VizSEC 2008 Workshop on Visualization for Cyber Security http://vizsec.org/workshop2008/ September 15, 2008 / Cambridge, MA USA In conjunction with RAID 2008 Extended submission deadlines: Poster and Demo submissions - August 1, 2008 The 5th International Workshop on Visualization for Cyber Security will provide a forum for new research in visualization for computer security. We are pleased to be holding this year's meeting in conjunction with the 11th International Symposium on Recent Advances in Intrusion Detection. The VizSec Workshop will be held at MIT in Cambridge, Massachusetts USA on Monday, September 15, 2008. The full and short paper deadline has passed. We are accepting submissions (2 page abstract) for posters and demonstrations. Poster and Demo abstracts will be made available on the VizSec web site. This year's VizSec Keynote Speaker will be Ben Shneiderman, Professor in the Department of Computer Science, Founding Director (1983-2000) of the Human-Computer Interaction Laboratory, and Member of the Institute for Advanced Computer Studies at the University of Maryland at College Park. Dr. Shneiderman will give a presentation entitled Information Forensics: Harnessing visualization to support discovery. As a result of previous VizSec workshops, we have seen both the application of existing visualization techniques to security problems and the development of novel security visualization approaches. However, VizSec research has focused on helping human analysts to detect anomalies and patterns, particularly in computer network defense. Other communities, led by researchers from the RAID Symposia, have researched automated methods for detecting anomalies and malicious activity. The theme for this year's workshop, which will be held in conjunction with RAID 2008, will be on bridging the gap between visualization and automation, such as leveraging the power of visualization to create rules for intrusion detection and defense systems. We encourage VizSec participants to stay for the RAID Symposium and RAID participants to come a day early to participate in VizSec. There will be a discount for joint registration. We also solicit papers that report results on visualization techniques and systems in solving all aspects of cyber security problems, including: * Visualization of Internet routing * Visualization of packet traces and network flows * Visualization of intrusion detection alerts * Visualization of attack tracks * Visualization of security vulnerabilities * Visualization of attack paths * Visualization of application processes * Visualization for forensic analysis * Visualization for correlating events * Visualization for computer network defense training * Visualization for offensive information operations * Visualization for building rules * Visualization for feature selection * Visualization for detecting anomalous activity * Deployment and field testing of VizSec systems * Evaluation and user testing of VizSec systems * User and design requirements for VizSec systems * Lessons learned from development and deployment of VizSec systems Posters Posters can be used to describe work in progress or updates to previously published VizSec research or R&D. Poster submissions should consist of a 2 page abstract. Poster will be presented at the VizSec/RAID reception. Abstracts will be made available on the web site. Demos Demonstrations can be used to show new or updated development efforts. Demo submissions should consist of a 2 page abstract. Demonstrations will take place at the VizSec/RAID reception. (You will need to bring a laptop for demos.) Abstracts will be made available on the web site. Formatting Instructions All accepted, camera-ready manuscripts must be submitted using the LaTeX2e or Word templates provided by Springer for LNCS 'Proceedings and Other Multiauthor Volumes.' http://www.springer.com/computer/lncs?SGWID=0-164-7-72376-0 Submission Instructions Please submit PDF papers using the EasyChair workshop site: http://www.easychair.org/conferences/?conf=vizSEC08 VizSec 2008 is sponsored by: NSA's National Information Assurance Research Laboratory (NIARL) Microsoft CA Labs Applied Visions, Secure Decisions division http://vizsec.org/workshop2008/ -- john goodall, phd . JohnG@SecureDecisions.avi.com 518.248.8195 (mobile) . 518.632.4195 (office) Applied Visions Inc., Secure Decisions Division http://securedecisions.avi.com . http://vizsec.org