please post
INTERNET SECURITY
SECURE COMMUNICATIONS OVER UNTRUSTED NETWORKS
A one-day seminar on November 12, 1994
Embarcadero Hyatt Regency Hotel in San Francisco.
Methods of achieving authentication, authorization,
confidentiality, integrity, and nonrepudiation are key to the
successful realization of the National Information
Infrastructure (NII). Today's Internet is a proving ground for
what will become the NII.
The San Francisco Chapter of the IEEE Computer Society has put
together an outstanding program on encryption, intrusion
detection, firewalls, architectures, and protocols for Internet
Security. Speakers in this seminar will describe several of
the main techniques that exist today and the directions in
which they are evolving. The seminar will be helpful to
engineers, engineering managers and product planners seeking
current knowledge of Internet Security.
PROGRAM
8:30 a.m. Registration opens
9:00 a.m. Introduction
9:05 a.m. Keynote Address James Bidzos, President of RSA
9:45 a.m. Steven Bellovin, Ph.D., Bell Labs
"Firewalls for Computer Security"
11:00 a.m. Teresa Lunt, SRI
"Intrusion Detection"
11:45 a.m. Round Table Lunch (incl. with registration)
1:00 p.m. Professor Martin E. Hellman, Ph.D., Stanford
"Cryptography: The Foundation of Secure Networks"
2:00 p.m. Dan Nessett, Ph.D.,
SunSoft and PSRG
"Future Internet Security Architecture"
3:00 p.m. Matt Blaze, Ph.D., Bell Labs
"Protocols: Security Without Firewalls"
4:00 p.m. "Public Safety vs. Private Liberty"
A Panel Discussion on the Social
Implications of Internet Security
Rex Buddenberg NPS
Alan McDonald FBI
Stewart Baker formerly of the NSA
James Bidzos President of RSA
Matt Blaze Bell Labs
Martin Hellman Stanford
A one day seminar in San Francisco, on Saturday, November 12th,
covering private and public-key encryption, key-escrow,
fire-walls, architecture and protocols for security,
intrustion detection, and a spirited panel discussion on
"Public Safety vs. Private Liberty" !
SEATING IS LIMITED. PRE-REGISTER BY OCTOBER 15TH.
9:05 Keynote Address
James Bidzos, President of RSA
James Bidzos, President of RSA Data Security, will present the
keynote address. Mr. Bidzos heads a company whose encryption
technologies are licensed for products ranging from computer
operating systems, to software copy protection, to electronic
mail, to secure telephones. RSA has licensed several million
copies of its encryption software, and has become a focal point
for debate on appropriate application of cryptography.
Mr. Bidzos has gained a unique perspective on the requirements
of effective cryptographic systems. He will highlight the
problem of providing strong encryption for users of computer
networks while meeting the legitimate needs of law enforcement
9:45 Steven Bellovin, Ph.D., Bell Labs
"Firewalls for Computer Security"
When you connect your computer to the Internet, you also create
a channel into your computer. Clever vandals, thieves and
industrial spies have found ways to abuse most of the Internet
protocols from FTP and Telnet to the World Wide Web and
Network Time Protocols. Short of pulling the plug, firewalls
provide the surest defense. The firewall administrator must
keep abreast of new methods of attack and understand how
firewalls can mitigate the threat. Steven M. Bellovin, Ph.D.,
is a senior researcher at AT&T's Bell Laboratories and
co-author of the well known guide "Firewalls and Internet
Security: Repelling the Wily Hacker." As one responsible for
protecting "the phone company" from Internet hackers, Dr. Bellovin
can describe from firsthand experience how firewalls can be
constructed to screen them out. Dr. Bellovin will join us in a
live video teleconference from Bell Laboratories.
11:00 Teresa Lunt, SRI "Intrusion Detection"
Inevitably, someone will try to breach your firewall and might
succeed. The time it takes you to discover the intrusion and
catch the culprit depends on the event logging you have
established. However, logging the many different transactions
that might expose trespassing produces mountains of data.
Automatic digestion of the logs is the only hope of monitoring
them all. Teresa F. Lunt, Director of Secure Systems Research
at SRI's Computer Systems Laboratory, directs work in
multilevel database systems and intrusion detection. Ms. Lunt
will describe intrusion detection and demonstrate automated
tools developed at SRI to analyze audit data for suspicious
behavior.
1:00 Professor Martin E. Hellman, Ph.D., Stanford
"Cryptography: The Foundation of Secure Networks"
Data in transit across unsecured networks like the Internet
are subject to wiretapping attacks and impersonation.
Moreover, privacy of communication and authentication of the
sender's message are essential to Internet commerce, with
exchange of contracts, receipts, credit card drafts and the
like increasingly commonplace. Encryption can solve some of
these problems, but what kind of encryption? Authentication
only or encrypted messages? Secret key or public key, or
both? Will you need a giant key ring for mes sage keys,
session keys, file keys, and passwords? Martin E. Hellman,
Ph.D., Professor of Electrical Engineering at Stanford
University, is co-inventor of public key cryptography with
Whitfield Diffie and Ralph Merkle. He was elected a Fellow of
the IEEE for contributions to cryptography. Dr. Hellman will
explore threats to communication and costs of electronic
countermeasures. He will explain the importance and means of
authenticating electronic messages, and he will survey public key
cryptography. Dr. Hellman will describe public key techniques
including Rivest-Shamir-Adleman (RSA), Diffie-Hellman, ElGamal
and Digital Signature Standard (DSS). He will also describe
the current status of export control and encryption standards
such as the Data Encryption Standard (DES), Escrowed
Encryption Standard (EES) and its encryption algorithm,
Skipjack, which is implemented in Clipper and Capstone chips.
