Opening the Information Economy: IEEE International Professional Communication Conference 2008

Call for Panel and Paper Proposals: IEEE International Professional Communication Conference 2008 (IPCC 2008)

Conference Theme: Opening the Information Economy

Conference Location: Concordia University, Montréal, Canada

Conference Dates: July 13-16, 2008

The information economy is based on the collection and the exchange of data and ideas. We all either contribute to or use materials from the information economy in most aspects of our everyday lives. As a result, the information economy exists as an environment in which we are all contributors and consumers. Within this system, effective communication is essential to success, allowing individuals to contribute ideas and information effectively and to make efficient use of the goods and services. Few of us, however, understand all of the nuances of the information economy or the communication factors that affect its operations.

This conference seeks to examine or to “open” this economic model by examining the connections between communication practices and the products, practices, and services that constitute the information economy. The objective of such an examination will be to help attendees better understand and participate in the information economy as both contributors and consumers.

The conference will take place on the campus of Concordia University in Montréal, Canada and will consist of paper presentations and panel discussions that focus on various communication, design, social, and cultural aspects of the information economy.

POSSIBLE TOPIC AREAS
Suggested topic areas include but are not limited to the following:

• Establishing and assessing the value of knowledge work and knowledge products

• Information design, usability, and accessibility

• Virtual teams, online collaboration, and distributed models of work

• Cross-cultural communication, globalization, outsourcing, translation, and localization

• Legal policies and social issues related to the information economy

• Media selection and multimodality

• The role of and perspectives on teaching and training within the information economy

• Content management, open source software, single sourcing, and XML

PROPOSAL SUBMISSION PROCESS AND SUBMISSION DATES Send 1-2 page (250-500 word) proposals to IPCC2008@gmail.com by

• 15 October 2007 (deadline for submissions to be considered for early
acceptance)

• 15 December 2007 (deadline for regular submissions)

UAE cyber crimes law

 UAE cyber crimes law

04/30/2007 10:37 AM | Gulf News Report

Abu Dhabi: President His Highness Shaikh Khalifa Bin Zayed Al Nahyan has issued a federal law on combating cyber crimes.

