<?xml version="1.0" ?>
<rss version="2.0">
	<channel>
		<title><![CDATA[ Security & Privacy, IEEE - new TOC ]]></title>
		<link>http://ieeexplore.ieee.org</link>
		<description>TOC Alert for Publication# 8013 </description>
		<year>2009</year>
		<month>November </month>
		<day>06</day>
		<item>
			<title><![CDATA[Front Cover]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280118]]></link>
			<description><![CDATA[ ]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280118]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>c1</startPage>
			<endPage>c1</endPage>
			<fileSize>5646</fileSize>
			<authors><![CDATA[]]></authors>
		</item>
		<item>
			<title><![CDATA[Usenix advertisement]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280119]]></link>
			<description><![CDATA[ ]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280119]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>c2</startPage>
			<endPage>c2</endPage>
			<fileSize>1336</fileSize>
			<authors><![CDATA[]]></authors>
		</item>
		<item>
			<title><![CDATA[Table of Contents]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280120]]></link>
			<description><![CDATA[ ]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280120]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>1</startPage>
			<endPage>2</endPage>
			<fileSize>2091</fileSize>
			<authors><![CDATA[]]></authors>
		</item>
		<item>
			<title><![CDATA[In Clouds Shall We Trust?]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280121]]></link>
			<description><![CDATA[Cloud computing will become ubiquitous, but what we can do to improve our ability to provide users and providers of cloud computing with trust in the software services and infrastructure that make up the cloud. In this article we touch on issues of the transparency, changing expectations and uses, architecture, and amorphous nature of cloud computing.]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280121]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>3</startPage>
			<endPage>3</endPage>
			<fileSize>78</fileSize>
			<authors><![CDATA[Michael, Bret;]]></authors>
		</item>
		<item>
			<title><![CDATA[IEEE Security &amp; Privacy masthead]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280122]]></link>
			<description><![CDATA[ ]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280122]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>4</startPage>
			<endPage>4</endPage>
			<fileSize>135</fileSize>
			<authors><![CDATA[]]></authors>
		</item>
		<item>
			<title><![CDATA[Silver Bullet Talks with Bob Blakley]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280123]]></link>
			<description><![CDATA[Gary McGraw interviews, Bob Blakley, the VP and research director of Burton Group's Identity and Privacy Strategies. Before joining Burton Group, he was chief scientist for security and privacy at IBM. Blakley is active in the security research community, having served as general chair at Oakland and also for the New Security Paradigms Conferences. He's also participated in the US National Academy of Sciences Study Group on Authentication and Privacy. You can find additional podcasts in this series, including those featuring Matt Blaze, Kay Connelly, Bill Brenner, and Laurie Williams, at www.computer.org/security/podcasts/ or www.cigital.com/silverbullet/.]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280123]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>5</startPage>
			<endPage>8</endPage>
			<fileSize>536</fileSize>
			<authors><![CDATA[McGraw, Gary;]]></authors>
		</item>
		<item>
			<title><![CDATA[News Briefs]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280124]]></link>
			<description><![CDATA[A brief look at news in security, privacy, and policy.]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280124]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>9</startPage>
			<endPage>10</endPage>
			<fileSize>2575</fileSize>
			<authors><![CDATA[Figueroa, James;]]></authors>
		</item>
		<item>
			<title><![CDATA[Guest Editors' Introduction: Securing the Domain Name System]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280125]]></link>
			<description><![CDATA[Virtually every Internet application relies on the Domain Name System, but security wasn't a major goal of its original design. The result is several critical vulnerabilities, reviewed in this introduction to a special issue on DNS security. To address the security challenges, the community developed the DNS Security Extensions (DNSSEC), which are undergoing deployment. The articles in this special issue summarize key aspects of how to deploy DNSSEC at authoritative servers, resolvers, and public key learning.]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280125]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>11</startPage>
			<endPage>13</endPage>
			<fileSize>1233</fileSize>
			<authors><![CDATA[Massey, Daniel;Denning, Dorothy E.;]]></authors>
		</item>
		<item>
			<title><![CDATA[Protecting the DNS from Routing Attacks: Two Alternative Anycast Implementations]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280126]]></link>
