Layered Assurance Workshop (LAW)

Program     •     Speakers     •     Presentations


The Ninth Layered Assurance Workshop (LAW)
7--8 December 2015
Los Angeles, California

The LAW Organizing Committee in cooperation with Applied Computer Security Associates
is pleased to announce that LAW 2015 will again be held as an affiliated workshop of the Annual
Computer Security Applications Conference (ACSAC). 

LAW is a unique opportunity for interchange on the topic of compositional (or modular) assurance. It is founded on the bold proposition that it is possible to build assured systems from compositions of previously assured components, while being able to derive the system level properties (e.g., safety & security) systematically from the properties of the components. LAW spans the theoretical, engineering, and certification challenges to be met in making compositional assurance for such systems a reality.

We say "layered" assurance to encompass diverse manifestations of combined assurance, including composition (of assured components), incremental certification (incremental cost for incremental change), abstraction layers (building upon assurance of lower layers), and polymorphism (common assurance of variants, such as among members of a product line).

Contributed Papers

LAW solicits contributed papers on topics of interest to LAW participants. Contributors are encouraged to
consider topics relating ACSAC's theme of Security and Privacy in the Internet of Things.

TOPICS OF INTEREST for LAW contributed papers:

The workshop theme and primary topic of interest is: Compositional Trustworthiness.
Other topics of interest include:

  • predictions and speculations on the future of assurance
  • new application domains with emerging need for assurance
  • assurance for cyber-physical systems (CPS) and the Internet of Things (IoT) / Internet of Everything (IoE)
  • theoretical foundations for compositional and incremental assurance
  • compositional and incremental certification
  • modular assurance cases
  • case studies and challenges from diverse application domains (e.g. aerospace, critical infrastructures, automotive, medical, defense, mobile)
  • combining methods of assurance (multi-legged assurance)
  • component-based and compositional interpretations of hazards, verification, and assurance arguments
  • composability of component properties, to achieve system security and safety
  • compositional verification
  • examples of assurance cases for security, safety, correctness
  • metrics for measuring safety and security
  • standards for assessing assurance of safety and security properties
  • processes, procedures, tools that would simplify assurance
  • arguments for product families
  • role of architecture and the relationship of architecture to assurance of system properties
  • theory, tools and techniques to support compositional and incremental assurance
  • impediments to compositional assurance, such as properties that defy composition or architectures that thwart compositional assurance
  • legal aspects and politics of assurance
  • argumentation
  • bridging technical assurance measures to human confidence and trust
  • assurance and resilience
  • requirements assurance

The preceding list of topics is not intended to be exhaustive. Submissions are encouraged
on any topics that prospective authors consider relevant to the Layered Assurance Workshop.


Peter G. Neumann of SRI International will again organize and chair lively and thought-provoking panel
sessions. Attendees willing to participate in a panel, or wanting to submit a proposal to organize and chair
a panel session should contact Peter Neumann at Panel proposals should include
a list of qualified likely panel participants.


In addition to distinguished invited speakers, contributed papers and panels, the LAW program will.include a Work-in-Progress (WIP) session, to provide an opportunity to present relevant without writing a full paper. In the spirit of a workshop, we would really like to encourage LAW.participants to share their ongoing work. The WIP session provides the opportunity to a format that is more structured than off-the-cuff, but without with the formality of a contributed.paper, and potentially with more time for questions and discussion.

WIP session slots will be a maximum of 20 minutes in length, including presentation, questions and.discussion It is expected that a pdf of the presentation will be contributed to the LAW proceedings..Please submit your proposals for Work-in-Progress presentations to the LAW Program Chair,.Gabriela Ciocarlie at by October 1, 2015. Proposals should consist of page abstract. Regular contributed paper submissions that are not mature enough for a contributed paper may be resubmitted for consideration as a WIP. Notification will be made by.October 15. Presentation pdfs are due December 1.


Contributed paper submissions due:  September 8, 2015
Notification of paper acceptance/rejection: September 30, 2015
Camera-ready papers due:  Oct. 15, 2015

WIP presentation proposals due: October 1, 2015
WIP proposal acceptance/rejection: October 15, 2015
WIP presentations due: December 1, 2015

LAW will be held: 7--8 December 2015


Since LAW is a workshop rather than a conference or symposium, submissions do not
have to be entirely novel, but they do have to be interesting.
We request that submitted papers be a minimum of 5 pages and a maximum of 10 pages (2500 - 5000
words). Papers exceeding the limit will be truncated for review.

Please ensure that your submission is a PDF file  (including all references and appendices) 
generated according to the ACM instructions at
using the template Option 2 "WITH permission block". Reviewers are not required to read the appendices. 

To submit a paper, please go to


Authors are expected to give a 30 minute presentation of their paper at the Workshop,
and are requested to provide their presentation slides at the time of the workshop for
publication on the LAW web page.

We will operate under a "No Paper, No Podium" and "No Podium, No Paper" policy.
As we now publish an integrated proceedings we must have your final paper by the Oct. 15, 2015 deadline.


Speakers with accepted papers will be required to register for LAW. Registration may be
done at the ACSAC 2015 web site, . One need not register for ACSAC
to register for LAW.


LAW will not publish paper proceedings, however, there will be a single proceedings volume
(pdf) with serial page numbering to facilitate citations. Proceedings and speakers' presentation
slides will be published on the LAW 2015 web page the week that LAW is held and will be
archived there indefinitely. By submitting a paper an author agrees to online publication
of the final version of the paper and presentation material if the paper is accepted.


Gabriela F. Ciocarlie, SRI International
Rance J. DeLong, consultant
Elizabeth Leonard, Naval Research Laboratory
Peter G. Neumann, SRI International
Gordon Uchenick, Coverity


LAW welcomes corporate sponsorship. Interested enterprises please contact

Additional ACSA Events:
NSPW – New Security Paradigms Workshop
LASER – Learning from Authoritative Security Experiment Results