- NetSec - lists.gi.de

inladung zum Thementag Sichere Hardware am 25.10.2019
by Matthias Marx 17 Oct '19

17 Oct '19

Sehr geehrte Damen und Herren, die GI-Fachgruppe NETSEC lädt ein zum ** Thementag Hardwaresicherheit ** am Freitag, den 25. Oktober 2019, von 13 Uhr bis 17 Uhr im Einstein Center Digital Future, Robert-Koch-Forum, Wilhelmstraße 67, 10117 Berlin. Die Teilnahme ist kostenfrei. Um Anmeldung unter https://fg-netsec.gi.de/veranstaltung/thementag-sichere-hardware/ wird gebeten. Auf unserer letzten Veranstaltung haben wir uns damit befasst, dass immer mehr virtuelle und physische Gegenstände in allen Bereichen unserer Lebens- und Arbeitswelt miteinander vernetzt werden. Die Grundlage dieser Vernetzung bildet eine moderne und sichere (Netz-)Infrastruktur. Der Schwerpunkt unseres zweiten Thementages ist die Hardware, die für solche Infrastrukturen benötigt wird. Die Veranstaltung beginnt mit Vorträgen über sichere Systeme für eine verlässliche Digitalisierung, über Messsysteme für kritische Infrastruktur und über Fingerprinting von CAN-Bussen. Danach folgen Kurzvorträge zu aktuellen Highlights aus der Forschung. Abschließend gibt es Gelegenheit zum Austausch, zur Diskussion und zum Netzwerken. Ein ausführliches Programm gibt es unter https://fg-netsec.gi.de/veranstaltung/thementag-sichere-hardware/. Wir würden uns sehr freuen, Sie dort begrüßen zu dürfen. Bitte reichen Sie diese Ankündigung an interessierte Kolleginnen und Kollegen weiter. Mit freundlichem Grüßen Monina Schwarz und Matthias Marx für die GI-Fachgruppe NETSEC -- Matthias Marx Tel: +49-40-42883-2344 - https://svs.informatik.uni-hamburg.de/ Universität Hamburg - FB Informatik - Sicherheit in Verteilten Systemen

1 0

Thementag Sicherheit in Intelligenten Netzen und IoT am 18.03.2019
by Matthias Marx 20 Feb '19

20 Feb '19

Sehr geehrte Damen und Herren, die GI-Fachgruppe NETSEC sowie die Hamburger Dialogplattform Industrie 4.0 in Kooperation mit der Universität Hamburg, dem Industrieverband Hamburg sowie dem Hamburger Unternehmen Simplexion laden ein zum ** Thementag Sicherheit in Intelligenten Netzen und IoT ** am Montag, den 18. März 2019, von 14 Uhr bis 20 Uhr in der Handelskammer Hamburg, Alster-Zimmer, Adolphsplatz 1, 20457 Hamburg. Die Teilnahme ist kostenfrei. Um Anmeldung unter https://fg-netsec.gi.de/veranstaltung/thementag-sicherheit-in-intelligenten… wird gebeten. Die zunehmende Vernetzung von virtuellen und physischen Gegenständen in allen Bereichen unserer Lebens- und Arbeitswelt führt zu neuen Sicherheitsrisiken. Nicht nur Alltagsgegenstände, sondern ganze Industrieanlagen und Maschinen werden vernetzt. Sensible Daten können verloren gehen oder Produktionsstraßen für Wochen lahmgelegt werden. In den ersten Vorträgen werden Vertreter aus Industrie und Forschung über Sicherheit in Bahnnetzen, über den Wandel der Stromnetze und über resiliente Netze, die bei einem Ausfall von Teilsystemen nicht vollständig versagen, berichten. In den anschließenden Vorträgen und Keynotes mit dem Schwerpunkt IoT werden die Themen Context-Aware Authentication, Anforderungen an die Datensicherheit und Datensicherheit in der Geräteentwicklung behandelt. Die Veranstaltung schließt mit einem Get-together und bietet Gelegenheit zum Austausch, zu Diskussion und zum Netzwerken. Bitte reichen Sie diese Ankündigung an interessierte Kolleginnen und Kollegen weiter. Ein ausführliches Programm finden Sie unter https://fg-netsec.gi.de/veranstaltung/thementag-sicherheit-in-intelligenten…. Mit freundlichen Grüßen Matthias Marx -- Matthias Marx Tel: +49-40-42883-2344 - https://svs.informatik.uni-hamburg.de/ Universität Hamburg - FB Informatik - Sicherheit in Verteilten Systemen