* Law No.2 of 2006, issued last month, includes 29 articles, and shall take effect from the date of its issuance, and is to be published in the official gazette.
* Article No.2 considers any intentional act resulting in abolishing, destroying or revealing secrets or republishing personal or official information, as a crime. It says anyone convicted of logging onto information website or system shall be punished with jail term, or fine, or both. If the act resulted in abolishing, destroying, or revealing, changing or republishing information, he/she shall be sentenced to no less than six months in jail and be fined, or both. If such information are personal, a fine of not less than Dh10, 000 shall be imposed, and a jail term of not less than one year shall be handed out to the convict, or both punishments.
* The law also reads that anyone convicted of stimulating a male or female to commit adultery or prostitution via the Internet will be jailed up to five years and fined.
* Anyone convicted of abusing holy shrines or religious rituals or insulting them or inciting others to do so, shall be sentenced to five years in jail and be fined.
* Anyone convicted of opposing the Islamic religion will be jailed up to seven years. Anyone convicted of transcending family principles and values shall be jailed for one year and fined Dh50, 000. Anyone convicted of setting up a website for groups promoting programmes in breach of public decency and order shall be sentenced to five years in jail.
* Article No.3 reads that anyone convicted of committing any crimes stipulated in Article No.2 of this law, shall be sentenced to no less than one year in jail, and fined not less than Dh20, 000, or both.
* Article No.4 says anyone convicted of forging any document of Federal or local government?s documents, or any of federal or local institutions, shall be temporarily imprisoned, and fined, or both.
* Anyone convicted of using the forged document with knowledge it is forged, shall be handed out the stipulated punishment for forgery crime. Article No.5 of the law reads anyone convicted of hampering, blocking or preventing the reach of service or logging onto computer programmes, or information sources with any possible means whether via the use of internet or any information technology mean, shall be punished with a jail term, or a fine, or both.
* Article No.6 says anyone convicted of inserting certain information via the internet or using any IT or electronic mean for the purpose of stopping or breaking down, or destroying, deleting or amending programmes and information, shall be either jailed or fined, or both.
* Article No.7 says anyone convicted of using the internet or any electronic or IT means for changing or destroying medical tests or medical diagnosis, or medical treatment or healthcare, or even assisted others to do it, shall be temporarily jailed or fined.
* Article No.8 says anyone convicted of deliberately eavesdropping, or receiving or intervened information or messages sent via the internet by using any electronic or high-tech means, shall be jailed or fined.
* Article No.9 says anyone convicted of using the internet or any other high-tech means for threatening or black mailing another person, to incite him to carry out an act or not, shall be sentenced to no more than two years in jail and fined no more than Dh50, 000, or both.
* Anyone convicted of using the internet for threatening or black mailing another person, to incite him to commit lewd acts or honour crimes, shall be sentenced up to 10 years in jail and fined Dh50, 000.
* Article No.10 reads that anyone convicted of putting his hands on immovable funds, or a document to sign for himself or others, by using the internet or any high-tech means in a fraudulent way or by taking a nick name or assuming the identity of others with intent to defraud, shall be sentenced to no less than one year, and fined no less than Dh30, 000, or both.
* Article No.11 reads that anyone convicted of reaching data of credit card or any other electronic cards by the use of the internet or any high-tech means, shall be imprisoned and fined. If the act takes place with intent to use credit or electronic cards to get other?s money or their available services, the convict shall be jailed for no less than one year, and fined no less than Dh30, 000, or one of each punishments.
* Article No.12 says anyone convicted of producing, preparing, sending, or saving information with intent to exploit, distribute or providing others with information that causes harm to public decency, via the internet or high-tick means, shall be sentenced to no less than six months in jail and fined no less than Dh 30, 000.
* Article No13 says anyone convicted of inciting or luring a male or female to commit adultery or prostitution, by using the internet or high-tech means, shall be imprisoned and fined. If the victim is a juvenile, a jail term of no less than five years and a fine shall be imposed.
* Article No14 says anyone convicted of logging onto a website with intent to change the designs of this site, deleting it, amending its information, or taking its address, shall be jailed and fined.
* Article No.15 stipulates that anyone convicted of using the internet or high-tech means for the purpose of committing the following crimes, shall be imprisoned or fined.

* The crimes are as follows:

* 1-Abuse of any Islamic holy shrines or rituals
* 2- Abuse of holy shrines and religious rituals stipulated in other religious since such rituals are maintained in accordance to the rulings of Islamic Sharia
* 3- Insulting any recognised religion
* 4- 4-Inctiment or promotion of sins

* If anyone convicted of opposing the Islamic religion, or abusing its principles, or carrying out any missionary activities for the benefit of other religions, he should be sentenced to more than seven years in jail.

* Article No16 reads that anyone convicted of transcending family principles and values, or publishing news or pictures related to the private life of the family?s members, shall be jailed for no one year and fined Dh50, 000.
* Article No.17 stipulates that anyone convicted of setting up a website, or publishing information vi the internet or any other cyber means for the purpose of trafficking in human beings or facilitating human trafficking, shall be temporarily imprisoned.
* Article No.18 reads that anyone convicted of setting up a website or publishing information with the aim of promoting narcotics shall be temporarily jailed.
* Article No.19 says anyone convicted of transferring dirty money or concealing their sources, or transferring illegal properties via the use of internet or other cyber means, shall be sentenced to no more than seven years and a fine of no less than Dh30, 000 and up to Dh200, 000.
* Article No.20 reads anyone convicted of setting up a website or publishing information for groups calling for facilitating and promoting ideas in breach of the general order and public decency, shall be sentenced to nor more than five years in jail.
* Article No.21 says anyone convicted of setting up a website or publishing information for a terrorist group under fake names with intent to facilitate contacts with their leadership, or to promote their ideologies and finance their activities, or to publish information on how to make explosives or any other substances to be used in terrorist attacks, shall be sentenced to no more than five years in jail.
* Article No22 reads anyone convicted of logging onto government websites with intent to obtain secrete information shall be sentenced to jail. If the practice resulted in deleting, destroying or publishing such information, the convict shall be sentenced up to five years in jail.
* Article No.23 says anyone convicted of inciting, or assisting or agreed with other person to commit a crime of crimes stipulated in this law, he shall be punished with the same punishment stipulated in the law.
* Article No.24 says with no prejudice to others? rights, all devices, programmes and means used in committing any of the previous mentioned crimes will be confiscated.
* Article No.25 stipulates if the convict is an expatriate, he shall be deported after serving his term.
* Article No.26 says the implementation of penalties stipulated in this law does not contradict any other tougher punishment stipulated in the penal Code or any other laws.
* Article No.27 says law-enforcement officials are allowed to catch criminals and report violations.
* Article No28 says any provision contradicts the provisions of this law shall be abrogated.
* Article No.29 says this law shall take effect from the date of its issuance, and is to be published in the official gazette.

