6th Workshop on Privacy Enhancing Technologies

Robinson College, Cambridge, United Kingdom
June 28 - June 30, 2006

PROGRAM

Keynote: The Missing Link

Susan Landau, Sun Microsystems Laboratories

Between the conception
And the creation
Between the emotion
And the response
Falls the Shadow.
      (T.S. Eliot, "The Hollow Men")

One shadow is that while privacy policies abound, when data is collected, there are few or no rules governing its security (which is a crucial requirement for data privacy). A current instance of this concerns the recent requirement for data retention by the European Union. This talk discusses what is needed to get to:

Between the conception
And the creation
Between the emotion
And the response
Falls the Action.

Wednesday June 28 2006

09:00--10:30 WEIS Session 9

• The Economics of Mass Surveillance and the Questionable Value of Anonymous Communications
  George Danezis and Bettina Wittneben
• Is There a Cost to Privacy Breaches? An Event Study
  Alessandro Acquisti, Allan Friedman and Rahul Telang
• Financial Privacy for Free? US Consumers' Response to FACTA
  Alessandro Acquisti and Bin Zhang

10:30--11:00 Break

11:00--12:30 WEIS Session 10

• Anonymity Loves Company: Usability and the Network Effect
  Roger Dingledine and Nick Mathewson
• Collaborative Scheduling: Threats and Promises
  Rachel Greenstadt and Michael D. Smith
• Adverse Selection in Online "Trust" Certifications
  Benjamin Edelman

Close of WEIS Workshop

12:30--14:00 Lunch

14:00--14:15 Welcome to PET 2006

14:15--15:30 Invited Talk

• The Missing Link
  Susan Landau

15:30--15:45 Break

15:45--17:15 Session 1 -- Privacy in the Real World (Chair: Adam Shostack)

• Privacy for Public Transportation
  Thomas S. Heydt-Benjamin, Hee-Jin Chae, Benessa Defend, and Kevin Fu
• Ignoring the Great Firewall of China
  Richard Clayton, Steven J. Murdoch and Robert N. M. Watson
• Imagined Communities Awareness, Information Sharing, and Privacy on the Facebook
  Alessandro Acquisti and Ralph Gross

17:15 End of Session

17:20 & 17:40 Busses to Microsoft Research

18:00 Reception at Microsoft Research & PET Prize Ceremony

21:00 Return Bus to Robinson College

Thursday June 29 2006

08:30--10:30 Session 2: Privacy Policies (Chair: Jean Camp)

• Enhancing Consumer Privacy in the Liberty Alliance Identity Federation and Web Services Frameworks
  Mansour Alsaleh and Carlisle Adams
• Traceable and Automatic Compliance of Privacy Policies in Federated Digital Identity Management
  Anna C. Squicciarini, Abhilasha Bhargav-Spantzel, Alexei Czeskis and Elisa Bertino
• Privacy Injector -- Automated Privacy Enforcement through Aspects
  Chris Vanden Berghe and Matthias Schunter
• A Systemic Approach to Automate Privacy Policy Enforcementin Enterprises
  Marco Casassa Mont and Robert Thyne

10:30--11:00 Break

11:00--12:30 Session 3: Privacy and the Real World, Low Level (Chair: David Molnar)

• One Big File Is Not Enough: A Critical Evaluation of the Dominant Free-Space Sanitization Technique
  Simson L. Garfinkel and David J. Malan
• Protecting Privacy with the MPEG-21 IPMP Framework
  Nicholas Paul Sheppard and Reihaneh Safavi-Naini
• Privacy Rights Management -- Taming Camera-phones for Individual Privacy Enforcement
  Mina Deng, Lothar Fritsch and Klaus Kursawe

12:30--14:00 Lunch

14:00--16:00 Session 4: Anonymous Communication (Chair: Claudia Diaz)

• Improving Sender Anonymity in a Structured Overlay with Imprecise Routing
  Giuseppe Ciaccio
• Selectively Traceable Anonymity
  Luis von Ahn, Andrew Bortz, Nicholas J. Hopper and Kevin O'Neill
• Valet Services: Improving Hidden Servers with a Personal Touch
  Lasse Øverlier and Paul Syverson
• Blending different latency traffic with alpha-mixing
  Roger Dingledine, Andrei Serjantov and Paul Syverson

16:00--16:30 Break

16:30--18:30 Rump Session

18:30 End of Session

'7:30 for 8 pm' PET Dinner, University Arms Hotel

Friday June 30 2006

09:00--10:30 Session 5: Private Multi-party Computation (Chair: Dennis Kugler)

• Private Resource Pairing
  Joseph A. Calandrino and Alfred C. Weaver
• Honest-Verifier Private Disjointness Testing without Random Oracles
  Susan Hohenberger and Stephen A. Weis
• A Flexible Framework for Secret Handshakes (Multi-Party Anonymous and Un-observable Authentication)
  Gene Tsudik and Shouhuai Xu

10:30--11:00 Break

11:00--12:30 Session 6: Authentication and Cryptography (Chair: Nikita Borisov)

• On the Security of the Tor Authentication Protocol
  Ian Goldberg
• Optimal Key-Trees for Tree-Based Private Authentication
  Levente Buttyán, Tamás Holczer and István Vajda
• Simple and Flexible Private Revocation Checking
  John Solis and Gene Tsudik

12:30--14:00 Lunch

14:00--16:00 Session 7: Traffic and Location Analysis (Chair: Alastair Beresford)

• Breaking the Collusion Detection Mechanism of MorphMix
  Parisa Tabriz and Nikita Borisov
• Linking Anonymous Transactions: The Consistent View Attack
  Andreas Pashalidis and Bernd Meyer
• Preserving User Location Privacy in Mobile Data Management Infrastructures
  Reynold Cheng, Yu Zhang, Elisa Bertino and Sunil Prabhakar
• The Effects of Location Access Behavior on Re-identification Risk in a Distributed Envronment
  Bradley Malin and Edoardo Airoldi

16:00 Closing Remarks

16:00 End of Session

Saturday July 1 2006

Punt trip (or hike) to Grantchester for a pub lunch