1 0

Workshop Online-Tracking / 4.10.17 / Darmstadt
by Dominik Herrmann 05 Sep '17

05 Sep '17

===================================================================== Die Fachgruppen PET und ECOM der Gesellschaft für Informatik und das Center for Research in Security and Privacy (CRISP) laden ein zum Workshop Online-Tracking: Lösungen für mehr Transparenz und besseren Schutz am 4. Oktober 2017 von 14 bis 18 Uhr in Darmstadt. ===================================================================== Veranstaltungsort: Fraunhofer-Institut für Sichere Informationstechnologie (SIT) Rheinstraße 75, 64295 Darmstadt – Raum „Berlin“ Zum Inhalt: Ein für den Nutzer unsichtbares Online-Tracking und Profiling ist im Web heute gängige Praxis. Was macht Online-Tracking so attraktiv? Wie sieht die Technik dahinter aus? Wie kann man sich mit möglichst geringem Aufwand möglichst zuverlässig vor Tracking schützen? Der Workshop soll Antworten auf diese Fragen geben. Wissenschaftler und Praktiker führen in die Thematik ein, erklären die technischen und organisatorischen Abläufe und stellen sowohl rechtliche als auch technische Möglichkeiten vor, um sich als Nutzer im Sinne eines Selbstdatenschutzes zur Wehr zu setzen. Darüber hinaus wird erläutert, wie man die Verwendung von Tracking-Techniken nachvollziehen und vergleichen kann. Die Veranstaltung endet mit einer Podiumsdiskussion, in der erörtert werden soll, wie datenschutzfreundlichere Smartphone-Apps und Webseiten in Zukunft realisiert werden könnten und was die Folgen davon wären. Vortragsprogramm: * Der Preis des Kostenlosen // Prof. Dr. P. Buxmann, TU Darmstadt * Online-Tracking und Datenschutzrecht // L. Konzelmann, Referent beim Sächsischen Datenschutzbeauftragten * Technik des Trackings // C. Bennefeld, Gründer und Geschäftsführer der eBlocker GmbH (Hersteller einer Privacy-Box) * Rechtliche Probleme beim Blocken von Tracking und Werbung Dr. J. Nink, Data Protection Officer und Legal Counsel der eyeo GmbH (Hersteller des Browser-Plugins „AdBlock Plus“) * PrivacyScore.org: Tracking im Internet sichtbar gemacht Dr. D. Herrmann (Universität Hamburg) * Podiumsdiskussion mit den Referenten und weiteren Gästen In den Pausen und im Anschluss besteht die Gelegenheit zum Erfahrungsaustausch und zur Vernetzung. Weitere Details zur Anfahrt, und zum Ablauf sowie ein Formular zur unverbindlichen Anmeldung finden Sie unter https://fg-pet.gi.de/tracking.html Organisation: Diese Veranstaltung wird von den Fachgruppen PET und ECOM des Fachbereichs „Sicherheit, Schutz und Zuverlässigkeit“ der Gesellschaft für Informatik sowie CRISP – Center for Research in Security and Privacy organisiert. Ansprechpartner und Kontakt: Andreas Heinemann (Sprecher der Fachgruppe ECOM) Dominik Herrmann und Sebastian Pape (Sprecher der FG PET) Kontaktadressen: https://fg-pet.gi.de/tracking.html

1 0

Reminder: PET-CON 2017.2 Call for Papers & Participation
by Dominik Herrmann 14 Aug '17

