NIS'11 (27 June - 1 July 2011, Crete, Greece)


Dr. Marc Dacier

Dr. Marc Dacier

Bio:
Marc Dacier, Ph.D., is a Senior Director within Symantec Research Labs. He is in charge of the Collaborative Advanced Research Department (CARD), part of Symantec Research Labs. His team is located in Sophia Antipolis (France), Washington D.C and Los Angeles (USA). CARD focuses on innovation and development of next-generation technologies. In addition to internal advancements, Dr. Dacier's team collaborates on joint projects with external government agencies, universities and businesses. These research actions are typically long-term exploratory studies that are in line with Symantec's vision of our future needs.

Prior to joining Symantec, Dr. Dacier taught networking and operational computing security at Eurecom, a graduate school and research centre in communications systems and one of Europe's most active academic research institutions, especially in the field of network and computer security. In addition to his extensive work in academia, Dr. Dacier was the manager of the Global Security Analysis Lab at IBM Zurich Research Laboratory for 7 years. An internationally recognized expert in computer and network security, Dr. Dacier has served on more than 100 program committees of major security and dependability conferences and as a member of the editorial board of several technical journals. He has co authored more than 60 papers in peer reviewed conferences and journals.

Dr. Dacier holds a masters degree in Computer Sciences from the Université Catholique de Louvain and a PhD in Computer Sciences from the Institut National Polytechnique de Toulouse.


We need some more WINE

Abstract:
It is well known that computer security threats are continuously evolving but during the last two years, several important wake up calls have happened. This was the case, for instance, when the outbreaks of the worms Hydraq or Stuxnet made the headlines. In this talk, we will look at the security threats landscape and how it is changing. We will show how new application domains, such as social networks and others, are also targeted. Also, very old research topics, such as the detection of malicious insiders, need to be rejuvenated for several reasons.

We claim that finding efficient, acceptable and usable solutions against these threats require the possibility for researchers to conduct rigorous empirical research. Unfortunately, very few teams have access to large, real-world, representative data sets that would enable them to carry out such experimental validation of new ideas.

Symantec Research has built a new environment, named WINE, that aims at addressing this problem by giving access to some of our data feeds to external academic researchers. Without going into details, we will briefly present the core ideas behind it, what it is made of and how to get access to it. Our hope is that it will beneficial to the scientific community in general and to security practitioners in particular.

WINE stands for Worldwide Intelligence Network Environment (WINE). WINE offers access to sampled data feeds, which are used internally at Symantec. WINE allows researchers to define reference data sets, for validating new techniques or for conducting empirical studies, and provides the metadata needed for understanding the results. WINE archives these reference data sets in order to facilitate repeatable experiments and to enable meaningful comparisons against the prior art. Moreover, the field data included in WINE will likely provide key insights across a broad spectrum of disciplines, such as software reliability, computer security, machine learning, networking, economics, or visual analytics, to name a few.

More information on WINE is also available online: http://www.symantec.com/WINE