[CFP] Security of Individual, State and Society: Challenges and Perspectives

                                                                            

Perm State University

Faculty of Law

The University of Louisville

Departments of Criminal Justice & Computer Engineering and Computer Science and

The Brandeis School of Law

A.M. Gorky Universal Library, Perm, Russian Federation

2016 International Symposium "Security of Individual, State and Society: Challenges and Perspectives"

SISS 2016

Call for Papers

June 1-Extended Abstract Due via www.reg-site.com

July 1 – Notification of Acceptance

September 1- Full Paper Due

October 11 – 12 – Conference

November 10 –Revised Paper for Publication Due

Perm State University (PSU) and the University of Louisville (U0L) are pleased to announce an International Symposium "Security of Individual, State and Society: Challenges and Perspectives" at Perm State University, Russian Federation on the 11^th and12th of October 2016.

Extended Abstracts are due 1 June 2016 with full papers due 1 September. Revised papers due for publication 10 November 2016; selected papers may also be published in the Journal of Digital Forensics, Security and Law.

The following research topics are included at the symposium:

·         Digital and Cyber security and the Smart City, Cybercrime and the Internet of Things

·         Transnational and Comparative Issues—Property and Privacy

·         Transnational Criminal Activities Mediated through cyber Communications, particularly Immigration and Human Trafficking offenses

·         Training and Management of the Law Enforcement for Responding to Cybercrime,

·         National Security: Economic and Legal Security 

·         Security of the City and the Citizens

·         Public Security

·         State Security

·         The relationship between state, public and personal safety, Activities to Ensure Security

·         Technology Security, Development, Production and Introduction of Modern Technical Means to Ensure Security

·         Prediction, Identification, Analysis and Assessment of Threats

·         State Policy and Strategic Planning in the Field of Security

·         Legal Regulation in the Field of Security

·         Complex Operational and Long-term Measures to Identify and Prevent Threats to Security

·         Localization and Neutralization of the Consequences of Threats to Security

·         Special Economic Measures to Ensure Security

·         Main Directions of Scientific Activity in the Field of Security

·         Financing of Expenses on Safety, Control over Pending of the Allocated Funds

·         International Cooperation to Ensure Security

·         Legal Regulation of Anti-terrorist Activities

·         International Terrorism

Abstracts of 30-minute workshops and 20-minute papers (no more than 700 words, excluding references) and virtual presentations are invited on any topic in the broad areas indicated above. All abstracts will be subject to a double-blind review process.

The main language of the conference will be English, but there will also be tracks of papers in Russian. Abstracts with keywords should be submitted electronically to

WWW.REG-SITE.COM , conference SISS 2016 and via email to symposiumlaw2016@yandex.ru

Forms of participation:  (presentation oral/poster report and publication of abstracts; oral presentation/poster presentation of abstracts without publication), virtual (online presentation), by correspondence (publication of abstracts and papers), also may participate as a listener. All participants will receive certificates of the symposium. The registration fee for any form of participation in the Symposium is $100 ($ 30 – for students).

Important Dates:

1. Due date of extended abstract (abstract + 700 words) – June 1, 2016

2. Notice of decision – July 1, 2016

3. Deadline to register for in-person or presentation via Skype (visa processing and invitation letter may take 35 to 60 days and may require expediter services to the Russian Embassy) – July 15, 2016

4. Due date of full paper camera-ready copy - format – September 1, 2016

5. Dates of conference - October 11-12, 2016

6. Date for revised final paper for publication – November 10, 2016

Additional information: pps64@mail.ru, polsvetlana@yandex.ru

michael.losavio@louisville.edu

symposiumlaw2016@yandex.ru

Read More

A Proposal for Cyber Peacekeeping (CPK)

After a year of collaborative effort we submitted a paper about Cyber Peacekeeping (CPK) to ICDF2C 2015 (http://d-forensics.org/) and have just learned about its acceptance.

In this work, we propose an initial definition and framework for Cyber Peacekeeping. The goal of the proposed framework is to provide a solid foundation for practical implementation of CPK, and points for future discussion of the subject. As one of reviewers noticed: “CPK could be performed under the auspices of some international organization, perhaps modeled on ITU IMPACT”. Although we have proposed some areas from practical implementation, we hope our work will contribute to the development of a real-world solution for a global challenge of safety and security in cyberspace.

Another reviewer keenly summarized that the proposed CPK framework with six goals, four roles and sixteen functions maps to three possible scenarios: No Conflict, During Conflict and After Conflict. Rightly so, we attempt to address not only ongoing conflicts but prevention of pre-conflict escalation as well as solutions for regaining normalcy after conflicts. We note that conflict aftermath is not usually considered, especially for cyber conflicts.

Practically, we propose a potential organizational structure of Cyber Peacekeeping to support its defined roles and functions with respect to short and long term goals. Some functions fulfill urgent actions whereas others can be fulfilled when participating parties reach an agreement (long term).

Through a case study of a notable conflict between China and Taiwan, examples of practical Cyber Peacekeeping are shown, as well as the roles that peacekeeping could have played in such conflicts.

Importantly, the reviewers suggested interesting feedback and directions for improvement, which we will certainly incorporate in our future research. Meanwhile, we are looking forward to discussing this topic with the community of researchers and practitioners online or at such events like ISCR 2015 (https://iscr.cyber.go.kr) and ICDF2C 2015 (http://d-forensics.org/). And stay tuned, we will announce about publication of our full paper in the fall.

Read More

Cybersecurity Tips for Business Travelers

I recently received an email from someone claiming to be from CNN, wanting to do a segment on cyber security for business travelers. They asked for some bullet points that tech-savvy travelers may be able to follow to protect themselves. I threw together some points that are common crime trends, or that I normally think about when travelling.

I am assuming the main concern is some type of hacking or data theft. I'm assuming some technical capability in my (general) recommendations below, and skipping some obvious pointers.

• Coordinate an OFFLINE authentication system with your secretary or work, and use this authentication token any time you are talking about money transfers or bank details. Common threat now - hackers know when you travel and use the confusion to defraud the company.
• The company should be running a VPN that works over ports 443 and/or port 80.
• Attempt to understand common cyber threats (and their cause) in the country - are you vulnerable to local attacks?
• Attempt to use systems that are NOT commonly used in the destination country. Target systems in Korea: Windows, IE, Android. Avoid these and your chances of being compromised are much lower. (Linux Live CD/USB is easy to use)
  
• Do you need to bring all of your work data with you? Can you copy only required documents to the system that you bring with you (threat minimization)? Wipe out the systems when you come back home.
• Same as above for phones / mobile devices.
  
• For business systems incl. phones, use full drive encryption and remote wipe capabilities (don't mess with location tracking services).
• Use a procedure for backing up all your data that always requires two-factor authentication - no remembered logins (if 'cloud-based').
• Be aware of how locals use credit cards. If they don't trust using cards in their country/city, you probably shouldn't either. In countries where point of sale (POS) attacks are trending, use cash.
  
• If possible (and trust-worthy) it may be better to use a local anti-virus while you are in the country.
• Try to avoid accessing sensitive information over the internet. If not using a VPN, prefer mobile broadband. If all else fails, at least make sure a local wireless connection is using encryption.
• Manually set your DNS to a trusted server.
  

These are some of the things I am thinking about on business trips abroad.

Cyber security abroad is really about common sense, and should not be that much different than cyber security at home. Try not to put sensitive information in risky situations, and if you have to, at least try to protect it (trusted VPNs, etc).

Photo by Yuri Samoiliv

Read More