14 Aug '17

Update: Submission deadline has been extended by one week. ********************************************************************** CALL FOR PARTICIPATION ********************************************************************* 7th Privacy Enhancing Techniques Convention: PET-CON 2017.2 11–12 September 2017 University of Hamburg, East Wing, ESA O 222 Edmund-Siemers-Allee 1, Hamburg, Germany http://pet-con.de/ ********************************************************************** We invite you to attend PET-CON 2017.2 -- the seventh convention in Germany in the area of Privacy Enhancing Techniques. PET-CON brings together students (B.Sc., M.Sc., PhD), junior researchers, privacy activists and other interested people to discuss work in progress. PET-CON is organized by the PET interest group of the German Computer Science Society (GI). Previous PET-CONs took place at University of Regensburg, TU Dresden, TU Darmstadt, RWTH Aachen, and Goethe University Frankfurt. PET-CON is a very informal gathering. The workshop consists of short contributed talks (10-15 minutes) followed by extensive feedback and discussions (up to 45 minutes). For instance, students can present planned, ongoing, and recently finished theses in order to receive feedback. We also accept presentations of papers that have already been published elsewhere. There is no filtering of contributions. However, there is a voluntary submission process with peer review. Submissions should have a length of up to eight pages and be formatted using one of the common paper templates (e.g., llncs.cls). You can also attend the convention without giving a talk at all. TOPICS OF INTEREST * abuse detection and protection * anonymous routing * application layer privacy * big data and data protection * economics of PETs * end-user education and training * HCI issues and usability * intrusion detection while respecting privacy * location privacy * metrics for quality of protection * mobile networks and smartphone applications * performance optimization and measurement * privacy in ubiquitous computing environments * related legal issues (data protection) PROGRAM The program starts after lunch at 1.00 pm of the first day and consists of short talks (15 min.), followed by discussions and breaks. We will have dinner in the evening to foster the exchange of new ideas. On the second day we continue with talks in the morning before we close the workshop at lunchtime. REGISTRATION AND SUBMISSION If you would like to attend PET-CON, please send an e-mail to registration(a)pet-con.de with the following information * your name and affiliation * whether you want to give a talk or not * (optional) the title of your talk and a short abstract * (optional) a PDF file to submit to the peer review process * (optional) if you are willing to help in the review process and how many papers you'd review at most (1-5) * whether you want to have lunch on day 1 * whether you want to have dinner on day 1 * whether you want to have lunch on day 2 There will be no participation fee, however you have to pay for travel and accommodation costs for yourself (or ask your professor/university for a refund). We are currently looking for sponsors who can cover (part of) the costs for lunch and/or dinner. We plan to publish a collection of the submitted papers in electronic form on a publication server of one of the participating universities. Authors may opt-out on this. IMPORTANT DATES (extended submission deadline) * (Optional) Paper submission for peer review: 22 Aug 2017 * Feedback from peer review: 4 Sep 2017 * Registration if you submit a paper for peer review: 22 Aug 2017 for all other participants: 4 Sep 2017 * Workshop: 11-12 Sep 2017 * Final version for electronic proceedings: 25 Sep 2017 ORGANIZATION The event is organized by * Dominik Herrmann (University of Hamburg) * Sebastian Pape (Goethe University Frankfurt) You can reach the organizers via e-mail at sebastian.pape(a)m-chair.de and herrmann(a)informatik.uni-hamburg.de. -- Dominik Herrmann (Postdoctoral Researcher) Tel: +49-40-42883-2092 - https://herdom.net/ University of Hamburg - Department of Computer Science Security in Distributed Systems Group

1 0

PET-CON 2017.2 / 11-12 Sep 2017 / Call for Participation
by Dominik Herrmann 11 Jul '17

