This paper summarizes a selected set of five of the “hard problems” in the science of security. These problems were selected because of their level of technical challenge, their potential operational significance, and their likelihood of benefiting from emphasis on scientific research methods and improved measurement capabilities. The goal is that the hard problems to be crisply stated and well scoped, to assist us in assessing progress towards solutions.

ACM SIGSAC announces the continuation of its recently launched annual ACM Conference on Data and Applications Security.  The third conference will be held February 18-20, 2013 in Hyatt Regency, San Antonio, Texas.

About the Conference:

The Workshop on the Economics of Information Security (WEIS) is the leading forum for interdisciplinary scholarship on information security, combining expertise from the fields of economics, social science, business, law, policy and computer science. Prior workshops have explored the role of incentives between attackers and defenders, identified market failures in Internet security, quantified risks of personal data disclosure, and assessed investments in cyber-defense.

The Annual CSIIR Workshop will be held at Oak Ridge National Laboratory and published by the ACM. The aim of this year's workshop is to discuss and publish novel theoretical and empirical research focused on one or more of the Federal Cybersecurity themes. The scope of interest covers a wide range of topics ... read more

The Network and Distributed System Security Symposium (NDSS) is generally held in February in San Diego, California. This three day conference brings together innovative and forward thinking members of the Internet community including leading-edge security researchers and implementers, globally-recognized security-technology experts, and users from both the private and public sectors who design, develop, exploit, and deploy the technologies that define network and distributed system security.

ACSAC has a tradition of bringing together security professionals from academia, government and industry who are interested in applied security. It is an internationally recognized forum where practitioners, researchers, and developers in information system security meet to learn and to exchange practical ideas and experiences. Started in 1984, the conference has grown over the years to achieve worldwide attendance and recognition for the high quality of its presentations, discussions, and interactions.