2:00 Dan Nessett, Ph.D., SunSoft and PSRG
"Future Internet Security Architecture"
Dan Nessett, Ph.D., of the SunSoft Division of Sun
Microsystems, and until recently with Lawrence Livermore
National Laboratory, has worked extensively in local area
networks, distributed operating systems and distributed systems
security. He is a member of the Privacy and Security Research
Group (PSRG), which is convened under the auspices of the
Internet Society. Dr. Nessett will explain the emerging
Internet security architecture work undertaken by the PSRG.
The architecture will guide the development of security
mechanisms used in Internet standards.
3:00 Matt Blaze, Ph.D., Bell Labs
"Protocols: Security Without Firewalls"
We use firewalls because Internet protocols are not inherently
secure. Can we rehabilitate the Internet protocols to produce
protocols which are secure, not computationally prohibitive,
and compatible with existing protocols? Matt Blaze, Ph.D., of
Bell Laboratories will talk about the problems of integrating
cryptographic protection into large-scale network infrastructure.
Dr. Blaze is the author of "A Cryptographic
File System for Unix," presented at the 1993 ACM Conference on
Communications and Computer Security, and co-author with John
Ioann idis of "The Architecture and Implementation of
Network-Layer Security Under UNIX," which describes "swIPe," a
network-layer security protocol for the IP protocol suite.
Dr. Blaze will address issues concerning network security
protoc ols, key management and distribution, and threats and
models for cryptographic engineering.
4:00 A Panel Discussion on the Social Implications of
Internet Security "Public Safety vs. Private Liberty"
At one end of an imagined security spectrum lies the
information police-state. Through traffic analysis,
mandatory personal ID numbers and escrowed encryption, and
the ability to record all messages and commerce carried out
on the Information Superhighway, governments could maintain
dossiers on every aspect of the personal life and business
of its citizens. Privacy advocates fear that a corrupt government
could use such information against its political enemies and to
subvert personal freedoms. At the other extreme lies information
anarchy. Through the use of digital cash, anonymous remailers,
and strong non-escrowed encryption, the Information
Superhighway could become a hide-out for criminals and
national security threats. The potential for black-market
activity and the associated tax-evasion is so enormous that
some have speculated that governments could eventually
collapse. Law-enforcem ent advocates fear that they will be
unable to keep up with criminals and terrorists who ply their
trade electronically. Our distinguished panel will provide
insight into the interplay between the rights of individuals
to privacy and freedom, the rights of companies to conduct
unrestrained trade, and the ability of law enforcement and
security agencies to perform their functions efficiently.
This conclusion to the seminar will put into perspective
the social changes that might be wrought by the technical
advances discussed earlier in the day.
Panelists include:
Rex Buddenberg NPS
Alan McDonald FBI
Stewart Baker formerly of the NSA
James Bidzos President of RSA
Matt Blaze Bell Labs
Martin Hellman Stanford
Rex Buddenberg, Instructor of information systems architecture
and applied networking at the Naval Postgraduate School, will
moderate the panel. Mr. Buddenberg is a maritime command,
communication, control and intelligence (C3I) consultant and a
computer networking author. As a C3I architect for the U.S.
Coast Guard, he developed plans and specifications for
extending Internet connectivity to oceanographic ships. Mr.
Buddenberg contemplates the means and effects of net warfare as
both the good guys and bad guys share the same network.
Alan McDonald, Special Counsel for Electronic Surveillance Matters,
Information Resources Division, Federal Bureau of Investigation,
is a specialist in the law and policy concerning electronic
surveillance, Digital Telephony, and encryption issues.
He frequently represents the FBI's view of law enforcement equities
in light of advanced telecommunications and encryption.
Stewart Baker is a former General Counsel to the NSA and
a partner in Steptoe & Johnson, a Washington, DC law firm.
His expertise is in telecommunications, computer export policy,
security of national information infrastructure and encryption.
Mr. Baker brings direct experience with the problem that strong
encryption creates for the NSA in protecting our national
security.
QUESTIONS? CALL (415)-327-6622.
Cut-off and complete this form, enclose your check payable to
the IEEE SFCS, and mail to: IEEE Council Office 701 Welch
Rd. #2205 Palo Alto, CA. 94304
To qualify for the reduced Pre-registration fees, your
application with check must be postmarked no later than Oct.
15, 1994. Registration fee includes lunch, refreshments, and
parking. Seating is limited. To make sure the seminar is
not sold out, call (415) 327-6622.
please check the appropriate box
Fees on or before Oct. 15th:
___ IEEE Member $ 110
___ Non-member $ 120
___ Student $ 85
Fees after Oct. 15th:
___ IEEE Member $ 125
___ Non-member $ 145
___ Student $ 100 (students must present ID)
The seminar location is the Hyatt Regency Embarcadero Hotel,
near the Ferry Building, in San Francisco.
Your registration fee includes the all day seminar, lunch,
and convenient parking in the garages underneath adjacent
Embarcadero Centers 1, 2, or 3. (Keep your ticket for validation).
Please print clearly:
Name : __________________________________________
Title : __________________________________________
Company: __________________________________________
Address: __________________________________________
__________________________________________
_______________________________ ___ ______
Day phone #:(___)_____-_______
IEEE member (or affiliate) #:_______ ____ (for discount)
College/University (if student):___________________
___ Vegetarian lunch option
Refunds will be honored through October 22nd, substitutions
any time. Additional information can be obtained by telephoning
the IEEE Bay Area Council Office: (415)327-6622.
IEEE SFCS RESERVES THE RIGHT TO MAKE CHANGES TO THE SEMINAR
Sponsored by the San Francisco Chapter of the IEEE Computer
Society. The IEEE is a non-profit organization.
