- NetSec - lists.gi.de

Workshop Online-Tracking / 4.10.17 / Darmstadt
by Dominik Herrmann 05 Sep '17

05 Sep '17

===================================================================== Die Fachgruppen PET und ECOM der Gesellschaft für Informatik und das Center for Research in Security and Privacy (CRISP) laden ein zum Workshop Online-Tracking: Lösungen für mehr Transparenz und besseren Schutz am 4. Oktober 2017 von 14 bis 18 Uhr in Darmstadt. ===================================================================== Veranstaltungsort: Fraunhofer-Institut für Sichere Informationstechnologie (SIT) Rheinstraße 75, 64295 Darmstadt – Raum „Berlin“ Zum Inhalt: Ein für den Nutzer unsichtbares Online-Tracking und Profiling ist im Web heute gängige Praxis. Was macht Online-Tracking so attraktiv? Wie sieht die Technik dahinter aus? Wie kann man sich mit möglichst geringem Aufwand möglichst zuverlässig vor Tracking schützen? Der Workshop soll Antworten auf diese Fragen geben. Wissenschaftler und Praktiker führen in die Thematik ein, erklären die technischen und organisatorischen Abläufe und stellen sowohl rechtliche als auch technische Möglichkeiten vor, um sich als Nutzer im Sinne eines Selbstdatenschutzes zur Wehr zu setzen. Darüber hinaus wird erläutert, wie man die Verwendung von Tracking-Techniken nachvollziehen und vergleichen kann. Die Veranstaltung endet mit einer Podiumsdiskussion, in der erörtert werden soll, wie datenschutzfreundlichere Smartphone-Apps und Webseiten in Zukunft realisiert werden könnten und was die Folgen davon wären. Vortragsprogramm: * Der Preis des Kostenlosen // Prof. Dr. P. Buxmann, TU Darmstadt * Online-Tracking und Datenschutzrecht // L. Konzelmann, Referent beim Sächsischen Datenschutzbeauftragten * Technik des Trackings // C. Bennefeld, Gründer und Geschäftsführer der eBlocker GmbH (Hersteller einer Privacy-Box) * Rechtliche Probleme beim Blocken von Tracking und Werbung Dr. J. Nink, Data Protection Officer und Legal Counsel der eyeo GmbH (Hersteller des Browser-Plugins „AdBlock Plus“) * PrivacyScore.org: Tracking im Internet sichtbar gemacht Dr. D. Herrmann (Universität Hamburg) * Podiumsdiskussion mit den Referenten und weiteren Gästen In den Pausen und im Anschluss besteht die Gelegenheit zum Erfahrungsaustausch und zur Vernetzung. Weitere Details zur Anfahrt, und zum Ablauf sowie ein Formular zur unverbindlichen Anmeldung finden Sie unter https://fg-pet.gi.de/tracking.html Organisation: Diese Veranstaltung wird von den Fachgruppen PET und ECOM des Fachbereichs „Sicherheit, Schutz und Zuverlässigkeit“ der Gesellschaft für Informatik sowie CRISP – Center for Research in Security and Privacy organisiert. Ansprechpartner und Kontakt: Andreas Heinemann (Sprecher der Fachgruppe ECOM) Dominik Herrmann und Sebastian Pape (Sprecher der FG PET) Kontaktadressen: https://fg-pet.gi.de/tracking.html

1 0

Reminder: PET-CON 2017.2 Call for Papers & Participation
by Dominik Herrmann 14 Aug '17