WiMAX Day

WiMAX Club formed to undermine 3G and GSM telcos

Today, according to WiSOA (http://www.wisoa.com/site/) itself, is WiMAX Day.An analysis by WiFi Planet (http://www.wi-fiplanet.com/columns/article.php/3634386) sees this as an an insurgency by the wannabe telcos who don’t have 3G licences. They are listed: Unwired Australia (http://www.unwired.com.au/), Network Plus Mauritius (http://www.networkplus.mu/), UK Broadband (http://www.ukbroadband.co.uk/), Irish Broadband (http://www.irishbroadband.ie/), Austar Australia (http://austar.com.au/)/Liberty Group (http://www.lgi.com/), Telecom New Zealand (http://www.telecom.co.nz/), WiMAX Telecom Group (http://www.wimax-telecom.net/), Enertel (http://enertel.nl/) and Woosh Telecom (http://woosh.com/).

According to Robert Liu (http://voipforenterprise.tmcnet.com/feature/next-generation-mobility/articles/2759-wisoa-forms-with-goal-international-wimax-roaming.htm) at TMCNet, its purpose is “to pledge roaming interoperability of next-generation commercial WiMAX networks.”

Faultline’s (http://www.theregister.co.uk/2006/09/29/oz_wimax_roaming_alliance/) Caroline Gabriel says: “It limits its membership to companies that own licenses and operate WiMAX or pre-WiMAX services, contrasting with a previous, defunct attempt at creating a roaming group – the WiMAX Global Roaming Alliance (WGRA) – which was largely based around license exempt WISPs.”

And she adds: “The contrast reflects the shift of the WiMAX movement away from such markets and towards carrier class, licensed band deployments, but the fading of the WGRA does not detract from the truth of its objectives,” quoting CEO Doug Bonestroo: “We realise that the larger telecom providers have a virtual lock on the 3G marketplace, and that the best way to counter that leverage is with a large group of partners in the US and around the world that are committed to standards-based WiMAX roaming.”

The strong Australian influence on this body is reflected in a significant number of Pacific Rim reports, including one from TechWorld’s Sandra Rossi, who was rather more enthusiastic than the known facts appear to justify, saying: “The agreement will act as the backbone of a future global WiMAX network and adheres to the 802.16e standards.”

Presumably, this was meant to read: “eventual” 802.16e standards” – they aren’t defined yet. “Today there are 25,000 roaming agreements worldwide generating just under £10 billion in revenue every year,” this report continues, without in any way drawing a distinction between mobile GSM, 3G, or other phone roaming deals, and the putative WiMAX plans.

One of the founders was noted as remarking: “We are not engineers.” That seems apparent, especailly from reports emphasising the multi-spectrum nature of the body’s remit: “This will cover all WiMAX services and operate acrosss in all WiMAX frequency ranges and will act as the backbone of a future global WiMAX network that adheres to the 802.16e standards,” as Stuart Corner (http://www.itwire.com.au/content/view/5711/127/) of IT Wire reported.

In fact, unless and until WiMAX acquires a universal frequency band worldwide, it’s hard to see what value the technology offers to the consumer.

Its value to the industry grouping is less obscure. As one potential member of the club told NewsWireless, “God bless Intel’s budget! – and long may they pour resources into WiMAX promotional activities!” – a reference to Intel’s recent Amazonian island (http://www.newswireless.net/index.cfm/article/2906) publicity effort.

