I have been working at an internship this past summer, and have applied a relatively standard technique (formal analysis of a security protocol) to a new (company internal) protocol. The company are pushing me to try and get the analysis published in an academic journal. The results do not highlight anything of particular note (a few caveats and gotchas but nothing with substantial security implications), but simply provide a rigorous mathematical underpinning for their security assertions.
Is this something publishable? I feel it isn't because the only new bit is the protocol which was simply given to me (and is being published in its own right). If not how do I make the results of the analysis available? Obviously the analysis needs to be made public and peer review is vital (because otherwise nobody would trust the security claims). Do I just put it on the company website and hope people in the know stumble across it? Can I email appropriate people and hope they look at it?