[governance] IEEE 2013 International Workshop on Service Security and Assurance Perspectives (WOSSAP) - DEADLINE EXTENSION: APRIL 1, 2013

Thu Mar 21 13:55:49 EDT 2013

[Apologies if you receive multiple copies of this Call For Paper]

****************************************************************************
************

IEEE 2013 International Workshop on Service Security and Assurance
Perspectives (WOSSAP)

One day between June 27 and July 2, 2013, 

at Santa Clara Marriott, CA, USA (Center of Silicon Valley) 

within the 2013 IEEE 9th World Congress on Services.

ttp://proteus.lcc.uma.es/wossap13

****************************************************************************
************

Call for Papers

Current trends in the IT industry suggest that future software systems will
be very different 

from their counterparts today, due to greater adoption of Service-Oriented
Architectures (SOAs) 

and the popularization of the Software-as-a-Service (SaaS) paradigm.

These trends point to large-scale, heterogeneous ICT infrastructures hosting
applications that 

are dynamically built from loosely-coupled, well-separated services, where
key non-functional 

properties like security, privacy, efficiency and reliability will be of
increased and critical 

importance.

Basic security protocols for Web Services, such as XML Security, the WS-*
series of proposals, 

SAML, and XACML, along with numerous on-going activities targeting new SaaS
scenarios, can 

provide a basic set of building blocks enabling Web Services and Cloud
Computing to operate 

securely. While some of these building blocks are now firmly in place and
the on-going work 

progresses at a fast pace, a number of challenges are still to be met for
ensuring the security 

and trust of these scenarios. One relevant aspect is the change in the
underlying model of 

application and service provision. Current trust models in relation to
application provision, 

deployment, operation and control are not well-adapted for these scenarios.
Actors, stakeholders, 

responsibilities, capabilities, liabilities of traditional computing
scenarios, as well as their 

relations, have changed in these new scenarios, requiring new trust
relationships to be established 

and verified at runtime during application set-up and operation.

In this line certification and other assurance approaches become crucial for
establishing the 

necessary trust relationships. Current certification schemes, however, are
either insufficient 

in addressing the needs of such scenarios or not applicable at all and thus,
they cannot be 

used to support and automate run-time security assessment.

Likewise, novel testing mechanisms, engineering approaches, formal modelling
paradigms, monitoring 

models, runtime support infrastructures, secure dynamic application building
and service orchestration 

approaches, etc. are needed in order to fill other gaps and to restore the
missing trust links in these 

new scenarios. The workshop will provide a forum for presenting research
results, practical experiences, 

and innovative ideas in web services security.

Topics of interests of WOSSAP 2013 include, but are not limited to:

- Security certification for services

- Assurance mechanisms for services

- The role of Trusted Computing in securing Web services

- Frameworks for managing, establishing and assessing inter-organizational
trust relationships

- Inter-organizational security policy alignment and reconciling

- Trust negotiation mechanisms

- Testing mechanisms and techniques for web services

- Formal modeling of service-based systems

- Privacy certifications for services

- Secure and trusted service provisioning

- Support for assurance, certification and accreditation

- Secure dynamic application building and service orchestration approaches

- Semantics-aware Web service security and Semantic Web

- Secure orchestration of Web services

- Web services and cloud computing security

- Access control

- Engineering approaches

- Monitoring models

- Runtime support infrastructures

Important dates

- Full Paper Submission Due Date: April 1st, 2013

- Decision Notification (Electronic): April 10th, 2013

- Camera-Ready Copy Due Date & Pre-registration Due: April 15th, 2013

Paper submission

Authors are invited to submit full papers (about 8 pages) or short papers
(about 4 pages) as per IEEE 8.5 x 11 manuscript guidelines (download Word
templates or LaTeX templates). The submitted papers can only be in the
format of PDF or WORD. Please follow the IEEE Computer Society Press
Proceedings Author Guidelines to prepare your papers, respectively. At least
one author of each accepted paper is required to attend the workshop and
present the paper. All papers must be submitted via the confhub submission
system for the SPE workshop.

First time users need to register with the system first (see these
instructions for details). All the accepted papers by the workshops will be
included in the Proceedings of the Ninth IEEE 2013 World Congress on
Services (SERVICES 2013) which will be published by IEEE Computer Society.

Workshop chairs

      ERNESTO DAMIANI, Università degli Studi di Milano, Italy

      MICHELE BEZZI, SAP, France

      ANTONIO MANA, University of Malaga, Spain

Program committee

      ARDAGNA, CLAUDIO, Università degli Studi di Milano, Italy

      ABIE, HABTAMU, Norwegian Computing Center, Norway

      MICHELE BEZZI, SAP, France

      BOYD, COLIN, Queensland University of Technology, Australia

      CUELLAR, JORGE, Siemens, Germany

      DAMIANI, ERNESTO, Università degli Studi di Milano, Italy

      DAVIDS, CAROL, Illinois Institute of Technology, USA

      ENDICOTT-POPOVSKY, BARBARA, University of Washington, USA

      FERNANDEZ, EDUARDO B., Florida Atlantic University, USA

      GELENBE, EROL, Imperial College, United Kingdom_

      GIORGINI, PAOLO, University of Trento, Italy

      GRAWROCK, DAVID, Intel, USA

      GUERGENS, SIGRID, Fraunhofer SIT, Germany

      JUERJENS, JAN, TU of Dortmund, Germany

      KIYOMOTO, SHINSAKU, KDDI R&D Labs, Japan

      LAMBRINOUDAKIS, COSTAS, U. of Piraeus, Greece

      LE METAYER, DANIEL, INRIA, France

      LEVI, ALBERT, Sabanci University, Turkey

      LOSAVIO, MICHAEL, U. of Kentucky, USA

      LOTZ, VOLKMAR, SAP AG, France

      MANA, ANTONIO, University of Malaga, Spain

      MARTINELLI, FABIO, CNR-IIT, Italy

      MARTINEZ-PEREZ, GREGORIO, U. of Murcia, Spain

      MENICOCCI, RENATO, FUB, Italy

      POSEGGA, JOAQUM, U. of Passau, Germany

      PRESENZA, DOMENICO, Engineering, Italy

      QUISQUATER, JEAN-JACQUES, U. Catholique De Louvain, Belgium

      RAY, INDRAKSHI, Colorado State University, USA

      RUDOLPH, CARSTEN, Fraunhofer SIT, Germany

      SORIA-RODRIGUEZ, PEDRO, ATOS R&D, Spain

      SPANOUDAKIS, GEORGE, City University, United Kingdom

      STOELEN, KETIL, University of Oslo, Norway

      WASHIZAKI, HIRONORI, Waseda University, Japan

      WESPI, ANDREAS, IBM, Switzerland

      YOSHIOKA, NOBUKAZU, National Institute of Informatics, Japan

      ZULKERNINE, MOHAMMAD, Queen's University, Canada

========================================================

For additional information please visit

http://proteus.lcc.uma.es/wossap13

========================================================

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.igcaucus.org/pipermail/governance/attachments/20130321/d454bb9b/attachment.htm>
-------------- next part --------------
____________________________________________________________
You received this message as a subscriber on the list:
     governance at lists.igcaucus.org
To be removed from the list, visit:
     http://www.igcaucus.org/unsubscribing

For all other list information and functions, see:
     http://lists.igcaucus.org/info/governance
To edit your profile and to find the IGC's charter, see:
     http://www.igcaucus.org/

Translate this email: http://translate.google.com/translate_t