Education

Ph.D. (Computer Science)

Faculty of Computer Science, Dalhousie University

Thesis Title: Co-ordinated Port Scans: A Model, A Detector and An Evaluation Methodology

May 2006

M.Sc. (Computing Science)

Department of Mathematics and Statistics, Dalhousie University

Thesis Title: The Application of Neural Networks to the Prediction of the Conductivity of Water

May 1995

B.Sc. (Computing Science)

Department of Mathematics and Statistics, Dalhousie University

Advanced Major Co-operative Education.

May 1993

Research Experience

RESEARCH STAFF MEMBER

CA LABS, CA

Islandia, New York, United States of America

April 2006 - current

Duties: Identify opportunities within the business units at CA that can be transformed into research relationships performed in collaboration with university faculty and students, with a focus on research in the area of enterprise-level security. Perform research that has the potential to impact the strategic direction of CA products and services. Participate in defining CA's corporate strategy. Represent CA to the academic community via invited talks, conference and journal papers, and participation in conference organizing and program committees. I am currently leading seven research projects, one of which is funded by the Department of Homeland Security. My research projects have resulted in 18 publications, 16 invited talks, six panel participations, two patent applications, and $815,295 in external funding awards.

MEMBER OF THE TECHNICAL STAFF

CERT, SOFTWARE ENGINEERING INSTITUTE, CARNEGIE MELLON UNIVERSITY

Pittsburgh, Pennsylvania, United States of America

May 2003 - June 2004, November 2004 - April 2006

Duties: Conducted research into network traffic characterization approaches based on logistic regression modeling. Developed a novel scan detection technique based on research results. Led the deployment of production version of tool, which is in operational use at a client site. Performed analysis of large-scale network traffic for anomalous and intrusive behaviour. Investigated new methods for recognizing host-level anomalies using statistical analysis of network traffic. Developed new visualization techniques for monitoring large volumes of flow-level traffic. These projects have resulted in ten publications, four invited talks and one presentation.

VISITING RESEARCHER

IBM

Toronto, Ontario, Canada

May - August, 2001 and 2002, and July - October 2004

Duties: Assisted in the design and development of the access control portion of WebSphere Commerce Suite. Solved migration issues for access control architecture change from versions 5.1 to 5.2. Assisted in designing, developing and testing combined B2B/B2C access control policies. Wrote report on the ease of migration to Java 2 security model. This work resulted in Java code that was released with WebSphere Commerce Suite version 5.2.

SUMMER SCHOLAR

UNIVERSITY OF EDINBURGH

Edinburgh, Scotland

July - September, 1995

Duties: Optimized and parallelized existing FORTRAN code for a lighting design application using radiosity techniques to calculate the amount of radiant energy in an enclosure. This was written for the Summer Scholarship Programme using MPI on a Cray T3D. This work was published as a technical report.

Professional Experience

SYSTEMS MANAGER

DALHOUSIE UNIVERSITY

Halifax, Nova Scotia, Canada

July 1997 - March 2001

Duties: Hired, trained and supervised full-time, part-time and student technical staff. Provided technical services to internal customers (30 faculty and 1000 students) as well as external customers (such as the Lieutenant Governor of Nova Scotia and Global Information Networking Institute). Managed a heterogeneous computing environment (Solaris, AIX, Novell, NT and Mac/OS), including budget preparation, policy formulation and security incident investigation. Worked with law enforcement leading to the apprehension and conviction of a child pornographer. Founded the Learning Centre in 1998 to provide resources for students taking core-curriculum courses; this Centre is still in operation today.

SOFTWARE ENGINEER

CHEBUCTO COMMUNITY NET

Halifax, Nova Scotia, Canada

January - June 1997

Duties: Assisted in developing CSuite version 1.0. Set up the Apache web server including a virtual server and rewrite rules to serve up French documents depending upon language preference. Modified C code for Pine 3.95 and Lynx 2.7 to allow bilingual services and improve functionality.

MANAGER, TECHNICAL SERVICES

ALLIANCE FOR MARINE REMOTE SENSING

Bedford, Nova Scotia, Canada

October 1995 - January 1997

Duties: Performed system administration for a network of Sparc workstations and PCs connected to a Novell server. Created and maintained web pages. Provided technical consulting to AMRS clients. Performed oceanographic research using remote sensing technology via programming in C, FORTRAN and IDL.

