Live streaming: There will be a live stream this year for people who are unable to attend. Although we know that this can't provide the full value of in-person interactions and discussions that attending PETS does, we hope that following along and asking questions remotely will be useful. The link to the stream will show up here and on the @PET_Symposium twitter account.
Live stream: https://www.streamingbarcelona.com/plataforma/pets2018/
Monday July 23
1:30 to 6:30 Registration (Aula 1)
2:00 – 6:00 pm OPERANDI 2018: Open Day for Privacy, Transparency and Decentralization
7:00 – 9:00 pm Joint OPERANDI / PETS Welcome Reception
Tuesday, July 24
8:30 Registration (Aula 1)
9:30 Opening Remarks [video, slides]
10:00 Tracking (Chair: Gunes Acar)
- NoMoAds: Effective and Efficient Cross-App Mobile Ad-Blocking [video, slides]
Anastasia Shuba (UC Irvine), Athina Markopoulou (UC Irvine), and Zubair Shafiq (University of Iowa) - Diffusion of User Tracking Data in the Online Advertising Ecosystem [video, slides]
Muhammad Ahmad Bashir and Christo Wilson (Northeastern University) - Exploiting TLS Client Authentication for Widespread User Tracking [video]
Lucas Foppe (USNA), Jeremy Martin (USNA, MITRE), Travis Mayberry (USNA), Erik C. Rye (USNA), and Lamont Brown (USNA)
11:00 Break
11:30 PETS Keynote Address — Alan Mislove (Chair: Damon McCoy)
Targeted advertising: Privacy threats and opportunities [video]
Abstract: Advertising now funds most popular web sites and internet services: companies including Facebook, Twitter, and Google all provide most of their services for free, in exchange for collecting data from their users. One of the primary explanations for the success of these advertising platforms is that they have leveraged this data to provide the ability for advertisers to target ads to platform users in a myriad of ways. For example, advertisers can now request that their ads be shown to complex combinations of users based on behaviors, demographics, interests, data broker-derived attributes, and even personally identifiable information (PII). In this talk, I provide an overview of the state-of-the-art in targeted advertising, take a critical look at how these targeted advertising services can be misused, and demonstrate how targeted advertising offers the opportunity to actually increase the transparency of advertising systems.
Bio: Alan Mislove is an Associate Professor, an Associate Dean, and the Director of Undergraduate Programs at the College of Computer and Information Science at Northeastern University, which he joined in 2009. Prof. Mislove’s research lies at the intersection of internet measurement, security, and privacy. He is interested in understanding how real-world systems are used and abused, and the impact that these systems are having on end users' security and privacy. His work comprises over 50 peer-reviewed papers, has received over 10,000 citations, and has been supported by over $5M in grants from government agencies and industrial partners. He is a recipient of an NSF CAREER Award (2011), a Google Faculty Award (2012), the ACM SIGCOMM Test of Time Award (2017), the USENIX Security Distinguished Paper Award (2017), the NDSS Distinguished Paper Award (2018), the IEEE Cybersecurity Award for Innovation (2017), and his work has been covered by the Wall Street Journal, The Economist, and the CBS Evening News.
1:00 Lunch
2:30 Usability, HCI, Policy (Chair: Matthew Wright)
- I never signed up for this! Privacy implications of email tracking [video]
Steven Englehardt, Jeffrey Han, and Arvind Narayanan (Princeton) - "Won't Somebody Think of the Children" Privacy Analysis at Scale: A Case Study With COPPA [video, slides]
Irwin Reyes (International Computer Science Institute), Primal Wijesekera (University of British Columbia), Joel Reardon (University of Calgary), Amit Elazari (University of California - Berkeley), Abbas Razaghpanah (Stony Brook University), Narseo Vallina Rodriguez (International Computer Science Institute, IMDEA Networks), and Serge Egelman (International Computer Science Institute, University of California - Berkeley) - Turtles, Locks, and Bathrooms: Understanding Mental Models of Privacy Through Illustration [video]
Maggie Oates, Yama Ahmadullah, Abigail Marsh, Chelse Swoopes, Shikun Zhang, Rebecca Balebako, and Lorrie Cranor (Carnegie Mellon University)
3:30 Mini-break
3:45 Censorship Resistance, Fingerprinting (Chair: Nick Hopper)
- Secure asymmetry and deployability for decoy routing systems [video]
Cecylia Bocovich and Ian Goldberg (University of Waterloo) - Privacy Pass: Bypassing Internet Challenges Anonymously [video, slides]
