[Appendix F] Organizations
Author: Simson Garfinkel & Gene Spafford
Date: 1999-02-04T00:22:35Z

#

| Appendix F |

# F. Organizations

Contents:
Professional Organizations
U. S. Government Organizations
Emergency Response Organizations

Here we have collected information on a number of useful organizations you can contact for more information and additional assistance.

## F.1 Professional Organizations

You may find the following organizations helpful. The first few provide newsletters, training, and conferences. FIRST organizations may be able to provide assistance in an emergency.

### F.1.1 Association for Computing Machinery (ACM)

The Association for Computing Machinery is the oldest of the computer science professional organizations. It publishes many scholarly journals and annually sponsors dozens of research and community-oriented conferences and workshops. The ACM also is involved with issues of education, professional development, and scientific progress. It has a number of special interest groups (SIGS) that are concerned with security and computer use. These include the SIGS on Security, Audit and Control; the SIG on Operating Systems; the SIG on Computers and Society; and the SIG on Software Engineering.

The ACM may be contacted at:

> ACM Headquarters
> 11 West 42 Street
> New York, NY 10036 &
> plus;1-212-869-7440

The ACM has an extensive set of electronic resources, including information on its conferences and special interest groups. The information provided through the World Wide Web page is especially comprehensive and well organized:

> http://www.acm.org

### F.1.2 American Society for Industrial Security (ASIS)

The American Society for Industrial Security is a professional organization for those working in the security field. ASIS has been in existence for 35 years and has 22,000 members in 175 local chapters, worldwide. Its 25 standing committees focus on particular areas of security, including computer security. The group publishes a monthly magazine devoted to security and loss management. ASIS also sponsors meetings and other group activities. Membership is open only to individuals involved with security at a management level.

More information may be obtained from:

> American Society for Industrial Security
> 1655 North Fort Meyer Drive Suite 1200
> Arlington, VA 22209
> +1-703-522-5800

### F.1.3 Computer Security Institute (CSI)

The Computer Security Institute was established in 1974 as a multiservice organization dedicated to helping its members safeguard their electronic data processing resources. CSI sponsors workshops and conferences on security, publishes a research journal and a newsletter devoted to computer security, and serves as a clearinghouse for security information. The Institute offers many other services to members and the community on a for-profit basis. Of particular use is an annual Computer Security Buyer's Guide that lists sources of software, literature, and security consulting.

You may contact CSI at:

> Computer Security Institute
> 600 Harrison Street
> San Francisco, CA 94107
> +1-415-905-2626

### F.1.4 High Technology Crimes Investigation Association (HTCIA)

The HTCIA is a professional organization for individuals involved with the investigation and prosecution of high-technology crime, including computer crime. There are chapters throughout the U.S., and some are forming in other countries. Information is available via the WWW page:

> http://htcia.org

John Smith, of the Northern California chapter, will provide contact information to interested parties who do not have WWW access:

> Voice: +1-408-299-7401
> Email: jsmith@netcom.com

### F.1.5 Information Systems Security Association (ISSA)

The ISSA is an international organization of information security professionals and practitioners. It provides education forums, publications, and peer interaction opportunities that enhance the knowledge, skill, and professional growth of its members.

For more information about ISSA, contact:

> ISSA Headquarters
> 4350 DiPaolo Center Suite C
> Glenview, IL 60025-5212
> +1-708-699-6441 +1-708-699-6369

ISSA has a WWW page at:

> http://www.uhsa.uh.edu/issa

### F.1.6 The Internet Society

The Internet Society sponsors many activities and events related to the Internet, including an annual symposium on network security. For more information, contact the Internet Society:

> http://www.isoc.org

You may also contact:

> +1 703/648- 9888
> Email: membership@isoc.org

### F.1.7 IEEE Computer Society

With more than 100,000 members, the Computer Society is the largest member society of the Institute of Electrical and Electronics Engineers (IEEE). It too is involved with scholarly publications, conferences and workshops, professional education, technical standards, and other activities designed to promote the theory and practice of computer science and engineering. The IEEE-CS also has special interest groups, including a Technical Committee on Security and Privacy, a Technical Committee on Operating Systems, and a Technical Committee on Software Engineering. More information on the Computer Society may be obtained from:

> IEEE Computer Society
> 1730 Massachusetts Avenue N.W.
> Washington, DC 20036-1903
> (800) 678-4333

The Computer Society has a set of WWW pages starting at:

> http://www.computer.org

The Computer Society's Technical Committee on Security and Privacy has a number of resources, including an online newsletter:

> http://www.itd.nrl.navy.mil/ITD/5540/ieee

### F.1.8 IFIP Technical Committee 11

The International Federation for Information Processing, Technical Committee 11, is devoted to research, education, and communication about information systems security. The working groups of the committee sponsor various activities, including conferences, throughout the world. More information may be obtained from:

> http://www.iaik.tu-graz.ac.at/tc11_hom.html

### F.1.9 National Computer Security Association (NCSA)

The National Computer Security Association is a commercial organization devoted to computer security. They sponsor tutorials, exhibitions, and other activities with a particular emphasis on PC users. NCSA may be contacted at:

> National Computer Security Association
> 10 South Courthouse Avenue
> Carlisle, PA 17013
> +1-717-258-1816
> office@ncsa.com

The NCSA has a WWW page at:

> http://www.ncsa.com

### F.1.10 USENIX/SAGE

The USENIX Association is a nonprofit education organization for users of UNIX and UNIX-like systems. The Association publishes a refereed journal (Computing Systems) and newsletter, sponsors numerous conferences, and has representatives on international standards bodies. The Association sponsors an annual workshop on UNIX security and another on systems administration.

SAGE stands for the Systems Administrators Guild. It is a special technical group of the USENIX Association. To join SAGE, you must also be a member of USENIX.

Information on USENIX and SAGE can be obtained from:

> USENIX Association
> 2560 Ninth Street Suite 215
> Berkeley, CA 94703
> +1-510- 528-8649
> office@usenix.org

The USENIX WWW page is at:

> http://www.usenix.org

E.4 Software Resources |  | F.2 U. S. Government Organizations