Call For Papers - RAID 2000 
 
  Third International Workshop on the 
  Recent Advances in Intrusion Detection 
 
  Dates: October 2-4, 2000
                Toulouse, France
  in conjunction with ESORICS 2000
 
  an html version of this CFP is available at 
                http://www.raid-symposium.org/Raid2000/cfp2000.html 
 

This  workshop, the  third in  an  ongoing annual  series, will  bring
together leading  figures from  academia, government, and  industry to
discuss state-of-the-art  intrusion detection technologies  and issues
from the research and commercial perspectives.  RAID 2000 will welcome
full papers in addition to extended abstracts and panel proposals, and
has organized peer review to publish hardcopy proceedings. Proceedings
will be published by Springer  Verlag in the Lecture Notes in Computer
Science series (http://www.springer.de/comp/lncs/index.html).
 

The RAID International Workshop series is intended to further progress
in intrusion detection  by promoting the exchange of  ideas in a broad
range   of   topics   among   researchers,   system   developers   and
users. RAID'98,  held in Louvain-la-Neuve, Belgium, was  hosted by the
Universite Catholique  de Louvain and welcomed  130 participants, with
nearly 50% from outside Europe, reflecting the international nature of
the meeting.  RAID'99,  held in Purdue, Indiana, was  hosted by CERIAS
and welcomed more than  180 participants from academia, government and
industry.
 

RAID 2000 is being locally  organized by ONERA in Toulouse, France, in
conjunction with  ESORICS 2000 (http://www.cert.fr/esorics2000/).  The
program  committee invites  submission of  both technical  and general
interest  papers   and  panels  from  those   interested  in  formally
presenting   their  ideas  during   the  workshop.    Regarding  paper
submissions,  submissions to  RAID 2000  can be  either  a full-length
paper  or an  extended abstract.   Full  papers are  intended for  the
presentation of mature research  results, while extended abstracts are
intended for work-in-progress presentations.  It is expected that more
time will be allocated  to full paper presentations. Panel submissions
are also sought in the same  areas.  This year, we are emphasizing the
following topic areas:
 

o Assessing, measuring and classifying intrusion-detection systems:
  - Accuracy and reliability measurements, requirements, and technologies 
  - Benchmarking techniques and technologies 
  - Relations to Risk Assessment and Risk Management Plans 
  - Quantitative assessment of IDSes and IDS combinations
  - Suitability of IDSes as a countermeasure to insider misuse
 
o IDS in High Performance and Real-Time Environments:
  - Large-scale/enterprise IDS 
  - High-Speed networks 
  - Managing high-volume data 
  - Highly distributed and heterogeneous environments
  - Deployment/cooperation of IDSes in multiple-organisation environments 
  - Mission-critical intrusion-detection systems
 
o Vulnerabilities and Attacks 
  - New vulnerability or attack databases 
  - Vulnerability or attack taxonomies 
  - Using vulnerability databases 
  - IDS Security issues and solutions
 
o IDS Integration 
   - IDS interoperability Standards and Standardization 
   - Integration with the system/network management framework 
   - Combining different "styles" of IDS 
 
o Innovative Approaches 
   - Adaptive IDS solutions 
   - Survivability and Dependability 
   - Data mining, intelligent agents 
   - New IDS methodologies and technologies 
   - Automated responses 
   - Combining IDS and system/network management 
   - Intrusion-detection using application logs 
 
o Practical Considerations 
   - Case studies 
   - IDS in heterogeneous environments 
   - Unique/emerging IDS operating environments
   - Legal issues (IDS reports as "evidence") 
   - Commercial intrusion detection systems and their directions 
   - Real-time versus Post-mortem IDS 
   - IDS integration with business process 
 

Program Committee 
***************** 
 
RAID Executive Committee chair: Marc Dacier (IBM Research, Switzerland)
 
Local organization co-chair: Frederic Cuppens (Onera, France)
Local organization co-chair: Claire Saurel (Onera, France)
 
Publication chair: Ludovic Me (Supelec, France)
 
Program co-chair: Herve Debar (IBM Research, Switzerland)
Program co-chair: S.Felix Wu (NC State University, USA)
 
Program committee:
 
Matt Bishop (University of California at Davis, USA) 
Dick Brackney (National Security Agency, USA) 
Rowena Chester (University of Tennessee, USA) 
Yves Deswarte (LAAS-CNRS, France) 
Terry Escamilla (IBM, USA) 
Deborah Frincke (University of Idaho, USA)
Tim Grance (National Institute of Standards and Technology, USA) 
Ming-Yuh Huang (The Boeing Company, USA)
Erland Jonsson (Chalmers University of Technology, Sweden)
Sokratis Katsikas (University of the Aegean, Greece)
Baudouin Le Charlier (Universite de Namur, Belgium) 
Abdelaziz Mounji (Swift, Belgium) 
Jean-Jacques Quisquater (Universite Catholique de Louvain, Belgium) 
Vern Paxson (ACIRI/LBNL, USA)
Mark Schneider (National Security Agency, USA) 
Steve Smaha (Free Agent, USA) 
Peter Sommer (London School of Economics & Political Science, England) 
Stuart Staniford-Chen (Silicon Defense, USA) 
Peter Thorne (University of Melbourne, Australia)
Kevin Ziese (Cisco Systems, USA) 
 

SUBMISSIONS
=========== 
 
Full papers, extended  abstracts and panels which fall  into the topic
areas outlined above  are particularly welcome, although contributions
outside those topics may also be of interest.
 