Teaching Experience

Computer Science 4101 - System Administration

COLUMBIA UNIVERSITY

January - May 2008

Sole instructor for a fourth year undergraduate half-course (6 students) covering the basics of systems administration. The focus of the class was on both the technical aspects of systems (using linux) and the managerial aspects of administration. The technical topics covered included scripting, system boot process, user management, file systems, networking, logs, and security. The managerial issues focused on administering large numbers of systems and users, policies, customer care, change management, and ethics.

Computer Science 4170 - Data Communications

DALHOUSIE UNIVERSITY

January - April 2000

Sole instructor for a fourth year undergraduate course (45 students) on data communications, covering transmission basics at the physical layer up to the data link layer and starting on circuit switching and packet switching networks.

Computer Science 1100 - Computer Science I

DALHOUSIE UNIVERSITY

September - December 1997

Taught introductory programming skills to first year university students using Java in a Unix environment in conjunction with another professor (122 students in my section). Responsible for all lectures. Jointly responsible for assignments and exams.

Computer Science 2450 - Computer Organization and Architecture

DALHOUSIE UNIVERSITY

May - June 1997

Primary instructor for a second year university course (15 students) on computer organization and architecture, starting with binary logic, through simple gates, flip-flops and multiplexors to memory and CPU architecture.

Publications

J. Glanfield, D. Paterson, C. Smith, T. Taylor, S. Brooks, C. Gates, and J. McHugh (2010) FloVis: Leveraging Visualization to Protect Sensitive Network Infrastructure. Accepted to the NATO Information Systems Technology Panel Symposium on Information Assurance and Cyber Defense. Antalya, Turkey. April 26-27, 2010.

S.Brunza, O. McCusker, J. Glanfield, D. Paterson, C. Gates, and J. McHugh (2010) Combining Trust and Behavioral Analysis to Detect Security Threats. Accepted to the NATO Information Systems Technology Panel Symposium on Information Assurance and Cyber Defense. Antalya, Turkey. April 26-27, 2010.

T. Whalen and C. Gates (2010) Watching the watchers: "voluntary monitoring" of Infosec employees. Information Management and Computer Security. Vol. 18. No. 1.

E. Hadar and C. Gates (2009) Cloud Computing Web-Services Offering and IT Management Aspects. In Proceedings of the Cloud Computing Workshop at the International Conference on Object Oriented Programming, Systems, Languages and Applications OOPSLA 2009. Orlando, FL. October 25, 2009.

J. Glanfield, S. Brooks, T. Taylor, D. Paterson, C Smith, C. Gates, J. McHugh (2009) OverFlow: An Overview Visualization for Network Analysis. In Proceedings of the 6th International Workshop on Visualization for Cyber Security. Atlantic City, NJ. October 11, 2009.

M. Bishop, C. Gates and J. Hunker (2009) Sisterhood of the Travelling Packets. In Proceedings of the 2009 New Security Paradigms Workshop. Oxford, UK. September 8-11, 2009.

T. Whalen and C. Gates (2009) Watchdog or Guardian? Unpacking the Issues Surrounding the Monitoring of InfoSec Employees. In Proceedings of the 2009 International Symposium on Human Aspects of Information Security & Assurance. Athens, Greece. June 25-26, 2009.

M. Bishop, D. Frincke, C. Gates and F. Greitzer (2009) AZALIA: and A to Z Assesment of the Likelihood of Insider Attack. In Proceedings of the 2009 IEEE International Conference on Technologies for Homeland Security. Waltham, MA. May 11-12, 2009. (pdf)
(Note: © 2009 IEEE. Personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution to servers or lists, or to reuse any copyrighted component of this work in other works must be obtained from the IEEE.)

S. Laqua, A. Sasse, C. Gates and S. Greenspan (2009) Making Sense of the Unknown: Knowledge Dissemination in Organizations. In the 2nd Sensemaking Workshop. Boston, MA. April 4-5, 2009. (pdf)

T. Taylor, D. Paterson, J. Glanfield, C. Gates, S. Brooks, J. McHugh (2009) FloVis: Flow Visualization System. In Proceedings of the Cybersecurity Applications and Technologies Conference for Homeland Security (CATCH). Washington, DC. March 3-4, 2009. (pdf)
(Note: © 2009 IEEE. Personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution to servers or lists, or to reuse any copyrighted component of this work in other works must be obtained from the IEEE.)