11 Jul '17

********************************************************************** CALL FOR PARTICIPATION ********************************************************************* 7th Privacy Enhancing Techniques Convention: PET-CON 2017.2 11–12 September 2017 University of Hamburg (Hamburg, Germany) http://pet-con.de/ ********************************************************************** We invite you to attend PET-CON 2017.2 -- the seventh convention in Germany in the area of Privacy Enhancing Techniques. PET-CON brings together students (B.Sc., M.Sc., PhD), junior researchers, privacy activists and other interested people to discuss work in progress. PET-CON is organized by the PET interest group of the German Computer Science Society (GI). Previous PET-CONs took place at University of Regensburg, TU Dresden, TU Darmstadt, RWTH Aachen, and Goethe University Frankfurt. PET-CON is a very informal gathering. The workshop consists of short contributed talks (10-15 minutes) followed by extensive feedback and discussions (up to 45 minutes). For instance, students can present planned, ongoing, and recently finished theses in order to receive feedback. We also accept presentations of papers that have already been published elsewhere. There is no filtering of contributions. However, there is a voluntary submission process with peer review. Submissions should have a length of up to eight pages and be formatted using one of the common paper templates (e.g., llncs.cls). You can also attend the convention without giving a talk at all. TOPICS OF INTEREST * abuse detection and protection * anonymous routing * application layer privacy * big data and data protection * economics of PETs * end-user education and training * HCI issues and usability * intrusion detection while respecting privacy * location privacy * metrics for quality of protection * mobile networks and smartphone applications * performance optimization and measurement * privacy in ubiquitous computing environments * related legal issues (data protection) PROGRAM The program starts after lunch at 1.00 pm of the first day and consists of short talks (15 min.), followed by discussions and breaks. We will have dinner in the evening to foster the exchange of new ideas. On the second day we continue with talks in the morning before we close the workshop at lunchtime. REGISTRATION AND SUBMISSION If you would like to attend PET-CON, please send an e-mail to registration(a)pet-con.de with the following information * your name and affiliation * whether you want to give a talk or not * (optional) the title of your talk and a short abstract * (optional) a PDF file to submit to the peer review process * (optional) if you are willing to help in the review process and how many papers you'd review at most (1-5) * whether you want to have lunch on day 1 * whether you want to have dinner on day 1 * whether you want to have lunch on day 2 There will be no participation fee, however you have to pay for travel and accommodation costs for yourself (or ask your professor/university for a refund). We are currently looking for sponsors who can cover (part of) the costs for lunch and/or dinner. We plan to publish a collection of the submitted papers in electronic form on a publication server of one of the participating universities. Authors may opt-out on this. IMPORTANT DATES * (Optional) Paper submission for peer review: 14 Aug 2017 * Feedback from peer review: 28 Aug 2017 * Registration if you submit a paper for peer review: 14 Aug 2017 for all other participants: 4 Sep 2017 * Workshop: 11-12 Sep 2017 * Final version for electronic proceedings: 25 Sep 2017 ORGANIZATION The event is organized by * Dominik Herrmann (University of Hamburg) * Sebastian Pape (Goethe University Frankfurt) You can reach the organizers via e-mail at sebastian.pape(a)m-chair.de and herrmann(a)informatik.uni-hamburg.de. -- Dominik Herrmann (Postdoctoral Researcher) Tel: +49-40-42883-2092 - https://herdom.net/ University of Hamburg - Department of Computer Science Security in Distributed Systems Group

1 0

a-i3/BSI-Symposiums 2016 – Erweitertes Programm! – Ransomware ,und mehr
by Joerg Schwenk 05 Apr '16

