|
![]() |
Atelier sur la vie privée en commerce électroniqueWorkshop on Computer Privacy in Electronic CommerceUniversité de Montréal, 2 mai 2009 / 2 May 2009Salle/Room Z-310 (Pavillon Claire-McNicoll) |
Yves Deswarte: Research Director of CNRS, member of the Dependable Computing and Fault Tolerance research group at LAAS-CNRS in
Toulouse, France
Ambient Intelligence and Privacy Protection
Abstract:
While in our society, privacy is recognized as one of the fundamental
human rights, citizens and consumers feel that new technologies
endanger their privacy, and this feeling is an obstacle to the
development of the "Information Society". This talk will first
establish two basic privacy principles: personal data minimization and
sovereignty. It will then present some Privacy-Enhancing Technologies
(or PETs) that can contribute to improve user confidence in pervasive
computing and ambient intelligence devices. Among these technologies,
the following ones will be detailed: virtual identity management,
anonymous communications and accesses, privacy-preserving authorization
schemes, and personal data management.
Biography
| Yves Deswarte is currently a Research Director of CNRS, member of the Dependable Computing and Fault Tolerance research group at LAAS-CNRS in
Toulouse, France. Successively at CII, CIMSA, INRIA and LAAS, his research
work has dealt mainly with fault-tolerance and security in distributed
computing systems. Recently, his main research interests were in intrusion
tolerance, quantitative security evaluation, dependability evaluation
criteria, protection of safety-critical systems with multiple levels of
integrity, security policies for critical infrastructure protection, and
privacy-preserving authorization schemes. He is the author or co-author of
more than 100 international publications in these areas. He is a "Membre
Emérite" of SEE, a member of the IEEE TC on Security and Privacy and a
member of the ACM SIGSAC. He is representing the IEEE Computer Society at
IFIP TC-11 (Technical Committee on Security and Protection in Information
Processing Systems). |
![]() |
Benoît Dupont: Professor of Criminology / Deputy Director of the CICC (Centre International de Criminologie Comparée), Université de Montréal / Canada Research Chair in Security, Identity and Technology
Better Sorry Than Safe: The Uncertain State of Information Security in North America
Abstract:
Large data breaches involving personal information have been abundantly publicized over the past years in North America, and judging by the most recent cases, things seem to deteriorate rather than improve. Although these losses and thefts do not always result in identity frauds, they denote a systematic security deficit in terms of personal data collection, storage and management. This presentation will use empirical data collected through a range of open sources to measure the overall quantity of personal information compromised in North America for the period going from 2005 to 2007, and to examine the nature of those breaches. This statistical analysis based on 976 incidents will help us understand the main vulnerabilities to which organizations were exposed, and what priorities should prevention programs emphasise.
Biography:
| Benoît Dupont is Professor of Criminology at the Université de Montréal and Deputy Director of the International Centre for Comparative Criminology. He is also the holder of the Canada Research Chair in Security, Identity and Technology. His areas of interest include the governance of security –especially the functioning of security networks–, the impact of new technologies on policing and the impact of mass surveillance on privacy. He recently co-edited a book with Jennifer Wood titled “Democracy, Society and the Governance of Security” (Cambridge University Press, 2006). |
![]() |
Adam Smith: Assistant Professor in the Department of Computer
Science and Engineering at Penn State University
Pinning Down "Privacy" in Statistical Databases
Abstract:
Consider an agency holding a large database of sensitive personal information (perhaps medical records, census survey answers, or web search records). The agency would like to discover and publicly release global characteristics of the data (say, to inform policy and business decisions) while protecting the privacy of individuals' records. This problem is known variously as "statistical disclosure control", "privacy-preserving data mining" or simply "database privacy". In this talk, we describe "differential privacy", a notion which emerged from a recent line of work in theoretical computer science that seeks to formulate and satisfy rigorous definitions of privacy for such statistical databases. We also sketch some basic techniques for achieving differential privacy.
