Tuesday 4 August and Wednesday 5 August, 2009, San Antonio, Texas, USA

The Third Annual Layered Assurance Workshop (LAW 2009)

o  Workshop Description
o  Workshop Committee
o  Invited Speakers
o  Workshop Program
o  Registration and Hotel
o  Contacts

This was the third in the Layered Assurance Workshop (LAW) series, sponsored by the Air Force Research Laboratory (AFRL) and Raytheon, and hosted by the AF Cryptographic Modernization Program Office (CMPO). Check this web site in the future for links to the proceedings of this workshop and those of previous Workshops in this series.


Links to the presentations and breakout summaries are now in the Program section.


The Third Layered Assurance Workshop was held at the Hyatt Regency Hotel, on the River Walk, in San Antonio, Texas. 

Workshop Description

The Third Layered Assurance Workshop (LAW) will be held in San Antonio, Texas, August 4-5, 2009. If you have attended a previous meeting of the LAW we believe you will find this year's offering to continue to provide a forum for vital exchange as well as a maturing source of information focused on key issues concerning the effective and efficient modular construction and certification of assured systems from assured components. It is widely recognized that such an approach is the most promising way to achieve diverse and flexible systems that can be certified quickly and cost-effectively. There are still challenges to be met before these goals can be fully realized.

For the past two years the Layered Assurance Workshop has grown and evolved. The first LAW in 2007 took an exploratory approach: relying heavily on the participants' experiences to establish the agenda. During the opening session the participants were invited to identify and vote on the topics to be discussed. This approach was very valuable for the workshop in its infancy, as it provided us a measure of confidence that we were capturing the needs and concerns that proceeded from the past experiences of the participants.

The second LAW in 2008 was attended by approximately 80 individuals representing more than 30 distinct organizations. In that Workshop more of the program was established in advance, with several keynote talks chosen from submissions resulting from an open invitation, followed by medium-sized breakout sessions on diverse topics.

As the Workshop evolved, we have established more of the program with invited talks to more effectively delve into the issues. We can't cover all of the issues, even in two full days, but we intend to provide a program that all attendees will find to be a source of enrichment. Each of the two days will begin with morning keynote talks. The theme for the first day is: "Government High Assurance Challenges." The theme for the second day is: "Research and Development on the Problems of Layered Assurance." The afternoon of each day will have panel sessions and focused small breakout groups, that will encourage all to participate, to discuss topics suggested by the speakers and moderators. Each day will conclude with a synthesis session.

Hotel Reservations, Workshop Registration and Logistics

Use the links below for hotel reservations and Workshop registration:

Hyatt Regency San Antonio - hotel reservations
guaranteed LAW rate until July 16
LAW registration page
please register by July 31

It is necessary to register in advance for the Workshop (before July 31) at the LAW registration page.

The workshop will be held in the ballroom at the Hyatt Regency San Antonio, "the only hotel located on the Riverwalk AND across the street from the historic Alamo." The hotel's web page provides information on how to get there.

A continental breakfast will be provided each morning of the Workshop and refreshments will be provided at the breaks. Attendees are responsible for their own lunch and dinner. The hotel is situated in a district with many dining opportunities.

Make your own reservations at the hotel by calling the hotel or by following this Hotel reservation link.
If you call for reservations, please mention the Layered Assurance Workshop when making your reservations, so that the Workshop is properly credited toward the occupancy requirements. The special rate extended by the hotel is available for check in no sooner than July 31 and check out no later than August 8. If you want to stay before July 31 or after August 8 the reduced rate will not apply. Book the dates that are available on the hotel's Workshop page, then call the hotel's reservation line to extend your reservation. There is no charge for children but there will be a supplemental charge of $25 per adult if you request a room to be occupied by more than one adult.

The conference venue is accessible to those with handicaps. The hotel meets ADA requirements and can accommodate those with special needs. The hotel has ADA rooms, as well as a few rooms with roll-in showers and handles. Please specify these requirements when making reservations so that the hotel can reserve appropriate rooms. Guests requiring a wheelchair while at the hotel should contact the concierge.

