Call for Papers
Special issue of "Software Practice & Experience"
Experiences with Computer and Network Security
Submission due: July 1, 1998
Guest editor: Gene Spafford   (spaf@cs.purdue.edu)
Contact the editor for submission details.

Later this year or early next year, there will be a special issue of the
journal "Software Practice & Experience," with Gene Spafford as the guest
editor; if there are enough articles, a second issue may also be published.
This special issue will be devoted to experiences with computer and network
security.

The purpose of Software- Practice & Experience is to convey the results of
practical experience (whether successful or not) that might benefit the
computing community. The key criterion for a paper is that it make a
contribution from which other persons engaged in software design and
implementation might benefit. Originality, although important, is
secondary, especially in cases where apparently well known techniques do
not appear in the readily available literature.

Papers describing both `systems' and `applications' software in any
computing environment are acceptable. Typical topics include software
design and implementation, case studies, studies describing the
evolution of software systems, critical appraisals of systems, and the
practical aspects of software engineering. Theoretical discussions can
be included, but should illuminate the practical aspects of the work,
or indicate directions that might lead to better practical systems.

This special issue is specifically devoted to issues of computer and
network security software.  We are seeking high-quality articles relating
to the above-mentioned themes.  This includes papers on at least the
following topics:
   * access control systems
   * auditing systems and analysis
   * misuse and instrusion detection systems
   * applications of cryptography
   * secure messaging systems
   * information protection systems
   * security of mobile code
   * security of browsers and related technology
   * security testing and assurance
   * firewall construction and testing
   * experiences with new security programming paradigms
   * development and experience with "hacking tools"
   * experiences with patching security flaws

Papers may be of any length, ranging from a short note (perhaps a page) to
a full treatment of a substantial software system (say 40 pages). To submit
a paper to this special issue of the journal, please submit 3 paper copies
of your paper, double-spaced, to:
	SP&E Special Issue Submissions
	c/o Prof. Eugene Spafford
	Department of Computer Sciences
	Purdue University
	West Lafayette, IN 47907-1398

Articles should be submitted when ready, and preferably by July 1, 1998 so
as to allow sufficient time for peer review and any required edits and
resubmission.  Expected publication of the issue will be December 1998.

If you are interested in being added to the list of potential reviewers for
this issue, or if you have questions concerning submissions, contact Spaf
at