![]() |
|
![]() |
Atelier sur la vie privée en commerce électroniqueWorkshop on Computer Privacy in Electronic CommerceUniversité de Montréal, 5 mai 2007 / 5 May 2007Z-330 (Pavillon Claire-McNicoll) |
Benoît Dupont: Professor of Criminology / Deputy Director of the CICC (Centre International de Criminologie Comparée), Université de Montréal / Canada Research Chair in Security, Identity and Technology
Identity Theft: Why It Is Not Going Away, How Come Law Enforcement Is Not Working and Could Regulation Provide Better Outcomes?
Abstract: As identity theft incidents continue to be reported in the media with an alarming frequency, it should now be clear that vulnerabilities to the integrity of personal data represent a structural feature of the information economy. This talk will be divided in three sections. First, I will discuss the criminogenic characteristics of the internet and what we know about identity theft victims. Then, I will explain why police organizations and the courts are very badly equipped to deal effectively with this problem. Finally, I will offer an alternative based on the principles of nodal governance and responsive regulation.
Biography: Benoît Dupont is Professor of Criminology at the Université de Montréal and Deputy Director of the International Centre for Comparative Criminology. He is also the holder of the Canada Research Chair in Security, Identity and Technology. His areas of interest include the governance of security –especially the functioning of security networks–, the impact of new technologies on policing and the impact of mass surveillance on privacy. He recently co-edited a book with Jennifer Wood titled “Democracy, Society and the Governance of Security” (Cambridge University Press, 2006).
John Karat: IBM TJ Watson Research Center
Improving Privacy Policy Management with SPARCLE
Abstract: This talk will present a variety of research involved in the
development of SPARCLE, an organizational policy management system
specifically targeted at the authoring, implementation and monitoring of
privacy policies. In our work we consider different types of Privacy
policies - from high level principles (e.g., we will protect the privacy
of customers data), through sets of rules that govern access to
enterprises'personal information on customers (e.g., only doctor with
direct responsibility for a patient can access medical test results unless prior consent is given by the patient). Comprehensive, accurate policies are the cornerstone of technologies that implement and enforce privacy. Thus, tools for policymakers to author policies should be highly usable, and should also be effective in helping an organization communicate with people whose data is collected and used.
SPARCLE includes a natural-language-based policy authoring system which is designed to make policy authoring easy for privacy officers, and which also facilitates the policy refinement necessary to produce implementable systems. We have conducted several studies in which participants used SPARCLE to author policies. The studies showed some of the strengths of SPARCLE as well as
some potential areas for improvement. In additional to describing the
natural language parsing in SPARCLE, I will present our research on tools for visualizing policy coverage and for analyzing policy rule redundancies and conflicts which we include in our system along with our early work in connecting policy to enforcement records to provide monitoring and auditing capabilities. Finally, I will briefly describe work in a new Open Collaborative Research project on A Framework for Policy Management for Security and Privacy involving research teams at IBM, Carnegie-Mellon,
and Purdue.
Project URL: http://www.research.ibm.com/sparcle
Biography: John Karat is an internationally recognized researcher in the field
of human-computer interaction. Over his career with IBM Development
(1982-1987) and Research (1987-2007) he has worked on the development of guidelines and principles for user interface design (including the
chairing committees for the development of ANSI and ISO standards),
researched and advised on design collaboration, researched and developed speech-based systems (including the design of IBM's large vocabulary desktop speech recognition system), researched and designed electronic medical record systems (for Kaiser Colorado Region and Barnes Hospital in St Louis), and information search and unstructured knowledge management, entertainment applications, personalization. John is currently involved in research on privacy and information system policy management. At IBM Research, he has been a researcher, project leader, and manager. John is
currently co-leader of the IBM Privacy Research Institute, senior
researcher on a project to enable end-to-end management of privacy
policies in natural language, and project leader for an open collaborative research (OCR) initiative in privacy and security policy management with Carnegie Mellon and Purdue Universities. He has been awarded several patents (addressing speech recognition interfaces, and general help systems) and received a number of internal IBM awards for invention achievement and other contributions. Recent publications have been in the
areas of speech user interfaces (best paper award at the 1999 IFIP
INTERACT conference), personalization (including an edited book "Designing
Personalized User Experiences in eCommerce" published by Kluwer), and
development of a policy management workbench for privacy (Best paper
nominee at ACM SIGCHI 2006).
