IMPORTANT: the workshop is meant to be a true workshop, in which the actual program is fluid, and the emphasis is on interactivity and incubating new connections (both between people and across areas). We anticipate last-minute changes, and indeed may alter the program on the spot as discussion and opportunity suggests.
Tuesday, September 23, 2003 8:30 - 9:30 Breakfast and Registration 9:30 - 9:40 Opening remarks Brenda Latka, Associate Director of DIMACS 9:40 - 10:00 Welcome Attendee Introductions 10:00 - 12:00 Experiences with large-scale attacks A Large-scale View of Large-scale Attacks Sean Donalen, SBC Internet Services Infrastructure Attack Trends Craig Labovitz, Arbor Networks Attacks on services - unofficial perspectives from a CDN Attacks on services - unofficial perspectives from a large website Discussion 12:00 - 1:30 Lunch 1:30 - 3:00 DDoS Overview John Ioannidis, AT&T Labs - Research Defenses Angelos Keromytis, Columbia University Source address filtering Avi Freedman Discussion: is the problem still relevant? is traceback relevant? barriers to deploying solutions? 3:00 - 3:30 Break 3:30 - 5:00 Techniques Telescopes David Moore, UCSD Sampling techniques George Varghese, UCSD P2P techniques, large-scale coordination Joel Sandin, Stanford University Honeynets Dave Dittrich, University of Washington Open Mike (i.e., we'll call in advance for presentations here) Discussion 6:00 Dinner Wednesday, September 24, 2003 8:30 - 9:00 Breakfast and Registration 9:00 - 11:30 Worms Overview Stuart Staniford, Silicon Defense Diverse axes of scaling Dan Ellis, MITRE Modeling/detecting worm propagation Lixin Gao, University of Massachusetts Topological worm defenses Nick Weaver, UCB Break Pulsing attacks on routers Avi Freedman Auto-patching Angelos Keromytis, Columbia University Discussion 11:30 - 1:00 Lunch 1:00 - 2:30 Attacks on routing BGP attacks Avi Freedman Targeted link attacks Steve Bellovin, AT&T Labs - Research Authentication and robustness Alex Snoeren, UCSD Discussion 2:30 - 2:45 Break 2:45 - 4:00 Where do we need to go? Facilitated discussion Stefan Savage, UCSD