2001 IEEE Man Systems and Cybernetics Information Assurance Workshop

Final Program

Program Committee

Program Overview

	Track
	A	B	C
T1 1000-1200	Intrusion Detection I	Secure Systems	Modeling and Simulation
T2 1330-1500	Intrusion Detection II	Security Management	Information Warfare
T3 1530-1710	Decision Support and Intrusion Response	PKI and Authentication	Military and Government
W1 0830-1000	Denial of Service	Data Fusion and Intrusion Detection	Ethics and Law
W2 1015-1145	Security	Crime	Education

Tuesday, 5 June 2001

Session T1 1000-1200

Track A: Intrusion Detection I

Location: Room 348, Thayer Hall

Session Chair: Sue Lee, Johns Hopkins University Applied Physics Labratory

1000-1030	T1A1	Nong Ye and Xiangyang Li, A Scalable Clustering Technique for Intrusion Signature Recognition (Paper 01)
1030-1100	T1A2	Raj Basu, Robert K. Cunningham, Seth E. Webster, Richard P. Lippmann, Detecting Low-Profile and Novel Computer Attacks (Paper 05)
1100-1130	T1A3	Daniel Barbará, Julia Couto, Sushil Jajodia, and Ningning Wu, ADAM: DETECTING INTRUSIONS BY DATA MINING (Paper 21)
1130-1200	T1A4	Jon Doyle, Isaac Kohane, William Long, Howard Shrobe, Peter Szolovits, Event recognition beyond signature and anomaly (Paper 17)

Track B: Secure Systems

Location: Room 342, Thayer Hall

Session Chair: Victor Maconachy, NSA

1000-1030	T1B1	Martin C. Carlisle and Scott D. Studer, Reinforcing Dialog-Based Security (Paper 24)
1030-1100	T1B2	Timothy J. Smith, Yalta: A collaborative space for secure dynamic coalitions (Paper 34)
1100-1130	T1B3	Feiyi Wang, Fengmin Gong, Chandramouli Sargor Katerina Goseva-Popstojanova, Kishor Trivedi, Frank Jou, SITAR: A Scalable Intrusion-Tolerant Architecture for Distributed Services (Paper 35)
1130-1200	T1B4	Bradley Skaggs, Stephen Magill, Mauricio Papa, John Hale & Sujeet Shenoi, Security Service Extensions for Java (Paper 49)

Track C: Modeling and Simulation

Location: Room 344, Thayer Hall

Session Chair: Clark Ray, USMA

1000-1030	T1C1	Terry Tidwell, Ryan Larson, Kenneth Fitch, John Hale^,Sujeet Shenoi, Modeling Internet Attacks (Paper 50)
1030-1100	T1C2	Stephan Bohacek and Boris Rozovskii, Network Tomography (Paper 44)
1100-1130	T1C3	Donald J. Welch, and Gregory J. Conti and John A. Marin, A framework for an Information Warfare Simulation (Paper 36)
1130-1200	T1C4	John R. James, John Marin, Daniel Ragsdale, John Surdu, Wayne Schepens, Timothy Presby, Paul Manz, An Experiment for Estimating Database Latency for Mobile Systems (Paper 51)

Session T2 1330-1500

Track A: Intrusion Detection II

Location: Room 348, Thayer Hall

Session Chair: Nong Ye, Arizonia State University

1330-1400	T2A1	Syed Masum Emran and Nong Ye, ROBUSTNESS OF CANBERRA METRIC IN COMPUTER INTRUSION DETECTION (Paper 02)
1400-1430	T2A2	Zheng Zhang, Jun Li, Constantine Manikopoulos, Jay Jorgenson and Jose Ucles, HIDE: a Hierarchical Network Intrusion Detection System Using Statistical Preprocessing and Neural Network Classification (Paper 19)
1430-1500	T2A3	Feiyi Wang, Fengmin Gong, Felix S. Wu, and Hairong Qi, Design and implementation of property-oriented intrusion detection for link state routing protocols (Paper 54)