C. Gates (2009) Coordinated Scan Detection. In Proceedings of the 16th Annual Network & Distributed System Security Symposium (NDSS). San Diego, CA. February 8-11, 2009. Acceptance Rate: 12% (20/171). (pdf)

M. Bishop, S. Engle, S. Peisert, S. Whalen, and C. Gates (2009) Case Studies of an Insider Framework. In Proceedings of the 42nd Hawaii International Conference on System Sciences (HICSS). Waikoloa, Hawaii. January 5-8, 2009. (pdf)

A. Jerbi, E. Hadar, C. Gates, and D. Grebenev (2008) An Access Control Reference Architecture. In Proceedings of the 2nd Computer Security Architecture Workshop. Fairfax, VA. October 31, 2008. (pdf)

M. Bishop, S. Engle, S. Peisert, S. Whalen, and C. Gates (2008) We Have Met the Enemy and He Is Us. In Proceedings of the 2008 New Security Paradigms Workshop (NSPW). Lake Tahoe, CA. September 22-25, 2008. (pdf)
(Note: © ACM 2008. This is the author's version of the work. It is posted here by permission of ACM for your personal use. Not for redistribution. The definitive version will be published in Proceedings of the 2008 Workshop on New Security Paradigms.)

C. Gates and J. McHugh (2008) The Contact Surface: A Technique for Exploring Internet Scale Emergent Behaviors. In Proceedings of the Fifth Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA). Pages 228-246. Paris, France. July 10-11, 2008. (pdf)

M. Bishop and C. Gates (2008) Defining the Insider Threat. In the Fourth Annual Cyber Security and Information Intelligence (CSIIRW). Oak Ridge, TN. May 12-14, 2008. (pdf)

C. Gates (2008) A Case Study in Testing a Network Security Algorithm. In Proceedings of the 4th International Conference on Testbeds and Research Infrastructures for the Development of Networks and Communities. Innsbruck, Austria. March 18-20, 2008. (pdf)

M. Dunlop, C. Gates, C. Wong, and C. Wang (2007) SWorD: A Simple Worm Detection Scheme. In Proceedings of the International Symposium on Information Security. Pages 1752-1769. Algarve, Portugal. November 26-30, 2007. Acceptance Rate: 24% (20/82). (pdf)

C. Gates, C. Taylor, and M. Bishop (2007) Dependable Security: Testing Network Intrusion Detection Systems. In Proceedings of the Third Workshop on Hot Topics in System Dependability (HotDep'07). Edinburgh, Scotland. June 26, 2007. (pdf)

C. Gates (2007) Access Control Requirements for Web 2.0 Security and Privacy. Position Paper accepted to the Workshop on Web 2.0 Security and Privacy. Oakland, CA. May 24, 2007. (pdf)

T. Whalen and C. Gates (2007) A Psychological Profile of Defender Personality Traits. Journal of Computers. 2.2: 84-93. April 2007. (pdf)

B. Trammell and C. Gates (2006) NAF: The NetSA Aggregated Flow Tool Suite. In Proceedings of the 20th Large Installation Systems Administration Conference (LISA 2006). Pages 221-231. Washington, DC. December 3 - 8, 2006. (pdf)

C. Gates and C. Taylor (2006) Challenging the Anomaly Detection Paradigm: A Provocative Discussion. In Proceedings of the 2006 New Security Paradigms Workshop (NSPW). Pages 21-29. Schloss-Dagstuhl, Germany. September 18-21, 2006. Acceptance Rate: 32% (12/38). (pdf) (ps)
(Note: © ACM 2006. This is the author's version of the work. It is posted here by permission of ACM for your personal use. Not for redistribution. The definitive version will be published in Proceedings of the 2006 Workshop on New Security Paradigms.)

C. Gates, J. McNutt, J. Kadane, and M. Kellner (2006) Scan Detection on Very Large Networks Using Logistic Regression Modeling. In Proceedings of the IEEE Symposium on Computers and Communications. Pages 402-407. Pula-Cagliari, Sardinia, Italy. June 26-29, 2006. (pdf)
(Note: © 2005 IEEE. Personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution to servers or lists, or to reuse any copyrighted component of this work in other works must be obtained from the IEEE.)