05 Apr '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Liebe NETSEC-Mitglieder, Am 19. und 20. April 2016 findet an der Ruhr-Universität Bochum das interdisziplinäre Symposium der Arbeitsgruppe Identitätsschutz im Internet (a-i3) und des Bundesamts für Sicherheit in der Informationstechnik (BSI) statt. Wie immer wird die aktuelle Angriffslage im Internet technisch und rechtlich diskutiert. Das Programm wurde jetzt um Beiträge zu aktuellen Themen erweitert! "Ransomware" bezeichnet Schadsoftware, mit der Nutzer zur Zahlung eines "Lösegelds" ("ransom") erpresst werden. Dazu werden persönliche Dateien verschlüsselt, versteckt oder gelöscht, verbunden mit dem Angebot, diese nach Zahlung des Lösegeldes wieder herzustellen. Ob dieses Versprechen aber eingehalten wird, ist fraglich. Eine neue Dimension erreichten Ransomware-Angriffe, als 2016 bekannt wurde, dass zwei deutsche und drei amerikanische Krankenhäuser ihre Tätigkeit teilweise einstellen mussten, da sie einem solchen Angriff zum Opfer gefallen waren.Das Thema wird durch den renommierten Experten Ralf Benzmüller, Leiter des G Data Security Labs, sowie durch Tilman Frosch, G Data, erörtert. Am gleichen Tag wird zudem der Gegenstand des aktuellen Streits zwischen Apple und dem FBI diskutiert: Was nützt Sicherheitstechnik mit Hintertüren? Weitere aktuelle Trends: ·Advanced Persistent Threads, referiert durch Frank Boldewin, IT-Security Architekt bei der GAD eG. ·Aktuelle Gesetzgebung: Umsetzung der eIDAS-Verordnung, ein Vortrag aus Sicht der Praxis von Dr. Kim Nguyen, Bundesdruckerei. Das aktuelle Programm finden Sie unter www.a-i3.org <http://www.a-i3.org> zum Abruf bereit. Wir würden uns freuen, wenn Sie auf dem diesjährigen Symposium mit uns diskutieren. Mit freundlichen Grüßen Arbeitsgruppe Identitätsschutz im Internet e.V. (a-i3) Bundesamt für Sicherheit in der Informationstechnik (BSI) - -- Prof. Dr. Jörg Schwenk www.nds.rub.de -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (GNU/Linux) iEYEARECAAYFAlcDf2UACgkQuEf499yiNI35WgCeOUGvFZpXJq5h7rgUKRWQRffK 5dsAn2ub7m6eahP2e87SPDmf8R7e1mkm =WtC7 -----END PGP SIGNATURE-----