There’s no record of any Intel contribution to the WiSOA at this point. The chip giant is known to favour a 2.5 GHz (http://www.wisoa.com/site/category/25-ghz/) spectrum band for universal WiMAX, with acceptance of the probability that the world will, probably, pick a series of different frequencies somewhere in the 3GHz band (http://www.wisoa.com/site/category/35ghz/) and up to 4 GHz, and have to compromise somewhat on the “universal” objective at first.

A wise speculator would probably do well to hold all bets on where Intel’s money goes, until such time as the WiSOA group drops its inclusion of WiBro, the Korean standard. But if the club members are sensible, they’ll not let such prudence discourage them; early cheerleader support will doubtless be noted and approved in Santa Clara.

Source: Newswireless.net (http://www.newswireless.net/)

Data Encryption Algorithms

AES
The Advanced Encryption Standard (AES) specifies a FIPS-approved cryptographic algorithm (Rijndael, designed by Joan Daemen and Vincent Rijmen, published in 1998) that may be used by US federal departments and agencies to cryptographically protect sensitive information. TrueCrypt uses AES with 14 rounds and a 256-bit key (i.e., AES-256, published in 2001) operating in LRW mode. In June 2003, after the NSA (US National Security Agency) has conducted a review and analysis of AES, the U.S. CNSS (Committee on National Security Systems) announced that the design and strength of AES-256 (and AES-192) are sufficient to protect classified information up to the Top Secret level. This is applicable to all U.S. Government Departments or Agencies that are considering the acquisition or use of products incorporating the Advanced Encryption Standard (AES) to satisfy Information Assurance requirements associated with the protection of national security systems and/or national security information.

Blowfish
Designed by Bruce Schneier in 1993. Blowfish is unpatented, license-free, and available free for all uses. TrueCrypt uses Blowfish with 16 rounds and a 448-bit key operating in LRW mode.

CAST5
CAST5, alias CAST-128, was designed by Carlisle Adams and Stafford Tavares, and published in 1997. It uses a 128-bit key, 64-bit block, and operates in LRW mode.This encryption algorithm is described in U.S. patent number 5,511,123. However, CAST5 is royalty-free both for commercial and non-commercial uses. It is also one of the encryption algorithms that are officially used by the Canadian government to cryptographically protect sensitive (unclassified) information.

Serpent
Designed by Ross Anderson, Eli Biham, and Lars Knudsen; published in 1998. It uses a 256-bit key, 128-bit block, and operates in LRW mode. Serpent was one of the AES finalists. It was not selected as the proposed AES algorithm even though it appeared to have a higher security margin than the winning Rijndael . More concretely, Serpent appeared to have a high security margin, while Rijndael appeared to have only an adequate security margin . Rijndael has also received some criticism suggesting that its mathematical structure might lead to attacks in the future . The Twofish team presents a table of safety factors for the AES finalists. Safety factor is defined as: number of rounds of the full cipher divided by the largest number of rounds that has been broken. Hence, a broken cipher has the lowest safety factor 1. Serpent had the highest safety factor of the AES finalists: 3.56 (for all supported key sizes). Rijndael-256 had a safety factor of 1.56 and Rijndael-128 had the lowest safety factor of the finalists: 1.11. In spite of these facts, Rijndael was considered an appropriate selection for the AES for its combination of security, performance, efficiency, implementability, and flexibility. At the Second AES Candidate Conference, Rijndael got 86 votes, Serpent got 59 votes, Twofish 31 votes, RC6 23 votes and MARS 13 votes. These are positive votes. If negative votes are subtracted from the positive votes, the following results are obtained: Rijndael: 76 votes, Serpent: 52 votes, Twofish: 10 votes, RC6: -14 votes, MARS: -70 votes.

Triple DES
Triple DES (TDEA), published in 1978, is three iterations (encrypt-decrypt-encrypt) of the DES cipher designed by IBM and NSA (in 1976). Triple DES operates in LRW mode. Three independent 56-bit keys are used (1 per iteration). DES has known weak keys. A TrueCrypt Wizard detects and reports a weak keys, and prevents it from being used (a new key will have to be generated). Note that this cipher is very slow.

