The International Conference on Network Security 2006

Monday April 17 | Tuesday April 18 | Wednesday April 19

Monday, April 17
TECHNICAL SESSIONS AND PANELS

8:45 - 10:30 am

Opening Session

Chair: Guy Copeland

VP and Assistant to the President, CSC

· Introduction
Guy Copeland

· Keynote Speech
Andy Purdy
Department of Homeland Security

· Signaling Vulnerabilities in Wiretap
     Systems
    Matt Blaze
    University of Pennsylvania

Break (10:30 – 10:45 am)

10:45 am - 12:30 pm

Panel: User Authentication Technologies

Chair: Radia Perlman
Sun Microsystems

The session will debate various approaches to user authentication right around the corner, but yet we are still using usernames and passwords. Will new technologies get deployed and would the world be a better place if they do?

· PKI: It's not that hard. Why don't
    we have it?
   Charlie Kaufman
   Microsoft

· SAML, Liberty, and New Developments
Gerald Beuchelt
Sun Microsystems

· IdentityBased Encryption
Terence Spies
Voltage Security

· PKI: Let’s Make it Happen!
Bill Burr
NIST

· SAML vs. Kerberos
Hank Simon
Lockheed Martin

Lunch (12:30 – 1:45 pm)

1:45 - 3:00 pm

Mesh Network Security

Chair: Russ Housley
Vigil Security, LLC

IEEE 802.11s is developing standards for wireless mesh networking. Without any real infrastructure, any security solution will be very different from the security solutions included in either 802.11i or 802.16e. What is the mesh networking environment, and how will security be accommodated?

· Status of 802.11 Mesh and Security
Donald Eastlake III
Motorola

· Security Issues in 802.11s
William Arbaugh, UMD
Jesse Walker, Intel

· More on 802.11s
Robert Moskowitz
ICSA Labs, Cybertrust

Break (3:00 – 3:15 pm)

3:15 - 4:30 pm

Defending Against Denial of Service

Chair: Jim Hughes
Sun Microsystems

· Surviving Denial of Service
Andy Ellis
Akamai

· Quantifying the Attack Threat
Michel Cukier
University of Maryland

· MITHRIL: Adaptable Security for
    Survivability in Collaborative
    Computing Sites
   Von Welch, NCSA

· Investigating the Impact of Real-World
    Factors on Internet Worm Propagation
   Xiaoyan Hong
   University of Alabama

4:30 - 5:30 pm

Panel: Legislative Aspects of Security

Chair: Guy Copeland

VP and Assistant to the President, CSC

· Pat Schambach
Nortel

· Robert Dix Jr.
Citadel Security Software

· Michael Aisenberg
Verisign

· John Morris
Center for Democracy & Technology

5:30 - 6:30 pm

Reception

6:45 - 7:45 pm

Tutorial: Network Incident Response

Presenter: Richard Bejtlich
Tao Security

Your network security monitoring operation just discovered an intrusion. Now what? Most investigators know what to do on the host side of the incident response equation, but how does one handle network-related IR? more...

Tuesday, April 18
TECHNICAL SESSIONS AND PANELS

9:00 - 10:30 am

Software Security

Chair: Charlie Kaufman
Microsoft

What paths will lead to software security and what can more clever hardware do for us? Can type-safe languages like Java substantially eliminate exploitable security bugs?

· Why Software Breaks
Andrew Lee
Eset

· NIST Federal Standards &
    Guidelines
   Stuart Katzke
   NIST

· IT Product Certification Programs:
    Are They Useful?
   Keith Beatty
   SAIC

· How can we make products and
     deployments more secure?
    Eric Cole
    Lockheed Martin

Break (10:30 – 10:45 am)

10:45 am - 12:30 pm

Network Security Protocol Issues

Chair: Hilarie Orman
Purple Streak, Inc.

What are the important security issues in the Internet infrastructure and protocol implementation?

· Comparing Inherent ARP & NDP
    Security
    Michael Wasielewski
   Lockheed-Martin

· Secure Information Sharing
Adele Friedel
Tenix America

· Availablity and Security Trade-Offs
Arun Sood
Task Technologies Ltd.

Lunch (12:30 – 1:45 pm)

1:45 - 3:00 pm

Security for Wireless and Internet Mobility

Chair: Bijan Jabbari
Isocore

What are the key security issues in the network access based on WiFi, WiMAX, Ad Hoc networks, as well as other broadband wireless systems?

· Security for Wireless Internet Mobility
Jesse Walker
Intel

· Proactive EAP-AAA-based handover
    Security Provisioning for Wireless
    Mobile Access
   Madjid Nakhjiri
   Motorola

· Updates on IETF Security Working
   Groups
   Russ Housley, Vigil Security
   Sam Hartman, MIT

Break (3:00 – 3:15 pm)

3:15 - 4:30 pm

Panel: Internet Infrastructure Security

Chair: Hilarie Orman
Purple Streak, Inc.

What is vulnerable in the current infrastructure, do current standards effort address the problems, what are the barriers to deployment, are standards the right path?

· MPLS Security
Harmen van der Linde
Cisco Systems

· DHS and Internet Infrastructure
    Security
   Marcus Sachs
   SRI

· Protecting Critical Infrastructure
Christopher Morrow
Verizon Business

· Routing Security
Sandra Murphy
Sparta

· Why No BGP Security?
Russ White
Cisco Systems

4:30 - 5:30 pm

Web Browser Security

Moderator: Darren Moffat
Sun Microsystems

PKI and SSL help secure the traffic to and from a user’s browser but the user interface of the browser doesn't allow the user to make informed and sensible trust choices. This leaves even experienced users vulnerable to the latest trends of phishing and related attacks. There needs to be a fundamental redesign of some parts of the browser user interface and how it uses PKI so that users can make informed trust choices without being PKI experts.

· The Sad State of Evolution of Interface
     to User Security with a Focus on the
     Web Browser
    Eric Greenberg
    Netframeworks

· XML: Salvation or Struggle
Donald Eastlake III
Motorola

· Web Browser Security Frameworks
Perry Metzger
Metzger, Dowdeswell & Co.

· The Web, Identity, and Phishing
Sam Hartman
MIT