14 Aug '17

Update: Submission deadline has been extended by one week. ********************************************************************** CALL FOR PARTICIPATION ********************************************************************* 7th Privacy Enhancing Techniques Convention: PET-CON 2017.2 11–12 September 2017 University of Hamburg, East Wing, ESA O 222 Edmund-Siemers-Allee 1, Hamburg, Germany http://pet-con.de/ ********************************************************************** We invite you to attend PET-CON 2017.2 -- the seventh convention in Germany in the area of Privacy Enhancing Techniques. PET-CON brings together students (B.Sc., M.Sc., PhD), junior researchers, privacy activists and other interested people to discuss work in progress. PET-CON is organized by the PET interest group of the German Computer Science Society (GI). Previous PET-CONs took place at University of Regensburg, TU Dresden, TU Darmstadt, RWTH Aachen, and Goethe University Frankfurt. PET-CON is a very informal gathering. The workshop consists of short contributed talks (10-15 minutes) followed by extensive feedback and discussions (up to 45 minutes). For instance, students can present planned, ongoing, and recently finished theses in order to receive feedback. We also accept presentations of papers that have already been published elsewhere. There is no filtering of contributions. However, there is a voluntary submission process with peer review. Submissions should have a length of up to eight pages and be formatted using one of the common paper templates (e.g., llncs.cls). You can also attend the convention without giving a talk at all. TOPICS OF INTEREST * abuse detection and protection * anonymous routing * application layer privacy * big data and data protection * economics of PETs * end-user education and training * HCI issues and usability * intrusion detection while respecting privacy * location privacy * metrics for quality of protection * mobile networks and smartphone applications * performance optimization and measurement * privacy in ubiquitous computing environments * related legal issues (data protection) PROGRAM The program starts after lunch at 1.00 pm of the first day and consists of short talks (15 min.), followed by discussions and breaks. We will have dinner in the evening to foster the exchange of new ideas. On the second day we continue with talks in the morning before we close the workshop at lunchtime. REGISTRATION AND SUBMISSION If you would like to attend PET-CON, please send an e-mail to registration(a)pet-con.de with the following information * your name and affiliation * whether you want to give a talk or not * (optional) the title of your talk and a short abstract * (optional) a PDF file to submit to the peer review process * (optional) if you are willing to help in the review process and how many papers you'd review at most (1-5) * whether you want to have lunch on day 1 * whether you want to have dinner on day 1 * whether you want to have lunch on day 2 There will be no participation fee, however you have to pay for travel and accommodation costs for yourself (or ask your professor/university for a refund). We are currently looking for sponsors who can cover (part of) the costs for lunch and/or dinner. We plan to publish a collection of the submitted papers in electronic form on a publication server of one of the participating universities. Authors may opt-out on this. IMPORTANT DATES (extended submission deadline) * (Optional) Paper submission for peer review: 22 Aug 2017 * Feedback from peer review: 4 Sep 2017 * Registration if you submit a paper for peer review: 22 Aug 2017 for all other participants: 4 Sep 2017 * Workshop: 11-12 Sep 2017 * Final version for electronic proceedings: 25 Sep 2017 ORGANIZATION The event is organized by * Dominik Herrmann (University of Hamburg) * Sebastian Pape (Goethe University Frankfurt) You can reach the organizers via e-mail at sebastian.pape(a)m-chair.de and herrmann(a)informatik.uni-hamburg.de. -- Dominik Herrmann (Postdoctoral Researcher) Tel: +49-40-42883-2092 - https://herdom.net/ University of Hamburg - Department of Computer Science Security in Distributed Systems Group

1 0

PET-CON 2017.2 / 11-12 Sep 2017 / Call for Participation
by Dominik Herrmann 11 Jul '17