M. Collins, C. Gates, and G. Kataria (2006) A Model for Opportunistic Network Exploits: The Case of P2P Worms. Workshop on the Economics of Information Security (WEIS). Cambridge, UK. June 26-28, 2006. (pdf)

C. Gates, J. McNutt, J. Kadane, and M. Kellner (2006) Detecting Scans at the ISP Level. Technical Report CMU/SEI-2006-TR-005, Carnegie Mellon University Software Engineering Institute. April 2006. (pdf)

C. Gates and T. Whalen (2006) Personal Information on the Web: Methodological Challenges and Approaches. In the CHI 2006 Workshop on Privacy and HCI: Methodologies for Studying Privacy Issues. Montreal, Canada. April 23, 2006.

T. Whalen and C. Gates (2006) Defender Personality Traits. In Proceedings of the Workshop on Intelligence and Security Informatics. Pages 85-91. Singapore. April 9, 2006. Acceptance Rate: 16% (15/92).

C. Gates (2006) Co-ordinated Port Scans: A Model, A Detector and An Evaluation Methodology. PhD Thesis. Dalhousie University. February, 2006. (pdf)(ps)

T. Whalen and C. Gates (2006) Defender Personality Traits. Technical Report CS-2006-01, Dalhousie University. (pdf) (ps)

C. Gates and T. Whalen (2005) Private Lives: User Attitudes Towards Personal Information on the Web. Technical Report CS-2005-06, Dalhousie University. (pdf) (ps)

C. Gates and D. Becknel. (2005) Host Anomalies from Network Data. In Proceedings from the Sixth IEEE Systems, Man and Cybernetics Information Assurance Workshop. Pages 325-332. West Point, New York. June 15 - 17, 2005. (pdf)
(Note: © 2005 IEEE. Personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution to servers or lists, or to reuse any copyrighted component of this work in other works must be obtained from the IEEE.)

T. Whalen and C. Gates (2005) Public Perception of Private Information on Search Engines. Technical Report CS-2005-01, Dalhousie University. (pdf) (ps)

J.R. Binkley, J. Mchugh, and C. Gates (2005) Locality, Network Control, and Anomaly Detection. Technical Report 04-04, Portland State University. (ps)

C. Gates, M. Collins, M. Duggan, A. Kompanek, and M. Thomas. (2004) More NetFlow Tools: For Performance and Security. In Proceedings of the 18th Large Installation Systems Administration Conference (LISA 2004). Pages 121 - 132. Atlanta, Georgia. November 14 - 19, 2004. Acceptance Rate: 31% (22/70). (pdf) (ps)

C. Gates and T. Whalen. (2004) Profiling the Defenders. In Proceedings of the 2004 New Security Paradigms Workshop (NSPW 2004). Pages 107 - 114. Nova Scotia, Canada. September 20 - 23, 2004. Acceptance Rate: 24% (12/51) (pdf) (ps)
(Note: © ACM 2004. This is the author's version of the work. It is posted here by permission of ACM for your personal use. Not for redistribution. The definitive version was published in Proceedings of the 2004 Workshop on New Security Paradigms http://doi.acm.org/10.1145/1065907.1066044)

J. McHugh, C. Gates, and D. Becknel. (2004) Situational Awareness and Network Traffic Analysis. In Proceedings of the Gdansk NATO Workshop on Cyberspace Security and Defence: Research Issues. Pages 209 - 228, Gdansk, Poland. September 6 - 9, 2004.