1 0

CFP: ACM WiSec 2016 - Final CFP
by Matthias Hollick 08 Mar '16

08 Mar '16

Liebe Kollegen, ein für einige von Ihnen wahrscheinlich sehr interessanter CFP. Harte Einreichungsfrist ist der 21.3.2016. Ich möchte gleichzeitig auf die Security & Privacy Week im Sommer in Darmstadt hinweisen, bei der wir ein sehr starkes Programm haben werden: https://www.securityweek2016.tu-darmstadt.de/spw2016/ Viele Grüße Matthias Hollick ++++++++++++++++++++++++++++++++++++++++++++++++++++++ Call For Papers ----------------------------------------------------------------------- The 9th ACM Conference on Security and Privacy in Wireless and Mobile Networks ACM WiSec '16 Darmstadt, Germany July 18th - 20th 2016 https://www.securityweek2016.tu-darmstadt.de/wisec-2016 ----------------------------------------------------------------------- ACM WiSec 2016 will run from July 18 to July 20, 2016. It will be co-located with PETS 2016 as well as a number of security-related workshops as a part of the Security Week 2016 in Darmstadt, Germany. IMPORTANT DATES: Abstract submission: March 21, 2016 (EXTENDED) Paper submission: March 21, 2016 (EXTENDED) Notification to authors: April 25, 2016 Poster and demo proposal submission: May 4, 2016 Notification to poster/demo presenters: May 10, 2016 Camera-ready version: May 20, 2016 CONFERENCE SCOPE: ACM WiSec is the leading ACM and SIGSAC conference dedicated to all aspects of security and privacy in wireless and mobile and mobile networks and their applications. In addition to the traditional ACM WiSec topics of physical, link, and network layer security, we welcome papers focusing on the security and privacy of mobile software platforms, usable security and privacy, biometrics, cryptography, and the increasingly diverse range of mobile or wireless applications such as Internet of Things, and Cyber- Physical Systems. The conference welcomes both theoretical as well as systems contributions. Topics of interest include, but are not limited to: * Security & privacy for smart devices (e.g., smartphones) * Wireless and mobile privacy and anonymity * Secure localization and location privacy * Cellular network fraud and security * Jamming attacks and defenses * Key management (agreement or distribution) for wireless or mobile systems * Information-theoretic security schemes for wireless systems * Theoretical and formal approaches for wireless and mobile security * Cryptographic primitives for wireless and mobile security * NFC and smart payment applications * Security and privacy for mobile sensing systems * Wireless or mobile security for emerging applications (e.g, privacy in health, automotive, avionics, smart grid, or IoT applications) * Physical tracking security and privacy * Usable mobile security and privacy * Economics of mobile security and privacy * Bring Your Own Device (BYOD) security * Mobile malware and platform security * Security for cognitive radio and dynamic spectrum access systems * Security protocols for wireless networking The proceedings of ACM WiSec, sponsored by SIGSAC, will be published by the ACM. FULL AND SHORT PAPERS: Full paper submissions to ACM WiSec 2016 can be up to 10 pages in the ACM conference style excluding the bibliography and well marked appendices, and up to 12 pages in total. ACM WiSec also encourages the submission of short papers with a length of up to 6 pages, which describe mature work of a more succinct nature. All papers must be thoroughly anonymized for double-blind reviewing. Detailed submission instructions will appear on the conference website. POSTERS AND DEMOS: WiSec also solicits submission of posters and demos. ORGANISATION: Organising Committee: General Chair: * Matthias Hollick, Technische Universität Darmstadt, Germany Program Chairs: * Panos Papadimitratos, KTH, Sweden * William Enck, NC State University, USA Publicity Chairs: * Roberto Di Pietro, Nokia Bell Labs, Paris, France * Wenjia Li, New York Institute of Technology, USA Publication/Registration Chairs: * Daniel Steinmetzer, Technische Universität Darmstadt, Germany * Adwait Nadkarni, NC State University, USA Poster and Demo Chairs: * Alexandra Dmitrienko, ETH Zürich and TU Darmstadt, Switzerland/Germany * Bruce DeBruhl, Cal Poly, USA Web Chair: * Jiska Classen, Technische Universität Darmstadt, Germany Local Organization/Arrangement Chair: * Matthias Schulz, Technische Universität Darmstadt, Germany Finance Chair * Matthias Schulz, Technische Universität Darmstadt, Germany Steering Committee: * Srdjan Capkun, ETH Zürich, Switzerland (chair) * Ivan Martinovic, Oxford University, UK * Cristina Nita-Rotaru, Purdue University, USA * Ahmad-Reza Sadeghi, Technische Universität Darmstadt, Germany * Patrick Traynor, University of Florida, USA -- *new phone numbers from 08.02.2016 on* Prof. Dr.-Ing. Matthias Hollick Secure Mobile Networking Lab - SEEMOO Email: mhollick(a)seemoo.tu-darmstadt.de Web: http://www.seemoo.de Phone: +49 6151 16-25470 Fax: +49 6151 16-25471 Department of Computer Science Center for Advanced Security Research Darmstadt Technische Universität Darmstadt Mornewegstr. 32 (Office 4.2.09, Building S4/14) D-64293 Darmstadt, Germany

1 0

CfP: IEEE 2014 Fourth International Workshop on Security and Privacy Engineering (SPE2014)
by Meiko Jensen 25 Feb '16