Track B: Security Management

Location: Room 342, Thayer Hall

Session Chair: Corey D. Schou, Idaho State University

1330-1400	T2B1	Stephen D. Wolthusen, Layered multipoint network defense and security policy enforcement (Paper 04)
1400-1430	T2B2	Ronda R. Henning, Margaret Knepper and Kevin L. Fox, Information fusion meta-language requirements (Paper 39)
1430-1500	T2B3	Steve Liu and Hoh In, A Spiral/Reverse Spiral Life Cycle Model for Information Systems Risk Assessment (Paper 42)

Track C: Information Warfare

Location: Room 344, Thayer Hall

Session Chair: Greg Conti, USMA

1330-1400	T2C1	Raymond C. Parks and David P. Duggan, Principles of cyber warfare (Paper 10)
1400-1430	T2C2	Timothy J. Shimeall and Casey Dunlevy, What to expect of network intelligence analysis (Paper 32)
1430-1500	T2C3	Roderick A. Moore, James K. Williams, Charles McCain, Intelligent Preparation of the Information Battlespace - A Methodical Approach to Cyber Defense Planning (Paper 40)

Session T3 1530-1710

Track A: Decision Support and Intrusion Response

Location: Room 348, Thayer Hall

Session Chair: Buck Surdu, USMA

1530-1555	T3A1	Curtis A. Carver, John M.D. Hill, and Udo W. Pooch, Limiting Uncertainty in Intrusion Response (Paper 56)
1555-1620	T3A2	Shambhu Upadhyaya, Ramkumar Chinchani and Kevin Kwiat, A Comprehensive Reasoning Framework for Information Survivability (Paper 14)
1620-1645	T3A3	Sani Tripathy and Brajendra Panda, Post-Intrusion Recovery Using Data Dependency Approach (Paper 15)

Track B: PKI and Authentication

Location: Room 342, Thayer Hall

Session Chair: Tony Ruocco, USMA

1530-1555	T3B1	Cheryl Beaver, Richard Schroeppel, Lillian Snyder, Anonymous, authenticated information sharing (Paper 31)
1555-1620	T3B2	Steve Liu and Yiping Shen, On the Anti-Eavesdropping Broadcast (Paper 43)
1620-1645	T3B3	Chang N. Zhang and Hua Li, A Fast VLSI Algorithm for Multiplication on Elliptic Curves (Paper 47)
1645-1710	T3B4	Micheal Green Public Key Infrastructure: The Enabler for DoD e-Bus (Paper 58)

Track C: Military and Government

Location: Room 344, Thayer Hall

Session Chair: Dan Cockerham, USMA

1530-1555	T3C1	Richard Howard and Bruce Bachus, Information Operations at the Point of the Spear: Enclave Site Defense Tactics at the Army Operations Center (Paper 06)
1555-1620	T3C2	Dorene L. Kewley, John Lowry, Observations on the effects of defense in depth on adversary behavior in cyber warfare (Paper 18)
1620-1645	T3C3	Bradley J. Wood and Julie F. Bouchard, Improving Government-Wide Emergency Response to Cyber Incidents (Paper 23)
1645-1710	T3C4	James A. Holtzclaw, Michael C. Johnson, and Jeffrey R. Bowes The Army Computer Emergency Response Team’s (ACERT’s) Methodology for Protection of Army Networks (Paper 57)

Wednesday, 6 June 2001

Session W1 0830-1000

Track A: Denial of Service

Location: Room 348, Thayer Hall

Session Chair: Dan Ragsdale, USMA

0830-0900	W1A1	D.M. Gregg, D.V. Heinbuch, W.J. Blackert, D.C. Furnanage, Assessing and quantifying denial of service attacks (Paper 27)
0900-0930	W1A2	D. Xuan, R. Bettati, and W. Zhao, A Gateway-Based Defense System for Distributed DoS Attacks in High Speed Networks (Paper 29)
0930-1000	W1A3	Rudolf B. Blazek, Hongjoong Kim, Boris Rozovskii, Alexander Tartakovsky, A novel approach to detection of “Denial-of-Service” attacks via adaptive sequential and batch-sequential change-point detection methods (Paper 38)

Track B: Data Fusion and Intrusion Detection

Location: Room 342, Thayer Hall

Session Chair: Rob Cunningham, MIT Lincoln Labs

0830-0900	W1B1	Nong Ye, Qiang Chen, Profile-based Information Fusion for Intrusion Detection (Paper 03)
0900-0930	W1B2	Oliver Dain, Robert Cunningham, Richard Lippmann and Gerald O'Leary, Fusing Alerts from Multiple Heterogeneous Intrusion Detection Systems (Paper 08)
0930-1000	W1B3	(Cancelled) D. Frincke E. Wilhite, Distributed network defense (Paper 52)

