[EIS] WESII Preliminary Program

Thu Sep 14 21:48:32 EDT 2006

                     The Workshop on the Economics of
                  Securing the Information Infrastructure

                      http://wesii.econinfosec.org/

                           October 23-24, 2006
                              Washington, DC

                          PRELIMINARY PROGRAM &
                          CALL FOR PARTICIPATION

========================================================================
                           Hotel & Registration
========================================================================

*The WESII Hotel Reservation Deadline is September 20*
   <http://wesii.econinfosec.org/workshop/travel.php>

*Registration is now open*
   <http://wesii.econinfosec.org/workshop/registration.php>

========================================================================
                           Preliminary Program
========================================================================
For updates, see <http://wesii.econinfosec.org/workshop/program.php>

Monday, October 23, 2006

9:00AM  Panel
          Economic Barriers and Incentives for DNSSEC Deployment
          Moderator: Andy Ozment
          Panelists: Sam Weiler, Steve Crocker, and more TBA

11:00AM Session 1
    * Comparing the Costs of Public Key Authentication Infrastructures
        Patroklos Argyroudis (University of Dublin, Trinity College)
        Robert McAdoo (University of Dublin, Trinity College)
        Donal O'Mahony (University of Dublin, Trinity College)
    * Economics of Internet Security Outsourcing:
      Simulation Results Based on the Schneier Model
        William Yurcik (University of Illinois)
        Wen Ding (University of Illinois)
    * The Effect of Information Security Incidents on Corporate
      Values in the Japanese Stock Market
        Masaki Ishiguro (Mitsubishi Research Institute)
        Hideyuki Tanaka (The Graduate School of
                         Interdisciplinary Information Studies),
        Kanta Matsuura (Institute of Industrial Science,
                        University of Tokyo),
        Ichiro Murase (Mitsubishi Research Institute)

1:30PM  Panel
          Data Sources:
            Should we answer questions for which data is available,
            can we get more data, or can we do without?
          Moderator: Allan Friedman
          Panelists: TBA

3:30PM  Session 2

    * Toward A Dynamic Modeling Of The Vulnerability Black Market
        Jaziar Radianti (Agder University College)
        Jose. J. Gonzalez (Agder University College)
    * Toward One Strong National Breach Disclosure Law -
      Justification and Requirements
        William Yurcik (University of Illinois)
        Ragib Hasan (University of Illinois at Urbana-Champaign)
    * Using Self-interest to Prevent Malice;
      Fixing the Denial of Service Flaw of the Internet
        Bob Briscoe (BT & UCL)

Tuesday, October 24, 2006

9:00AM  Session 3

    * A Closer Look at Attack Clustering
        Rainer Böhme (TU Dresden)
        Gaurav Kataria (Carnegie Mellon University)
    * Predictive Modelling for Security Operations Economics
        Mike Yearworth (HP Labs)
        Brian Monahan (HP Labs)
        David Pym (HP Labs)
    * Assessing Trusted Network Access Control Cost-Benefit Factors
        Susmit Panjwani (Deviant Intelligence LLC)
        Stephanie Tan (IBM)

11:00AM  Session 4

    * The Statistical Value of Information
        Luther Martin (Voltage Security)
    * On the Economic Placement of Monitors in
      Router Level Network Topologies
        Yongping Tang (Iowa State University)
        Thomas E. Daniels (Iowa State University)

1:00PM  Work-in-Progress (WIP) Session

    * Economic Interpretation and a Simulation Exercise for
      Exploring Corporate Investments in Cyber Security
        Jonathan Crawford (University of Virginia)
        Kenneth G. Crowther (University of Virginia)
        Barry Horowitz (University of Virginia)
        James Lambert (University of Virginia)
    * Securing Our Data Storage Infrastructures
        Bob Mungamuru (Stanford University)
        Hector Garcia-Molina (Stanford University)
    * A Neo-institutional Perspective on Cyber Attacks
        Nir Kshetri (University of North Carolina--Greensboro)
    * Beyond Media Hype: Empirical Analysis of Disclosed Privacy
      Breaches 2005-2006 and a DataSet/Database Foundation for Future Work
        Ragib Hasan (University of Illinois at Urbana-Champaign)
        William Yurcik (University of Illinois)
    * Securing the Process of Insurance Application
        Vincent Wolff-Marting (University of Leipzig)
        André Köhler (University of Leipzig)
        Volker Gruhn (University of Leipzig)
    * Evaluation of Information Security Investment Portfolios:
      A Probabilistic Approach
        Tae-Sung Kim (Chungbuk National University)
        Chandrasekhar Subramaniam (UNC Charlotte),
        Sungjune Park (UNC Charlotte),
        Ram Kumar (UNC Charlotte)
    * Direct measurement of spam zombie activity in a
      residential broadband network
        Geoff Bennett (StreamShield)
        Brian Webb (BT Retail)

========================================================================
                            Program Committee
========================================================================

  Alessandro Acquisti  Carnegie Mellon University
                       Heinz School of Public Policy & Management

  Ross Anderson        University of Cambridge

  Jean Camp            Indiana University

  Huseyin Cavusoglu    University of Texas at Dallas

  Richard Clayton      University of Cambridge

  Steve Crocker        Shinkuro / DNSSEC Deployment Working Group

  Ben Edelman          Harvard University Department of Economics

  Allan Friedman       Harvard University
                       Kennedy School of Government

  Adam M. Golodner     Cisco Systems

  Larry Gordon         University of Maryland
                        Smith School of Business

  Yacov Haimes         University of Virginia

  Cathy Handley        U.S. Department of Commerce, National
                       Telecommunications & Information Administration

  Barry Horowitz       University of Virginia

  Richard Hovey        U.S. Federal Communications Commission (FCC)

  Jeff Hunker          Carnegie Mellon University
                       Heinz School of Public Policy & Management

  M. Eric Johnson      The Tuck School of Business at Dartmouth College

  Jeffrey M. Kopchik   U.S. Federal Deposit Insurance Corporation (FDIC)

                       Technology Supervision Branch

  Steve Lipner         Microsoft

  Marty Loeb           University of Maryland
                       Smith School of Business

  Doug Maughan         U.S. Department of Homeland Security (DHS)
                       Science and Technology Directorate

  Doug Montgomery      U.S. National Institute of Standards & Technology
                       Internetworking Technologies Group

  Milton Mueller       Syracuse University School of Information Studies

  Andrew Odlyzko       University of Minnesota

  Andy Ozment          MIT Lincoln Laboratory / University of Cambridge

  Shari Lawrence Pfleeger  RAND Corporation

  Stuart Schechter     MIT Lincoln Laboratory

  Bruce Schneier       Counterpane Internet Security

  Rahul Telang         Carnegie Mellon University
                       Heinz School of Public Policy & Management

  Andrew Wyckoff       Organisation for Economic Cooperation and
                       Development (OECD)

  Bill Yurcik          National Center for Supercomputing Applications
                       (NCSA)

========================================================================
                            Workshop Sponsors
========================================================================
    The Institute for Information Infrastructure Protection (I3P)
    The Workshop on the Economics of Information Security (WEIS)