25 Feb '16

========================================================================= CALL FOR PAPERS IEEE 2014 Fourth International Workshop on Security and Privacy Engineering (SPE2014) One day between June 27 and July 2, 2014, at Hilton Anchorage, Alaska, USA Co-located with IEEE SERVICES 2014 (http://www.servicescongress.org/2014/) Workshop Web page: http://sesar.dti.unimi.it/SPE2014/ ========================================================================= ========== Description ========== Built upon the success of spectrum of conferences within the IEEE World Congress on Services, the Security and Privacy Engineering (SPE 2014) workshop is a unique place to exchange ideas of engineering secure systems in the context of service computing, cloud computing, and big data analytics. The emphasis on engineering in security and privacy of services differentiates the workshop from other traditional prestigious security and privacy workshops, symposiums, and conferences. The practicality and value realization are examined by practitioners from leading industries as well as scientists from academia. In line with the engineering spirit, we solicit original papers on building secure service systems that can be applied to government procurement, digital medical records, cloud environments, social networking for business purposes, multimedia application, mobile commerce, education, and the like. Potential contributions could cover, but are not limited to, methodologies, protocols, tools, or verification and validation techniques. We also welcome review papers that analyze critically the status of current Security and Privacy (S&P) in a specific area. Papers from practitioners who encounter security and privacy problems and seek understanding are also welcome. Topics of interests of SPE 2014 include, but are not limited to: - S&P Engineering of Service-Based Applications - Security Engineering of Service Compositions - Practical Approaches to Security Engineering of Services - Privacy-Aware Service Engineering - Industrial and Real Use Cases in S&P Engineering of (Cloud) Services - S&P Engineering of Cloud Services - Auditing and Assessment - Assurance and Certification - Security Management and Governance - Privacy Enforcement in Clouds and Services - Cybersecurity Issues of Clouds and Services - Validation and Verification of S&P in Clouds and Services - Applied Cryptography for S&P in Clouds and Services - S&P Testing in Clouds and Services - Security and Privacy Modeling - Socio-Economics and Compliance - Education and Awareness - Big Data S&P Engineering ============== Important Dates ============== Full Paper Submission Due Date: March 29, 2014 Decision Notification (Electronic): April 12, 2014 Camera-Ready Copy Due Date & Pre-registration Due: May 1, 2014 =============== Paper Submission =============== Authors are invited to submit full papers (about 8 pages) or short papers (about 4 pages) as per IEEE 8.5 x 11 manuscript guidelines (download Word templates http://conferences.computer.org/icws/2014/IEEECS_CPS_8.5x11x2.zip or LaTeX templates http://conferences.computer.org/icws/2014/IEEECS_CPS_LaTeX_Letter_2Col.zip) The submitted papers can only be in the format of PDF or WORD. Please follow the IEEE Computer Society Press Proceedings Author Guidelines to prepare your papers, respectively. At least one author of each accepted paper is required to attend the workshop and present the paper. All papers must be submitted via the confhub submission system for the SPE workshop (TBD). First time users need to register with the system first (see these instructions for details http://www.servicescongress.org/2014/submission.html) All the accepted papers by the workshops will be included in the Proceedings of the IEEE 10th World Congress on Services (SERVICES 2014) which will be published by IEEE Computer Society. ============== Workshop Chairs ============== - Claudio Agostino Ardagna, Università degli Studi di Milano, Italy, claudio.ardagna-AT-unimi.it - Meiko Jensen, Independent Centre for Privacy Protection Schleswig-Holstein, Germany, Meiko.Jensen-AT-rub.de - Zhixiong Chen, Mercy College, NY, USA, zchen-AT-mercy.edu - Ernesto Damiani, Università degli Studi di Milano, Italy, ernesto.damiani-AT-unimi.it ================ Program Committee ================ - Rafael Accorsi, University of Freiburg, Germany - Rasool Asal, Etisalat BT Innovation Centre, UAE - Jens-Matthias Bohli, NEC Laboratories Europe, Germany - Bud Brgger, Fraunhofer IAO, Germany - Ali Chettih, Pivot Point Security, Mercy College NY, USA - Frances Cleary, Waterford Institute of Technology, Ireland - Quiang Duan, Penn State at Abington, USA - Massimo Felici, Hewlett-Packard Laboratories, USA - Christopher Frenz, CTO at See-Thru, USA - Atsuhiro Goto, Institute of Information Security, Japan - Nils Gruschka, University of Applied Sciences Kiel, Germany - Marit Hansen, Independent Centre for Privacy Protection Schleswig-Holstein, Germany, - Patrick Hung, University of Ontario Institute of Technology, Canada - Luigi Lo Iacono, University of Applied Sciences Cologne, Germany - Florian Kerschbaum, SAP Research Karlsruhe, Germany - Zhiqiang Lin, UT Dallas, USA - Jörg Schwenk, Ruhr University Bochum, Germany - Wei Tan, IBM, USA - Jong Yoon, Mercy College, USA - Yingzhou Zhang, Nanjing University of Posts and Telecommunications, China ============== Publicity Chair ============== - Fulvio Frati, Università degli studi di Milano, Italy More information available at http://sesar.dti.unimi.it/SPE2014/

