Maîtrise en commerce électronique

Atelier sur la vie privée en commerce électronique

Workshop on Computer Privacy in Electronic Commerce

Université de Montréal, 5 mai 2007 / 5 May 2007

Z-330 (Pavillon Claire-McNicoll)

[Survol/Overview] [Nos invités/Speakers and abstracts] [Horaire et présentations/Schedule and talks] [Emplacement/Venue]

[Informations pratiques/Useful information] [Inscription/Registration] [Comité organisateur/Organizing committee] [Contact]

Survol / Overview

Le Département d'informatique et de recherche opérationnelle de l'Université de Montréal est heureux de vous inviter, en association avec le programme de la maîtrise en commerce électronique (Université de Montréal, HÉC Montréal), à son troisième atelier sur la vie privée en commerce électronique.

L'objectif de cet atelier est de permettre aux étudiants, chercheurs et praticiens qui sont intéressés par l'intimité numérique d'interagir avec des praticiens et académiciens prestigieux du domaine.

L’activité est gratuite mais le nombre de places est limité. Il est donc obligatoire de s’inscrire avant le 30 avril sur

Vous êtes tous les bienvenus !

Esma Aïmeur
Co-directrice de la maîtrise en commerce électronique

The Department of Computer Science of the Université de Montréal, in association with the Masters program in Electronic Commerce (Université de Montréal, HÉC Montréal), is delighted to invite you to its Third Workshop on Computer Privacy in Electronic Commerce.

The purpose of this workshop is to allow interested students, researchers and practitioners to interact with prestigious academics and practitioners in the field of computer privacy.

The activity is free of charge but the number of seats is limited. It is therefore necessary to register no later than April 30 at

You are most welcome!

Esma Aïmeur
Co-Chair of the Masters in Electronic Commerce Program

[Back to top]

Nos invités

Speakers and abstracts

Benoît Dupont: Professor of Criminology / Deputy Director of the CICC (Centre International de Criminologie Comparée), Université de Montréal / Canada Research Chair in Security, Identity and Technology

Identity Theft: Why It Is Not Going Away, How Come Law Enforcement Is Not Working and Could Regulation Provide Better Outcomes?

Abstract: As identity theft incidents continue to be reported in the media with an alarming frequency, it should now be clear that vulnerabilities to the integrity of personal data represent a structural feature of the information economy. This talk will be divided in three sections. First, I will discuss the criminogenic characteristics of the internet and what we know about identity theft victims. Then, I will explain why police organizations and the courts are very badly equipped to deal effectively with this problem. Finally, I will offer an alternative based on the principles of nodal governance and responsive regulation.

Benoit Dupont

Biography: Benoît Dupont is Professor of Criminology at the Université de Montréal and Deputy Director of the International Centre for Comparative Criminology. He is also the holder of the Canada Research Chair in Security, Identity and Technology. His areas of interest include the governance of security –especially the functioning of security networks–, the impact of new technologies on policing and the impact of mass surveillance on privacy. He recently co-edited a book with Jennifer Wood titled “Democracy, Society and the Governance of Security” (Cambridge University Press, 2006).

John Karat: IBM TJ Watson Research Center

Improving Privacy Policy Management with SPARCLE

Abstract: This talk will present a variety of research involved in the development of SPARCLE, an organizational policy management system specifically targeted at the authoring, implementation and monitoring of privacy policies. In our work we consider different types of Privacy policies - from high level principles (e.g., we will protect the privacy of customers data), through sets of rules that govern access to enterprises'personal information on customers (e.g., only doctor with direct responsibility for a patient can access medical test results unless prior consent is given by the patient). Comprehensive, accurate policies are the cornerstone of technologies that implement and enforce privacy. Thus, tools for policymakers to author policies should be highly usable, and should also be effective in helping an organization communicate with people whose data is collected and used.

SPARCLE includes a natural-language-based policy authoring system which is designed to make policy authoring easy for privacy officers, and which also facilitates the policy refinement necessary to produce implementable systems. We have conducted several studies in which participants used SPARCLE to author policies. The studies showed some of the strengths of SPARCLE as well as some potential areas for improvement. In additional to describing the natural language parsing in SPARCLE, I will present our research on tools for visualizing policy coverage and for analyzing policy rule redundancies and conflicts which we include in our system along with our early work in connecting policy to enforcement records to provide monitoring and auditing capabilities. Finally, I will briefly describe work in a new Open Collaborative Research project on A Framework for Policy Management for Security and Privacy involving research teams at IBM, Carnegie-Mellon, and Purdue.
Project URL:

John Karat

Biography: John Karat is an internationally recognized researcher in the field of human-computer interaction. Over his career with IBM Development (1982-1987) and Research (1987-2007) he has worked on the development of guidelines and principles for user interface design (including the chairing committees for the development of ANSI and ISO standards), researched and advised on design collaboration, researched and developed speech-based systems (including the design of IBM's large vocabulary desktop speech recognition system), researched and designed electronic medical record systems (for Kaiser Colorado Region and Barnes Hospital in St Louis), and information search and unstructured knowledge management, entertainment applications, personalization. John is currently involved in research on privacy and information system policy management. At IBM Research, he has been a researcher, project leader, and manager. John is currently co-leader of the IBM Privacy Research Institute, senior researcher on a project to enable end-to-end management of privacy policies in natural language, and project leader for an open collaborative research (OCR) initiative in privacy and security policy management with Carnegie Mellon and Purdue Universities. He has been awarded several patents (addressing speech recognition interfaces, and general help systems) and received a number of internal IBM awards for invention achievement and other contributions. Recent publications have been in the areas of speech user interfaces (best paper award at the 1999 IFIP INTERACT conference), personalization (including an edited book "Designing Personalized User Experiences in eCommerce" published by Kluwer), and development of a policy management workbench for privacy (Best paper nominee at ACM SIGCHI 2006).

