NDSS

Network and Distributed System Security Symposium

Catamaran Resort Hotel
San Diego, California

3-4 February 2000 – Symposium

Proceedings and Slides

SESSION 1: SOFTWARE ASSURANCE

Chair: G. McGraw (Reliable Software Technologies, UNITED STATES)

A First Step Towards Automated Detection of Buffer Overrun Vulnerabilities

D. Wagner, J. Foster, E. Brewer, and A. Aiken (UC Berkeley, UNITED STATES)

User-Level Infrastructure for System Call Interposition: A Platform for Intrusion Detection and Confinement

K. Jain and R. Sekar (Iowa State University, UNITED STATES)

SESSION 2: GROUP AND MULTICAST SECURITY

Chair: T. Hardjono (Bay Networks / Nortel, UNITED STATES)

Optimized Rekey for Group Communication Systems

O. Rodeh (Hebrew University of Jerusalem, ISRAEL), K. Birman (Cornell University, UNITED STATES) and D. Dolev (Hebrew University of Jerusalem, ISRAEL)

An IPSec-based Host Architecture for Secure Internet Multicast

R. Canetti, P. Cheng, F. Giraud, D. Pendarakis, J. Rao, P. Rohatgi, and D. Saha (IBM TJ Watson Research Center, UNITED STATES)

SESSION 3: PANEL – THE ECONOMICS OF SECURITY 

Moderators: J. Ellis (Sun Microsystems, UNITED STATES), and G. McGraw (Reliable Software Technologies, UNITED STATES)

Panelists:

  • N. Economidis (InsureTrust.com, UNITED STATES)
  • N. Pasciullo (Jones, Gregg, Creehan & Gerace, LLP, UNITED STATES)
  • F. C. Smith (Attorney, UNITED STATES)
  • L. Wagner (ICSA.net, UNITED STATES) [Slides]

SESSION 4: PROTOCOLS I

Chair: M. Dacier (IBM Zurich Research Laboratory, SWITZERLAND)

A First Step Towards the Automatic Generation of Security Protocols

A. Perrig and D. Song (Carnegie Mellon University, UNITED STATES)

A Revocation, Validation and Authentication Protocol for SPKI Based Delegation Systems

Y. Kortesniemi, T. Hasu (Helsinki University of Technology, FINLAND) and J. Särs (Nixu Oy, FINLAND)

Secure Border Gateway Protocol (S-BGP) – Real World Performance and Deployment Issues

S. Kent, C. Lynn, J. Mikkelson, and K. Seo (BBN Technologies / GTE Internetworking, UNITED STATES)

BOF on Windows 2000 Security

SESSION 5: PROTOCOLS II

Chair: P. Van Oorschot (Entrust Technologies, CANADA)

Analysis of a Fair Exchange Protocol

V. Shmatikov and J. Mitchell (Stanford University, UNITED STATES)

Secure Password-Based Cipher Suite for TLS

P. Buhler, T. Eirich, and M. Waidner (IBM Zurich Research Laboratory, SWITZERLAND), and M. Steiner (Universität des Saarlandes, GERMANY)

Chameleon Signatures

H. Krawczyk (Technion, ISRAEL and IBM TJ Watson Research Center, UNITED STATES) and T. Rabin (IBM TJ Watson Research Center, UNITED STATES)

SESSION 6: INTRUSION DETECTION

Chair: D. Maughan (DARPA/ITO, UNITED STATES)

A Lightweight Tool for Detecting Web Server Attacks

M. Almgren, H. Debar, and M. Dacier (IBM Zurich Research Laboratory, SWITZERLAND)

Building Adaptive and Agile Applications Using Intrusion Detection and Response

J. Loyall, P. Pal, R. Schantz, and F. Webber (BBN Technologies / GTE Internetworking, UNITED STATES)

SESSION 7: DISTRIBUTED SYSTEMS

Chair: Virgil Gligor – (UMD College Park, UNITED STATES)

Secure Virtual Enclaves: Supporting Coalition Use of Distributed Application Technologies

D. Shands, R. Yee, J. Jacobs (NAI Labs, Network Associates, UNITED STATES), and E. J. Sebes (Kroll-O’Gara/Information Services Group, UNITED STATES)

Security of Encrypted rlogin Connections Created With Kerberos IV

K. Hildrum (UC Berkeley, UNITED STATES)

Accountability and Control of Process Creation in Metasystems

M. Humphrey, F. Knabe, A. Ferrari, and A. Grimshaw (University of Virginia, UNITED STATES)

SESSION 8: PANEL II — RED TEAMING AND NETWORK SECURITY

Moderator: Douglas Maughan (DARPA, UNITED STATES)

Panelists:

  • B. Wood (Sandia National Labs, UNITED STATES)
  • S. Saydjari (DARPA, UNITED STATES)
  • M. Puldy (IBM)