vze2729k: To be clear - I'm in complete agreement with Jonathan!
 vze2729k: -DMC
     shap: Anything with "workshop" in the name should be ruled out. This should be a conference paper.
     shap: I agree that ESORICS is a good candidate. JCS (Journal of Computer Security) would also be a good choice.
         alan_karp: How about also trying to reach a broader audience with a less technical version in CACM or IEEE Computer? They don't publish quickly (My CACM paper accepted last January still hasn't been scheduled for publication), but what's the hurry? The misconceptions have been around for 31 years; one or two more won't make things much worse than they are.