Twofish
Designed by Bruce Schneier, John Kelsey, Doug Whiting, David Wagner, Chris Hall, and Niels Ferguson; published in 1998. It uses a 256-bit key and 128-bit block and operates in LRW mode. Twofish was one of the AES finalists. This cipher uses key-dependent S-boxes. Twofish may be viewed as a collection of 2128 different cryptosystems, where 128 bits derived from a 256-bit key control the selection of the cryptosystem. the Twofish team asserts that key-dependent S-boxes constitute a form of security margin against unknown attacks.

AES-Twofish-Serpent
Three ciphers in a cascade operating in LRW mode of Operation. Each 128-bit block is first encrypted with Serpent (256-bit key), then with Twofish (256-bit key), and finally with AES (256-bit key). Each of the cascaded ciphers uses its own key. All encryption keys are mutually independent (note that header keys are independent as well, even though they are derived from one password (Header Key Derivation, Salt, and Iteration Count).  AES-Twofish-Serpent employs individual cascaded ciphers.

Serpent-AES
Two ciphers in a cascade operating in LRW mode. Each 128-bit block is first encrypted with AES (256-bit key) and then with Serpent (256-bit key). Each of the cascaded ciphers uses its own key. All encryption keys are mutually independent (note that header keys are independent as well, even though they are derived from one password – see Header Key Derivation, Salt, and Iteration Count).Serpent-AES employs individual cascaded ciphers.

Serpent-Twofish-AES
Three ciphers in a cascade operating in LRW mode. Each 128-bit block is first encrypted with AES (256-bit key), then with Twofish (256-bit key), and finally with Serpent (256-bit key). Each of the cascaded ciphers uses its own key. All encryption keys are mutually independent (note that header keys are independent as well, even though they are derived from one password – see Header Key Derivation, Salt, and Iteration Count). Serpent-Twofish-AES Employs individual cascaded ciphers.

First Wi-Fi Solution to Comply With IEEE 802.11n Draft Specification

Broadcom Delivers First Wi-Fi Solutions Designed to Comply With IEEE 802.11n Draft Specification
1/21/06 – Broadcom Corporation (Nasdaq: BRCM) announced the availability of its new Intensi-fi family of wireless LAN (WLAN) chipsets, the first solutions designed to comply with the IEEE 802.11n draft specification. Intensi-fi technology delivers superior performance and robust wireless connectivity throughout a home or office, enabling next generation Wi-Fi(R) devices to offer a flawless multimedia experience by supporting emerging voice, video and data applications.

“Broadcom is pleased that the IEEE has confirmed the 802.11n draft specification,” said Dr. Henry Samueli, Broadcom’s Co-founder and Chief Technical Officer. “We have been active participants in the standards process and are very happy to see the industry achieve technical consensus. With today’s announcement, Broadcom is excited to deliver on our promise of interoperable, next generation wireless products for our customers and consumers.”

Intensi-fi technology incorporates all mandatory elements of the IEEE 802.11n draft specification and is designed to be software upgradable once the standard is finalized. Adherence to industry standards is a priority for Broadcom, because it eliminates the compatibility and performance issues that plague users of proprietary, non-standard products. Broadcom will continue to participate in the standards process through ratification, ensuring that its solutions will comply with the final 802.11n specification.

“Now that we have the technical foundation for the 802.11n standard, the Wi-Fi market will begin to experience renewed growth as vendors deliver next- generation wireless devices,” said Philip Solis, Senior Analyst at ABI Research. “We expect suppliers like Broadcom to capitalize on this opportunity by introducing advanced solutions that promise interoperability and upgradability when the standard is completed, just as it did with its draft 802.11g solutions.”

Broadcom is working closely with other industry leaders to demonstrate real-world interoperability among brands as draft-802.11n products become available. Broadcom is also providing technical resources to the Wi-Fi Alliance to accelerate an industry-wide 802.11n interoperability test procedure. Broadcom anticipates that the creation of the 802.11n standard will clarify the high-end of the wireless LAN market, alleviating consumer confusion caused by the non-compatible, proprietary solutions that have been previously introduced.