			<description><![CDATA[The domain name system is a critical piece of the Internet and supports most Internet applications. Because it's organized in a hierarchy, its correct operation depends on the availability of just a few servers at the hierarchy's upper levels. These backbone servers are vulnerable to routing attacks in which adversaries controlling part of the routing system try to hijack the server address space. Using routing attacks in this way, an adversary can compromise the Internet's availability and integrity at a global scale. In this article, the authors evaluate the relative resilience to routing attacks of two alternative anycast DNS implementations. The first operates at the network layer and the second at the application layer. The evaluation informs fundamental DNS design decisions and an important debate on the routing architecture of the Internet.]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280126]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>14</startPage>
			<endPage>20</endPage>
			<fileSize>1186</fileSize>
			<authors><![CDATA[Avramopoulos, I.;Suchara, M.;]]></authors>
		</item>
		<item>
			<title><![CDATA[Phishing Infrastructure Fluxes All the Way]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280127]]></link>
			<description><![CDATA[Fast flux aims to keep phishing and scam campaigns afloat by provisioning a fraudulent Web site's domain name system records to make the site resolve to numerous, short-lived IP addresses. Although fast flux hurts takedown efforts, it's possible to detect and defend against it.]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280127]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>21</startPage>
			<endPage>28</endPage>
			<fileSize>1319</fileSize>
			<authors><![CDATA[McGrath, D.K.;Kalafut, A.;Gupta, M.;]]></authors>
		</item>
		<item>
			<title><![CDATA[Open Issues in Secure DNS Deployment]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280128]]></link>
			<description><![CDATA[The domain name system's growth has been unprecedented, but protocol vulnerabilities threaten its stability and trustworthiness. The Internet Engineering Task Force's DNS security extentions specification aims to protect the system from these attacks.]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280128]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>29</startPage>
			<endPage>35</endPage>
			<fileSize>1198</fileSize>
			<authors><![CDATA[Chandramouli, R.;Rose, S.;]]></authors>
		</item>
		<item>
			<title><![CDATA[Securing DNS: Extending DNS Servers with a DNSSEC Validator]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280129]]></link>
			<description><![CDATA[DNS security extensions (DNSSEC) is a proposed set of standards for securely authenticating information in the Domain Name System. DNSSEC validators check the digital signatures on DNS data. However, designing a validator worth the operational costs is a challenge.]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280129]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>36</startPage>
			<endPage>43</endPage>
			<fileSize>1320</fileSize>
			<authors><![CDATA[Wijngaards, W.C.A.;Overeinder, B.J.;]]></authors>
		</item>
		<item>
			<title><![CDATA[Interadministrative Challenges in Managing DNSKEYs]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280130]]></link>
			<description><![CDATA[Although the visible deployment of domain name system security extensions is growing at a tremendous rate, evidence suggests that managing cryptographic keys is deceptively complex. Here, the authors outline the problem of managing DNSKEYs and present a survey comparison of existing proposed solutions.]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280130]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>44</startPage>
			<endPage>51</endPage>
			<fileSize>3227</fileSize>
			<authors><![CDATA[Osterweil, E.;Lixia Zhang;]]></authors>
		</item>
		<item>
			<title><![CDATA[Call for Papers: Cloud Computing Security]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280131]]></link>
			<description><![CDATA[ ]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280131]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>52</startPage>
			<endPage>52</endPage>
			<fileSize>445</fileSize>
			<authors><![CDATA[]]></authors>
		</item>
		<item>
			<title><![CDATA[Teach Them When They Aren't Looking: Introducing Security in CS1]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280132]]></link>
			<description><![CDATA[This article discusses computer security exercises that have been used to introduce concepts in foundational computer-programming courses. It presents two examples and discusses the associated reactions of the students as they learn about computer security at the beginning of their computer-programming careers.]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280132]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>53</startPage>
			<endPage>55</endPage>
			<fileSize>336</fileSize>
			<authors><![CDATA[Nance, K.;]]></authors>
		</item>
		<item>
			<title><![CDATA[The Evolution of Online Identity]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280133]]></link>