Invited Speakers

We are pleased to provide a full program of distinguished speakers on both days.
Please see the Workshop Program below.

Workshop Program

Links in the Agenda below are to download the presentation slides and breakout notes.
Tuesday August 4
8:00-8:15 Welcome and Workshop Logistics
Rance DeLong, Workshop Chair
Welcome and AFRL Overview
Steven Drager, Air Force Research Laboratory
8:45-9:15 Air Force Cryptographic Modernization Program Office (AF CMPO) Overview
Mary Anne Smith, AF CMPO
9:15-9:45 Thoughts on High Assurance: Obsolescence Management Challenges
W. Mark Vanfleet, NSA/IAD
9:45-10:15 AF CMPO Transformational Initiatives
Nancy Pham, AF CMPO
10:15-10:30 BREAK
Airborne Warning and Control Systems (AWACS) Challenges
Dave Setser, ESC SPO
High Assurance Platform (HAP) Challenges
Robert Dobry, NSA HAP PMO
CENTCOM Challenges
Lt Col Diana Staneszewski, CENTCOM J6
12:00-1:30 LUNCH
1:30-1:45 Introduction to the Afternoon Activities
Rance DeLong
1:45-3:15 PANEL: Government Needs for Compositional Assurance
Moderator: Rance DeLong (Moderator's Introduction to Gov/Vendor Coop)
3:15-3:30 BREAK
Small Group Breakout Discussions
    Airborne Networking Challenges - Greg Guntharp
    PC Networks and Cross Domain Solutions - Wilmar Sifre
    Toolsets - Carolyn Boettcher
    Encrypted Advanced Tactical Data Links - Jess Irwin
Large Group Synthesis Session
5:00 Wrapup and Adjournment
Wednesday August 5
8:00-8:15 Overview and Introductions
Rance DeLong, Consultant, LynuxWorks, Santa Clara University

8:15-9:15 Hierarchies, Lowerarchies, Anarchies, and Plutarchies (Parallel Lives):
  Historical Perspectives of Composable High-Assurance Architectures

Peter G. Neumann, Principal Scientist and SRI Fellow, SRI International Computer Science Laboratory
9:15-10:15 Towards Assurance for Open Soft Real-Time Systems
Chris Gill, Associate Professor, Dept of Computer Science and Engineering, Washington University
10:15-10:30 BREAK
10:30-11:30 Composition of Critical Properties
John Rushby, Program Director and SRI Fellow, SRI International Computer Science Laboratory
11:30-12:30 Assurance Cases, Evidence and Patterns
Tim Kelly, Senior Lecturer, Department of Computer Science, University of York, UK
12:30-2:00 LUNCH
2:00-3:45 PANEL: Compositional Assurance R&D: P. G. Neumann, C. Gill, J. Rushby, T. Kelly,
Brian Snow (former IAD Technical Director, NSA, attending remotely), and others
Moderator: Michael McEvilley, MITRE (Moderator's Introduction to Session) (Brian Snow's presentation)
4:00-4:45 Small Group Breakout Discussions
    Cross Domain Solutions, Take 2 - Michael Minette
    Compositional Formal Methods - George Dinolt
    Pragmatic Composition of COTS HW & SW - Gordon Uchenick
    Composition of Security Policies - Ravi Sandhu (merged with Compositional Formal Methods)
4:45-5:00 Large Group Synthesis Session
5:00 Wrapup and Adjournment

Download the PDF of the Agenda.

Workshop Proceedings

The Workshop Proceedings will be published electronically on this web page (links to slides provided by speakers will be placed adjacent to the titles in the Program.

Workshop Committee

George Abrego
Carolyn Boettcher
Joyce Brookins
Air Force Cryptographic Modernization Program Office (CMPO)
Rance J. DeLong LynuxWorks, Santa Clara University, consultant
Thomas Hui
Air Force Cryptographic Modernization Program Office (CMPO)
Michael Putney
Wilmar Sifre
AFRL Information Directorate, Computing Architectures Branch

Contact: Workshop Chairman

Rance J. DeLong -- LynuxWorks, Santa Clara University, and consultant to SRI International