Biography:
| Adam Smith is an assistant professor in the Department of Computer Science and Engineering at Penn State. His research interests lie in cryptography, privacy and their connections to information theory, quantum computing and statistics. He received his Ph.D. from MIT in 2004 and was subsequently a visiting scholar at the Weizmann Institute of Science and UCLA. | ![]() |
Martin Fiset: Consultant en sécurité de l'information/ Spécialiste de la sécurité des systèmes de paiement
La Sécurité des Cartes à Puce au Canada
Résumé :
Le but de la présentation est d’expliquer le fonctionnement des cartes à puces qui sont maintenant en usage au Canada. Nous débuterons la présentation par un bref historique des modes de paiement au Canada et de sa position mondiale relative. Nous regarderons ensuite les promesses liées à l’introduction de ce nouveau mode de paiement. Quels en sont les avantages pour le client, le marchand et le banquier.
La présentation cherchera à familiariser le futur utilisateur à cette technologie afin de démystifier le vrai du faux, essentiellement de répondre à la question du niveau de sécurité accrue (ou non).
La présentation prendra pour acquis un niveau 101 des notions de base en cryptologie afin de donner plus de temps aux particularités de la sécurité utilisée dans les cartes. Avec la carte de crédit à puces, la signature ne sera plus nécessaire et elle sera remplacée soit par un NIP ou par rien du tout, cela dépendant du montant de la transaction. Nous regarderons aussi les différents modèles de fraudes qui ont été documentés entre autres par Ross Anderson de l’Université de Cambridge au Royaume-Uni. Nous tenterons de définir à qui pourrait profiter cette avancée technologique de rattrapage avec les autres pays industrialisés de l’Europe et de l’Asie.
Biographie :
| Martin Fiset est consultant en sécurité de l'information et spécialiste de la sécurité des systèmes de paiement avec plus de 20 ans d’expérience dans l’élaboration de solutions d’affaires intégrant les concepts de base de la sécurité; la confidentialité, l’intégrité et la disponibilité des environnements. Il a collaboré à l'installation du réseau de partage de guichets du réseau américain PLUS au Japon, en Australie, en Nouvelle-Zélande et en Corée du Sud. Il a aussi aidé à la mise en place du système de paiement direct au Canada. Récemment il a aidé à l'introduction des cartes à puces à la Banque Nationale du Canada. Ses sujets d'intérêt concernent la protection de l'information privée, les modes d'authentification et la gestion des identifiants. Il possède une formation en génie mécanique de l'École Polytechnique et une maîtrise en ergonomie des systèmes d'information de l'Université de Montréal. | ![]() |
| 8:30 – 9:00 | Enregistrement / Registration |
| 9:00 – 9:15 | Esma Aïmeur Mot de bienvenue / Opening Remarks |
| 9:15 – 10:30 | Yves Deswarte Ambient Intelligence and Privacy Protection |
| 10:30 – 10:45 | Pause-café / Coffee Break |
| 10:45 – 12:00 | Benoît Dupont Better Sorry Than Safe: The Uncertain State of Information Security in North America |
| 12:00 – 13:15 | Déjeuner / Lunch Salon Maurice L’Abbé (6 ième étage / 6th floor, Pavillon André-Aisenstadt) |
| 13:15 – 14:30 | Adam Smith Pinning Down "Privacy" in Statistical Databases |
| 14:30 – 15:45 | Martin Fiset La Sécurité des Cartes à Puce au Canada |
| 15:45 – 16:00 | Pause-café / Coffee Break |
| 16:00 – 17:00 | Mot de la fin / Concluding Remarks |

Pour toute question ou suggestion, s'il vous plaît contactez Esma Aïmeur / For questions and suggestions, please contact Esma Aïmeur
Email: aimeur@iro.umontreal.ca
URL: http://www.iro.umontreal.ca/~aimeur
Phone: +1 (514) 343-6794
Fax: +1 (514) 343-5834
Université de Montréal Département d'informatique et de recherche opérationnelle Pavillon André-Aisenstadt C.P. 6128, Succ. Centre-Ville, Montréal (QC) H3C 3J7 Canada