LSEC - Leaders in Security

8th European Workshop on Public Key Infrastructures, Services and Applications

EuroPKI’11 will be the eighth event in the EuroPKI workshop series and will focus on all research aspects of Public Key Services, Applications and Infrastructures. Previous EuroPKI workshops were held in Samos (EuroPKI’04), Kent (EuroPKI’05), Torino (EuroPKI’06), Mallorca (EuroPKI’07), Trondheim (EuroPKI’08), Pisa (EuroPKI’09), and Athens (EuroPKI’10).

EuroPKI’11 will be co-located with ESORICS 2011 in Leuven, Belgium.

Preliminary Program Outline

For more information, please visit the Europki pages .

A number of academic papers have been submitted and accepted as well as a couple of keynotes and keynote speakers.
For this year’s activity, LSEC is supporting Europki to the business and research communities by adding a couple of business oriented talks.

Keynotes

We are pleased to announce that the keynote speakers at the event will be:

Chris J. Mitchell

Title: New architectures for identity management - unifying security infrastructures

Abstract: In recent years a large number of identity management systems have been proposed. Unfortunately, although these systems offer the possibility of significantly improving user security, they have not been widely adopted, typically because the cost of adoption is too high for the involved parties. One major problem is that each such system requires the establishment of its own supporting infrastructure (e.g. a PKI), and all participants must adopt the associated protocols to make use of this infrastructure. This creates major barriers to interoperation and adoption. In this talk we consider the problem of designing identity management systems which enable security infrastructures to be unified in a simple and low cost way, and which require minimal changes to the involved parties. This involves designing combinations of security protocols and client machine software architectures that support secure identity management protocols in ways that offer simple and low cost migration paths.

Peter Gutmann

Title: PKI as Part of an Integrated Risk Management Strategy for Web Security

Abstract: In the real world, risk is never binary but always comes in shades of grey. When security systems treat risk as a purely boolean process, they’re prone to failure because the quantisation that’s required in order to produce a boolean result has to over- or under-estimate the actual risk. What’s worse, if an all-or-nothing system like this fails, it fails completely, with no fallback position available to catch errors. Drawing on four decades of experience with security design for the built environment (buildings and houses) known as crime prevention through environmental design (CPTED), this talk looks at how CPTED is applied in practice and, using browser PKI as the best-known example of large-scale certificate use, examines certificates as part of a CPTED-style risk-mitigation system that isn’t prone to all-or-nothing failures and that neatly integrates concepts like EV vs. DV vs. OV and OCSP vs. non-checked certificates into the risk-assessment process, as well as dealing with the too-big-to-fail problem of trusted browser CAs.

Olivier Pereira

Title: Running Mixnet-Based Elections with Helios

Abstract: TBA

Practical details

Leuven, September 15th & 16th.
Business program on Thursday afternoon, following the keynote by Chris Mitchell and lunch.

To confirm your registration as LSEC Member or affiliate, please send your contact details to europki @ lsec.be.

De Nieuwe Valk
For more information and the downloadable program, please visit the Europki 2011 website