C. Gates and J. Rouse. (2003) The Yearly Review, or How to Evaluate Your Sys Admin. In Proceedings of the 17th Systems Administration Conference (LISA 2003). Pages 95 - 104. San Diego, California. October 26 - 31, 2003. Acceptance Rate: 25% (24/96). (pdf) (ps)

C. Gates and J. Slonim. (2003) Owner-Controlled Information. In Proceedings of the 2003 New Security Paradigms Workshop (NSPW 2003). Pages 103 - 111. Ascona, Switzerland. August 18 - 21, 2003. Acceptance Rate: 30% (13/43). (pdf) (ps)
(Note: © ACM 2003. This is the author's version of the work. It is posted here by permission of ACM for your personal use. Not for redistribution. The definitive version was published in Proceedings of the 2003 Workshop on New Security Paradigms http://doi.acm.org/10.1145/986655.986670)

J. McHugh and C. Gates. (2003) Locality: A New Paradigm for Thinking About Normal Behavior and Outsider Threat. In Proceedings of the 2003 New Security Paradigms Workshop (NSPW 2003). Pages 3 - 10. Ascona, Switzerland. August 18 - 21, 2003. Acceptance Rate: 30% (13/43). (pdf)
(http://portal.acm.org/citation.cfm?doid=986655.986657)

C. Gates. (2003) The Modeling and Detection of Distributed Port Scans: A Thesis Proposal. Technical Report CS-2003-01, Dalhousie University. (pdf) (ps)

J. Slonim, M. McAllister, K. Rockwood, T. Chiasson, C. Gates, and K. Hawkey. (2001) A Human-Centric Architecture for Personalization and Privacy. SSGRR 2001 Italy, August 2001.

J. Slonim, T. Chiasson, C. Gates and M. McAllister. (2001) An extensible, human-centric framework that promotes universal access to electronic commerce. In Proceedings of the 2nd International Symposium on Electronic Commerce Technologies . Pages 116 - 126. Hong Kong, China. April 26 - 28, 2001.

T. Chiasson and C. Gates. (2000) Electronic commerce universal access device - the knowledge-acquiring layered infrastructure (KALI) project. ACM Crossroads. 7.1: 28 - 32.

J. Slonim, T. Chiasson and C. Gates. (2000) Creating an electronic commerce device which promotes universal access: the KALI project. Lecture Notes in Computer Science. 1830: 2 - 12.

I. Caines, C. Gates, R. Guy and R. Nowakowski. (1999) Periods in taking and splitting games. American Mathematical Monthly, 106: 359 - 361.

C. Gates. (1995) Optimisation of lighting design application by implementation on high performance parallel computing hardware. Edinburgh Parallel Computing Centre. Technical Report SS-95-15. (gzip'd ps)

C. Gates. (1995) The Application of Neural Networks to the Prediction of the Conductivity of Water. Masters Thesis. Dalhousie University.

C. Gates. (1994) Why don't nets work for Peter? APICS Annual Computer Science Conference Proceedings. Acadia University. Wolfville, Nova Scotia.

Patents

1. U.S. Application Serial No. 12/560,754 (Filed)
   System, Method, and Software for Integrating Cloud Computing Systems
   E. Hadar, C. Gates, K. Esfahany, M. Chiaramonte, E. Moscovich and G. Bodine
   Patent application filed in the United States, September 16, 2009.
2. U.S. Application Serial No. 12/116,662 (Filed)
   System and Method for Dissemination of Relevant Knowledge
   Carrie Gates and Steven Greenspan.
   Patent application filed in the United States, May 7, 2008.

Funding and Grants

• Principal Investigator. FloVis: Flow Visualization System. Department of Homeland Security (DHS BAA 07-09), Contract Number N66001-08-C-2032. April 2008 - September 2010. $815,295.

Presentations and Panels

"CyberSecurity for a Changing World" with panelists Jamie Van Randwyk (Sandia National Laboratories) and Piotr (Peter) Zbiegiel (Argonne National Labs) and chair Jim Costa (Sandia National Laboratories). SuperComputing Broader Engagement Program, Portland, OR. 16 November 2009.

"Data Visualization Technologies" with panelists John Goodall (Secure Decisions), LTC Gregory Conti (US Military Academy), and Bill Pike (Pacific Northwest National Laboratory). USSS Global Cyber Security Conference, Washington, DC. 5 August 2009.

"Testbeds and Their Relevance for the Development of New Products" with panelists Michael Rumsewicz (University of Adelaide), Ina Schieferdecker (Fraunhofer FOKUS), Ronan Skehill (University of Limerick), and Marcin Solarski (Deutsche Telekom A.G. Laboratories). 4th International Conference on Testbeds and Research Infrastructures for the Development of Networks and Communities, Innsbruck, Austria. 19 March 2008.

