2001 Conferences

9th CACR Information Security Workshop
Software Security, Is It an Oxymoron?

November 29, 2001 8:30 am - 4:30 pm
Crowne Plaza Hotel, Ottawa, Ontario, Canada


THEME:
Software Security, Is It an Oxymoron?

Building secure Internet enabled applications for both wired and wireless environments requires that one understands both organic and external risks. Avoiding organic risks requires more than just beginning with secure implementations of the base security algorithms, such as DES, RC4, RSA and ECC. It requires that from the start one designs security in the application and during the product development process one continuously tests the implementation against the established risk models. Avoiding external risks also requires more than just a proper implementation of firewalls and anti-virus products. It requires understanding the types of attack methodology used by developers of worms and viruses.

This 9th CACR Information Security Workshop features two prominent researchers, authors and presenters, Dr. Gary McGraw and Dr. Avi Rubin. Dr. McGraw will open the workshop with a morning tutorial on "Building Secure Software" using materials from his latest book of the same title released by Addison-Wesley in September, 2001. Dr. Rubin will provide an informative afternoon tutorial on "Security on the Internet and in Wireless Networks" also using materials from his latest book, titled "White-Hat Security Arsenal" (Addison Wesley, 2001). The workshop will conclude with a panel discussion on the topic of "Secure Software Implementations for Wired and Wireless Applications" hosted by Dr. Scott Vanstone. Panelist will include Dr. McGraw; Dr. Rubin; Carlisle Adams, Entrust; Stanley Chow, Cloakware; and Robert Gallant, Arcamatrix. Attendees who are present at the close of the workshop will be eligible to participate in a drawing for copies of "Building Secure Software" and "White-Hat Security Arsenal".

The series of Information Security Workshops is organized by the University of Waterloo's CACR (Centre for Applied Cryptographic Research) and has been established to provide a highly focused and content-full program covering topics of interest to the sponsors' customers, potential customers and employees. The targeted attendee is an individual with a solid background in information security, with two plus years of experience in developing or deploying information security solutions for electronic commerce or other applications. This individual understands some of the issues and challenges (short-term and long-term) in this area and attends the workshop in order to gain exposure to different approaches (including specific vendor's approaches) or technology and understand the availability of such, thereby expanding the "tools" in his or her respective tool box.

This workshop is the 9th in the series. Agendas and presentations from previous workshops can be found here.

SPONSORS:

• Alcatel Canada
• Certicom Corp.
• Communications Security Establishment, Canadian Federal Government
• MITACS
• Pitney Bowes

------------------------cut from here---------------------------------

9th CACR INFORMATION SECURITY WORKSHOP REGISTRATION FORM

Full name:
_________________________________________________________

Affiliation:
_________________________________________________________

Address:
_________________________________________________________

_________________________________________________________

_________________________________________________________

E-Mail Address:
_________________________________________________________

Telephone #:
_________________________________________________________

** Are you a vegetarian?   [  ] Yes      [  ] No

** Please let us know if you have any specific food allergies
   
**Invited by Sponsor 
  [  ] Sponsor:_______________________
  No Registration Fee required

**Make Cheque/Money Order Payable in
   CAD or USD funds only to: CACR

**Credit Card Payments:

   [  ] Visa                  [  ] MasterCard

   Cardholder's Name: ___________________________________

   Card Number: _________________________________________

   Expiration Date: _____________________________________

   Signature: ___________________________________________

-------------------------cut from here-------------------------------