Security protocols (such as TLS for internet, WPA2 for WiFi, GSM for mobile telephony, to mention just some of the broadly used ones) play a crucial role in protecting the digital communications and interactions we rely on in our modern society. The security of such protocols can break because of fundamental, inherent flaws, but the bulk of the security flaws are due to implementation flaws. The complexity and unclarity of typical protocol specifications makes it more likely to introduce such flaws and makes it harder to spot them. SPIDA seeks novel contributions and case studies that address the challenges when implementing security protocols. How can implementations be analysed, statically or dynamically, in a systematic way? How can we make sure that the specifications are precise, but still easy to understand and implement correctly? And how to assure implementations faithfully follow such specifications

Topics of interest

• Formal verification of code
  
• Software engineering approaches to go from specifications to implementations
  
• Protocol reverse engineering
  
• LangSec approaches to security protocols
  
• Fuzzing techniques, e.g. evolutionary or white-box fuzzing
  
• State machine inference
  
• Symbolic execution
  
• Model-based testing of protocol implementations
  
• Methods and languages to write rigorous protocol specifications

Submission Deadline : January 12, 2018 Notification Due : February 5, 2018 Final Version Due : February 23, 2018

 

User Name : Arthur
Posted 20-11-2017 on 18:41:09 AEDT

Related CFPs

NCS 2026   18th International Conference on Network and Communications Security (NCS 2026)
IJCACS   International Journal of Control, Automation, Communication and Systems
NCOM 2026   12th International Conference on Networks & Communications
SCDD 2026   4th International Conference on Soft Computing, Data mining and Data Science