[Back to top]
Jim Greer: Professor of Computer Science / Director of the University Learning Centre, University of Saskatchewan
Privacy Issues in Online Learning
Abstract: Students engaged in online learning risk privacy violations. As with e-commerce systems, personal information must be shared with the system in order to receive quality learning services, but in addition, personal information needs to be shared with teachers and peers to engage in meaningful collaborative learning activities. Since these others tend not to be personally known to the learner, learners face some risk associated with untrustworthy peers or instructors failing to follow privacy policies. Separating one's personal identity information into partial identities, each with their own pseudonym, offers a solution that mitigates many such risks. But managing partial identities has its own challenges, both technical and social, and I will explore these in my talk. Dealing with younger learners adds extra privacy risks and leads to investigation of issues around identity formation for young people in the online era.
Biography: Jim Greer is a Professor of Computer Science and Director of the University Learning Centre at the University of Saskatchewan. His research is in the area of artificial intelligence and adaptive, personalized online learning systems. For the past 20 years he has been the Director of the ARIES Laboratory, an internationally renowned research lab in the AI in education community. In his new role with the University Learning Centre, he leads faculty development and learner support activities at the University and leads projects to enhance online learning experiences for all learners and instructors.
Pascal Fortin: Vice President, Professional Services, GoSecure
When Hackers Attack
Abstract: The best defense from hackers is to understand how they think. This presentation will provide valuable insight into how hackers circumvent and defeat security controls in networked environments, applications and operating systems - even within a seemingly secure environment. Topics covered will range from information gathering techniques to the final stages of exploitation.
Biography: Mr. Fortin is Vice President of professional services and oversees the security consulting group at GoSecure.
Mr. Fortin has more than seven year's experience with voice and data service providers and several private and public sector organizations. Before joining GoSecure, Mr. Fortin worked as director of North American technical services for one of the three largest distributors of advanced networking and telecommunications products worldwide. This experience allowed him to act as a senior consultant and project manager for various Fortune 500 organizations and government departments.
Over the years, Mr. Fortin gained such expertise as designing and maintaining successful converged and secure telecommunication infrastructures. Mr. Fortin has a degree in computer science from Université du Québec and many industry certifications relevant to telecommunications and IT security.
[Back to top]
| 8:30 – 9:00 | Enregistrement / Registration |
| 9:00 – 9:15 | Esma Aïmeur and Jacques Robert Mot de bienvenue / Opening Remarks |
| 9:15 – 10:30 | Benoît Dupont Identity Theft: Why It Is Not Going Away, How Come Law Enforcement Is Not Working and Could Regulation Provide Better Outcomes? |
| 10:30 – 10:45 | Pause-café / Coffee Break |
| 10:45 – 12:00 | John Karat Improving Privacy Policy Management with SPARCLE |
| 12:00 – 13:15 | Déjeuner / Lunch Salon Maurice L’Abbé (6 ième étage / 6th floor, Pavillon André-Aisenstadt) |
| 13:15 – 14:30 | Jim Greer Privacy Issues in Online Learning |
| 14:30 – 15:45 | Pascal Fortin When Hackers Attack |
| 15:45 – 16:00 | Pause-café / Coffee Break |
| 16:00 – 17:00 | Mot de la fin / Concluding Remarks |
Pour toute question ou suggestion, s'il vous plaît contactez Esma Aïmeur / For questions and suggestions, please contact Esma Aïmeur
Email: aimeur@iro.umontreal.ca
URL: http://www.iro.umontreal.ca/~aimeur
Phone: +1 (514) 343-6794
Fax: +1 (514) 343-5834
[Back to top]Université de Montréal Département d'informatique et de recherche opérationnelle Pavillon André-Aisenstadt C.P. 6128, Succ. Centre-Ville, Montréal (QC) H3C 3J7 Canada