IEEE meeting of possible interest

[Paul L Rinaldo]

>>Return-Path: <list-errors.1300011681.0.1302578891.005@boing.topica.com>
>>To: ieee-nova@topica.com
>>From: anup@rstcorp.com
>>Subject: [IEEE-NoVA] Feb. 15th: Java Card Security Talk and Elections
>>Date: Mon, 05 Feb 2001 07:58:20 -0800
>>Reply-To: anup@rstcorp.com
>>X-Topica-Loop: 1300011681
>>
>>Dear IEEE member:
>>
>>We would like to invite you to our IEEE Computer Society Chapter
>>meetings with a talk Thursday, February 15th, 2001.
>>
>>Prior to the talk, we will hold chapter officer elections. We are 
>>currently seeking nominations for the following officers:
>>
>>Chair
>>Vice-Chair
>>Program Chair
>>Treasurer
>>Secretary
>>Publicity
>>Arrangements
>>
>>Please send your nominations to ieee-officers@cigital.com.
>>
>>Below is a summary of the talk. Please see http://www.cigital.com/ieee/ 
>>for more information and to RSVP.
>>
>>Title:  "Java Security meets Smart Cards"
>>Speaker: Dr. Gary McGraw, Cigital, Inc.
>>Date: Thursday, February 15th
>>Schedule: 
>>        6:00 - 6:30: registration and refreshements
>>        6:30 - 6:45: chapter announcements
>>        6:45 - 7:00: officer elections
>>        7:00 - 8:00: guest talk
>>
>>Abstract:
>>The Java security landscape has seen a number of fundamental changes 
>>since its inception.  Once based on a strict binary distinction between 
>>trusted and untrusted code, the language-based Java security model has 
>>become much more flexible and complicated.  As Java is adopted 
>>throughout the enterprise, showing up in everything from middleware 
>>servers to smart cards, the security situation takes on more importance. 
>> Java 2 is built around a revised security model that includes code 
>>signing, permissions, principals, and policy.  Though this makes Java 
>>security completely customizable and flexible, it also complicates the 
>>code base and (Java applications that use it) significantly.  Stripped 
>>down versions of Java including Java Card 2.1 are also gaining 
>>prominence.  Security is essential for almost every smart card 
>>application, but the complex Java 2 security model is much too large to 
>>port directly to a smart card.  The security model has thus been 
>>radically altered to fit on a card, leaving many security challenges as 
>>a result. 
>>
>>Bio:
>>Gary McGraw, Ph.D.
>>Cigital
>>http://www.cigital.com
>>http://www.cigital.com/~gem
>> 
>>Gary McGraw is the Vice President of Corporate Technology at Cigital 
>>(formerly Reliable  Software Technologies) where he researches software 
>>security and sets technical vision in  Software Risk Management.  He 
>>holds a dual PhD in Cognitive Science and Computer Science  from Indiana 
>>University and a BA in Philosophy from UVa. He has written over sixty  
>>peer-reviewed technical publications, consults with major e-commerce 
>>vendors including Visa and the Federal Reserve, and has served as 
>>principal investigator on grants from  Air Force Research Labs, DARPA, 
>>National Science Foundation, and NIST's Advanced Technology  Program.  
>>Dr. McGraw serves on the Boards of Counterpane, Finjan, NetCertainty, 
>>and Tovaris as well as advising the CS Department at UC Davis.  He also 
>>chairs the National Infosec  Research Council's Malicious Code Infosec 
>>Science and Technology Study Group.  Dr. McGraw is  a noted authority on 
>>mobile code security and co-authored both Java Security (Wiley, 1996)  
>>and Securing Java (Wiley, 1999) with Prof. Ed Felten of Princeton.  Dr. 
>>McGraw also  co-authored Software Fault Injection (Wiley 1998) with Jeff 
>>Voas.  Dr. McGraw is currently  writing a book entitled Building Secure 
>>Software (Addison-Wesley, 2001).  He regularly  contributes to popular 
>>trade publications and is often quoted in national press articles.
>>
>>
>>---
>>If you would like to unsubscribe from this list, simply send a blank e-mail
>>to ieee-nova-unsubscribe@topica.com.
>>
>>____________________________________________________________
>>T O P I C A  -- Learn More. Surf Less. 
>>Newsletters, Tips and Discussions on Topics You Choose.
>>http://www.topica.com/partner/tag01
>>