Second International Conference on Information Systems Security (ICISS 2006)
17-21 December 2006
Indian Statistical institute, Kolkata, India
http://www.cdcju.org.in/iciss/
In collaboration with :

Centre for Distributed Computing, Jadavpur University, India.

Center for Secure Information Systems, George Mason University, USA.

Birla Institute of Technology, Mesra ,Ranchi

Home Call For Papers Program Registration Author Instructions Committees Tutorials Proceedings Location Accommodation Sponsors

   Home

   Call For Papers

   Program

   Registration

   Author Instructions

   Committees

   Tutorials

   Proceedings

   Location

   Accommodation

   Sponsors

  

 

 

 

Tutorials
 

There will be four tutorials of three hour each organized in two tracks  on 18 December 2005.

Tutorials will be organized at the Kolkata Extension Center of Birla Institute of Technology, Mesra, Ranchi, India (Address: Southend Conclave, 1582, Rajdanga Main Road, Kolkata - 700 107). It is located opposite Siemens Building, on the Gariahat - EM Bypass Connector.

Participants who have registered for the conference will have complimentary registration for the tutorials. Since seats are limited, participants are requested to indicate their choice of tutorials latest by 7th December, 2005.

Special registration for "tutorials only" (for resident Indians)  is offered, on a first come first served basis, with the following fees:

For students (recommended by the Head of the Dept./Institution):  INR 200.00 per student

For others:  INR 800.00 per person

For tutorials, please contact the tutorial chairs:

Mrs. Sarmistha Neogy (Email: sarmisthaneogy@computer.org)

Mr. R.T. Goswami (Email: rtgoswami@bitmesra.ac.in).

 

 

 

Dr. Nasir Memon  Professor,Computer and Information Science at Polytechnic University, New York

DIGITAL IMAGE FORENSICS

Abstract 

In the analog world, an image (a photograph) has generally been accepted as a “proof of occurrence” of the depicted event. In today’s digital age, the creation and manipulation of digital images are made simple by digital processing tools that are easily and widely available. As a consequence, the authenticity of images, analog or digital, cannot be taken for granted. Digital image forensics, in this context, is concerned with uncovering some underlying fact about an image or video and focuses mainly on two types of problems. The first is the source identification problem where the aim is to determine through what means a given image was generated and then associating it with a class of sources that have common characteristics or matching it to a specific source. The second problem is determining whether a given image has undergone any form of modification or processing after it was initially acquired.

 

This tutorial covers many techniques developed to address the above two types of problems. The first part focuses on two aspects of source camera identification. The first aspect involves source camera-model identification. The image features that capture the characteristics of each camera are described, and experimental results obtained for digital cameras and cell-phone cameras are provided. The second aspect concerns establishing an association between a given image and a potential source digital camera based on sensor imperfections.  The second part describes techniques developed for identifying images generated by a computer graphics renderer. The descriptive features of computer graphics are laid out and differences with digital camera images are discussed. In the third part, image tampering and techniques to detect doctored images are discussed along with experimental results.

 

 

 

  Dr. Partha Pal Division Scientist, BBN Technologies

 

Making Information Systems Survive Cyber-Attacks

 Abstract

Experience teaches us that attack prevention cannot be absolute—some attacks will succeed, new attacks will always be found. It turns out that intrusion detection is not accurate either—some attacks will go undetected or will not be detected early enough. But more and more aspects of our daily lives and national security are becoming critically dependent on information systems. What can be done to defend our information systems against cyber-attacks, which is effectively an arms race that is inherently asymmetric and favors the adversary? The only approach that seems to hold promise is to build survivable systems—systems that keep continue to work despite ongoing attacks.

But survivable systems do not “happen” automagically—and everything labeled as “survivable” may not in fact be so survivable after all. In this tutorial, we will navigate our ways through the past epochs of cyber-defense to explain what survivability really means, and how does one develop—i.e., design, implement and validate—survivable systems. We will start with the problems and explain the challenges in making a distributed information system survive adversarial attacks. Then we will describe general principles for a survivable system design, give examples of survivability architecture, and present a case study of how a pathfinder survivable system was developed, internally tested and was finally taken to a proving ground for multiple rounds of red-team exercises. The resulting system, which combined a number of COTS and research-grade technologies, withstood multiple hours of attacks by sophisticated red teams who were given full knowledge, and often inside access to the defended system. To contrast this, consider the fact that it takes on the order of minutes for the adversary to completely disrupt the undefended version of the same system.

Expected audience includes system architects and analysts, distributed systems developers and service providers, stakeholders in critical information systems (defense, critical infrastructure etc), and researchers interested in advancing cyber-defense.

 

 

 

 

 

 

 

 

 

 

   
 

 

 

 

 

Home  Call For Papers   Registration   Author Instructions   Committees   Tutorials   Proceedings   Location   Accommodation   Sponsors

 

Indian Statistical institute, Kolkata, India

Center For Distributed Computing Jadavpur University
Kolkata, India

  

Center for Secure Information Systems, George Mason University, Fairfax, VA

Birla Institute of Technology

Mesra Ranchi