TC-11 Report to Council and TA 2006 21 February 2006 Leon Strous Chairman IFIP TC-11 PART I. General Assembly a. Meetings held and scheduled. • TC-11 held its' annual meeting on Sunday 29 May 2005 in Chiba, Japan, preceding the SEC2005 conference. Attendance: 20 members, 1 representative, 2 observers. Apologies: 21 members, 1 observer. Absent: 2 members. Resigned: 1 member. • The next annual TC meeting is scheduled for Sunday 21 May 2006 in Karlstad, Sweden, preceding the SEC2006 conference. b. Changes in membership and officers Changes in officers No changes in officers since GA 2005. At the annual meeting in May, the second term of the chairman of wg 11.4 Network & distributed systems security will end. TC membership changes since GA 2005: • Korea: Seung-Won Sohn (new member country) • Portugal: Pedro Manuel Barbosa Veiga (succeeding Luis Sousa Cardoso) Currently TC-11 is missing representatives of the following IFIP full members (list of January 2006): Andorra, Botswana, Brazil, Bulgaria, Canada, Croatia, Ethiopia, Ireland, Israel, Lithuania, Malaysia, Mauritius, Nigeria, Oman, Poland, Russia, Sri Lanka, Syria and Thailand. The representatives of Egypt, India and Singapore have not attended three consecutive meetings and the GA members of these countries will be contacted in order to get active participation. c. Working groups In previous meetings of TC-11, the membership and membership rules of working groups has been extensively discussed. Slow but steady progress is being made by the working groups in establishing sound, international and active membership lists. In order to focus the approach in this respect, the strategy questions that have been sent to all TCs, have also been sent to all TC-11 working groups. TC- 11 expects to discuss the results during the annual meeting in May. 1. Wg 11.1 Information Security Management Officers: Chair: Steven Furnell, University of Plymouth, UK (first term, 2004 – 2007) Vice-Chair: Gurpreet Dhillon, Virginia Commonwealth University, Richmond, VA, USA (first term, 2004 – 2007) Secretary: Paul Dowland, University of Plymouth, UK (first term, 2004 – 2007) 1 Membership: The membership of the wg has been reconfirmed, and per end of January 2006 there are 30 members from 11 countries. Around a third of these are new members, not previously affiliated to wg 11.1. Activities: A new website for the working group has been established, http://ted.see.plymouth.ac.uk/ifip, with some additional content and functionality compared to the previous incarnation. From the perspective of providing a useful contribution to the security community, the new site includes the facility for registered WG members to post articles online for public download. This provides a means for WG members to further promote their work, as well as the potential for the website itself become a useful resource for those interested in information security management topics. At the time of writing the facility is not being widely supported by the full WG membership, but further promotion will hopefully encourage this to increase. The most significant activity undertaken to date has been the organisation of a joint working conference with WG11.5. The event, a Working Conference on Security Management, Integrity, and Internal Control in Information Systems, took place from 1-2 December 2005 in Fairfax, Virginia, USA, and associated proceedings have been published by Springer. Further details can be found at http://www.cs.uvm.edu/ifip11.1.5/ A collaboration has also been established with WG11.8, with whom we are running a Security Culture Workshop as part of SEC 2006. A successful call for papers has been issued, and six short papers selected for presentation and inclusion in the main SEC proceedings. 2. Wg 11.2 Small Systems Security Officers: Chair: Jan Verschuren, Ministry of the Interior, The Hague, Netherlands (second term, 2004 – 2007) Vice-chair: Erik Poll, University of Nijmegen, Netherlands Secretary: Erik de Vink, University of Eindhoven, Netherlands Membership: The membershiplist of wg 11.2 is under revision. Activities: Together with WG 8.8, WG 11.2 organises the 6th Conference on Smart Card Research and Advanced Applications (CARDIS), taking place 19 – 21 April 2006 in Tarragona, Spain. 3. Wg 11.3 Data and Application Security Officers: Chair: Pierangela Samarati, Universita degli Studi di Milano, Crema, Italy (second term, 2004 – 2007) Vice-chair: Secretary: Membership: 2 The complete list of members and observers is available at: http://cimic.rutgers.edu/ifip113/ Activities: The proceedings of the annual conferences have been published in the form of a book by Kluwer. In 2004, for the 18th conference the working group switched from having post-conference proceedings to have proceedings available at the time of the conference. This solution made management of the publication easier and less expensive (not requiring pre-proceedings and mailing of the final books). Last year’s proceedings were published in the LNCS series. 