Track C: Ethics and Law

Location: Room 344, Thayer Hall

Session Chair: Don Welch, USMA

0830-0900	W1C1	Susan Lee, Clay Shields, Tracing the source of network attack: A technical, legal and societal problem (Paper 09)
0900-0930	W1C2	Maxwell Thibodeaux, Daniel J. Ragsdale and John A. Marin, Ethical Aspects of Information Assurance Education (Paper 22)
0930-1000	W1C3	(Cancelled) Bryan E. Hurd, The Information Age and the Evolution of Information Assurance (Paper 20)

Session W2 1015-1145

Track A: Security

Location: Room 348, Thayer Hall

Session Chair: Dorene L. Kewley, BBN

1015-1045	W2A1	W. Yu, D. Xuan, R. Bettati, and W. Zhao, Heterogeneous Environments (Paper 28)
1045-1115	W2A2	Gregory Lamm, Gerlando Falauto, Jorge Estrada, Jag Gadiyaram and Dan Cockerham, Security Attacks against Bluetooth Wireless Networks (Paper 26)
1115-1145	W2A3	G. Lorenz, T. Moore, G Manes, J. Hale & S. Shenoi, Securing SS7 Telecommunications Networks (Paper 48)

Track B: Crime

Location: Room 342, Thayer Hall

Session Chair: TBD

1015-1045	W2B1	Louise F. Gunderson and Donald E. Brown, Using Derived Preferences to Predict the Targets of Computer Crime (Paper 12)
1045-1115	W2B2	A. Meehan, G. Manes, J. Hale, S. Shenoi, Packet Sniffing for Automated Chat Room Monitoring and Evidence Preservation (Paper 53)
1115-1145	W2B3	Alec Yasinsac, Yanet Manzano, Policies to Enhance Computer and Network Forensics (Paper 37)

Track C: Education

Location: Room 344, Thayer Hall

Session Chair: Jim Davis, Iowa State

1015-1045	W2C1	Don Welch, Jerry Schumacher, Suzanne Nielsen, Teaching Information Assurance to Policy-makers (Paper 11)
1045-1115	W2C2	Kenneth L. Alford, Charles Dunn, Tony Ruocco, Information Assurance Pedagogy (Paper 16)
1115-1145	W2C3	Vic Maconachy, Corey Schou, Dan Ragsdale & Don Welch, A Model for Information Assurance: An Integrated Approach (Paper 55)

2001 IEEE Man Systems and Cybernetics Information Assurance Workshop

Final Program

Program Committee

Program Overview

Tuesday, 5 June 2001

Session T1 1000-1200

Track A: Intrusion Detection I

1000-1030

Nong Ye and Xiangyang Li, A Scalable Clustering Technique for Intrusion Signature Recognition (Paper 01)

1030-1100

Raj Basu, Robert K. Cunningham, Seth E. Webster, Richard P. Lippmann, Detecting Low-Profile and Novel Computer Attacks (Paper 05)

1100-1130

Daniel Barbará, Julia Couto, Sushil Jajodia, and Ningning Wu, ADAM: DETECTING INTRUSIONS BY DATA MINING (Paper 21)

1130-1200

Jon Doyle, Isaac Kohane, William Long, Howard Shrobe, Peter Szolovits, Event recognition beyond signature and anomaly (Paper 17)

Track B: Secure Systems

1000-1030

Martin C. Carlisle and Scott D. Studer, Reinforcing Dialog-Based Security (Paper 24)

1030-1100

Timothy J. Smith, Yalta: A collaborative space for secure dynamic coalitions (Paper 34)

1100-1130

Feiyi Wang, Fengmin Gong, Chandramouli Sargor Katerina Goseva-Popstojanova, Kishor Trivedi, Frank Jou, SITAR: A Scalable Intrusion-Tolerant Architecture for Distributed Services (Paper 35)

1130-1200

Bradley Skaggs, Stephen Magill, Mauricio Papa, John Hale & Sujeet Shenoi, Security Service Extensions for Java (Paper 49)

