21st National Information Systems Security Conference

21st NISSC Proceedings: Panel Sessions

October 6-9, 1998: Hyatt Regency -- Crystal City, Virginia

Just a friendly reminder ALL of these panel session files you see on this page are in .pdf format. These files can be viewed by using Adobe Acrobat Reader. See previous web page to download a free trial version of Adobe Reader if you have not done so.

**PANEL SESSIONS**
Assurance / Criteria / Testing : Track A
Common Criteria Version 2.0 - Launching the International Standard (.pdf) (7,016 bytes / 6 KB) Co-Chair: Gene Troy, National Institute of Standards and Technology Co-Chair: Murray Donaldson, Communications-Electronics Security Group, UK Panelists: Shukri Wakid, National Institute of Standards and Technology, United States Michael Jacobs, National Security Agency, United States Jean-Louis Desvignes, Central Information Systems Security Service, France Dirk Henze, German Information Security Agency, Germany Gary O'Bright, Communications Security Establishment, Canada Nick Plasier, Netherlands National Communications-Electronics Security Agency, Netherlands Andrew W. Saunders, Communications-Electronics Security Group, United Kingdom The National Information Assurance Partnership: One Year Later (.pdf) (9,978 bytes / 9 KB) Chair: Kris Britton, National Security Agency Panelists: Linda Gilmore, SPARTA, Inc. Bernard Ramsey, Federal Aviation Administration Marshall Abrams, MITRE Corporation The NIAP Common Criteria Evaluation and Validation Scheme - The Future of Commercial Security Testing and Evaluation (.pdf) (6,560 bytes / 6 KB) Chair: Ron Ross, National Institute of Standards and Technology Panelists: Robin Medlock, Mitretek Systems Jeffrey Horlick, National Institute of Standards and Technology The Trust Technology Assessment Program: "Transition to Commercial Evaluations" (.pdf) (5,707 bytes / 5 KB) Chair: Thomas E. Anderson, National Security Agency Panelists: Douglas J. Landoll, Arca Systems, Incorporated Peter Sergent, CoAct, Incorporated Kimberly Kaplan, Computer Sciences Corporation James Reynolds, Cygnacom Solutions, Incorporated Edward McLaughlin, National Software Testing Laboratories Robert Williamson, Science Application International Corporation Trust Technology Assessment Program (TTAP) Evaluation: A Worked Example (.pdf) (14,133 bytes / 13 KB) Chair: Douglas J. Landoll, Arca Systems, Inc. Panelists: Tom Anderson, National Security Agency Dinesh Vakharia, IBM Corporation Paul Bicknell, The Mitre Corporation Common Criteria Protection - Addressing Diverse Constituencies (.pdf) (6,776 bytes / 6 KB) Chair: Gary Stoneburner, National Institute of Standards and Technology Viewpoints: *Firewalls PPs:* Wayne Jansen, National Institute of Standards and Technology *DBMS PPs:* Jeff DeMello, Oracle *RBAC PPs:* R. Chandramouli, National Institute of Standards and Technology *PKI STs:* Marc Laroche, Entrust Technologies Security Assurance: Does Anybody Care? (.pdf) (496,135 bytes / 484 KB) Chair: Stu Katzke, National Institute of Standards and Technology Viewpoints: S. Chokhani, Cygnacom Solutions J. Schindler, Hewlett Packard D. Webb, SRI Trusted Product Evaluation Program: "End of an Era" (.pdf) (5,538 bytes / 5 KB) Chair: Keith Brewster, National Security Agency Panelists: Tom Anderson, National Security Agency Howard Holm, National Security Agency Janine Pederson, National Security Agency Alternative Assurances (.pdf) (26,252 bytes / 25 KB) Chair: Mary D. Schanken, National Security Agency Panelists: Christina R. Cheetham, National Security Agency LT. Renell D. Edwards, National Security Agency Charles G. Menk III, National Security Agency Todd D. Schucker, National Security Agency All 9 panel sessions listed above in the Assurance / Criteria / Testing section (.zip) (212,031 bytes / 208 KB) are zipped and available to download.
Education : Track B
An Architecture for Managing Security in Large Complex Enterprises (.pdf) (4,995 bytes / 4 KB) Chair: Barry W. Keyes, Unisys Corporation Security Concepts for Distributed Component Systems (.pdf) (969,402 bytes / 946 KB) Chair: Walt Smith, Tekna, Inc. Practical Cryptography: Privacy for Business and E-commerce (.pdf) (446,130 bytes / 435 KB) Chair: Frederick M. Avolio, Independent Security Consultant Key Recovery (.pdf) (254,694 bytes / 248 KB) Chair: Dr. Sarbari Gupta, CygnaCom Solutions, Inc. Systems Security Engineering Capability Maturity Model (.pdf) (244,071 bytes / 238 KB) Chair: Karen Ferraiolo, Arca Systems, Inc. INFOSEC UPDATE: A Review of the Year's Key Developments (.pdf) (5,232 bytes / 5 KB) Co-Chair: Michael E. Kabay, CISSP, ICSA, Inc. Co-Chair: David M. Kennedy, CISSP, ICSA, Inc. All 6 panel sessions listed above in the Education section (.zip) (1,390,774 bytes / 1,359 KB) are zipped and available to download.
