This symposium, the fifth in an annual series, brings together leading figures from academia, government, and industry to discuss state-of-the-art intrusion detection technologies and issues from the research and commercial perspectives. The RAID International Symposium series is intended to further advances in intrusion detection by promoting the exchange of ideas in a broad range of topics.

The RAID 2002 program committee invites three types of submissions:

• Full papers presenting mature research results. Full papers accepted for presentation at the Symposium will be published in the RAID 2002 proceedings published by Springer Verlag in its Lecture Notes in Computer Science (LNCS) series.
  Full papers are limited to 20 pages when formatted according to the instructions provided by Springer Verlag. Papers must include an abstract and a list of keywords.

• Extended abstracts presenting work-in progress, case studies and implementation experiences. We welcome basically any type of submission that is of general interest to the audience. Extended abstracts accepted for presentation at the Symposium will be published on the RAID web site.
  Extended abstracts are limited to 1200 words in length.

• Panel proposals for presenting and discussing interesting topics in the field of intrusion detection.
  Panel proposals should include both an outline of the format of the panel and a short rationale for the panel. Panels that include time for general discussion and questions/answers between the panelists and the Symposium attendees are preferred.

Submission instructions are available here.

The following topics are within scope:

1. Assessing, measuring, and classifying intrusion detection systems:
   • Quantitative and qualitative assessment of IDSs
   • Benchmarking techniques and technologies
   • Relations to risk assessment and risk management plans
2. IDS cooperation and integration:
   • IDS interoperability standards and standardization
   • Alert correlation and attack scenario analysis
   • Combining different types of IDSs
   • Integration of intrusion detection with system/network management frameworks
   • Integration of intrusion detection with business processes
3. IDS in high-performance and real-time environments:
   • Large-scale/enterprise IDSs
   • Intrusion detection in high-speed networks
   • Managing high-volume data
   • Intrusion detection in highly distributed and heterogeneous environments
4. Vulnerabilities and attacks:
   • Vulnerability or attack databases
   • Vulnerability or attack taxonomies
   • Attack description languages
5. Intrusion management and reaction:
   • Intrusion tolerance
   • Adaptive IDS solutions
   • Survivability and dependability
   • Automated responses
6. Practical considerations
   • Case studies
   • Legal issues
   • Handling of false positives
   • Evidence storage/log requirements, handling, and exchange
   • Commercial intrusion detection systems and their directions
   • Real-time versus post-mortem IDSs

RAID STEERING COMMITTEE

Hervé Debar (France Telecom R&D, France)
Deborah Frincke (University of Idaho, USA)
Ming-Yuh Huang (The Boeing Company, USA)
Wenke Lee (Georgia Institute of Technology, USA)
Ludovic Mé (Supélec, France)
S. Felix Wu (UC Davis, USA)

RAID 2002 PROGRAM COMMITTEE

Matt Bishop (University of California at Davis, USA)
Joachim Biskup (University of Dortmund, Germany)
Frédéric Cuppens (ONERA, France)
Luca Deri (University of Pisa, Italy)
Yves Deswarte (LAAS-CNRS, France)
Tim Grance (NIST, USA)
Erland Jonsson (Chalmers University of Technology, Sweden)
Richard Kemmerer (UC Santa Barbara, USA)
Calvin Ko (NAI, USA)
Jay Lala (DARPA Information Technology Office, USA)
Richard Lippmann (MIT/Lincoln Lab, USA)
Roy Maxion (CMU, USA)
John McHugh (CMU/SEI CERT, USA)
Peter Mell (NIST, USA)
George Mohay (Queensland University, Australia)
Vern Paxson (ICSI/LBNL, USA)
Phil Porras (SRI, USA)
Marty Roesch (Sourcefire, USA)
Stuart Staniford (Silicon Defense, USA)
Al Valdes (SRI, USA)
David Wagner (UC Berkeley, USA)
Diego Zamboni (IBM Research, Switzerland)

SUBMISSIONS

Authors are invited to submit their papers electronically. A detailed description of the electronic submission procedure is available here. Submissions must conform to this procedure and be received by end of March 2002 in order to be considered.

Each submission will be acknowledged by e-mail. If acknowledgment is not received within seven days, please contact Andreas Wespi.

All submissions must be in English. Plan to give all presentations and panels in English

A preliminary program will be available by July 31, 2002.

CORPORATE SPONSORS

REGISTRATION

PROCEEDINGS

Extended abstracts (and their accompanying papers if available) and slide presentations will be published on the Symposium's web site.

IMPORTANT DATES

MORE INFORMATION