FCS 2016

Workshop on Foundations of Computer Security 2016

June 27, 2016
Lisbon, Portugal

Affiliated with IEEE CSF 2016

Background, aim and scope

Computer security is an established field of both theoretical and practical significance. In recent years, there has been sustained interest in the formal foundations of methods used in computer security. The aim of the FCS 2016 workshop is to provide a forum for the discussion of continued research in this area.

FCS 2016 welcomes papers on all topics related to the formal underpinnings of security and privacy, and their applications. The scope of FCS 2016 includes, but is not limited to, formal specification, analysis, and design of cryptographic protocols and their applications; formal definitions of various aspects of security such as access control mechanisms, mobile code security and denial-of-service attacks; modeling of information flow and its application to confidentiality policies, system composition, and covert channel analysis; foundations of privacy; applications of formal techniques to practical security and privacy.

We are interested in new theoretical results, in exploratory presentations that examine open questions and raise fundamental concerns about existing theories, and in the development of security/privacy tools using formal techniques. Demonstrations of tools based on formal techniques are welcome, as long as the demonstrations can be carried out on a standard digital projector (i.e., without any specialized equipment). We solicit the submission of both mature work and work in progress.

Possible topics include, but are not limited to:

Automated reasoning techniques
Composition issues
Formal specification
Foundations of verification
Information flow analysis
Language-based security
Logic-based design
Program transformation
Security models
Static analysis
Statistical methods
Trust management


Access control & resource usage control
Availability and denial of service
Covert channels
Integrity and privacy
Intrusion detection
Malicious code
Mobile code
Mutual distrust
Security policies
Security protocols


The workshop will be held in Room 1, Fundação Calouste Gulbenkian (FCG). Directions and other local information can be found here.

You can download the proceedings as a compressed zip file here. The password for the zip file will be distributed at the workshop.

Session I         Chair: Aslan Askarov
09:00 - 10:00 Keynote by Bryan Ford
Collective Authorities: Transparency and Decentralized Trust at Scale (Abstract)
10:00 - 10:30 Coffee break
Session II Chair: Piotr Mardziel
10:30 - 11:00 Verifying Cryptographic Protocols: A symbolic model for cryptographic APIs for C
Gijs Vanspauwen, Bart Jacobs
11:00 - 11:30 Computational Soundness for Dalvik Bytecode
Michael Backes, Robert Künnemann, Esfandiar Mohammadi
11:30 - 12:00 In a Flash: An In-lined Monitoring Approach to Flash App Security
Meera Sridhar, Abhinav Mohanty, Vasant Tendulkar, Fadi Yilmaz, Kevin W. Hamlen
12:00 - 14:00 Lunch
Session III Chair: Deepak Garg
14:00-14:30 Can we mitigate the attacks on Distance-Bounding Protocols by using challenge-response rounds repeatedly?
Max Kanovich, Tajana Ban Kirigin, Vivek Nigam, Andre Scedrov, Carolyn Talcott
14:30-15:00 The Cardinal Abstraction for Quantitative Information Flow
Mounir Assaf, Julien Signoles, Eric Totel, Frederic Tronel
15:00-15:30 Towards the Quantification of Strategic Leakage
Mário S. Alvim, Piotr Mardziel, Michael Hicks

Important dates

Submissions due: April 17, 2016
Notification of acceptance: May 22, 2016
Final papers: June 20, 2016
Workshop: June 27, 2016


FCS 2016 welcomes two kinds of submissions:

  • full papers (at most 12 pages, excluding references and well-marked appendices)
  • short papers (at most 4 pages, excluding references and well-marked appendices)

All submissions will be peer-reviewed by the program committee listed below. Authors of accepted papers must guarantee that their papers will be presented at the workshop. Short papers will receive as rigorous a review as full papers. Short papers may receive shorter talk slots at the workshop than full papers, depending on the number of accepted submissions.

Papers should be formatted using the two-column IEEE proceedings style available for various document preparation systems at the IEEE Conference Publishing Services page http://www.ieee.org/conferences_events/conferences/publishing/templates.html. The first page should include the paper's title, names of authors, coordinates of the corresponding author(s), an abstract, and a list of keywords. Committee members are not required to read appendices, so papers must be intelligible without them. Papers not adhering to the page limits may be rejected without consideration of their merits.

Papers must be submitted online at https://fcs2016.mpi-sws.org in the PDF format. Please do not submit papers in any other format (e.g., Word or WordPerfect files).

Informal proceedings

The workshop has no published proceedings. Presenting a paper at the workshop should not preclude submission to or publication in other venues (before, after or concurrently with FCS 2016). Papers presented at the workshop will be made available to workshop participants, but this does not constitute an official proceedings.

Program committee

  • Aslan Askarov (Aarhus University, Denmark, co-chair)
  • Lennart Beringer (Princeton University, USA)
  • Steve Chong (Harvard University, USA)
  • Mads Dam (Royal Institute of Technology, Sweden)
  • Deepak Garg (Max Planck Institute for Software Systems, Germany, co-chair)
  • Andreas Haeberlen (University of Pennsylvania, USA)
  • Piotr Mardziel (Carnegie Mellon University, USA)
  • Annabelle McIver (Macquarie University, Australia)
  • Scott Moore (Harvard University, USA)
  • Catuscia Palamidessi (INRIA Saclay, France)
  • Marco Patrignani (Max Planck Institute for Software Systems, Germany)
  • Sasa Radomirovic (ETH Zurich, Switzerland)
  • David Sands (Chalmers University of Technology, Sweden)
  • Arunesh Sinha (University of Southern California, USA)
  • Michael Tschantz (ICSI, USA)


The PC chairs can be contacted at the following addresses:
  • Aslan Askarov: aslan [at] cs [dot] au [dot] dk
  • Deepak Garg: dg [at] mpi-sws [dot] org

Previous editions