Full papers must be original contributions, not published or submitted
to other conferences. Full papers  must be limited to 6000 words, full
page figures  being counted as 300  words.  Each paper  must include a
short abstract and a list  of keywords.  Authors are invited to submit
full   papers  electronically   in   postscript  or   PDF,  as   email
attachements. Authors should follow the instructions given by Springer
Verlag    (http://www.springer.de/comp/lncs/authors.html)    for   the
preparation of the manuscript. The email (in ASCII) should contain the
title of the paper,  author name(s), affiliations, mailing address and
topic category  addressed in the  paper (if appropriate).   Full paper
submissions will  be published in the RAID  proceedings.  Deadline for
submitting full papers is March 30, 2000.
 
Extended  abstracts  must  be  original contributions.  They  must  be
limited to  1200 words  in length and  be submitted  electronically as
ASCII (preferred) or PDF as  email attachements.  The email (in ASCII)
should contain  the title of the paper,  author name(s), affiliations,
mailing  address and  topic  category addressed  in  the abstract  (if
appropriate). Both  the extended  abstract and the  slide presentation
will  be  published online  on  the  RAID'2000  website. Deadline  for
submitting extended abstracts is April 28, 2000.
 
Panel  proposals  must  be limited  to  400  words  in length  and  be
submitted electronically in ASCII (preferred) or PDF.  Panel proposals
must include  the name(s) of  the panel chair and  possible panelists,
with their  organizational affiliation(s), telephone  and FAX numbers,
postal address, and Internet  electronic mail address. The description
should include both an outline of  the format of the panel and a short
rationale for  the panel. The  program committee will allocate  one to
two-hour time  slots to each  panel, depending on the  proposed topic,
the number of panelists, and the wishes of the panel chair.  The panel
chair will be informed of the slot length when notified of acceptance.
Panels that include time  for general discussion and questions/answers
between the  panelists and the attendees are  preferred. Panel members
are  expected to register  to the  workshop.  Deadline  for submitting
panel proposals is April 28, 2000.
 
All  proposals  must  be in  English.  Plan  to  give all  panels  and
presentations in English.
 
We      strongly       prefer      electronic      submissions      to
raid2000-submissions@zurich.ibm.com.   If necessary,  hardcopy  may be
sent  to  the  nearest   of  the  following  locations  (please  allow
sufficient time for arrival by March 30th or April 28):
 
    European Collection Site 
 
    Herve Debar 
    Global Security Analysis Lab 
    IBM Zurich Research Laboratory 
    Saeumerstrasse 4 CH-8803 
    Rueschlikon Switzerland 
 
    North/South American Collection Site 
 
    S. Felix Wu
    Computer Science Department
    North Carolina State University
    Raleigh, NC 27695-7550
    U.S.A.
 
Each submission  will be acknowledged by e-mail.  If acknowledgment is
not received  within seven days, please  contact deb@zurich.ibm.com. A
preliminary  program   will  be  available  at  the   RAID  web  site,
http://www.raid-symposium.org/Raid2000/, by July 21, 1999. Last year's
proceedings are available online as well.
 

CORPORATE SPONSORS 
================== 
 
We solicit interested organizations  to become sponsors for RAID 2000,
particularly in  sponsorship of student travel and  other expenses for
RAID. Please  contact S.Felix  Wu for information  regarding corporate
sponsorship of RAID.
 

REGISTRATION 
============ 
 
Detailed registration  information (including fees,  suggested hotels,
and travel directions)  will be provided at the RAID  2000 web site as
well as the ESORICS 2000 web site.
 

PROCEEDINGS 
=========== 
 
Full  papers submitted  to RAID  2000  will be  published by  Springer
Verlag  in the  Lecture Notes  in Computer  Science  series.  Extended
abstracts  (and  their   accompanying  papers  if  available),  slides
presentations  and  panel summaries  will  be  made  available on  the
RAID 2000 web site.
 

IMPORTANT DATES 
=============== 
 
Deadline for full paper submission  March 30th, 2000 
Deadline for extended abstract submission April 28th, 2000
Deadline for panel submission   April 28th, 2000
Notification of acceptance or rejection  May 31st, 2000
      (papers, abstracts and panels)
Final full paper camera ready copy due  June 30th, 2000
Final panel description with participants June 30th, 2000
Registration required for presenters and
      panel participants before  September 1st, 2000
RAID dates     October 2-4, 2000 
 
         
FOR MORE INFORMATION 
==================== 
 
    On-site arrangements: 
        contact Frederic Cuppens (cuppens@cert.fr) 
      or Claire Saurel    (saurel@cert.fr)
 
    General program information or corporate sponsorship: 
        contact S.Felix Wu (wu@csc.ncsu.edu) 
 
    Paper, extended abstract and panel submission: 
        contact raid2000-submissions@zurich.ibm.com