(((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((


11th International Conference on Risks and Security of Internet and
Systems : CRiSIS 2016

September 5-7, Roscoff, Brittany, France

http://conferences.telecom-bretagne.eu/crisis/2016/

(((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((


Call for Papers
The International Conference on Risks and Security of Internet and
Systems 2016 will be the 11th in a series dedicated to security issues
in Internet-related applications, networks and systems. Internet has
become essential for the exchange of information between user groups and
organizations from different backgrounds and with different needs and
objectives. These users are exposed to increasing risks regarding
security and privacy, due to the development of more and more
sophisticated online attacks, the growth of Cyber Crime, etc. Attackers
nowadays do not lack motivation and they are more and more experienced.
To make matters worse, for performing attacks have become easily
accessible. Moreover, the increasing complexity as well as the
immaturity of new technologies such as pervasive, mobile and wireless
devices and networks, raise new security challenges.
In this context, new security mechanisms and techniques should be
deployed to achieve an assurance level acceptable for critical domains
such as transportation, health, defence, banking, critical
infrastructures, embedded systems and networks, avionics systems, etc.
The CRiSIS conference offers a remarkable forum for computer and network
security actors from industry, academia and government to meet, exchange
ideas and present recent advances on Internet-related security threats
and vulnerabilities, and on the solutions that are needed to counter them.

Scope
The topics addressed by CRiSIS range from the analysis of risks, attacks
to networks and system survivability, to security models, security
mechanisms and privacy enhancing technologies. The authors are invited
to submit research results as well as practical experiment or deployment
reports. Industrial papers about applications or case studies are also
welcomed in different domains (e.g., telemedicine, banking,
e-government, e-learning, e-commerce, critical infrastructures, mobile
networks, embedded applications, etc.). The list of topics includes but
is not limited to:

• Analysis and management of risk
• Attacks and defenses
• Attack data acquisition and network monitoring
• Cryptography, Biometrics, Watermarking
• Dependability and fault tolerance of Internet applications
• Distributed systems security
• Embedded system security
• Empirical methods for security and risk evaluation
• Hardware-based security and Physical security
• Intrusion detection and Prevention systems
• Organizational, ethical and legal issues
• Privacy protection and anonymization
• Risk-aware access and usage control
• Security and risk assessment
• Security and risks metrics
• Security and dependability of operating systems
• Security and safety of critical infrastructures
• Security and privacy of peer-to-peer system
• Security and privacy of wireless networks
• Security models and security policies
• Security of new generation networks, security of VoIP and multimedia
• Security of e-commerce, electronic voting and database systems
• Security of social networks
• Security des systèmes industriels
• Smartphone security and privacy
• Traceability, metrology and forensics
• Trust management
• Use of smart cards and personal devices for Internet applications
• Web and cloud security

Paper submission
Submitted papers must not substantially overlap with papers that have
been published or that are simultaneously submitted to a journal or a
conference with proceedings. Papers must be written in English and must
be submitted electronically in PDF format.

The papers that will be selected for presentation at the conference will
be included in post-proceedings published by Springer in the Lecture
Notes in Computer Science (LNCS) series (prior to publication the papers
should be revised according to the review comments). Pre-proceedings
will appear at the time of the conference.

Maximum paper length will be 16 printed pages for full papers or 6 pages
for short papers, in LNCS style
(http://www.springer.de/comp/lncs/authors.html). Authors of accepted
papers must guarantee that their papers will be presented at the
conference. All paper submissions will be handled through the Easy Chair
conference management system:
https://easychair.org/conferences/?conf=crisis2016.

Call for Tutorials
We solicit tutorials on state-of-the-art technologies relevant to the
conference themes. We are particularly interested in tutorials that
foster knowledge exchange among the different research communities
present at the conference. The intended length of each tutorial is 2 to
3 hours.

A tutorial proposal should include a brief summary and outline, specific
goals and objectives, the intended audience and the expected background
of the audience as well as a biographical sketch of the presenter(s).
The length of tutorial proposals should not exceed 5 pages.

Tutorial proposals should be submitted before June 20, 2016 to the
tutorial program co-chairs
Esma Aimeur and Fabrizio Biondi :
fabriziodot)biondi(at)inria(dot)fr
esma(dot)aimeur(at)iro(dot)umontreal(dot)ca

Important Dates
- Submission deadline: June 29th
- Notification to Authors: July 10th
- Camera Ready: July 20th

Organization

General Chairs
Frédéric Cuppens, IMT TELECOM-Bretagne, France
Axel Lagay, INRIA, France

PC Chairs
Nora Cuppens, IMT TELECOM Bretagne, France
Jean-Louis Lanet, LHS Rennes, France

Publicity Chairs
Hélène Le Bouder, INRIA, France
Said Oulmakhzoune, TELECOM Bretagne, France

Local organization Chair
Ghislaine Le Gall, TELECOM Bretagne, France