Université de Montréal

Maîtrise en commerce électronique

Emergis

HEC Montréal

Stikeman Elliott




Atelier sur la sécurité en commerce électronique

Workshop on Security in Electronic Commerce

Université de Montréal, 16 mai 2005 / 16 May 2005

Z-330 (Pavillon Claire-McNicoll)


[Survol/Overview] [Nos invités/Speakers and abstracts] [Horaire/Schedule] [Emplacement/Location]

[Inscription (maintenant terminée)/Registration (now closed)] [Comité organisateur/Organizing committee] [Contact]

Textes des présentations (nouveau!!!) / Slides from the talks (new!!!)

Gordon Agnew
Paul Van Oorschot
Makan Pourzandi
Michel-Guy Paiement


Survol / Overview


Le Département d'informatique et de recherche opérationnelle de l'Université de Montréal est heureux de vous inviter, en association avec le programme de la maîtrise en commerce électronique de l'Université de Montréal et de HEC Montréal, à son premier atelier sur la sécurité en commerce électronique.

L'objectif de cet atelier est de permettre aux étudiants, chercheurs et praticiens intéressés d'interagir avec des praticiens et académiciens prestigieux dans le domaine de la sécurité informatique.

L’activité est gratuite mais le nombre de places est limité. Il est donc obligatoire de s’inscrire sur http://www.iro.umontreal.ca/~gambsseb/security-workshop/inscription.html.

Vous êtes tous les bienvenus !

Esma Aïmeur
Co-directrice de la maîtrise en commerce électronique



The Department of Computer Science of the University of Montréal, in association with the Masters program in Electronic Commerce of the University of Montréal and HEC Montréal, is delighted to invite you to its first Workshop on Security in Electronic Commerce.

The purpose of this workshop is to allow interested students, researchers and practitioners to interact with prestigious academics and practitioners in the field of computer security.

The activity is free of charge but the number of seats is limited. It is therefore necessary to register at http://www.iro.umontreal.ca/~gambsseb/security-workshop/registration.html.

You are most welcome!

Esma Aïmeur
Co-Chair of the Masters in Electronic Commerce Program

[Back to top]

Nos invités

Speakers and abstracts


Gordon Agnew: Electrical and Computer Engineering, University of Waterloo

Wireless Network Security and Mobile Commerce

Abstract: There have been many proposals for deployment of applications to support mobile commerce. These include mobile browsing, purchase of services, goods, etc. In this talk we will examine security issues in the mobile environment and requirements for secure m commerce. We will also look at the development of end-to-end reliable and secure systems in the wireless environment.

Gordon Agnew

Biography: Dr. Gordon B. Agnew received his BASc and PhD in Electrical Engineering from the University of Waterloo in 1978 and 1982, respectively. He joined the department of Electrical and Computer Engineering at the University of Waterloo in 1982. Dr. Agnew’s areas of expertise include cryptography, data security, protocols and protocol analysis, electronic commerce systems, high-speed networks, wireless systems and computer architecture. He has taught many university courses and industry-sponsored short courses in these areas as well as having authored many articles. In 1985, he joined the Data Encryption Group at the University of Waterloo. The work of this group led to significant advances in the area of public key cryptographic systems including the development of a practical implementation of Elliptic Curve based cryptosystems. Dr. Agnew is a member of the Institute for Electrical and Electronics Engineers, a member of the International Association for Cryptologic Research, a Foundation Fellow of the Institute for Combinatorics and its Applications and a Registered Professional Engineer in the Province of Ontario. He is also a co-founder of CERTICOM Corp., a world leader in public key cryptosystem technologies. (gbagnew@engmail.uwaterloo.ca)



Paul Van Oorschot: School of Computer Science, Carleton University & Canada Research Chair in Network and Software Security

The Internet: A Secure Platform for e-Commerce?

Abstract: How is it possible, that despite the continuous introduction and use of powerful Internet security technologies—firewalls, anti-virus software, cryptographic algorithms, public-key infrastructure, intrusion detection systems, email filters, and others—the Internet has become more complex, and yet arguably, less secure than ever? In this talk, we explore this question, reflecting upon the speaker's personal experiences in academic research, in industry, and in real life.