			<description><![CDATA[The author proposes that we must significantly improve how we authenticate ourselves on various computer systems to address growing security and privacy threats. As part of that process, we must adopt an identity metasystem that relies on in-person proofing and the passing of identity claims (such as claims about name, age, residency, or any other identity attribute). When people and organizations have the ability to transmit and consume such claims, they will be better able to engage safely in personal and commercial transactions.]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280133]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>56</startPage>
			<endPage>59</endPage>
			<fileSize>150</fileSize>
			<authors><![CDATA[Charney, S.;]]></authors>
		</item>
		<item>
			<title><![CDATA[Security, Privacy, and the Role of Law]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280134]]></link>
			<description><![CDATA[US President Barack Obama promised a "new comprehensive approach" to cybersecurity and guaranteed to preserve "personal privacy and civil liberties," but the administration has stopped short of committing to the legal changes necessary to protect either information infrastructure or privacy. This tendency to undervalue law as a tool for enhancing both security and individual privacy is shared with other governments. Sound cybersecurity policy requires better incentives to secure data and systems, and those incentives will emerge, at least in part, from legal requirements. Similarly, serious efforts to protect against cyberthreats will compromise privacy and other civil rights unless those rights are protected by law.]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280134]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>60</startPage>
			<endPage>63</endPage>
			<fileSize>1650</fileSize>
			<authors><![CDATA[Cate, F.H.;]]></authors>
		</item>
		<item>
			<title><![CDATA[Green Cryptography: Cleaner Engineering through Recycling, Part 2]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280135]]></link>
			<description><![CDATA[In this paper we further defend our selection of the AES as a prime candidate for recycling, by looking at its underlying design strategy - the wide-trail strategy - in the context of security margins, an often misunderstood metric for comparing block ciphers. We show that it's not always as easy as who has the most rounds; it's what's happening inside the round.]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280135]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>64</startPage>
			<endPage>65</endPage>
			<fileSize>138</fileSize>
			<authors><![CDATA[Troutman, J.;Rijmen, V.;]]></authors>
		</item>
		<item>
			<title><![CDATA[Managing the Security Wall of Data]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280136]]></link>
			<description><![CDATA[This article is quite different from other articles published in basic training; rather than focus on a specific security-related technology, I want to focus on another important topic: how to be more effective as a security person.]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280136]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>66</startPage>
			<endPage>68</endPage>
			<fileSize>144</fileSize>
			<authors><![CDATA[Howard, M.;]]></authors>
		</item>
		<item>
			<title><![CDATA[Call for Papers: Security and Reliability of Embedded Systems]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280137]]></link>
			<description><![CDATA[ ]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280137]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>69</startPage>
			<endPage>69</endPage>
			<fileSize>551</fileSize>
			<authors><![CDATA[]]></authors>
		</item>
		<item>
			<title><![CDATA[Wireless Malware Propagation: A Reality Check]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280138]]></link>
			<description><![CDATA[The paper discusses the data security on wireless communications. In recent years, several authors began to work on the concept of security attacks against wireless communication protocols- in particular, the propagation of malware through them. It was fun to design covert attack devices and evaluate the Bluetooth user population's exposure to them. However, the latest "developments" on these threats are stepping progressively away from reality and into an abstract, academic world of their own, something that might be just as fun, but that should be brought back into perspective when assessing the actual risks related to these scenarios. The author presents two distinct examples, the wireless LAN contagion and Bluetooth epidemics. The author concludes that wireless and mobile security, and, in particular, worm propagation over wireless networks, is an interesting and novel concept. It challenges and thrills, creating appealing newspaper headlines along the way. However, it must be sure to check our models against reality, and after predicting threats that failed to materialize, it must be able to understand where it went wrong.]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280138]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>70</startPage>
			<endPage>74</endPage>
			<fileSize>2006</fileSize>
			<authors><![CDATA[Zanero, S.;]]></authors>
		</item>
		<item>
			<title><![CDATA[Taking Surveillance Out of the Shadows]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280139]]></link>
