked appendices, and at most 15 pages in total, using at least 11-point font, reasonable margins, and page numbers on each page. Committee members are not required to read appendices; the paper should be intelligible without them. The document must be in Acrobat PDF format, and must be legible after printing on standard grayscale printers, both those that use A4 and those that use 8-1/2x11" paper. Submissions not meeting these guidelines risk rejection without consideration of their merits.

Camera-ready versions of accepted papers will be limited to 10 pages in total using the ACM conference style. If additional space is needed, there will be a possibility to purchase up to 4 additional pages for $150/page.

Important dates

Submission deadline:	Sunday June 10, 2007
Author notification:	Wednesday July 25, 2007
Camera-ready deadline:	Wednesday August 22, 2007 (firm deadline)
CCS main conference:	Monday October 29 - Friday November 2, 2007
FMSE Workshop:	Friday November 2nd, 2007

Last modified: Wed Nov 14 17:25:16 CET 2007

The 5th ACM Workshop on Formal Methods in Security Engineering: From Specifications to Code