Paul Von Oorschot

Biography: Paul Van Oorschot received his PhD from the University of Waterloo in 1988. He is Canada Research Chair in Network and Software Security, and a Professor in the School of Computer Science at Carleton University, where he founded and is director of the Digital Security Group. His industrial experience has involved research, development, and senior management including positions at Bell-Northern Research and Entrust Technologies. He is co-author of the standard reference Handbook of Applied Cryptography, and his current research interests include authentication, software protection, and network security. He regularly serves on program committees for international conferences.
[Back to top]





Makan Pourzandi: Open Systems Laboratory Researcher, Ericsson Research Canada

Clusters and Security: Distributed Security for Distributed Systems

Abstract: Large-scale commodity clusters are used as servers in an increasing number of domains: high performance computing, e-commerce, data mining, etc. At the same time, these clusters are exposed to an increasing number of attacks coming from public networks. Therefore, mechanisms for efficiently and flexibly managing security have now become an essential requirement for clusters. However, despite the growing importance of cluster security, this field has been only minimally addressed by contemporary cluster administration techniques. This presentation exposes a high-level view of existing security challenges related to clusters and proposes a structured approach for handling security in clustered servers. The goal of this presentation is to identify various necessarily-distributed security services and their related characteristics as a means of enhancing cluster security.

Makan Pourzandi

Biography: Makan Pourzandi received his PhD on parallel and distributed computing in 1995 from the Université de Lyon, France. He is a researcher in the Open Systems Laboratory at Ericsson Research Canada. His research domains are security, cluster computing, and software engineering. He has more than 20 publications in refereed international conferences and technical journals. He is involved in several Open Source projects regarding security, and contributed to security requirements for Carrier-Grade Linux Server (CGL) project, and Security Availability Forum. (makan.pourzandi@ericsson.com)






Michel-Guy Paiement: Conseiller à la Vice-Présidence Technologie, CGI/GIT

La sécurité informatique dans les entreprises en 2005

Résumé: La technologie évolue vite, les besoins encore plus vite, souvent, trop souvent sans vraiment tenir compte des besoins en sécurité informatique. Mais en réaction à certains scandales, la protection des renseignements personnels, de la vie privée, des dossiers médicaux, des actifs informationnels, etc., tendent de plus en plus à être circonscrits par des cadres législatifs. Les lois Canadiennes et Québécoises vont s’aligner sur des lois internationales. À commencer par nos voisins américains – telle que Sarbanes-Oxley (SOX) sur les règles et responsabilité de gouvernance des hautes directions d’entreprise, les lois telles que la « Privacy Act » de 1974 et la « Electronic Communications Privacy Act » de 1986, encadrant la vie privée et la manipulation des renseignements personnels, et enfin la « HIPAA : Health Insurance Portability and Accountability Act » de 1996 encadrant l’utilisation et la protection des dossiers médicaux. Au niveau international c’est l’accord de Bâle qui réglemente le secteur financier. Bientôt nous verrons des citoyens poursuivre et gagner contre des entreprises qui ont été négligentes ou insouciantes dans la manipulation, l’entreposage et le transport d’information. Mais comment bien se préparer, comment être « due care » au sens de la loi? Le but de cette brève présentation est d’illustrer une heuristique permettant d’identifier les vulnérabilités et conséquemment d’appliquer des mesures avant que se produise un incident de sécurité. Nous appliquerons cette heuristique sur une architecture n-tiers utilisée dans des solutions de commerce électronique.

Michel-Guy Paiement

Biographie: M. Paiement est présentement chez CGI, à la Vice-présidence Technologie. Ses responsabilités sont de s’assurer de la viabilité opérationnelle des solutions de sécurité mises en place. C’est à titre de « sysadmin » pour des environnements de grandes puissances, notamment MVS de IBM devenu z/OS, qu’il s’est initié aux fondements de la sécurité dans de grandes entreprises. Après avoir participé à plusieurs installations et configurations de logiciels de sécurité sur des ordinateurs centraux, tels que ACF/2 de Computer Associates ou RAC/F de IBM, Michel Guy Paiement est passé aux environnements de type Multi plateformes tels que Unix et Windows. Par la suite et à titre de consultant, M. Paiement a réalisé plusieurs mandats autant dans les moyennes et petites entreprises que dans les grandes. Les principaux mandats qu’il a réalisés liés à la sécurité informatique ont été : (1) évolution d’architecture de sécurité, (2) installation et configuration de solutions de sécurité autant réseau que Multi plateforme, (3) réalisation d’audits de sécurité, (4) élaboration de programme de sensibilisation. Sa vaste expertise en informatique autant des points de vue techniques qu’en sécurité, lui permet de bien décrire comment se porte la sécurité dans les entreprises en 2005. (michelguy.paiement@cgi.com) [Back to top]


Gilles Brassard: Department of Computer Science, Université de Montréal & Canada Research Chair in Quantum Information Processing

Panel sur le futur de la sécurité en commerce électronique

Panel on the Future of Security in Electronic Commerce

Résumé: Nous allons consulter la boule de cristal de nos quatre conférenciers invités afin d’apercevoir ce que le futur nous réserve en fait de sécurité en commerce électronique ! La participation active du public sera vigoureusement encouragée.

