FIRST Conference call for paper

16th FIRST Annual Computer Security Incident Handling Conference

Call for Papers.

Hilton Budapest, Budapest, Hungary -- June 13-18, 2004


An Online version of this document is provided at
http://www.first.org/conference/2004/cfp.html

Overview

The Forum of Incident Response and Security Teams (FIRST, http://www.first.org/) is a global organization which brings together one of the largest international gathering of computer security incident response teams (CSIRT). FIRST conferences not only provide a setting for teams to enjoy a social atmosphere, but also create a backdrop for networking, collaboration and the sharing of technical information. FIRST continues to enjoy a steady increase in membership internationally and is represented by teams from government, commercial and academic communities.

FIRST participants are IT managers, network and system administrators, academia, software and hardware vendors, security solutions providers, telecommunications organizations, ISPs, and general computer and network security personnel. FIRST conferences cover areas such as:

    * The most advanced techniques in security Incident Detection, Reaction and Response.
    * The latest advancements in computer security tools.
    * Best practice security methodologies.
    * Shared views and experiences in the computer security incident response field. 

Every year the logistics and planning for the successive conference begins even before the start of the current conference. This year we add to the pre-planning stage the Call for Papers. This allows conference participants not only to begin thinking about ideas for next conference paper submissions but also provides an opportunity for queries and comments to the Program Committee.
The Conference

The conference is a five-day event, comprising two days of tutorials and three days of technical sessions, which include refereed paper presentations, keynote speeches and panel discussions.

The conference will discuss recent practical computer and network security issues, focusing on incident handling and response techniques and experiences. The program committee welcomes original contributions on the following topics:

    * Incident Response
    * General Issues
    * CSIRT Operation and Tools
    * Response Team Cooperation and Legal Issues
    * New Technologies, New Vulnerabilities
    * Other Topics 

Tutorial Submission

Three tutorial tracks are planned:

 *      The first track is oriented toward IT managers and will deal with topics such as drafting security policies incorporating policies for incident response, computer forensics, setting up security infrastructures, etc.
   
 *     The second track is oriented toward technical staff and will provide in-depth information on security tools, designing security architectures, intrusion detection and monitoring tools, web security, etc. - in particular security best practices (especially in regard to incident handling and/or to be compliant to applicable regulations) is a special interest topic this year.

 *    The third track is tailored for people interested in building and organizing an incident response team or related services like security advisories, vulnerability analysis, etc.

Proposals are solicited from experts interested in giving a tutorial. Tutorials may be half or full day in length and can cover topics either at an introductory or advanced level.

All tutorial submissions will be handled electronically. Authors should email the completed submission form (attached below) to:

    [email protected]

Individuals interested in submitting tutorial proposals are encouraged to contact the program chair before the deadline to discuss the proposed content. A reduction of the conference fee will be offered to tutorial presenters.
Panel Submission

Panels are solicited that examine innovative, controversial, or otherwise provocative issues of interest.

All panel submissions will be handled electronically. Authors should e-mail the completed submission form (attached below) to:

    [email protected]

A reduction of the conference fee will be offered to panel organizers.

Paper Submission

Authors are invited to submit papers; preferably in PostScript or PDF format (RTF and HTML are also accepted). The length should not exceed 12 pages typeset in a 12-point font. A detailed synthesis (2 pages minimum) will be considered if it gives a clear reflection of the contents and key points of the coming paper.

All paper submissions will be handled electronically. Authors should email a version of their paper and the completed submission form (attached below) to:

    [email protected]

Authors will receive an immediate notification of the successful receipt of the file containing their paper. Subsequently, a second notification of receipt will be sent after the paper has been printed successfully.

A reduction of the conference fee will be offered to one author of each accepted paper.

Process of Selection

The program committee based on their quality and relevance will evaluate papers, tutorials, and panels. Each proposal will be reviewed by at least three independent reviewers, whose reviews will be relayed to the corresponding author. All submissions are held in confidentiality prior to publication in the proceedings.