"Real Data is Not Enough!" Panel participant on "Real Datasets and Experiment Fidelity" with panelists Doug Maughan (DHS), Sam Gorton (Skiaon) and Steve Schwab (Sparta). DETER Workshop, Boston, MA. 7 August 2007.

"Challenging the Anomaly Detection Paradigm: A Provocative Discussion" NSPW Session, Annual Computer Security Applications Conference, Miami Beach, FL, USA. 14 December 2006.

"Security Visualization: A Case Study." Annual Computer Security Applications Conference, Case Studies Track, Tucson, Arizona. 7 December 2005.

Invited Talks

19 September 2009	Keynote: Usability Challenges in the Security Domain: Is Security a Special Case? 3rd India International HCI Conference, Bangalore, India
15 September 2009	Invited Talk: Technology Trends for the Future, and Their Implications for Governance and Privacy Second International Symposium on Global Information Governance , Prague, Czech Republic
16 June 2009	ISSNet NSERC Strategic Network Grant on CyberSecurity, Carleton University, Canada
11 June 2009	CA Council for Technical Excellence, Los Angeles, USA
22 April 2009	CA Architect's Conference, Islandia, NY, USA
18 February 2009	Digital Security Lab, Carleton University, Canada
12 February 2009	Software Security Lab, University of California Irvine, USA
20 January 2009	Security Research Group, University of California Davis, USA
20 July 2008	Workshop on Countering Insider Threats, Schloss Dagstuhl, Germany
12 March 2008	Information Security Group, Istituto di Informatica e Telematica (IIT), National Research Council (C.N.R.), Pisa, Italy
5 March 2008	Pacific Northwest National Laboratory, Richland, USA
22 February 2008	Department of Electrical Engineering and Computer Science, United States Military Academy, West Point, USA
13 February 2008	Security Research Group, Columbia University, USA
25 April 2007	Information Systems and Internet Security Laboratory, Polytechnic University, USA.
27 November 2006	CMU Usable Privacy and Security Laboratory, Carnegie Mellon University, USA.
9 May 2006	MITACS Digital Security Seminar Series, Carleton University, Canada.
23 March 2006	IBM Centers for Advanced Studies, Toronto, Canada.
28 October 2005	Information Networking Institute, Carnegie Mellon University, USA.
27 January 2005	DETER Project Meeting, UC Berkeley, USA.
19 August 2004	Department of Computer Science, University of South Carolina, USA.
23-24 March 2004	CERIAS Security Symposium, Purdue University, USA.
12 November 2003	Security Seminar, The Center for Education and Research in Information Assurance and Security (CERIAS), Purdue University, USA.
21 July 2003	Data Privacy Lab, Carnegie Mellon University, USA.
10 July 2001	IBM Canada Centre for Advanced Studies, Canada.

Thesis Committees

Committee Member (MCS)

Teryl Taylor, Dalhousie University

FloVis: A Network Security Visualization Framework

Thesis Advisor: John McHugh, Dalhousie University

17 April 2009.

Candidacy Examiner (PhD)

Maritza Johnson, Columbia University

Subject Area: Usable Security Policy Management

Thesis Advisor: Steve Bellovin, Columbia University

12 March 2009.

External Examiner (PhD)

Vanessa Frias-Martinez, Columbia University

Behavior-based Admission and Access Control for Network Security

Thesis Advisor: Sal Stolfo, Columbia University

29 September 2008.

Service

Research Community:

General Chair

Annual Computer Security Applications Conference

• Austin, TX, USA, December 2010
• Honolulu, HI, USA, December 2009

International Symposium on Global Information Governance (ISGIG)

• Pisa, Italy, March 2008

Program Chair

Workshop on Visualization for Computer Security (VizSec) - co-chair

• Atlantic City, NJ, USA, October 2009

New Security Paradigms Workshop (NSPW) - co-chair

• Concord, MA, USA, September 2010

Program Committee Member

New Security Paradigms Workshop

• Concord, MA, USA, September 2010 (program co-chair)
• Oxford, UK, September 2009
• Olympic Valley, CA, USA, September 2008
• New Hampshire, USA, September 2007
• Schloss-Dagstuhl, Germany, September 2006
• Lake Arrowhead, CA, USA, September 2005
• Nova Scotia, Canada, September 2004