Alex Davidson (Royal Holloway, University of London), Ian Goldberg (University of Waterloo), Nick Sullivan (Cloudflare), George Tankersley (Independent), and Filippo Valsorda (Independent) - Feature selection for website fingerprinting [video, slides]
Junhua Yan and Jasleen Kaur (University of North Carolina at Chapel Hill)
4:45 Break
5:15 Messaging (Chair: Jaap-Henk Hoepman)
- Improved Strongly Deniable Authenticated Key Exchanges for Secure Messaging [slides]
Nik Unger and Ian Goldberg (University of Waterloo) - Consistent Synchronous Group Off-The-Record Messaging with SYM-GOTR [video, slides]
Michael Schliep (University of Minnesota), Eugene Vasserman (Kansas State University), and Nicholas Hopper (University of Minnesota) - PIR-PSI: Scaling Private Contact Discovery [video, slides]
Daniel Demmler (TU Darmstadt), Peter Rindal, Mike Rosulek, and Ni Trieu (Oregon State University)
Wednesday, July 25
10:00 Analytics (Chair: Aaron Johnson)
- Privacy-preserving Machine Learning as a Service [video]
Ehsan Hesamifard (University of North Texas), Hassan Takabi (University of North Texas), Mehdi Ghasemi (University of Saskatchewan), and Rebecca N. Wright (University of Rutgers) - Privacy-Preserving Search of Similar Patients in Genomic Data [video]
Gilad Asharov (Cornell Tech), Shai Halevi (IBM Research), Yehuda Lindell (Bar Ilan University), and Tal Rabin (IBM Research) - Privacy-preserving Wi-Fi Analytics [video, slides]
Mohammad Alaggan (Univ Lyon, Inria, INSA Lyon, CITI, F-69621 Villeurbanne, France), Mathieu Cunche (Univ Lyon, INSA Lyon, Inria, CITI, France), and Sébastien Gambs (Université du Québec à Montréal, Canada)
11:00 Break
11:30 Town Hall [slides]
1:00 Lunch
2:30 Anonymization, Differential Privacy (Chair: Catuscia Palamidessi)
- SafePub: A Truthful Data Anonymization Algorithm With Strong Privacy Guarantees [video, slides]
Raffael Bild, Klaus A. Kuhn, and Fabian Prasser (Technical University of Munich, Germany) - Toward Distribution Estimation under Local Differential Privacy with Small Sample [slides]
Takao Murakami (National Institute of Advanced Industrial Science and Technology (AIST)), Hideitsu Hino (University of Tsukuba), and Jun Sakuma (University of Tsukuba) - Differentially Private Oblivious RAM [video, slides]
Sameer Wagh (Princeton University), Paul Cuff (Renaissance Technologies), and Prateek Mittal (Princeton University)
3:30 Mini-break
3:45 Anonymous communications (Chair: Steven Murdoch)
- Dropping on the Edge: Flexibility and Traffic Confirmation in Onion Routing Protocols [video, slides]
Florentin Rochet and Olivier Pereira (Uclouvain Crypto Group) - Guard Sets in Tor using AS Relationships
Mohsen Imani (The University of Texas at Arlington), Armon Barton (The University of Texas at Arlington), and Matthew Wright (Rochester Institute of Technology) - Tempest: Temporal Dynamics in Anonymity Systems [video, slides]
Ryan Wails (U.S. Naval Research Laboratory), Yixin Sun (Princeton University), Aaron Johnson (U.S. Naval Research Laboratory), Mung Chiang (Princeton University), and Prateek Mittal (Princeton University)
4:45 Break
5:15 Tracking (Chair: Narseo Vallina Rodriguez)
- Touch and You're Trapp(ck)ed: Quantifying the Uniqueness of Touch Gestures for Tracking [video]
Rahat Masood (UNSW, CSIRO Data61), Benjamin Zi Hao Zhao (CSIRO Data61, UNSW), Hassan Jameel Asghar (CSIRO Data61), and Mohamed Ali Kaafar (CSIRO Data61) - Power to peep-all: Inference Attacks by Malicious Batteries on Mobile Devices [video, slides]
Pavel Lifshits (Technion), Roni Forte (Technion), Yedid Hoshen (Hebrew University, Jerusalem), Matt Halpern (University of Texas at Austin), Manuel Philipose (University of Texas at Austin), Mohit Tiwari (University of Texas at Austin), and Mark Silberstein (Technion) - Every Move You Make: Tracking Mobile Web Users via Motion Sensors [video]
Anupam Das (Carnegie Mellon University), Nikita Borisov (University of Illinois at Urbana-Champaign), and Edward Chou (University of Illinois at Urbana-Champaign) - Panoptispy: Characterizing Audio and Video Exfiltration from Android Applications [video, slides]
Elleen Pan (Northeastern University), Jingjing Ren (Northeastern University), Martina Lindorfer (UC Santa Barbara), Christo Wilson (Northeastern University), and David Choffnes (Northeastern University)
8:00 pm PETS Banquet at La Brasserie FLO, Jonqueres, 10 (route from the venue)
Thursday, July 26
10:00 Blockchain (Chair: Alptekin Küpçü)
- When the cookie meets the blockchain: Privacy risks of web payments via cryptocurrencies [video]
Steven Goldfeder, Harry Kalodner, Dillon Reisman, and Arvind Narayanan (Princeton University) - Möbius: Trustless Tumbling for Transaction Privacy [video]
