|
| Shelter Island, San Diego, California, USA Shelter Pointe Hotel and Marina November 6-10, 2000 Eighth International Symposium on the Foundations of Software Engineering |
|
"Principles and Practice of Modern Information Security",
: Jeremy Impson, Nader Mehravari and Scott Rush (Lockheed Martin Federal Systems) Providing information and data to customers, business partners, and employees in a secure fashion, while at the same time protecting the valuable enterprise-wide information assets is one of the most important challenges facing private, public, state, and federal entities. As a result, modern information security techniques and solutions are now a fundamental building block of any mission-critical information system solution. This tutorial is intended to provide a comprehensive understanding of all the key standards-based modern information security principles, technologies, and practices. Although this tutorial is intended to be introductory in nature, it will cover the material to an intermediary level in which the appropriate security and networking terms, concepts, and technologies are introduced, defined, and explored in some detail. The key concepts and technologies that will be presented include: Security attacks; information security services; refresher on networking and network services; firewalls; symmetric and public-key cryptography; public key infrastructures (PKI); smart cards and other mobile/portable security devices; virtual private networks (VPN); authentication techniques; intrusion detection; and information security related standards such as IPsec, SSL, X.509. In addition, the following topics will be emphasized: Information security techniques and technologies required for enterprise-wide systems including secure business-to-business commerce integration, and Information security concerns for application development. Dr. Nader Mehravari is a Senior Technical Staff Member in the Advanced Technology Department at Lockheed Martin Federal Systems facilities in Owego, NY. He is the chief scientist responsible for all technical activities related to advanced communication networks, telecommunications, information security, wireless and mobile computing, collaborative environments, and related information technologies. Dr. Mehravari received his MS and PhD in electrical engineering from Cornell University in 1982 and 1980, respectively. He received his BS in electrical engineering, with distinction, from the George Washington University in 1978. Prior to joining Lockheed Martin, he was a Distinguished Member of Technical Staff with AT&T Bell Laboratories from 1982 to 1992. He was a visiting lecturer at the Department of Electrical Engineering at Princeton University in 1991 and 1992. He is currently an Adjunct Professor at Departments of Electrical Engineering of both Syracuse University and Cornell University. He holds a patent and is the author of over thirty-five refereed conference and journal articles. He has delivered numerous invited lectures and presentations, and has developed and delivered a number of tutorials and courses. He is a senior member of the IEEE and has served on a number of IEEE committee and conference boards. He has also served as the editor of a number of IEEE transactions and newsletters. He received the IEEE award for outstanding achievement in electrical engineering in 1977, and was awarded the Honorable Mention (second place) in the 1987 Eta Kappa Nu National Recognition of Outstanding Young Electrical Engineers award program. Scott Rush, information security analyst, earned his M.B.A. from Rutgers Graduate School of Management in 1992. He is currently the Lockheed Martin Owego Site Information Security Technology Program Manager where he is responsible for information security at the Owego site, as well as providing technical support in the areas of information security and networking to various research, proposal, and customer activities. Scott has over nine years of experience in the information technology arena in the areas of application development, UNIX systems administration, networking, network management, and information security. In his current role Scott is responsible for: defining the strategic direction of the site information security infrastructure; providing information security technical recommendations to site management; serving as a focal point for network security issues; and for evaluating systems and network security products in the site advanced networking lab. He is currently working on information security projects involving public key infrastructures (PKIs), virtual private networks (VPNs), advanced authentication techniques, network intrusion detection, and smartcards. In addition, Scott is also a member of the Owego Advanced Networking Independent Research and Development Team where he has spent the last four years researching topics in the fields of network management and information security. Prior to joining Lockheed Martin in 1992 Scott was responsible for various business application development efforts within GTE Corporation in Stamford, Connecticut. Jeremy Impson received his B.S. degree in Computer Science from Syracuse University in 1998. He has since been with Lockheed Martin Federal Systems in Owego, NY, where he is an Associate Network Engineer in the Advanced Technology Department. He is involved with R&D and system integration aspects of a wide range of advanced information technologies dealing with networking, telecommunications, information security, mobile computing, and Open Source software. |
| Eighth International Symposium on the Foundations of Software Engineering |
| Maintained by the Computer Science Web Team |