2 1

CfP: Annual Privacy Forum 2016
by Meiko Jensen 29 Jan '16

29 Jan '16

[Apologies if you receive multiple copies of this message] ========================================================================== Call For Papers Annual Privacy Forum 2016 (http://privacyforum.eu/) bringing research & policy together,7-8 September, Frankfurt am Main Nowadays electronic communication networks and digital services are an essential part of an increasing number of everyday commodities. In the era of automated profiling and electronic surveillance, citizens face a serious threat against their right to privacy and informational self-determination, especially when using the internet and mobile services. The lack of transparency regarding the functionality and interconnection of such services increases the risk of uncontrollable processing of personal data. In this regard, the upcoming Data Protection Regulation will be a useful instrument to protect the privacy of individuals. However, for its successful implementation, this new framework needs to be enforced by proper technologies and encompassed with sustainable business models along with mechanisms to promote privacy awareness and help users to understand the value of their data. ENISA is organizing the 2016 edition of the annual privacy forum, in the light of the upcoming data protection regulation and the European digital agenda. We invite papers covering original work on the technological, economic, legal and societal aspects of the challenges that will come up with the implementation of the new framework. We particularly invite multidisciplinary papers that make it explicit how the presented work can contribute to bridging the gap between research and policy. Moreover, in order to also encourage contributions from policy makers, representatives of competent authorities (such as Data Protection Authorities), industry experts, NGOs and civil society associations, we invite opinion papers from all stakeholders on the above mentioned topics. Opinion papers will reflect the opinion/position of the author(s) on the selected privacy-related topic. Both research and opinion papers should deal with at least one of the following aspects: - Implementation aspects of 'by design' and 'by default' paradigms - Implementation and adoption of PETs in today's digital services - Modelling of data protection and privacy requirements, such as: machine readable representations and automatic evaluation of policies - Enabling transparency: technological and organizational challenges. - Technical solutions for the enforcement and the implications of the subject's right, e.g. right to erasure, access and correction. - Aspects of privacy impact and risk assessment - Technical solutions for data portability - Sustainable business models for privacy friendly online services - Information and consent in online environments: practical solutions and implementations - Privacy awareness, reliability and usability of PETs - Trust services for the protection of personal data - privacy aware trust services (i.e. electronic certificates, signatures, etc.) - Security measures for the protection of personal data - Economics of privacy and personal data Review and Publication All submissions will be thoroughly reviewed by our PC members. We aim at minimal 3 average 4 reviews per Paper. Furthermore, papers will be published in the proceedings of the conference with a publishing house soon to be selected and announced. Important dates Submission of full papers: March 15, 2016 23:59 AoE Notification to author: May 10, 2016 Camera-ready copies: May 31, 2016 APF 2016 taking place on: September 7-8, 2016 in Frankfurt am Main

1 0

Usable Security and Privacy
by Luigi Lo Iacono 03 Dec '15

03 Dec '15

Liebe NETSECler, das Projekt "USecureD - Usable Security by Design" führt aktuell eine Onlinestudie durch, mit der der Stellenwert des Themas Usable Security and Privacy ermittelt werden soll und Schwierigkeiten von Anwendern im Umgang mit Mechanismen der Informationssicherheit identifiziert werden sollen. Die Ergebnisse der empirischen Untersuchung dienen der bedarfsgerechten Weiterentwicklung von IT-Sicherheitslösungen für KMU. Mit Ihrer Teilnahme können Sie unmittelbar zum Erfolg der Studie beitragen. Wir würden uns daher sehr freuen, wenn Sie sich 10 Minuten Zeit nehmen, um die Fragen zu beantworten (die Teilnahme ist möglich bis zum 20. Dezember 2015): https://www.usecured.de/survey/index.php/126657 Mit den besten Grüßen aus Köln, Luigi Lo Iacono.

1 0