Abstract

Security will never catch up with rapidly-progressing technology unless
we make technical leaps using new paradigms.  This talk will start with
President Bush's national plan for computer security, and explore it as
a paradigm, looking at underlying assumptions, missing elements, and how
it balances competing needs such as freedom and safety, timeliness and
thoroughness, and performance and acountability.  If appropriate, we
will bring in cross-cultural and cross-disciplinary concepts.  Then, we
will apply these ideas to one of today's most intractable information
security problems.

Biography

Hilary Holden Hosmer earned a B.A. degree in economics from Bryn Mawr
College, then served as a Peace Corps volunteer in Ivory Coast.  She
earned an M.Ed. from UMass, and worked as a desegregation consultant,
using her African experience to debunk racial stereotypes.  She then
worked for Honeywell, Digital, Blue Cross, and Mass. Hospital
Association, and taught CIS at Bentley College from 1980-1986.  Hosmer
started to do computer security research at MITRE in 1987.  She started
Data Security, Inc. in 1990 to find solutions to "impossible" problems.
 Data Security's clients include the Air Force, the Navy, NSA, as well
as corporate and non-profit organizations.  Hosmer's work on multiple,
perhaps contradictory security policies, drew world-wide attention.  In
1992 Hosmer founded the New Security Paradigms Workshop.  Hosmer has a
long list of publications in areas ranging from MLS DBMS security to
visualizing risk.  She is listed in Who's Who in America.