11 Jul '17

********************************************************************** CALL FOR PARTICIPATION ********************************************************************* 7th Privacy Enhancing Techniques Convention: PET-CON 2017.2 11–12 September 2017 University of Hamburg (Hamburg, Germany) http://pet-con.de/ ********************************************************************** We invite you to attend PET-CON 2017.2 -- the seventh convention in Germany in the area of Privacy Enhancing Techniques. PET-CON brings together students (B.Sc., M.Sc., PhD), junior researchers, privacy activists and other interested people to discuss work in progress. PET-CON is organized by the PET interest group of the German Computer Science Society (GI). Previous PET-CONs took place at University of Regensburg, TU Dresden, TU Darmstadt, RWTH Aachen, and Goethe University Frankfurt. PET-CON is a very informal gathering. The workshop consists of short contributed talks (10-15 minutes) followed by extensive feedback and discussions (up to 45 minutes). For instance, students can present planned, ongoing, and recently finished theses in order to receive feedback. We also accept presentations of papers that have already been published elsewhere. There is no filtering of contributions. However, there is a voluntary submission process with peer review. Submissions should have a length of up to eight pages and be formatted using one of the common paper templates (e.g., llncs.cls). You can also attend the convention without giving a talk at all. TOPICS OF INTEREST * abuse detection and protection * anonymous routing * application layer privacy * big data and data protection * economics of PETs * end-user education and training * HCI issues and usability * intrusion detection while respecting privacy * location privacy * metrics for quality of protection * mobile networks and smartphone applications * performance optimization and measurement * privacy in ubiquitous computing environments * related legal issues (data protection) PROGRAM The program starts after lunch at 1.00 pm of the first day and consists of short talks (15 min.), followed by discussions and breaks. We will have dinner in the evening to foster the exchange of new ideas. On the second day we continue with talks in the morning before we close the workshop at lunchtime. REGISTRATION AND SUBMISSION If you would like to attend PET-CON, please send an e-mail to registration(a)pet-con.de with the following information * your name and affiliation * whether you want to give a talk or not * (optional) the title of your talk and a short abstract * (optional) a PDF file to submit to the peer review process * (optional) if you are willing to help in the review process and how many papers you'd review at most (1-5) * whether you want to have lunch on day 1 * whether you want to have dinner on day 1 * whether you want to have lunch on day 2 There will be no participation fee, however you have to pay for travel and accommodation costs for yourself (or ask your professor/university for a refund). We are currently looking for sponsors who can cover (part of) the costs for lunch and/or dinner. We plan to publish a collection of the submitted papers in electronic form on a publication server of one of the participating universities. Authors may opt-out on this. IMPORTANT DATES * (Optional) Paper submission for peer review: 14 Aug 2017 * Feedback from peer review: 28 Aug 2017 * Registration if you submit a paper for peer review: 14 Aug 2017 for all other participants: 4 Sep 2017 * Workshop: 11-12 Sep 2017 * Final version for electronic proceedings: 25 Sep 2017 ORGANIZATION The event is organized by * Dominik Herrmann (University of Hamburg) * Sebastian Pape (Goethe University Frankfurt) You can reach the organizers via e-mail at sebastian.pape(a)m-chair.de and herrmann(a)informatik.uni-hamburg.de. -- Dominik Herrmann (Postdoctoral Researcher) Tel: +49-40-42883-2092 - https://herdom.net/ University of Hamburg - Department of Computer Science Security in Distributed Systems Group

1 0

a-i3/BSI-Symposiums 2016 – Erweitertes Programm! – Ransomware ,und mehr
by Joerg Schwenk 05 Apr '16

05 Apr '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Liebe NETSEC-Mitglieder, Am 19. und 20. April 2016 findet an der Ruhr-Universität Bochum das interdisziplinäre Symposium der Arbeitsgruppe Identitätsschutz im Internet (a-i3) und des Bundesamts für Sicherheit in der Informationstechnik (BSI) statt. Wie immer wird die aktuelle Angriffslage im Internet technisch und rechtlich diskutiert. Das Programm wurde jetzt um Beiträge zu aktuellen Themen erweitert! "Ransomware" bezeichnet Schadsoftware, mit der Nutzer zur Zahlung eines "Lösegelds" ("ransom") erpresst werden. Dazu werden persönliche Dateien verschlüsselt, versteckt oder gelöscht, verbunden mit dem Angebot, diese nach Zahlung des Lösegeldes wieder herzustellen. Ob dieses Versprechen aber eingehalten wird, ist fraglich. Eine neue Dimension erreichten Ransomware-Angriffe, als 2016 bekannt wurde, dass zwei deutsche und drei amerikanische Krankenhäuser ihre Tätigkeit teilweise einstellen mussten, da sie einem solchen Angriff zum Opfer gefallen waren.Das Thema wird durch den renommierten Experten Ralf Benzmüller, Leiter des G Data Security Labs, sowie durch Tilman Frosch, G Data, erörtert. Am gleichen Tag wird zudem der Gegenstand des aktuellen Streits zwischen Apple und dem FBI diskutiert: Was nützt Sicherheitstechnik mit Hintertüren? Weitere aktuelle Trends: ·Advanced Persistent Threads, referiert durch Frank Boldewin, IT-Security Architekt bei der GAD eG. ·Aktuelle Gesetzgebung: Umsetzung der eIDAS-Verordnung, ein Vortrag aus Sicht der Praxis von Dr. Kim Nguyen, Bundesdruckerei. Das aktuelle Programm finden Sie unter www.a-i3.org <http://www.a-i3.org> zum Abruf bereit. Wir würden uns freuen, wenn Sie auf dem diesjährigen Symposium mit uns diskutieren. Mit freundlichen Grüßen Arbeitsgruppe Identitätsschutz im Internet e.V. (a-i3) Bundesamt für Sicherheit in der Informationstechnik (BSI) - -- Prof. Dr. Jörg Schwenk www.nds.rub.de -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (GNU/Linux) iEYEARECAAYFAlcDf2UACgkQuEf499yiNI35WgCeOUGvFZpXJq5h7rgUKRWQRffK 5dsAn2ub7m6eahP2e87SPDmf8R7e1mkm =WtC7 -----END PGP SIGNATURE-----