Workshop on Systematic Approaches to Digital Forensic Engineering

• Oakland, CA, USA, May 2010
• Oakland, CA, USA, May 2009

Annual Computer Security Applications Conference

• Honolulu, HI, USA, December 2009
• Anaheim, CA, USA, December 2008
• Miami, FL, USA, December 2007
• Miami, FL, USA, December 2006

Workshop on Visualization for Computer Security (VizSec)

• Atlantic City, NJ, USA, October 2009 (program co-chair)
• Boston, MA, USA, September 2008
• FairFax County, VA, USA, November 2006

Workshop on Cyber Security Experimentation and Test

• Montreal, Canada, August 2009

Workshop on Managing Insider Security Threats

• West Lafayette, IN, USA, June 2009

Workshop on Web 2.0 Privacy and Security

• Oakland, CA, USA, May 2008

Workshop on Security and QoS in Communication Networks

• Baltimore, MD, USA, September 2006

Symposium On Usable Privacy and Security

• Pittsburgh, PA, USA, July 2005

Member, Sc|Net (SuperComputing) Security Team

International Conference for High Performance Computing, Networking, Storage and Analysis

• New Orleans, LA, USA, November 2010 (Security Team Co-Lead)
• Portland, OR, USA, November 2009 (Security Team Co-Lead)
• Austin, TX, USA, November 2008
• Reno, NV, USA, November 2007
• Tampa, FL, USA, November 2006
• Seattle, WA, USA, November 2005

Publications Chair

IEEE Symposium on Security and Privacy

• Oakland, CA, USA, May 2009

Workshop on Systematic Approaches to Digital Forensic Engineering

• Oakland, CA, USA, May 2009

Poster Session Chair

Usenix Security

• Montreal, Canada, August 2009
• San Jose, CA, USA, July 2008

Publicity Chair

Annual Computer Security Applications Conference

• Anaheim, CA, USA, December 2008
• Miami, FL, USA, December 2007
• Miami, FL, USA, December 2006

Scholarship Committee Member

Grace Hopper Celebration of Women in Computing

• Tucson, AZ, USA, October 2009
• Keystone, CO, USA, October 2008
• Orlando, FL, USA, October 2007
• San Diego, CA, USA, October 2006

Industry Advisory Committee Member

Grace Hopper Celebration of Women in Computing

• Orlando, FL, USA, October 2007

Local Chair

New Security Paradigms Workshop

• Nova Scotia, Canada, September 2004

Reviewer

Articles

• Journal of Computer Security (2008)
• IEEE Security & Privacy Magazine (2007)
• Communications of the ACM (2006)

Book Chapters

• The Handbook of Information Security. Editor Hossein Bidgoli, John Wiley & Sons, Inc., December 2005

Graduate Committee

September 2002 - March 2003

Dalhousie Computer Science Society

September 2001 - April 2002, September - December 2002

Faculty Search Committee

December 2001 - September 2002

Dalhousie Senate Computing and Information Technology Planning Committee

September 2001 - September 2002

Dean's Executive Committee

July 1998 - April 2001

Honours and Awards

• Adjunct, Council for Technical Excellence, CA - July 2007 - June 2008
• IBM Scholars PhD Fellowship, IBM - September 2003 - August 2005
• Grace Hopper Award, Vancouver, Canada - November 2002
• Citizenship Award, Faculty of Computer Science, Dalhousie University - 2002
• Student Appreciation Award, Faculty of Computer Science, Dalhousie University - 2002
• IBM CAS Fellowship, Center for Advanced Studies, IBM, Toronto, Canada - January 2001 - December 2003
• 12^th International School for Computer Science Researchers, Lipari International School, Italy: accepted into course on E-Commerce and On-Line Algorithms, 8 - 22 July 2000.
• Dalhousie University Fellowship - 1993-94
• Atlantic Tractors Scholarship - 1993-94
• Atlantic Tractors Scholarship - 1988-89

Professional Affiliations

• Institute of Electrical and Electronics Engineers (IEEE)
  • IEEE Computer Society
  • IEEE Technical Committee on Security and Privacy
• Association for Computing Machinery (ACM)
  • ACM Special Interest Group on Security, Audit and Control
• Usenix/SAGE

Hobbies and Interests

• horseback riding
• travelling
• singing
• photography