Electronic Commerce : Track C
The Electronic Commerce Landscape (.pdf) (9,443 bytes / 9 KB) Chair: Anish Bhimani, Global Integrity Corporation Panelists: Art Goldberg, Entegrity Solutions, Inc. Building "Industrial Strength" (High Assurance) Dynamic Commerce Systems - A Multi-Disciplinary View from the Financial Services Industry Perspective (.pdf) (6,418 bytes / 6 KB) Chair: Kawika Daguio, American Bankers Association Smart Cards: Tools for Security and Convenience (.pdf) (12,938 bytes / 12 KB) Chair: Karen Silberman, Smart Card Forum Panelists: Thomas Gregg, 3-G International Gilles Lisimaque, Gemplus Corporation The Emerging Public Key Infrastructure: Standards and Trends (.pdf) (13,005 bytes / 12 KB) Chair: Anish Bhimani, Global Integrity Corporation Panelists: David Solo, Citicorp Charles Blauner, J.P. Morgan Securing the Extended Enterprise in an Electronic World (.pdf) (17,693 bytes / 17 KB) Chair: Joe Pato, Hewlett Packard Panelists: Karen F. Worstell, Stanford Research Institute Consulting Taher Elgamal, VeriGuard April T. Brake, Hewlett Packard All 5 panel sessions listed above in the Electronic Commerce section (.zip) (22,669 bytes / 23 KB) are zipped and available to download.
Internet : Track D
Anti-Virus Strategies - Preventing an Epidemic (.pdf) (18,634 bytes / 18 KB) Chair: Christine M. Orshesky, Telos Corporation Panelists: Jimmy Kuo, Network Associates Mark Jesmer, Federal Bureau of Investigation Donald Phipps, Kaiser Permanente Erika Langerman, The Joint Staff, Pentagon Do Attack / Defend Exercises Belong in the Classroom? (.pdf) (9,843 bytes / 9 KB) Chair: Deborah A. Frincke, University of Idaho Panelists: Matt Bishop, University of California at Davis Cynthia Irvine, Naval Postgraduate School Ira Winkler, Information Security Advisors Group Derek Simmel, CERT Jim Davis, Iowa State University Willis Marti, Texas A & M University Public Networks for Private Access (.pdf) (157,453 bytes / 153 KB) Chair: Tina Bird, Secure Network Systems Panelists: Fred Chase, MITRE Tom Gilbert, Blue Ridge Networks Stacey Lum, InfoExpress Roy Pereira, TimeStep Corporation Issues and Challenges in Implementing Ipsec (.pdf) (17,938 bytes / 17 KB) Chair: Steve Kent, GTE Internetworking Panelists: Cheryl Madson, CISCO Systems, Inc. Naganand Dormaswamthy, Bay Networks Roy Pereira, TimeStep Corporation All 4 panel sessions listed above in the Internet section (.zip) (109,711 bytes / 108 KB) are zipped and available to download.
Policy / Administration / Management / Operations : Track E
International Information Security Solutions: Successes, Failures, and Solutions (.pdf) (17,115 bytes / 16 KB) Chair: Jim Litchko, Integrated Management Services, Inc. Panelists: Howard E. Glavin, Jr., CSX Technologies Tim Maulehue, Carib F/X, Ltd. Loreto Remoraca, Jr., Telos International Systems, ASIA Certification and Accreditation - A Worldwide View (.pdf) (30,280 bytes / 29 KB) Chair: Penny Klein, DISA Viewpoints: *Lessons Learned from Application of the DITSCAP with U.S. Federal Agencies* Barry C. Stauffer, CORBETT Technologies, Inc. A View of the DoD Intelligence Community Accreditation Support Team (DICAST) C&A Support and Its Role with the DITSCAP Jack Torak, CIA The National Security Telecommunications and Information Systems Security Committee (NSTISSC) Work on a National C&A Standard LtCol. Mark Loepker, National Security Agency *An Overview and Status of the NATO Approach to a C&A Process* David Murphy, NATO Headquarters *Information Assurance, C&A and INFOSEC Awareness Tools* Jack Eller, DISA FIPS 140-1 Encryption Requirements: Cryptographic Module Validation Program (.pdf) (6,511 bytes / 6 KB) Chair: Annabelle Lee, National Institute of Standards and Technology Panelists: Laurie Mack, Communications Security Establishment, Canada Ray Snouffer, National Institute of Standards and Technology Access Certificates for Electronic Services (.pdf) (15,849 bytes / 15 KB) Chair: Judith A. Spencer, General Services Administration Panelists: Stanley J. Choffrey, General Services Administration George Datesman, Mitretek Systems David Temoshok, General Services Administration Lessons Learned in Establishing a Virtual Computer Incident Response Capability (.pdf) (14,690 bytes / 14 KB) Chair: Marianne Swanson, National Institute of Standards and Technology Viewpoints: *Lessons Learned - Communications, Coordination, and Cooperation* Kathy