Intensi-fi technology supports multiple simultaneous data (or “spatial”) streams over multiple transmit and receive antennas to provide data rates of over 300 Mbps and more robust coverage than legacy 802.11 products — which use one transmitter and one receiver to support a single data stream. This provides sufficient bandwidth, range and reliability to deliver high definition (HD) video to each room of a typical home. To deliver a flawless multimedia experience, Intensi-fi technology will extend beyond traditional PCs and networking gear into consumer electronics and entertainment devices — providing the infrastructure necessary to send movies, photos, music, voice calls and data among cable/DSL/satellite set-top boxes, personal video recorders, DVD players, gaming systems, audio equipment, cameras, cell phones and other handheld devices.

“The forthcoming 802.11n standard will drive unprecedented growth for the Wi-Fi market and become the next mainstream WLAN technology,” said Michael Hurlston, General Manager of Broadcom’s Home and Wireless Business Unit. “This is the first of many Broadcom products that will enable our partners to create an ecosystem of interoperable products that satisfy the requirements of next generation wireless networks.”

Intensi-fi products will also enhance the experience of users of the nearly 75 million existing products based on Broadcom’s industry leading Wi-Fi technologies. Intensi-fi products employ superior maximum ratio combining (MRC) techniques that enable legacy devices to achieve even greater performance and range. By making the most of their existing Wi-Fi equipment, Intensi-fi maximizes the customers’ investment and protects their networks from immediate obsolescence.

The Intensi-fi solution includes a MAC/baseband chip and a radio chip that can be configured for a variety of high-speed wireless applications. Broadcom also offers two network processors that allow customers to optimize cost versus performance for wireless router designs. ,

Intensi-fi chipsets utilize an all-CMOS architecture. This not only enables highly-integrated and highly-efficient chipsets, but also sets forth a path to single-chip solutions for cost-effective, high-volume manufacturing. Intensi-fi chipsets operate in both the 2.4 and 5 GHz frequency bands, which allows them to work with millions of 802.11a/b/g devices already on the market. In addition, Intensi-fi solutions leverage Broadcom’s proven OneDriver(TM) software to deliver superior performance, ease-of-use and security features. This includes SecureEasySetup(TM) software, innovative technology that allows consumers to install and secure a complete wireless network with the push of a button and the click of a mouse. The OneDriver implementation also supports Wireless Multimedia(TM) (WMM(TM)), which provides quality of service and improves the user experience by prioritizing audio, video and voice traffic on a Wi-Fi network.

Broadcom is one of the world’s largest fabless semiconductor companies, with annual revenue of more than $2 billion. The company is headquartered in Irvine, Calif., with offices and research facilities in North America, Asia and Europe.

Source :
http://www.bbwexchange.com/publications/page1383-86147.asp
By Robert Hoskins

Old Eur0pe Wins The 2005 UCSB International Capture The Flag

The UCSB International Capture The Flag (also known as the iCTF) is a distributed, wide-area security exercise, whose goal is to test the security skills of the participants from both the attack and defense viewpoints.The Capture The Flag contest is a multi-site, multi-team hacking contest in which a number of teams compete independently against each other.Each team is given a virtualized server installation (for example, a virtual Linux server). The server provides a number of services. The services have a number of undisclosed vulnerabilities, which have been included in the server’s software by the contest organizers.The goal of each team is to maintain the set of services available and uncompromised throughout the contest phase. Each team can (and should) attempt to compromise other teams’ services. Since all the teams receive an identical copy of the virtual server, the task of each team is to find vulnerabilities in their copy of the server and possibly fix the vulnerabilities without disrupting the services. At the same time, the teams have to leverage their knowledge about the vulnerabilities they found to compromise the servers run by other teams. Compromising a service will allow a team to bypass the service security mechanisms and to “capture the flag” associated with a service.During the contest a scoring system keeps track, for each team, of which services are available, and which services have been compromised.The 2005 iCTF was scheduled Friday, December 9, 2005, from 8am to 4pm, PST (note: this was changed from the initial date of December 7th).The winner of the last edition of the competition (which was held in June 2005) was the team “The Tower of Hanoi”, from Politecnico di Milano, Italy.Read more at www.cs.ucsb.edu/~vigna/…