Abstract: We shall look through the crystal ball of our four guest speakers to get a glimpse of what future holds in store concerning security aspects of electronic commerce! Interaction with the audience will be strongly encouraged.
Gilles Brassard

Biography: Gilles Brassard received his PhD in Computer Science from Cornell University in 1979. He is professor of computer science and Canada Research Chair of Quantum Information Processing at the Université de Montréal. His main achievements include the invention of quantum cryptography and quantum teleportation. He has been awarded the E.W.R. Steacie Memorial Fellowship and the Prix Urgel-Archambault in 1992, as well as the Steacie Prize in 1994. He was elected Fellow of the Academy of Science of the Royal Society of Canada in 1996, awarded a Killam Research Fellowship in 1997, and elected foreign member of the Latvian Academy of Sciences in 1998. After receiving the Prix Marie-Victorin in 2000, he was nominated Fellow of the Canadian Institute for Advanced Research in 2002. Editor-in-Chief for Journal of Cryptology from 1991 until 1997, he is the author of three books that have been translated into seven languages and of more than one hundred refereed scientific papers. He has given well over two hundred invited talks in two dozen countries on four continents throughout his career. (brassard@iro.umontreal.ca)




Horaire / Schedule

9:00 – 9:15 Esma Aïmeur
Mot de bienvenue / Opening Remarks
9:15 – 10:30 Gordon Agnew
Wireless Network Security and Mobile Commerce
10:30 – 10:45 Pause-café / Coffee Break
10:45 – 12:00 Paul Van Oorschot
The Internet: A Secure Platform for e-Commerce?
12:00 – 13:15 Déjeuner / Lunch
Salon Maurice L’Abbé
13:15 – 14:30 Makan Pourzandi
Clusters and Security: Distributed Security for Distributed Systems
14:30 – 15:45 Michel-Guy Paiement
La sécurité informatique dans les entreprises en 2005
15:45 – 16:00 Pause-café / Coffee Break
16:00 – 17:00 Panel chaired by Gilles Brassard
[Back to top]

Emplacement / Location

L'atelier se déroulera à l'Université de Montréal. Les présentations auront lieu dans la salle Z-330 du pavillon Claire McNicoll. Le déjeuner sera offert gratuitement au salon Maurice L'Abbé, qui se situe au 6ième étage du pavillon André Aisenstadt.

The workshop will take place at the University of Montréal. The talks and panel will be held in room Z-330, pavillon Claire McNicoll. Lunch will be provided free of charge in salon Maurice L'Abbé, which is located on the sixth floor of pavillon André Aisenstadt.


Pavillon Claire McNicoll map and front

Plan et façade du pavillon Claire McNicoll / Map and picture of the front of the pavillon Claire McNicoll


Pavillon Andre Eisenstadt map and front

Plan et façade du pavillon André Aisenstadt / Map and picture of the front of the pavillon André Aisenstadt

[Back to top]

Inscription (maintenant terminée) / Registration (now closed)

L'inscription est GRATUITE, cliquez simplement ici et remplissez le formulaire pour vous inscrire. Si vous préférez, vous pouvez aussi vous inscrire pour participer à l'atelier en envoyant un courriel directement à Secure05@iro.umontreal.ca et en indiquant votre prénom, nom de famille, adresse électronique, affiliation et statut professionnel.

Registration is FREE, simply click here and fill out the form. Alternatively, you may register to the workshop by sending an email directly to Secure05@iro.umontreal.ca. Please specify your first name, last name, email address, affiliation and professional status.

Comité organisateur / Organizing Committee

Contact principal / Primary contact

Pour toute question ou suggestion, s'il vous plaît contactez Esma Aïmeur / For questions and suggestions, please contact Esma Aïmeur

Email: aimeur@iro.umontreal.ca

URL: http://www.iro.umontreal.ca/~aimeur

Phone: +1 (514) 343-6794

Fax: +1 (514) 343-5834

Université de Montréal Département d'informatique et de recherche opérationnelle Pavillon André-Aisenstadt C.P. 6128, Succ. Centre-Ville, Montréal (QC) H3C 3J7 Canada

[Back to top]