1 0

CFP: ACM WiSec 2016 - Final CFP
by Matthias Hollick 08 Mar '16

08 Mar '16

Liebe Kollegen, ein für einige von Ihnen wahrscheinlich sehr interessanter CFP. Harte Einreichungsfrist ist der 21.3.2016. Ich möchte gleichzeitig auf die Security & Privacy Week im Sommer in Darmstadt hinweisen, bei der wir ein sehr starkes Programm haben werden: https://www.securityweek2016.tu-darmstadt.de/spw2016/ Viele Grüße Matthias Hollick ++++++++++++++++++++++++++++++++++++++++++++++++++++++ Call For Papers ----------------------------------------------------------------------- The 9th ACM Conference on Security and Privacy in Wireless and Mobile Networks ACM WiSec '16 Darmstadt, Germany July 18th - 20th 2016 https://www.securityweek2016.tu-darmstadt.de/wisec-2016 ----------------------------------------------------------------------- ACM WiSec 2016 will run from July 18 to July 20, 2016. It will be co-located with PETS 2016 as well as a number of security-related workshops as a part of the Security Week 2016 in Darmstadt, Germany. IMPORTANT DATES: Abstract submission: March 21, 2016 (EXTENDED) Paper submission: March 21, 2016 (EXTENDED) Notification to authors: April 25, 2016 Poster and demo proposal submission: May 4, 2016 Notification to poster/demo presenters: May 10, 2016 Camera-ready version: May 20, 2016 CONFERENCE SCOPE: ACM WiSec is the leading ACM and SIGSAC conference dedicated to all aspects of security and privacy in wireless and mobile and mobile networks and their applications. In addition to the traditional ACM WiSec topics of physical, link, and network layer security, we welcome papers focusing on the security and privacy of mobile software platforms, usable security and privacy, biometrics, cryptography, and the increasingly diverse range of mobile or wireless applications such as Internet of Things, and Cyber- Physical Systems. The conference welcomes both theoretical as well as systems contributions. Topics of interest include, but are not limited to: * Security & privacy for smart devices (e.g., smartphones) * Wireless and mobile privacy and anonymity * Secure localization and location privacy * Cellular network fraud and security * Jamming attacks and defenses * Key management (agreement or distribution) for wireless or mobile systems * Information-theoretic security schemes for wireless systems * Theoretical and formal approaches for wireless and mobile security * Cryptographic primitives for wireless and mobile security * NFC and smart payment applications * Security and privacy for mobile sensing systems * Wireless or mobile security for emerging applications (e.g, privacy in health, automotive, avionics, smart grid, or IoT applications) * Physical tracking security and privacy * Usable mobile security and privacy * Economics of mobile security and privacy * Bring Your Own Device (BYOD) security * Mobile malware and platform security * Security for cognitive radio and dynamic spectrum access systems * Security protocols for wireless networking The proceedings of ACM WiSec, sponsored by SIGSAC, will be published by the ACM. FULL AND SHORT PAPERS: Full paper submissions to ACM WiSec 2016 can be up to 10 pages in the ACM conference style excluding the bibliography and well marked appendices, and up to 12 pages in total. ACM WiSec also encourages the submission of short papers with a length of up to 6 pages, which describe mature work of a more succinct nature. All papers must be thoroughly anonymized for double-blind reviewing. Detailed submission instructions will appear on the conference website. POSTERS AND DEMOS: WiSec also solicits submission of posters and demos. ORGANISATION: Organising Committee: General Chair: * Matthias Hollick, Technische Universität Darmstadt, Germany Program Chairs: * Panos Papadimitratos, KTH, Sweden * William Enck, NC State University, USA Publicity Chairs: * Roberto Di Pietro, Nokia Bell Labs, Paris, France * Wenjia Li, New York Institute of Technology, USA Publication/Registration Chairs: * Daniel Steinmetzer, Technische Universität Darmstadt, Germany * Adwait Nadkarni, NC State University, USA Poster and Demo Chairs: * Alexandra Dmitrienko, ETH Zürich and TU Darmstadt, Switzerland/Germany * Bruce DeBruhl, Cal Poly, USA Web Chair: * Jiska Classen, Technische Universität Darmstadt, Germany Local Organization/Arrangement Chair: * Matthias Schulz, Technische Universität Darmstadt, Germany Finance Chair * Matthias Schulz, Technische Universität Darmstadt, Germany Steering Committee: * Srdjan Capkun, ETH Zürich, Switzerland (chair) * Ivan Martinovic, Oxford University, UK * Cristina Nita-Rotaru, Purdue University, USA * Ahmad-Reza Sadeghi, Technische Universität Darmstadt, Germany * Patrick Traynor, University of Florida, USA -- *new phone numbers from 08.02.2016 on* Prof. Dr.-Ing. Matthias Hollick Secure Mobile Networking Lab - SEEMOO Email: mhollick(a)seemoo.tu-darmstadt.de Web: http://www.seemoo.de Phone: +49 6151 16-25470 Fax: +49 6151 16-25471 Department of Computer Science Center for Advanced Security Research Darmstadt Technische Universität Darmstadt Mornewegstr. 32 (Office 4.2.09, Building S4/14) D-64293 Darmstadt, Germany