4. Wg 11.4 Network & distributed systems security Officers: Chair: Bart De Decker, K.U. Leuven, Belgium (second term, 2003 – 2006) Vice-chair: Secretary: Michalis Georgiou, Cyprus College, Nicosia, Cyprus (first term, 2005 – 2008) Membership: The membership list is under revision. Activities: The wg will organize a workshop as part of SEC 2006. 5. Wg 11.5 Systems Integrity and Control Officers: Chair: Sushil Jajodia, George Mason University, Fairfax, VA, USA (second term, 2004 – 2007) Vice-chair: Michael Gertz, University of California, Davis, CA, USA Secretary: Sabrina de Capitani di Vimercati, Universita degli Studi di Milano, Crema, Italy Membership: The membershiplist of wg 11.5 is under revision. Activities: A joint 11.1 and 11.5 working conference on security Management, Integrity, and Internal Control in Information Systems was organized. It was held at George Mason University, Fairfax, Virginia, December 1-2, 2005. For additional info, go to http://www.cs.uvm.edu/ifip11.1.5/ 6. Wg 9.6 / 11.7 Information Technology: Mis-use and the law Officers: Chair: Kai Rannenberg, Goethe University, Frankfurt, Germany (second term, 2005 – 2008, * in 2005 the wg changed from a situation with two co-chairs in 2002 to a situation with a chair and a vice- chair in 2005) Vice-chair: Albin Zuccato, Karlstad University, Karlstad, Sweden (first term, 2005 – 2008) Secretary: Judith Valdivia, Spain (first term, 2005 – 2008) Although the current chair is representing TC-11, TC-9 will remain the TC with the administrative responsibility for this joint working group as agreed in September 2001 between the TC-9 and TC-11 3 chairs at that time. For an extensive report on this joint working group reference is made to the TC-9 report. 7. Wg 11.8 Information Security Education Officers: Chair: Daniel Ragsdale, United States Military Academy, West Point, NY, USA (first term, 2005 – 2008) Vice-chairs: Natalia Miloslavskaya, Moscow Physics Engineering Institute, Russia (first term, 2005 – 2008) Lynn Futcher, Nelson Mandela Metropolitan University, South Africa (first term, 2005 – 2008) Secretary: Ronald Dodge, United States Military Academy, West Point, NY, USA (first term, 2005 – 2008) Membership: The issue of membership rules and establishing an active membership list will be taken up in the forthcoming period. Activities: WG 11.8 organized a successful working conference in cooperation with wg 11.5 on 1-2 November 2005 in Fairfax, Virginia, USA. WG 11.8 organizes in cooperation with wg 11.1 a workshop on security culture during SEC 2006. The wg will have the Fifth World Conference in Information Security Education WISE5 in the USA, to be hosted by the Westpoint Military Academy, New York, in May 2007. The Chair of the conference will be Daniel Ragsdale. 8. Wg 11.9 Digital forensics Officers: Chair: Indrajit Ray, Colorado State University, Fort Collins, Colorado, USA (first term, 2004 – 2007) Vice-chair: Mark Pollitt, Digital Evidence Professional Services, Ellicott City, Maryland, USA (first term, 2004 – 2007) Secretary / Treasurer: Sujeet Shenoi, University of Tulsa, Tulsa, Oklahoma, USA (first term, 2004 – 2007) Membership: IFIP Working Group 11.9 has two membership categories, members and observers. IFIP WG 11.9 has 50 members as of February 2006. The majority of the members (35) are from the United States; the others are from Australia (1), France (2), Japan (1), Norway (1), South Africa (9) and the United Kingdom (1). More non-US members are expected to join the group in the forthcoming years. IFIP WG 11.9 has 25 observers as of February 2006. Most of the observers (17) are from the United States; the others are from Japan (4), South Africa (1), Taiwan (2) and the United Kingdom (1). Activities: The working group organizes annual conferences for the research community. In addition it hosts technology transfer workshops to showcase advances in digital forensics research and practices to the 4 law enforcement, inspector general and intelligence communities and to solicit input on research trends and needs. The proceedings of the first annual international conference were published in November 2005. Advances in digital forensics. First IFIP WG 11.9 International conference on Digital forensics, Mark Pollitt / Sujeet Shenoi, Springer (SSBM), ISBN 0 387 30012 0, 332 pages. The 2005 Technology Transfer Workshop on Digital Forensics was held at Johns Hopkins University (Columbia, Maryland, USA) on June 9-10, 2005. This two-day workshop included seven presentations delivered by wg members. In addition, a moderated discussion