[Back to top]

Jim Greer: Professor of Computer Science / Director of the University Learning Centre, University of Saskatchewan

Privacy Issues in Online Learning

Abstract: Students engaged in online learning risk privacy violations. As with e-commerce systems, personal information must be shared with the system in order to receive quality learning services, but in addition, personal information needs to be shared with teachers and peers to engage in meaningful collaborative learning activities. Since these others tend not to be personally known to the learner, learners face some risk associated with untrustworthy peers or instructors failing to follow privacy policies. Separating one's personal identity information into partial identities, each with their own pseudonym, offers a solution that mitigates many such risks. But managing partial identities has its own challenges, both technical and social, and I will explore these in my talk. Dealing with younger learners adds extra privacy risks and leads to investigation of issues around identity formation for young people in the online era.

Jim Greer

Biography: Jim Greer is a Professor of Computer Science and Director of the University Learning Centre at the University of Saskatchewan. His research is in the area of artificial intelligence and adaptive, personalized online learning systems. For the past 20 years he has been the Director of the ARIES Laboratory, an internationally renowned research lab in the AI in education community. In his new role with the University Learning Centre, he leads faculty development and learner support activities at the University and leads projects to enhance online learning experiences for all learners and instructors.

Pascal Fortin: Vice President, Professional Services, GoSecure

When Hackers Attack

Abstract: The best defense from hackers is to understand how they think. This presentation will provide valuable insight into how hackers circumvent and defeat security controls in networked environments, applications and operating systems - even within a seemingly secure environment. Topics covered will range from information gathering techniques to the final stages of exploitation.

Pascal Fortin

Biography: Mr. Fortin is Vice President of professional services and oversees the security consulting group at GoSecure. Mr. Fortin has more than seven year's experience with voice and data service providers and several private and public sector organizations. Before joining GoSecure, Mr. Fortin worked as director of North American technical services for one of the three largest distributors of advanced networking and telecommunications products worldwide. This experience allowed him to act as a senior consultant and project manager for various Fortune 500 organizations and government departments. Over the years, Mr. Fortin gained such expertise as designing and maintaining successful converged and secure telecommunication infrastructures. Mr. Fortin has a degree in computer science from Université du Québec and many industry certifications relevant to telecommunications and IT security.

[Back to top]

Horaire / Schedule

8:30 – 9:00 Enregistrement / Registration
9:00 – 9:15 Esma Aïmeur and Jacques Robert
Mot de bienvenue / Opening Remarks
9:15 – 10:30 Benoît Dupont
Identity Theft: Why It Is Not Going Away, How Come Law Enforcement Is Not Working and Could Regulation Provide Better Outcomes?
10:30 – 10:45 Pause-café / Coffee Break
10:45 – 12:00 John Karat
Improving Privacy Policy Management with SPARCLE
12:00 – 13:15 Déjeuner / Lunch
Salon Maurice L’Abbé (6 ième étage / 6th floor, Pavillon André-Aisenstadt)
13:15 – 14:30 Jim Greer
Privacy Issues in Online Learning
14:30 – 15:45 Pascal Fortin
When Hackers Attack
15:45 – 16:00 Pause-café / Coffee Break
16:00 – 17:00 Mot de la fin / Concluding Remarks
[Back to top]

Emplacement / Venue

L'atelier se déroulera à l'Université de Montréal. Les présentations auront lieu dans la salle Z-330 du pavillon Claire McNicoll. Le déjeuner sera offert gratuitement au salon Maurice L'Abbé, qui se situe au 6ième étage du pavillon André-Aisenstadt.

The workshop will take place at the Université de Montréal. The talks and panel will be held in room Z-330, pavillon Claire McNicoll. Lunch will be provided free of charge in salon Maurice L'Abbé, which is located on the sixth floor of pavillon André-Aisenstadt.

Pavillon Claire McNicoll map and front

Plan et façade du pavillon Claire McNicoll / Map and picture of the front of the pavillon Claire McNicoll

Pavillon Andre Eisenstadt map and front

Plan et façade du pavillon André-Aisenstadt / Map and picture of the front of the pavillon André-Aisenstadt

[Back to top]

Informations pratiques / Useful Information

Pour se rendre au pavillon Claire McNicoll :
[Back to top]
How to get to Pavillon Claire McNicoll:
[Back to top]

Inscription / Registration

L'inscription est GRATUITE, cliquez simplement ici et remplissez le formulaire pour vous inscrire. Si vous préférez, vous pouvez aussi vous inscrire pour participer à l'atelier en envoyant un courriel directement à et en indiquant votre prénom, nom de famille, adresse électronique, affiliation et statut professionnel.

Registration is FREE, simply click here and fill out the form. Alternatively, you may register to the workshop by sending an email directly to Please specify your first name, last name, email address, affiliation and professional status.

Comité organisateur / Organizing Committee

Contact principal / Primary contact

Pour toute question ou suggestion, s'il vous plaît contactez Esma Aïmeur / For questions and suggestions, please contact Esma Aïmeur



Phone: +1 (514) 343-6794

Fax: +1 (514) 343-5834

Université de Montréal Département d'informatique et de recherche opérationnelle Pavillon André-Aisenstadt C.P. 6128, Succ. Centre-Ville, Montréal (QC) H3C 3J7 Canada

[Back to top]