1 0

CfP: IEEE 2014 Fourth International Workshop on Security and Privacy Engineering (SPE2014)
by Meiko Jensen 25 Feb '16

25 Feb '16

========================================================================= CALL FOR PAPERS IEEE 2014 Fourth International Workshop on Security and Privacy Engineering (SPE2014) One day between June 27 and July 2, 2014, at Hilton Anchorage, Alaska, USA Co-located with IEEE SERVICES 2014 (http://www.servicescongress.org/2014/) Workshop Web page: http://sesar.dti.unimi.it/SPE2014/ ========================================================================= ========== Description ========== Built upon the success of spectrum of conferences within the IEEE World Congress on Services, the Security and Privacy Engineering (SPE 2014) workshop is a unique place to exchange ideas of engineering secure systems in the context of service computing, cloud computing, and big data analytics. The emphasis on engineering in security and privacy of services differentiates the workshop from other traditional prestigious security and privacy workshops, symposiums, and conferences. The practicality and value realization are examined by practitioners from leading industries as well as scientists from academia. In line with the engineering spirit, we solicit original papers on building secure service systems that can be applied to government procurement, digital medical records, cloud environments, social networking for business purposes, multimedia application, mobile commerce, education, and the like. Potential contributions could cover, but are not limited to, methodologies, protocols, tools, or verification and validation techniques. We also welcome review papers that analyze critically the status of current Security and Privacy (S&P) in a specific area. Papers from practitioners who encounter security and privacy problems and seek understanding are also welcome. Topics of interests of SPE 2014 include, but are not limited to: - S&P Engineering of Service-Based Applications - Security Engineering of Service Compositions - Practical Approaches to Security Engineering of Services - Privacy-Aware Service Engineering - Industrial and Real Use Cases in S&P Engineering of (Cloud) Services - S&P Engineering of Cloud Services - Auditing and Assessment - Assurance and Certification - Security Management and Governance - Privacy Enforcement in Clouds and Services - Cybersecurity Issues of Clouds and Services - Validation and Verification of S&P in Clouds and Services - Applied Cryptography for S&P in Clouds and Services - S&P Testing in Clouds and Services - Security and Privacy Modeling - Socio-Economics and Compliance - Education and Awareness - Big Data S&P Engineering ============== Important Dates ============== Full Paper Submission Due Date: March 29, 2014 Decision Notification (Electronic): April 12, 2014 Camera-Ready Copy Due Date & Pre-registration Due: May 1, 2014 =============== Paper Submission =============== Authors are invited to submit full papers (about 8 pages) or short papers (about 4 pages) as per IEEE 8.5 x 11 manuscript guidelines (download Word templates http://conferences.computer.org/icws/2014/IEEECS_CPS_8.5x11x2.zip or LaTeX templates http://conferences.computer.org/icws/2014/IEEECS_CPS_LaTeX_Letter_2Col.zip) The submitted papers can only be in the format of PDF or WORD. Please follow the IEEE Computer Society Press Proceedings Author Guidelines to prepare your papers, respectively. At least one author of each accepted paper is required to attend the workshop and present the paper. All papers must be submitted via the confhub submission system for the SPE workshop (TBD). First time users need to register with the system first (see these instructions for details http://www.servicescongress.org/2014/submission.html) All the accepted papers by the workshops will be included in the Proceedings of the IEEE 10th World Congress on Services (SERVICES 2014) which will be published by IEEE Computer Society. ============== Workshop Chairs ============== - Claudio Agostino Ardagna, Università degli Studi di Milano, Italy, claudio.ardagna-AT-unimi.it - Meiko Jensen, Independent Centre for Privacy Protection Schleswig-Holstein, Germany, Meiko.Jensen-AT-rub.de - Zhixiong Chen, Mercy College, NY, USA, zchen-AT-mercy.edu - Ernesto Damiani, Università degli Studi di Milano, Italy, ernesto.damiani-AT-unimi.it ================ Program Committee ================ - Rafael Accorsi, University of Freiburg, Germany - Rasool Asal, Etisalat BT Innovation Centre, UAE - Jens-Matthias Bohli, NEC Laboratories Europe, Germany - Bud Brgger, Fraunhofer IAO, Germany - Ali Chettih, Pivot Point Security, Mercy College NY, USA - Frances Cleary, Waterford Institute of Technology, Ireland - Quiang Duan, Penn State at Abington, USA - Massimo Felici, Hewlett-Packard Laboratories, USA - Christopher Frenz, CTO at See-Thru, USA - Atsuhiro Goto, Institute of Information Security, Japan - Nils Gruschka, University of Applied Sciences Kiel, Germany - Marit Hansen, Independent Centre for Privacy Protection Schleswig-Holstein, Germany, - Patrick Hung, University of Ontario Institute of Technology, Canada - Luigi Lo Iacono, University of Applied Sciences Cologne, Germany - Florian Kerschbaum, SAP Research Karlsruhe, Germany - Zhiqiang Lin, UT Dallas, USA - Jörg Schwenk, Ruhr University Bochum, Germany - Wei Tan, IBM, USA - Jong Yoon, Mercy College, USA - Yingzhou Zhang, Nanjing University of Posts and Telecommunications, China ============== Publicity Chair ============== - Fulvio Frati, Università degli studi di Milano, Italy More information available at http://sesar.dti.unimi.it/SPE2014/