			<description><![CDATA[Wiretapping and surveillance are often covered by veils of secrecy that intelligence and law enforcement agencies reflexively apply to what they consider their most sensitive operations. Unfortunately, when the veils are lifted, we frequently discover that the technologies at the root of surveillance systems are often deeply flawed.]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280139]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>75</startPage>
			<endPage>77</endPage>
			<fileSize>1351</fileSize>
			<authors><![CDATA[Blaze, M.;]]></authors>
		</item>
		<item>
			<title><![CDATA[Incentives to Innovate: Improve the Past or Break with It?]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280140]]></link>
			<description><![CDATA[Does more expansive copyright law increase creativity by discouraging adaptations of existing work? The author discusses examples from cooking, boatbuilding, and the theater.]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280140]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>78</startPage>
			<endPage>81</endPage>
			<fileSize>1123</fileSize>
			<authors><![CDATA[Lesk, M.;]]></authors>
		</item>
		<item>
			<title><![CDATA[Are Patched Machines Really Fixed?]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280141]]></link>
			<description><![CDATA[Updating and patching has become a ubiquitous part of software maintenance, with particular importance to security. It's especially crucial when the systems in question perform vital functions and security compromises might yield drastic consequences. Unfortunately, updates intended to remediate security problems are sometimes incomplete, are flawed, or introduce new vulnerability themselves. The authors present several examples of such instances in a widely used electronic voting system, a device for which security is critical. A central lesson of the study is that evaluating a system's security by examining changes between revisions is insufficient; you must evaluate and analyze the system as a whole.]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280141]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>82</startPage>
			<endPage>85</endPage>
			<fileSize>1035</fileSize>
			<authors><![CDATA[Gardner, R.W.;Bishop, M.;Kohno, T.;]]></authors>
		</item>
		<item>
			<title><![CDATA[Risk Concentration]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280142]]></link>
			<description><![CDATA[Nature takes a variety of approaches regarding risk concentration. Stationary life tends to bend but not break, whereas mobile life tends toward risk concentration with stout border protection. Client and network devices tend to follow the latter model.]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280142]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>86</startPage>
			<endPage>87</endPage>
			<fileSize>325</fileSize>
			<authors><![CDATA[Geer Jr., Daniel E.;Conway, Daniel G.;]]></authors>
		</item>
		<item>
			<title><![CDATA[Security as a Systems Property]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280143]]></link>
			<description><![CDATA[How do we protect systems? The answer is straightforward: each component must be evaluated independently and protected as necessary. Beware the easy answers, such as deploying stronger encryption while ignoring vulnerable end points; that's too much like looking under the streetlamp for lost keys, not because they're likely to be there but because it's an easy place to search. Remember, too, that people and processes are system components as well, and often the weakest ones&#x02014;think about phishing, but also about legitimate emails that are structurally indistinguishable from phishing attacks. I'm not saying you should ignore one weakness because you can't afford to address another serious one&#x02014;but in general, your defenses should be balanced. After that, of course, you have to evaluate the security of the entire system. Components interact, not always in benign ways, and there may be gaps you haven't filled.]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280143]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>88</startPage>
			<endPage>88</endPage>
			<fileSize>183</fileSize>
			<authors><![CDATA[Bellovin, Steven M.;Conway, Daniel G.;]]></authors>
		</item>
		<item>
			<title><![CDATA[2010 Student Membership house advertisement]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280144]]></link>
			<description><![CDATA[ ]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280144]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>c3</startPage>
			<endPage>c3</endPage>
			<fileSize>10107</fileSize>
			<authors><![CDATA[]]></authors>
		</item>
		<item>
			<title><![CDATA[IEEE Biometrics Certification advertisement]]></title>
			<link><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280145]]></link>
			<description><![CDATA[ ]]></description>
			<pubDate><![CDATA[Sept.-Oct.  2009]]></pubDate>
			<guid><![CDATA[http://ieeexplore.ieee.org/xpls/abs_all.jsp?isnumber=5280117&arnumber=5280145]]></guid>
			<volume>7</volume>
			<issue>5</issue>
			<startPage>c4</startPage>
			<endPage>c4</endPage>
			<fileSize>1725</fileSize>
			<authors><![CDATA[]]></authors>
		</item>
	</channel>
</rss>