RAID 2008

                  11th International Symposium on
               Recent Advances in Intrusion Detection

                      September 15-17, 2008

               MIT, Cambridge, Massachusetts, USA



This symposium, the 11th in an annual series, brings together leading  
researchers and practitioners from academia, government, and industry  
to discuss issues and technologies related to intrusion detection and  
defense. The Recent Advances in Intrusion Detection (RAID)  
International Symposium series furthers advances in intrusion defense  
by promoting the exchange of ideas in a broad range of topics. As in  
previous years, all topics related to intrusion detection, prevention  
and defense systems and technologies are within scope, including but  
not limited to the following:

* Network and host intrusion detection and prevention
* Anomaly and specification-based approaches
* IDS cooperation and event correlation
* Malware prevention, detection, analysis and containment
* Web application security
* Insider attack detection
* Intrusion response, tolerance, and self protection
* Operational experience and limitations of current approaches
* Intrusion detection assessment and benchmarking
* Attacks against IDS including DoS, evasion, and IDS discovery
* Formal models, analysis, and standards
* Deception systems and honeypots
* Vulnerability analysis, risk assessment, and forensics
* Adversarial machine learning for security
* Visualization techniques
* Special environments, including mobile and sensor networks
* High-performance intrusion detection
* Legal, social, and privacy issues
* Network exfiltration detection
* Botnet analysis, detection, and mitigation

Important Dates:
Paper submission deadline:            April 4, 2008
Paper acceptance or rejection:        June  6, 2008
Final paper camera ready copy:        June 16, 2008
Poster abstract submission deadline:  June 18, 2008
Poster acceptance or rejection:       June 27, 2008
Early Bird registration closes:       August 1, 2008

RAID 2008 invites two types of submissions:

1. Full papers presenting mature research results or summarizing
    operational experience protecting or monitoring large real-world
    networks. Papers can be 10-20 pages long and, if accepted, they will
    be presented and included in the RAID 2008 proceedings published
    by Springer Verlag in its Lecture Notes in Computer Science
    ( series. Papers must be
    formatted according to the instructions provided by Springer Verlag
    (, and include an
    abstract and a list of keywords.

2. Posters describing innovative ideas not mature enough for a full
    paper and works in progress. A two-page poster abstract formatted as
    a full paper with an abstract must be submitted. If accepted, it
    will be published in the proceedings and the poster will be

All submissions (papers and poster abstracts) must be submitted  
electronically; details will be provided on the conference web site.  
Papers should list all authors and their affiliations; in case of  
multiple authors, the contact author must be indicated (RAID does not  
require anonymized submissions).  For accepted papers, it is required  
that at least one of the authors attends the conference to present  
the paper. Further questions on the submission process may be sent to  
the program chair.  Submissions must not substantially duplicate work  
that any of the authors has published elsewhere or has submitted in  
parallel to a journal or to any other conference or workshop with  
proceedings. Simultaneous submission of the same work to multiple  
venues, submission of previously published work, and plagiarism  
constitute dishonesty or fraud. RAID, like other scientific and  
technical conferences and journals, prohibits these practices and  
may, on the recommendation of the program chair, take action against  
authors who have committed them.

Organizing Committee:
General Chair: Robert Cunningham (MIT Lincoln Laboratory;
Program Chair: Richard Lippmann (MIT Lincoln Laboratory;
Program Co-Chair: Engin Kirda (Eurecom / Technical University Vienna;
Publication Chair: Ari Trachtenberg (Boston University;
Publicity Chair: Jon Giffin (Georgia Tech;
Sponsorship Chair: Anup Ghosh (George Mason University;

Steering Committee:
Chair: Marc Dacier (Eurecom)
Herve Debar (France Telecom R&D)
Deborah Frincke (Pacific Northwest National Lab, USA)
Ming-Yuh Huang (The Boeing Company, USA)
Erland Jonsson (Chalmers)
Wenke Lee (Georgia Tech)
Ludovic Me (Supelec)
Alfonso Valdes (SRI International)
Giovanni Vigna (University of California, Santa Barbara)
Andreas Wespi (IBM Research, Switzerland)
S. Felix Wu (University of California, Davis)
Diego Zamboni (IBM Research, Switzerland)
Christopher Kruegel (University of California, Santa
     Barbara / Technical University Vienna)

Program Committee:
Michael Bailey, University of Michigan
Michael Behringer, Cisco, France
Herbert Bos, Vrije Universiteit Amsterdam
David Brumley, Carnegie Mellon University
Tzi-cker Chiueh, Symantec, USA
Robert Cunningham, MIT Lincoln Laboratory
Andrew Clark, Queensland University of Technology
Ulrich Flegel, SAP Research, Germany
Debin Gao, Singapore Management University
Anup Ghosh, George Mason University
Jon Giffin, Georgia Tech
Thorsten Holz, University of Mannheim
Farnam Jahanian, Arbor Networks / University of Michigan
Jaeyeon Jung, Intel, USA
Engin Kirda, Eurecom / Technical University Vienna
Kwok-Yan Lam, Tsinghua University
Zhuowei Li, Indiana University / Microsoft
Richard Lippmann, MIT Lincoln Laboratory
Raffael Marty, Splunk
Benjamin Morin, Supelec
Rei Safavi-Naini, University of Calgary
R. Sekar, Stony Brook University
Robin Sommer, ICSI/LBNL
Salvatore Stolfo, Columbia University
Toshihiro Tabata, Okayama University
Ari Trachtenberg, Boston University
Vijay Varadharajan, Macquarie University
Jianying Zhou, Institute for Infocomm Research

Student Scholarships:
RAID 2008 will offer student scholarships to reduce symposium  
attendance costs. Students should visit the web site (http:// to learn about availability of  
scholarships and application deadlines.

Corporate Sponsors:
RAID 2008 will be sponsored in part by the I3P.  Contact the  
Sponsorship Chair at for opportunities for your  
organization to sponsor the symposium.