2 1

CfP: Annual Privacy Forum 2016
by Meiko Jensen 29 Jan '16

29 Jan '16

[Apologies if you receive multiple copies of this message] ========================================================================== Call For Papers Annual Privacy Forum 2016 (http://privacyforum.eu/) bringing research & policy together,7-8 September, Frankfurt am Main Nowadays electronic communication networks and digital services are an essential part of an increasing number of everyday commodities. In the era of automated profiling and electronic surveillance, citizens face a serious threat against their right to privacy and informational self-determination, especially when using the internet and mobile services. The lack of transparency regarding the functionality and interconnection of such services increases the risk of uncontrollable processing of personal data. In this regard, the upcoming Data Protection Regulation will be a useful instrument to protect the privacy of individuals. However, for its successful implementation, this new framework needs to be enforced by proper technologies and encompassed with sustainable business models along with mechanisms to promote privacy awareness and help users to understand the value of their data. ENISA is organizing the 2016 edition of the annual privacy forum, in the light of the upcoming data protection regulation and the European digital agenda. We invite papers covering original work on the technological, economic, legal and societal aspects of the challenges that will come up with the implementation of the new framework. We particularly invite multidisciplinary papers that make it explicit how the presented work can contribute to bridging the gap between research and policy. Moreover, in order to also encourage contributions from policy makers, representatives of competent authorities (such as Data Protection Authorities), industry experts, NGOs and civil society associations, we invite opinion papers from all stakeholders on the above mentioned topics. Opinion papers will reflect the opinion/position of the author(s) on the selected privacy-related topic. Both research and opinion papers should deal with at least one of the following aspects: - Implementation aspects of 'by design' and 'by default' paradigms - Implementation and adoption of PETs in today's digital services - Modelling of data protection and privacy requirements, such as: machine readable representations and automatic evaluation of policies - Enabling transparency: technological and organizational challenges. - Technical solutions for the enforcement and the implications of the subject's right, e.g. right to erasure, access and correction. - Aspects of privacy impact and risk assessment - Technical solutions for data portability - Sustainable business models for privacy friendly online services - Information and consent in online environments: practical solutions and implementations - Privacy awareness, reliability and usability of PETs - Trust services for the protection of personal data - privacy aware trust services (i.e. electronic certificates, signatures, etc.) - Security measures for the protection of personal data - Economics of privacy and personal data Review and Publication All submissions will be thoroughly reviewed by our PC members. We aim at minimal 3 average 4 reviews per Paper. Furthermore, papers will be published in the proceedings of the conference with a publishing house soon to be selected and announced. Important dates Submission of full papers: March 15, 2016 23:59 AoE Notification to author: May 10, 2016 Camera-ready copies: May 31, 2016 APF 2016 taking place on: September 7-8, 2016 in Frankfurt am Main