Track C: Modeling and Simulation

1000-1030

Terry Tidwell, Ryan Larson, Kenneth Fitch, John Hale, Sujeet Shenoi, Modeling Internet Attacks (Paper 50)

1030-1100

Stephan Bohacek and Boris Rozovskii, Network Tomography (Paper 44)

1100-1130

Donald J. Welch, and Gregory J. Conti and John A. Marin, A framework for an Information Warfare Simulation (Paper 36)

1130-1200

John R. James, John Marin, Daniel Ragsdale, John Surdu, Wayne Schepens, Timothy Presby, Paul Manz, An Experiment for Estimating Database Latency for Mobile Systems (Paper 51)

Session T2 1330-1500

Track A: Intrusion Detection II

Session Chair: Nong Ye, Arizonia State University

1330-1400

Syed Masum Emran and Nong Ye, ROBUSTNESS OF CANBERRA METRIC IN COMPUTER INTRUSION DETECTION (Paper 02)

1400-1430

Zheng Zhang, Jun Li, Constantine Manikopoulos, Jay Jorgenson and Jose Ucles, HIDE: a Hierarchical Network Intrusion Detection System Using Statistical Preprocessing and Neural Network Classification (Paper 19)

1430-1500

Feiyi Wang, Fengmin Gong, Felix S. Wu, and Hairong Qi, Design and implementation of property-oriented intrusion detection for link state routing protocols (Paper 54)

Track B: Security Management

1330-1400

Stephen D. Wolthusen, Layered multipoint network defense and security policy enforcement (Paper 04)

1400-1430

Ronda R. Henning, Margaret Knepper and Kevin L. Fox, Information fusion meta-language requirements (Paper 39)

1430-1500

Steve Liu and Hoh In, A Spiral/Reverse Spiral Life Cycle Model for Information Systems Risk Assessment (Paper 42)

Track C: Information Warfare

1330-1400

Raymond C. Parks and David P. Duggan, Principles of cyber warfare (Paper 10)

1400-1430

Timothy J. Shimeall and Casey Dunlevy, What to expect of network intelligence analysis (Paper 32)

1430-1500

Roderick A. Moore, James K. Williams, Charles McCain, Intelligent Preparation of the Information Battlespace - A Methodical Approach to Cyber Defense Planning (Paper 40)

Session T3 1530-1710

Track A: Decision Support and Intrusion Response

1530-1555

Curtis A. Carver, John M.D. Hill, and Udo W. Pooch, Limiting Uncertainty in Intrusion Response (Paper 56)

1555-1620

Shambhu Upadhyaya, Ramkumar Chinchani and Kevin Kwiat, A Comprehensive Reasoning Framework for Information Survivability (Paper 14)

1620-1645

Sani Tripathy and Brajendra Panda, Post-Intrusion Recovery Using Data Dependency Approach (Paper 15)

Track B: PKI and Authentication

1530-1555

Cheryl Beaver, Richard Schroeppel, Lillian Snyder, Anonymous, authenticated information sharing (Paper 31)

1555-1620

Steve Liu and Yiping Shen, On the Anti-Eavesdropping Broadcast (Paper 43)

1620-1645

Chang N. Zhang and Hua Li, A Fast VLSI Algorithm for Multiplication on Elliptic Curves (Paper 47)

Micheal Green Public Key Infrastructure: The Enabler for DoD e-Bus (Paper 58)

Track C: Military and Government

1530-1555

Richard Howard and Bruce Bachus, Information Operations at the Point of the Spear: Enclave Site Defense Tactics at the Army Operations Center (Paper 06)

1555-1620

Dorene L. Kewley, John Lowry, Observations on the effects of defense in depth on adversary behavior in cyber warfare (Paper 18)

1620-1645

Bradley J. Wood and Julie F. Bouchard, Improving Government-Wide Emergency Response to Cyber Incidents (Paper 23)

James A. Holtzclaw, Michael C. Johnson, and Jeffrey R. Bowes The Army Computer Emergency Response Team’s (ACERT’s) Methodology for Protection of Army Networks (Paper 57)

Terry Tidwell, Ryan Larson, Kenneth Fitch, John Hale^,Sujeet Shenoi, Modeling Internet Attacks (Paper 50)