Layered Assurance Workshop (LAW)

CALL FOR PAPERS

The Ninth Layered Assurance Workshop (LAW)
7--8 December 2015
Los Angeles, California

The LAW Organizing Committee in cooperation with Applied Computer Security Associates
is pleased to announce that LAW 2015 will again be held as an affiliated workshop of the Annual
Computer Security Applications Conference (ACSAC).

LAW is a unique opportunity for interchange on the topic of compositional (or modular) assurance. It is founded on the bold proposition that it is possible to build assured systems from compositions of previously assured components, while being able to derive the system level properties (e.g., safety & security) systematically from the properties of the components. LAW spans the theoretical, engineering, and certification challenges to be met in making compositional assurance for such systems a reality.

We say "layered" assurance to encompass diverse manifestations of combined assurance, including composition (of assured components), incremental certification (incremental cost for incremental change), abstraction layers (building upon assurance of lower layers), and polymorphism (common assurance of variants, such as among members of a product line).

Contributed Papers

LAW solicits contributed papers on topics of interest to LAW participants. Contributors are encouraged to
consider topics relating ACSAC's theme of Security and Privacy in the Internet of Things.

TOPICS OF INTEREST for LAW contributed papers:

The workshop theme and primary topic of interest is: Compositional Trustworthiness.
Other topics of interest include:

predictions and speculations on the future of assurance
new application domains with emerging need for assurance
assurance for cyber-physical systems (CPS) and the Internet of Things (IoT) / Internet of Everything (IoE)
theoretical foundations for compositional and incremental assurance
compositional and incremental certification
modular assurance cases
case studies and challenges from diverse application domains (e.g. aerospace, critical infrastructures, automotive, medical, defense, mobile)
combining methods of assurance (multi-legged assurance)
component-based and compositional interpretations of hazards, verification, and assurance arguments
composability of component properties, to achieve system security and safety
compositional verification
examples of assurance cases for security, safety, correctness
metrics for measuring safety and security
standards for assessing assurance of safety and security properties
processes, procedures, tools that would simplify assurance
arguments for product families
role of architecture and the relationship of architecture to assurance of system properties
theory, tools and techniques to support compositional and incremental assurance
impediments to compositional assurance, such as properties that defy composition or architectures that thwart compositional assurance
legal aspects and politics of assurance
argumentation
bridging technical assurance measures to human confidence and trust
assurance and resilience
requirements assurance

The preceding list of topics is not intended to be exhaustive. Submissions are encouraged
on any topics that prospective authors consider relevant to the Layered Assurance Workshop.

Panels

Peter G. Neumann of SRI International will again organize and chair lively and thought-provoking panel
sessions. Attendees willing to participate in a panel, or wanting to submit a proposal to organize and chair
a panel session should contact Peter Neumann at neumann@csl.sri.com. Panel proposals should include
a list of qualified likely panel participants.

Works-in-Progress

In addition to distinguished invited speakers, contributed papers and panels, the LAW program will.include a Work-in-Progress (WIP) session, to provide an opportunity to present relevant ongoing.work without writing a full paper. In the spirit of a workshop, we would really like to encourage LAW.participants to share their ongoing work. The WIP session provides the opportunity to present.in a format that is more structured than off-the-cuff, but without with the formality of a contributed.paper, and potentially with more time for questions and discussion.

WIP session slots will be a maximum of 20 minutes in length, including presentation, questions and.discussion It is expected that a pdf of the presentation will be contributed to the LAW proceedings..Please submit your proposals for Work-in-Progress presentations to the LAW Program Chair,.Gabriela Ciocarlie at gabriela.ciocarlie@sri.com by October 1, 2015. Proposals should consist of a.one page abstract. Regular contributed paper submissions that are not mature enough for acceptance.as a contributed paper may be resubmitted for consideration as a WIP. Notification will be made by.October 15. Presentation pdfs are due December 1.

IMPORTANT DATES

Contributed paper submissions due: September 8, 2015
Notification of paper acceptance/rejection: September 30, 2015
Camera-ready papers due: Oct. 15, 2015

WIP presentation proposals due: October 1, 2015
WIP proposal acceptance/rejection: October 15, 2015
WIP presentations due: December 1, 2015

LAW will be held: 7--8 December 2015

INSTRUCTIONS FOR SUBMISSION OF PAPERS

Since LAW is a workshop rather than a conference or symposium, submissions do not
have to be entirely novel, but they do have to be interesting.
We request that submitted papers be a minimum of 5 pages and a maximum of 10 pages (2500 - 5000
words). Papers exceeding the limit will be truncated for review.

Please ensure that your submission is a PDF file (including all references and appendices)
generated according to the ACM instructions at http://www.acm.org/sigs/publications/proceedings-templates,
using the template Option 2 "WITH permission block". Reviewers are not required to read the appendices.

To submit a paper, please go to https://www.acsac.org/2015/workshops/law/openconf/

PRESENTATIONS AT THE WORKSHOP

Authors are expected to give a 30 minute presentation of their paper at the Workshop,
and are requested to provide their presentation slides at the time of the workshop for
publication on the LAW web page.

We will operate under a "No Paper, No Podium" and "No Podium, No Paper" policy.
As we now publish an integrated proceedings we must have your final paper by the Oct. 15, 2015 deadline.

WORKSHOP REGISTRATION

Speakers with accepted papers will be required to register for LAW. Registration may be
done at the ACSAC 2015 web site, http://www.acsac.org . One need not register for ACSAC
to register for LAW.

PROCEEDINGS

LAW will not publish paper proceedings, however, there will be a single proceedings volume
(pdf) with serial page numbering to facilitate citations. Proceedings and speakers' presentation
slides will be published on the LAW 2015 web page the week that LAW is held and will be
archived there indefinitely. By submitting a paper an author agrees to online publication
of the final version of the paper and presentation material if the paper is accepted.

PROGRAM COMMITTEE

Gabriela F. Ciocarlie, SRI International
Rance J. DeLong, consultant
Elizabeth Leonard, Naval Research Laboratory
Peter G. Neumann, SRI International
Gordon Uchenick, Coverity

SPONSORSHIP

LAW welcomes corporate sponsorship. Interested enterprises please contact rance.delong@gmail.com.