Monday, October 23, 2006

• Comparing the Costs of Public Key Authentication Infrastructures
  Patroklos Argyroudis (University of Dublin, Trinity College), Robert McAdoo (University of Dublin, Trinity College), Donal O'Mahony (University of Dublin, Trinity College)
• Economics of Internet Security Outsourcing: Simulation Results Based on the Schneier Model
  William Yurcik (University of Illinois), Wen Ding (University of Illinois)
• The Effect of Information Security Incidents on Corporate Values in the Japanese Stock Market
  Masaki Ishiguro (Mitsubishi Research Institute), Hideyuki Tanaka (The Graduate School of Interdisciplinary Information Studies), Kanta Matsuura (Institute of Industrial Science, The University of Tokyo), Ichiro Murase (Mitsubishi Research Institute)

• Toward A Dynamic Modeling Of The Vulnerability Black Market
  Jaziar Radianti (Agder University College), Jose. J. Gonzalez (Agder University College)
• Toward One Strong National Breach Disclosure Law - Justification and Requirements
  William Yurcik (University of Illinois), Ragib Hasan (University of Illinois at Urbana-Champaign)
• Using Self-interest to Prevent Malice; Fixing the Denial of Service Flaw of the Internet
  Bob Briscoe (BT & UCL)

Tuesday, October 24, 2006

• A Closer Look at Attack Clustering
  Rainer Böhme (TU Dresden), Gaurav Kataria (Carnegie Mellon University)
• Predictive Modelling for Security Operations Economics
  Mike Yearworth (HP Labs), Brian Monahan (HP Labs), David Pym (HP Labs)
• Assessing Trusted Network Access Control Cost-Benefit Factors
  Susmit Panjwani (Deviant Intelligence LLC), Stephanie Tan (IBM)

• The Statistical Value of Information
  Luther Martin (Voltage Security)
• On the Economic Placement of Monitors in Router Level Network Topologies
  Yongping Tang (Iowa State University), Thomas E. Daniels (Iowa State University)

• An Example Collaborative Exercise for Decision Making in Investment in Cyber Security
  Jonathan Crawford (University of Virginia), Kenneth G. Crowther (University of Virginia), Barry Horowitz (University of Virginia), James Lambert (University of Virginia)
• Securing Our Data Storage Infrastructures
  Bob Mungamuru (Stanford University), Hector Garcia-Molina (Stanford University)
• A Neo-institutional Perspective on Cyber Attacks
  Nir Kshetri (University of North Carolina--Greensboro)
• Beyond Media Hype: Empirical Analysis of Disclosed Privacy Breaches 2005-2006 and a DataSet/Database Foundation for Future Work
  Ragib Hasan (University of Illinois at Urbana-Champaign), William Yurcik (University of Illinois)
• Securing the Process of Insurance Application
  Vincent Wolff-Marting (University of Leipzig), André Köhler (University of Leipzig), Volker Gruhn (University of Leipzig)
• Evaluation of Information Security Investment Portfolios: A Probabilistic Approach
  Tae-Sung Kim (Chungbuk National University), Chandrasekhar Subramaniam (University of North Carolina at Charlotte), Sungjune Park (University of North Carolina at Charlotte), Ram Kumar (University of North Carolina at Charlotte)
• Direct measurement of spam zombie activity in a residential broadband network
  Geoff Bennett (StreamShield), Brian Webb (BT Retail)