The Coq mailing list

[Tahina Ramananandro <tahina.ramananandro AT gmail.com>]

Hi everyone, and happy new year!

The 9th Workshop on Language-theoretic Security and Applications
(LangSec), affiliated with the IEEE Symposium on Security and Privacy,
solicits contributions of research papers (4-15 pages),
work-in-progress reports (4-10 pages), and ideas for panel discussions
related to the growing area of language-theoretic security.

Important Dates:
* Research paper submissions due: 15 Jan 2023, AOE
* Work-in-progress reports and panels submissions due: 5 Feb 2023, AOE
* Notification to authors: 27 Feb 2023
* Workshop date: 25 May 2023

Submission Page: https://easychair.org/conferences/?conf=langsec2023
Workshop Website (including a detailed call for papers):
https://langsec.org/spw23/

The LangSec workshop solicits contributions of research papers and
work-in-progress reports related to the growing area of
language–theoretic security. LangSec offers a connection between
fundamental Computer Science concepts (language theory, computability)
and the continued existence of software flaws.

Software that processes data such as documents, images, videos, and
messages is often vulnerable to maliciously crafted input data.
Language-theoretic security (LangSec) is a design and programming
philosophy that focuses on formally correct and verifiable input
handling throughout all phases of the software development lifecycle.
In doing so, it offers a practical method for assurance that software
is free from the most common types of security vulnerabilities, namely
those related to the incorrect parsing and interpretation of messages
between software components (packets, protocol messages, file formats,
function parameters, etc.). LangSec aims to:
1. Produce verifiable parsers, free of typical classes of ad-hoc
parsing bugs, based of unambiguous, formal language definitions;
2. Produce verifiable, composable implementations that ensure
equivalent (un)parsing of messages and rule out exploitable
differences in message interpretation between systems; and
3. Mitigate the common risks of ungoverned development by explicitly
exposing the processing dependencies on the parsed input.

A non-exhaustive list of topics of relevance to LangSec:
* formalization of vulnerabilities and exploits in terms of language theory
* inference of formal language specifications of data from samples
* generation of secure parsers from formal language specifications
* complexity hierarchy of verifying parser implementations
* science of protocol design: layering, fragmentation and re-assembly,
extensibility, etc.
* architectural constructs for enforcing limits on computational complexity
* empirical data on programming language features/programming styles
that affect bug introduction rates (e.g., syntactic redundancy)
* systems architectures and designs based on LangSec principles
* computer languages, file formats, and network protocols built on
LangSec principles
* re-engineering efforts of existing languages, formats, and protocols
to reduce computational power

Submissions should be in PDF file format and made via EasyChair.
Submissions must not be anonymized. The confidentiality of submissions
will be protected as is customary, but submissions with non-disclosure
agreements or forms attached will be returned without review.
Shepherding will be available for authors with less academic writing
experience.

Program Chairs:
* Sergey Bratus (Dartmouth College)
* Erik Poll (Radboud University)

Program Committee:
* Sofia Bekrar (Apple Inc.)
* Alexei Bulazel (Oracle Cloud Infrastructure)
* Mike Clark (Riverside Research)
* Jeremy Daily (Colorado State)
* Nathan Dautenhahn (Rice University)
* Nate Foster (Cornell)
* Bill Harris (Google)
* Xiaodong Jia ((Penn State)
* David Yu Liu (University of NY at Binghamton)
* Scott Moore (Galois Inc.)
* Meredith L. Patterson (Special Circumstances)
* Tahina Ramananandro (Microsoft)
* Brendan Saltaformaggio (Georgia Tech)
* Sean W. Smith (Dartmouth College)
* Prashast Srivastava (Purdue University)
* Gang (Gary) Tan (Penn State University)
* Julien Vanegue (Bloomberg)

Organizing Committee:
* Sergey Bratus (Dartmouth College)
* Michael E. Locasto (SRI)
* Meredith L. Patterson (Special Circumstances)
* Erik Poll (Radboud University Nijmegen)
* Gang (Gary) Tan (Penn State University)

Thank you in advance for your contributions!

Tahina