Susan Older: Selected Publications

Copyright notice: The papers and articles referenced below have been provided by the contributing authors as a means to ensure timely dissemination of scholarly and technical work on a non-commercial basis. Copyright and all rights therein are maintained by the authors or by other copyright holders, notwithstanding that they have offered their works here electronically. It is understood and expected that all persons copying this information will adhere to the terms and constraints invoked by each author's copyright.

Security and Access Control

The following article is a survey paper, describing how different formal methods are appropriate for reasoning about different aspects of the same security protocol (in this case, the Needham-Schroeder key-exchange protocol).
Susan Older and Shiu-Kai Chin, ``Formal Methods for Assuring Security of Protocols,'' The Computer Journal, Special Issue on Formal Methods in Computing, Volume 45, pages 46--54, January 2002. (Available as Postscript or PDF.)
Thumrongsak Kosiyatrakul, Susan Older, Polar Humenn, and Shiu-Kai Chin, ``Implementing a Calculus for Distributed Access Control in Higher Order Logic and HOL,'' (invited paper), Computer Network Security: Second International Workshop on Mathematical Methods, Models, and Architectures for Computer Network Security, edited by V. Gorodetsky, L. Popyack, and V. Skormin, Lecture Notes in Computer Science, Volume 2776, 2003. (Available as PDF.)
Thumrongsak Kosiyatrakul, Susan Older, and Shiu-Kai Chin, ``A Modal Logic for Role-Based Access Control,'' Computer Network Security: Third International Workshop on Mathematical Methods, Models, and Architectures for Computer Network Security, edited by V. Gorodetsky, L. Popyack, and V. Skormin, Lecture Notes in Computer Science, Volume 3685, 2005. (Available as PDF.)

IA and CS Education

The following paper describes a unique aspect of our Certificate of Advanced Study in Systems Assurance (CASSA), namely our emphasis on the mathematical and logical foundations for assurance. We describe the desired educational outcomes of our program and our experiences in teaching some of these courses, including the challenges we have faced and student response.

Susan Older and Shiu-Kai Chin. "Building a Rigorous Foundation for Assurance into Information Assurance Education". Proceedings of the 6th National Colloquium for Information Systems Security Education, 2002. (Available as Postscript or PDF.)

The following article is an expanded version of a paper originally presented at the World Conference on Information Security Education (WISE). In it, we describe in detail two of the foundational courses in the CASSA program, discussing both what we teach and what our students are learning. More specifically, we discuss the desired educational outcomes for students in Modeling Concurrent Systems and Principles of Network Security, our observations of student achievement, and course and curricular changes that we have made as a result of those observations. In the process, we also advocate for the use of an outcome-based approach when developing IA courses and curricula.

Susan Older and Shiu-Kai Chin. "Using Outcomes-based Assessment as an Assurance Tool for Assurance Education". Journal of Information Warfare, Volume 2, Issue 3, pages 86--100, 2003. (Available as PDF.)

This paper describes the Advanced Course in Engineering on Cyber Security (ACE-CS), which is a program designed to develop top ROTC cadets into the next generation of cyber security leaders. Modeled after the General Electric Advanced Course in Engineering, ACE-CS is a 10-week summer program that immerses students in the cyber-security discipline through a combination of intense coursework and internships.

Kamal Jabbour and Susan Older. "The Advanced Course in Engineering on Cyber Security: A Learning Community for Developing Cyber-Security Leaders". Proceedings of the Sixth Workshop on Education in Computer Security, July 2004. (Available as PDF.)

Coming Soon The following paper describes an 8-hour "formal-methods boot camp" offered as part of the ACE-CS course.

Shiu-Kai Chin and Susan Older. "A Rigorous Approach to Teaching Access Control". Proceedings of the First Annual Conference on Education in Information Security, September 2006. To appear.

Fairness and Concurrency

Ph.D. thesis: A Denotational Framework for Fair Communicating Processes
Susan Older, "Strong Fairness and Full Abstraction for Communicating Processes," Information and Computation, Volume 163, pages 471-509, December 2000.

Last modified: Tue 25 Jul 2006

Susan Older / sueo AT ecs.syr.edu