WOOT '09: 3rd USENIX Workshop on Offensive Technologies August 10, 2009 - I am not a member nor do I have any involvement in this whatsoever, so this is not spam.

WOOT '09 will be co-located with the 18th USENIX Se= curity Symposium (USENIX Security '09), which = will take place August 10–14, 2009.

Important Dates

• Submissions due: May 26, 2009, = 11:59 p.m. PDT
• Notification to authors: June 2= 9, 2009
• Electronic files due: July 14,= 2009

Workshop Organizers

Program Co-Chairs
Dan Boneh,= Stanford University
Alexander Sotirov, Independent Security Consultant

Program Committee
Dave Aitel, Immunity
Pedram Amini, TippingPoint
David Brumley, Carnegie Mellon University
Martin Casado, Nicira
David= Dagon, Georgia Institute of Technology
Chris Eagle, Naval Postgraduate School
Halvar Flake, Zynamics
Tal Garfinkel,= Stanford University and VMware
Alex Halderman, University of= Michigan
Trent Jaeger, Pennsylvania State University
Charl= ie Miller, Independent Security Evaluators
Matt Miller, Microsoft
Tim Newsham, iSEC Partners
Jon Oberheide, University of Michigan
Dug Song, Zattoo
Michal Zalewski= , Google

Overview=

Progress in the field of computer secu= rity is driven by a symbiotic relationship between our understandings of attack and= of defense. The USENIX Workshop on Offensive Technologies aims to bring togeth= er researchers and practitioners in system security to present research advanc= ing the understanding of attacks on operating systems, networks, and applicatio= ns.

Instructions for= Authors

Computer security is unique among syst= ems disciplines in that practical details matter and concrete case studies keep= the field grounded in practice. WOOT provides a forum for high-quality, peer-reviewed papers discussing tools and techniques for attack.

Submissions should reflect the state of the art in= offensive computer security technology—either surveying previously po= orly known areas or presenting entirely new attacks.

We are interested in work that could be presented a= t more traditional, academic security forums, as well as more applied work that in= forms the field about the state of security practice in offensive techniques.

A significant goal is producing published artifacts= that will inform future work in the field. Submissions will be peer-reviewed and= shepherded as appropriate.

Submission topics include:

• Vulnerability research (software auditing, rever= se engineering)
• Penetration testing
• Exploit techniques and automation
• Network-based attacks (routing, DNS, IDS/IPS/fir= ewall evasion)
• Reconnaissance (scanning, software, and hardware= fingerprinting)
• Malware design and implementation (rootkits, vir= uses, bots, worms)
• Denial-of-service attacks
• Web and database security
• Weaknesses in deployed systems (VoIP, telephony,= wireless, games)
• Practical cryptanalysis (hardware, DRM, etc.)

Workshop Format

The presenters will be authors of acce= pted position papers/presentations as well as invited guests. Each presenter wil= l have 25 minutes to present his or her idea. A limited number of grants are= available to assist presenters who might otherwise be unable to attend the= workshop. All papers will be available online to registered attendees prior= to the workshop and will be available online to everyone starting on August 10= , 2009.