1 0

Usable Security and Privacy
by Luigi Lo Iacono 03 Dec '15

03 Dec '15

Liebe NETSECler, das Projekt "USecureD - Usable Security by Design" führt aktuell eine Onlinestudie durch, mit der der Stellenwert des Themas Usable Security and Privacy ermittelt werden soll und Schwierigkeiten von Anwendern im Umgang mit Mechanismen der Informationssicherheit identifiziert werden sollen. Die Ergebnisse der empirischen Untersuchung dienen der bedarfsgerechten Weiterentwicklung von IT-Sicherheitslösungen für KMU. Mit Ihrer Teilnahme können Sie unmittelbar zum Erfolg der Studie beitragen. Wir würden uns daher sehr freuen, wenn Sie sich 10 Minuten Zeit nehmen, um die Fragen zu beantworten (die Teilnahme ist möglich bis zum 20. Dezember 2015): https://www.usecured.de/survey/index.php/126657 Mit den besten Grüßen aus Köln, Luigi Lo Iacono.

1 0

CfP Workshop Cyberwarfare auf der INFORMATIK 2015
by Prof. Dr. Hannes Federrath 28 Mar '15

28 Mar '15

Workshop „Cyberwarfare“ 1. Oktober 2015 im Rahmen der INFORMATIK 2015 in Cottbus http://www.informatik2015.de Call for Papers --------------- Erstens sind inzwischen mehrere konkrete Fälle von staatlich organisierten Angriffen auf andere Staaten bekannt, zweitens haben spätestens die Snowden-Enthüllungen klar gemacht, dass neben der passiven und aktiven Informationsgewinnung insbesondere auch aktive Angriffe zur Beeinträchtigung von Informations- und Kommunikationssystemen geplant und durchgeführt wurden und werden. Doch nicht nur die Vereinigten Staaten greifen andere Länder an (wobei sie offenbar auch wenig Unterschied zwischen Verbündeten und Gegnern machen), sondern auch umgekehrt werden westliche Staaten und deren Wirtschaft angegriffen (z.B. der Nordkoreanische Angriff auf Sony Pictures Entertainment vom Jahreswechsel 2014/2015, der umgekehrt zu Wirtschaftssanktionen gegen Nordkorea) führte. Der Workshop „Cyberwarfare“ soll etwa Beiträge zu folgenden Fragen liefern: Inwieweit unterscheiden sich staatlich organisierte Cyberangriffe von denen krimineller Organisationen und/oder einzelnen Hackern? - Welche konkreten Gefahren gehen von zwischenstaatlichen Angriffen aus? - Was sind die technischen Mittel für derartige Angriffe? - Welche Kosten und welche Schäden werden durch die Angriffe verursacht? - Können Angriffe gegen nicht-demokratische Staaten ethisch gerechtfertigt sein? - Welche außenpolitische Dimension geht von den Angriffen aus? - Inwieweit tragen Cyberangriffe militärische Züge (Cyberwar)? - Gibt es für diese Form der Cyberwaffen ähnliche Regulierungsmechanismen wie beispielsweise für chemische, biologische oder nukleare Waffen? Die angenommenen Workshop-Beiträge werden im Tagungsband der INFORMATIK 2015 veröffentlicht. Die Autorenrichtlinien und Vorlagen zur Anfertigung von Beiträgen finden sich unter [1] auf der Webseite der INFORMATIK 2015. Termine und Fristen ------------------- 20.04.2015 Einreichungen von Beiträgen für den Workshop 18.05.2015 Entscheidung über die Annahme der Workshopbeiträge 20.06.2015 Einreichung der druckfähigen Workshopbeiträge für die Proceedings Geplanter Ablauf ---------------- Donnerstag, 1. Oktober 2015 09:00-09:45 Eingeladener Eröffnungsvortrag 09:45-12:15 Vorträge (3-4) der angenommenen Papiere inkl. einer Kaffeepause 12:15-12:30 Zusammenfassung der Ergenisse 12:30 Ende des Workshops Programmkomitee ---------------- Jürgen Altmann, Universität Dortmund Matthias Englert, TU Darmstadt Hannes Federrath, Universität Hamburg Sandro Gaycken, Freie Universität Berlin Gerald Kirchner, Zentrum für Naturwissenschaft und Friedensforschung Hamburg Götz Neuneck, Institut für Friedensforschung und Sicherheitspolitik Hamburg Stefan Oeter, Universität Hamburg Hintergrund ----------- Anknüpfend an die Ringlvorlesung „Cyber-Security, Cyber-War, Cyber-Peace“ [2], die im Wintersemester 2013 an der Universität Hamburg stattfand, soll das Thema nun im Rahmen des halbtägigen Workshops [3] auf der INFORMATIK 2015 aufgegriffen werden. Organisatoren ------------- Hannes Federrath, Universität Hamburg Götz Neuneck, Institut für Friedensforschung und Sicherheitspolitik Hamburg Kontakt ------- Hannes Federrath <federrath(a)informatik.uni-hamburg.de> Links ----- [1] http://www.informatik2015.de/autoren-ressourcen.html [2] https://www.inf.uni-hamburg.de/de/home/news/archive/friedensvorlesung.html [3] https://svs.informatik.uni-hamburg.de/workshop-cyberwarfare/

