IEEE Security and CFP Privacy
IEEE Security and CFP Privacy
Attacking Systems...
Some security practitioners believe that the only way to know how to
protect a system against attack is to know how attacks really work. Such
people advocate teaching about attacks when building security expertise,
carrying out attacks as part of testing, and thinking and writing
creatively about attacks. Others feel that discussing, publishing, and
teaching attacks is irresponsible. Where do you stand?
This special issue is devoted to the idea of attacking systems in order to
better understand how to defend them. We're looking for a set of papers
exploring the following ideas:
- exploiting software
- attack categories: bugs and flaws
- worms, viruses, and malicious code as an attack vector
- attacking modern extensible systems: Java and .NET
- rootkits, injection vectors, and networked machines
- the politics of breaking systems
- teaching students to break systems (pros and cons)
- ethical hacking, red teaming, and penetration testing
- attack modeling
