Security for E-Voting in Public Elections
Avi Rubin, AT&T Labs–:Research

In this talk I will discuss the security considerations for remote electronic voting in public elections. In particular, I'll examine the feasibility of running national federal elections over the Internet. The focus of this talk is on the limitations of the current deployed infrastructure in terms of the security of the hosts and the Internet itself. I will conclude that at present, our infrastructure is inadequate for remote Internet voting.

User Environment
Session Chair: Ken Coar, The Apache Software Foundation/IBM

Sandboxing Applications
Vassilis Prevelakis, University of Pennsylvania, and Diomidis Spinellis, Athens University

Building a Secure Web Browser
Sotiris Ioannidis, University of Pennsylvania, and Steven M. Bellovin, AT&T Labs–Research

Citrus Project: True Multilingual Support for BSD Operating Systems
Jun-ichiro itojun Hagino, Internet Initiative Japan Inc.

Tools
Session Chair: Yoonho Park, ReefEdge, Inc.

Reverse-Engineering Instruction Encodings
Wilson C. Hsieh, University of Utah; Dawson Engler, Stanford University; and Godmar Back, University of Utah

An Embedded Error Recovery and Debugging Mechanism for Scripting Language Extensions
David M. Beazley, University of Chicago

Interactive Simultaneous Editing of Multiple Text Regions
Robert C. Miller and Brad A. Myers, Carnegie Mellon University

Online Privacy: Promise or Peril?
Lorrie Faith Cranor, AT&T Labs--Research

This talk will discuss the privacy concerns raised by online data-collection practices, as well as the efforts to address these concerns through laws, self-regulation, and technology. The talk will focus on the emerging Platform for Privacy Preferences (P3P) standard. P3P-enabled Web sites make statements about how they handle user data available in a machine-readable (XML) format. P3P-enabled browsers can "read" these statements automatically and compare them to the user's privacy preferences.

Kernel
Session Chair: Drew Gallatin, Duke/FreeBSD

Kqueue–A Generic and Scalable Event Notification Facility
Jonathan Lemon, FreeBSD Project

Improving the FreeBSD SMP Implementation
Greg Lehey, IBM LTC Ozlabs

Page Replacement in Linux 2.4 Memory Management
Rik van Riel, Conectiva Inc.

Web Servers
Session Chair: Mohit Aron, Zambeel Inc.

High-Performance Memory-Based Web Servers: Kernel and User-Space Performance
Philippe Joubert, ReefEdge Inc.; Robert King, IBM Research; Richard Neves, ReefEdge Inc.; Mark Russinovich, Winternals Software; and John M. Tracey, IBM Research

Kernel Mechanisms for Service Differentiation in Overloaded Web Servers
Thiemo Voigt, Swedish Institute of Computer Science; Renu Tewari and Douglas Freimuth, IBM T.J. Watson Research Center; and Ashish Mehra, iScale Networks

Storage Management for Web Proxies
Elizabeth Shriver and Eran Gabber, Bell Labs; Lan Huang, SUNY Stony Brook; and Christopher A. Stein, Harvard University

Getting to Grips with Secure DNS
Jim Reid, Nominum, Inc.

Secure DNS (DNSSEC) has been developed as a way of validating the data in the DNS and preventing spoofing attacks. The protocol uses public-key cryptography to digitally sign DNS traffic. This talk explains the new resource records that have been added to the DNS and how to use the tools in BIND9 that are provided for creating and maintaining signed zones. The practical and operational problems of deploying DNSSEC, notably key management, will also be discussed.

Storage
Session Chair: Clem Cole, Paceline Systems Corp.

User-Level Extensibility in the Mona File System
Paul W. Schermerhorn, Robert J. Minerick, Peter Rijks, and Vincent W. Freeh, University of Notre Dame

Volume Managers in Linux
David Teigland and Heinz Mauelshagen, Sistina Software, Inc.

The Design and Implementation of a Transparent Cryptographic File System for UNIX
Giuseppe Cattaneo, Luigi Catuogno, Aniello Del Sorbo, and Pino Persiano, Università di Salerno

Work-in-Progress Reports
Session Chair: Greg Ganger, Carnegie Mellon University

Short, pithy, and fun, Work-in-Progress reports introduce interesting new or ongoing work. If you have work you would like to share or a cool idea that's not quite ready for publication, send a one- or two-paragraph summary to usenix01wips@usenix.org. We are particularly interested in presenting students' work. A schedule of presentations will be posted at the conference, and the speakers will be notified in advance. Work-in-Progress reports are five-minute presentations; the time limit will be strictly enforced.

Active Content: Really Neat Technology or Impending Disaster?
Charlie Kaufman, Iris Associates

From Java-enabled Web pages to self-extracting zip files, the world has become addicted to active content. This powerful technique improves data compression, CPU and network efficiency, and interactive user interfaces. The price? It's nearly impossible to make secure. This talk discusses surprising places we use active content, the security threats we are ignoring, and what we as individuals and as a community can do about it.

Work-in-Progress Reports
Session Chair: Greg Ganger, Carnegie Mellon University

See the General Track (column 1) for a description of this shared session.