Application of standard techniques to new data: is it publishable? I have been working at an internship this past summer, and have applied a relatively standard technique (formal analysis of a security protocol) to a new (company internal) protocol. The company are pushing me to try and get the analysis published in an academic journal. The results do not highlight anything of particular note (a few caveats and gotchas but nothing with substantial security implications), but simply provide a rigorous mathematical underpinning for their security assertions. 

Is this something publishable? I feel it isn't because the only new bit is the protocol which was simply given to me (and is being published in its own right). If not how do I make the results of the analysis available? Obviously the analysis needs to be made public and peer review is vital (because otherwise nobody would trust the security claims). Do I just put it on the company website and hope people in the know stumble across it? Can I email appropriate people and hope they look at it?
You might consider sitting down with the people arguing for publication to try and understand why they consider it to be (potentially) publishable.  It's possible, for example, that this new protocol addresses some issues not addressed by existing protocols; or addresses them more efficiently, or robustly, or is otherwise better in some way.  In other words, it's possible that the protocol by itself (without your security analysis) is not publishable, and your security analysis by itself (without the novelties of the new protocol) is not publishable, but the two taken together may possibly be publishable.