Submissions received after the deadline will not be considered unless an extension has been granted. Authors must obtain employer, client, or government releases prior to submitting the final manuscript.

Accepted papers will be presented by their authors and will be published in the conference proceedings. The proceedings are provided free of charge to conference attendees. Additional copies will be available for purchase at the conference.
Copyright

FIRST requires a non-exclusive copyright license for all the papers presented at the conference and for the presentation material. This includes potential distribution on a conference CD and/or the FIRST website.
Important Dates
Submission deadline: December 1, 2003
Notification of acceptance: January 15, 2004
Final version of the paper due: April 1, 2004
Final presentation material (slides) due: April 15, 2004

Note that tutorial and panel proposals, as well as papers (or detailed syntheses, as described above) are expected to arrive prior to the submission deadline (DECEMBER 01, 2003) in order to be considered.
Questions

If you have questions about the submission process, don't hesitate to send them to the appropriate email address:

    [email protected]

Program Committee

The Program Committee 2004 invites members to join the Programmed Committee for 2004. Please send email to:

    [email protected]

Katherine Fithen (Chair), The Coca-Cola Company
Stephen Kanclerowicz (Deputy Chair), General Dynamics
Don Stikvoort, STELVIO
David Mortman, Siebel
Udo Schweigert, Siemens, Siemens CERT
Chris Gibson, CitiGroup
Cristina Serban, AT&T Labs
Gavin Reid, Cisco Systems CIRT
Laurence Quinlivan, Taiwan Computer Emergency Response Team/Coordination Centre
Caroline Tan, SingCERT
Georgia Killcrece, CERT/CC
Joonho Lee, Federal Reserve System
Franck Veysset, France Telecom
Chris van Breda, CGI Information Systems and Management Consultants Inc.
Liliana Solha, Brazilian Research Network CSIRT
J.R. Starrett, Computer and Systems Security Communications Security Establishment
Claudia Natanson, British Telecommunications plc
Francisco Monserrat, RedIris
Cristine Hoepers, Brazilian Computer Emergency Response Team
Klaus Steding-Jessen, Brazilian Computer Emergency Response Team
Mowgli Assor, Ohio State University
Henk Bronk, GOVCERT.NL
Gorazd Bozic, ARNES (Academic and Research Network of Slovenia)
Courtney Casidy, Wells Fargo
Nian-Shing Chen, Taiwan Computer Emergency Response Team/Coordination Centre
Byron Collie, Wells Fargo
Andrew Cormack, JANET-CERT
John Corro, Penn State University
David Crochemore, CERTA
Martin Dion, Above Security
Ralf Dorrie, Deutsche Telekom-CERT
Jim Duncan, Cisco Systems
Michel Dupuy, CERTA
William Eaheart, DePaul University
Michael Francis, Harris Corp.
Manuel Garcia, esCERT-UPC
Olaf Gellert, Pre-Secure
Natasa Glavor, CARNet CERT
Carlos Guel, UNAM-CERT
Pege Gustafsson, Telia
Sascha Hess, Cablecom
Kauto Huopio, CERT-FI
Charles Iheagwara, Aligned Development Strategies, Inc.
Graham Ingram, AusCERT
Dennis Jackson, ndirect
Larry Lidz, University of Chicago
Sherman Loges, The Boeing Company
Neil Long, OxCERT
Miroslaw Maj, CERT Polska
Jan Meijer, SURFnet
Peter Mercier, US Navy
Klaus Moeller, DFN-CERT
Eric Prancer, DePaul University
David Parker, UNIRAS
Roger Safian, Northwestern University
Rolf Schulz, Global Network Security GmbH
Kevin Scully, Govt. of Canada, Dept. of Foreign Affairs and International Trade
Hironobu Suzuki, JPCERT/CC
Rob Thomas, Cymru
Dan Garrett, Inet Research
Wietse Venema, IBM
Proposal Submission Form

 You can retrieve the proposal submission form for the FIRST 2004 Conference in ASCII format at http://www.first.org/conference/2004/doc/proposal-submission.txt