1 0

IFIP SEC 2015: Call for Participation / Early Bird until 2015-03-31
by Dominik Herrmann 26 Mar '15

26 Mar '15

===================================================================== CALL FOR PARTICIPATION IFIP SEC 2015 30th IFIP TC-11 SEC 2015 International Information Security and Privacy Conference Hamburg, Germany, 26-28 May 2015 https://ifipsec.org/2015/ Early Registration until 31 March 2015 via https://ifipsec.org/2015/reg-index.php The IFIP SEC conference is the flagship event of the International Federation for Information Processing (IFIP) Technical Committee 11 on Security and Privacy Protection in Information Processing Systems (TC-11, www.ifiptc11.org) IFIP SEC 2015 is organized by and hosted at the University of Hamburg, a vibrant harbor city in Northern Germany. The program committee selected 42 out of 232 submissions, which present novel research on various theoretical and practical aspects of security and privacy protection in ICT systems. CONFERENCE PROGRAM: - 42 paper presentations (14 sessions) - Four co-located conferences/workshops - Keynote and Award Sessions - Reception, Gala Dinner and Social Event SESSION TOPICS: - Privacy - Web Security - Access Control, Trust and Identity Management - Network Security - Security Management and Human Aspects of Security - Software Security - Applied Cryptography - Mobile and Cloud Services Security - Cyber-physical systems and Critical Infrastructures Security The detailed program is available here: https://ifipsec.org/2015/program.php CO-LOCATED EVENTS: IFIP WG 11.11 International Conference on Trust Management (IFIPTM) IFIP WG 11.8 World Conference on Information Security Education (WISE) IFIP WG 11.5 Workshop on IT Assurance & Control (27 May) IFIP WG 11.1 Workshop on Information Security Management (29 May) Details regarding all co-located events can be found here: https://ifipsec.org/2015/colocated.php GENERAL CHAIRS: Kai Rannenberg (Goethe-Universitaet Frankfurt, DE) Steven Furnell (Plymouth University, UK) PROGRAM CHAIRS: Hannes Federrath (University of Hamburg, DE) Dieter Gollmann (Hamburg University of Technology, DE) ORGANIZING CHAIR: Dominik Herrmann (University of Hamburg, DE) PROGRAM COMMITTEE: see https://ifipsec.org/2015/committees.php For more information, please feel free to contact the chairs at sec2015(a)ifipsec.org or visit https://ifipsec.org/2015/ We look forward to welcoming you in Hamburg! =====================================================================

1 0