Fithen, CERT/CC, Carnegie Mellon University *Lessons Learned in Establishing and Incident Handling Capability* Marianne Swanson, National Insitute of Standards and Technology *Federal Computer Incident Response Capability (FedCIRC)* David Adler, General Services Administration Critical Security Issues - How to Meet the Challenges (.pdf) (8,961 bytes / 8 KB) Chair: Anne F. Thomson Reed, Department of Agriculture Panelists: Mark A. Boster, Department of Justice Daryl W. White, Department of Interior Dr. David Nelson, NASA DoD Information Security Projections: The Service PM Perspective (.pdf) (9,829 bytes / 9 KB) Chair: Jim Litchko, Integrated Management Services, Inc. Panelists: Colonel Mike Brown, U.S. Army Captain Dan Galik, U.S. Navy Lt. Colonel Don Solano, U.S. Air Force All 7 panel sessions listed above in the Policy / Administration / Management / Operations section (.zip) (46,066 bytes / 46 KB) are zipped and available to download.
Research and Development : Track F
Improving Networked Information System Trustworthiness: A Research Agenda (.pdf) (9,957 bytes / 9 KB) Chair: Fred B. Schneider, Professor, Cornell University Viewpoints: *Introduction to "Trust in Cyberspace"* Fred B. Schneider, Professor, Cornell University *Networked Trustworthiness: The Public Telephone Network and the Internet* Steven M. Bellovin, AT&T Laboratories *Software and Architecture Issues* John C. Knight, University of Virginia *Networked Information Systems and Security* Stephen T. Kent, BBN Corporation *Economic and Public Policy Context for Trustworthiness* Frank B. Schneider, Professor, Cornell University Biomimcry to Protect the Global Information Infrastructure (.pdf) (7,384 bytes / 7 KB) Chair: Hilary Hosmer, Data Security, Inc. Panelists: Abigail Hafer, Curry College Ruth Nelson, Information System Security The Future of Multi-Level Secure (MLS) Information Systems (.pdf) (44,456 bytes / 43 KB) Chair: John Campbell, National Security Agency Panelists: Jim Williams, Booz-Allen & Hamilton, Inc. Viewpoints: *New Direction for Multi-Level Secure Information Systems* Tim Ehrsam, Oracle Corporation *The Future of MLS Information Systems* Mario Tinto, The Aerospace Corporation All 3 panel sessions listed above in the Research and Development section (.zip) (21,635 bytes / 21 KB) are zipped and available to download.
Future Issues : Track G
Practical Experiences Implementing a Scheme for Digital Signature (.pdf) (19,876 bytes / 19 KB) Chair: Klaus J. Keus, GISA/BSI, Germany Viewpoints: *The German Digital Signature Bill: Pratical and Technical Implications* Dr. O.E. Liebetrau, Bundesamt fur Sicherheit in der Informationstechnik, Germany *A Certification Authority's Position and Statement* P. Mertes, Deutsche Telekom AG, GermanyOracle Evaluation and Confirmation of Products and Security Concepts: Requirements, Problems and Solutions: Evaluation and Confirmation of Smart Cards for Digital Signatures - Special Facets in the Debis Spectrum of SigG/V-Specific Services Dr. H.R. Baader, debis IT-Security Services, Germany *Examination and Confirmation Bodies in the German Digital Signature Act* Dr. Ernst-Herman Gruschwitz, TUEV Information Technology GmbH, Germany Encryption Key Recovery: Off the Launch Pad (.pdf) (359,543 bytes / 351 KB) Chair: Elaine Barker, National Institute of Standards and Technology Panelists: Robert Frith, Motorola, Key Recovery Alliance Richard Guida, Key Recovery Demonstration Project Dr. Stephen T. Kent, BBN A View From the Trenches: Leveraging Security Technology in the Networked Client/Server Environment (.pdf) (17,984 bytes / 17 KB) Chair: G. Mark Hardy, AXENT Technologies, Inc. Commercial Network Intrusion Detection & Auditing Products: Installation, Integration, & Use from the Security Professional's Prospective (.pdf) (7,203 bytes / 7 KB) Chair: Jim Codespote, National Security Agency The Secret and Below Interoperability (SABI) Process - Assessing Community Risk (.pdf) (15,928 bytes / 15 KB) Chair: LtCol Mark Loepker, National Security Agency Panelists: Curtis Dukes, National Security Agency Charles Schreiner, National Security Agency Willard Ukenholz, National Security Agency Dallas Pearson, National Security Agency Jack Eller, Defense Information Systems Agency Report of the 1998 Annual Meeting of the National Colloquium for Information Systems Security Education (NCISSE) (.pdf) (37,397 bytes / 36 KB) Chair: Charles Reynolds, James Madison University All 6 panel sessions listed above in the Future Issues section (.zip) (161,494 bytes / 158 KB) are zipped and available to download.

Send your comments to webmaster-csrc@nist.rip