Sarah Meiklejohn (University College London) and Rebekah Mercer (Aarhus University) - An Empirical Analysis of Traceability in the Monero Blockchain [video, slides]
Malte Möser (Princeton University), Kyle Soska (CMU), Ethan Heilman (Boston University), Kevin Lee (UIUC), Henry Heffan (Brookline High School), Shashvat Srivastava (Shrewsbury High School), Kyle Hogan (Boston University), Jason Hennessey (Boston University), Andrew Miller (UIUC), Arvind Narayanan (Princeton University), and Nicolas Christin (CMU)
11:00 Break
11:30 Crypto (Chair: Ian Goldberg)
- Functional Credentials [video]
Dominic Deuber (Friedrich-Alexander-Universität Erlangen-Nürnberg), Matteo Maffei (TU Vienna), Giulio Malavolta (Friedrich-Alexander-Universität Erlangen-Nürnberg), Max Rabkin (), Dominique Schöder (Friedrich-Alexander-Universität Erlangen-Nürnberg), and Mark Simkin (Aarhus University) - Onion-AE: Foundations of Nested Encryption [video, slides]
Phillip Rogaway and Yusi Zhang (University of California, Davis) - Efficient Dynamic Searchable Encryption with Forward Privacy [video, slides]
Mohammad Etemad (University of Virginia), Alptekin Küpçü (Koç University), Charalampos Papamanthou (University of Maryland, College Park), and David Evans (University of Virginia)
12:40 Lunch
2:30 Attacks (Chair: Claudia Diaz)
- Quantifying Privacy Loss of Human Mobility Graph Topology [video, slides]
Dionysis Manousakas (University of Cambridge), Cecilia Mascolo (University of Cambridge), Alastair Beresford (University of Cambridge), Dennis Chan (University of Cambridge), and Nikhil Sharma (University College London) - Cracking ShadowCrypt: Exploring the Limitations of Secure I/O Systems in Internet Browsers [video]
Michael Freyberger (Princeton University), Warren He (UC Berkeley), Devdatta Akhawe (Dropbox), Michelle Mazurek (Princeton University), and Prateek Mittal (Princeton University) - Undermining Privacy in the Aircraft Communications Addressing and Reporting System (ACARS) [video]
Matthew Smith (University of Oxford), Daniel Moser (ETH Zurich), Martin Strohmeier (University of Oxford), Vincent Lenders (armasuisse), and Ivan Martinovic (University of Oxford) - Recognizing and Imitating Programmer Style: Adversaries in Program Authorship Attribution [video, slides]
Lucy Simko, Luke Zettlemoyer, and Tadayoshi Kohno (University of Washington)
3:40 Break
4:10 Rump Session (Chair: Roger Dingledine)
6:00 Closing and Awards
7:00 Caspar Bowden PET Award Reception at Jardí de l’Ateneu Barcelonès (route from the venue, supported by Comissionat de Tecnologia i Innovació Digital)
Friday, July 27 — HotPETs
9:15 Opening Remarks (Tariq Elahi) [video]
9:30 Deus ex ML (Chair: Marc Juarez)
- What Are Machine Learning Models Hiding? [video]
Vitaly Shmatikov and Congzheng Song - Analyzing Machine Learning Models that Predict Mental Illnesses from Social Media Text [video]
Janith Weerasinghe, Kediel Morales, and Rachel Greenstadt - POTs: the revolution will not be optimized? [video]
Seda Gürses, Rebekah Overdorf, and Ero Balsa
10:50 Break
11:15 HotPETs Keynote — Joris van Hoboken (Chair: George Danezis) [video]
Boon or Bane? PETs after the GDPR
Abstract: The GDPR has changed the privacy landscape significantly. It has further established European data privacy regulation as a global standard, billions are spent on compliance, and litigation by civil society is putting pressure on enforcement. But what are the most important changes from a PETs perspective? How does the GDPR impact compliance and decision making about privacy in organizations? And what expectations for PETs can in relation to its enforcement?
Bio: Joris van Hoboken (1978) is Professor of Law at the Vrije Universiteit Brussels (VUB) and a Senior Researcher at the Institute for Information Law (IViR), Faculty of Law, University of Amsterdam. At VUB, he is appointed to the Chair ‘Fundamental Rights and Digital Transformation’, established at the Interdisciplinary Research Group on Law Science Technology & Society (LSTS), with the support of Microsoft. Van Hoboken works on the intersection of fundamental rights protection (data protection, privacy, freedom of expression, non-discrimination) and the governance of platforms and internet-based services. Previously, Van Hoboken was a Postdoctoral Research Fellow at the Information Law Institute (ILI) at New York University. Van Hoboken obtained his PhD from the University of Amsterdam on the topic of search engines and freedom of expression (2012) and has graduate degrees in Law (2006) and Theoretical Mathematics (2002). He is a regular speaker at international events and conferences and has conducted research for the European Commission, ENISA, UNESCO and Open Society Foundations.
12:30 Lunch
2:00 No country for “old” protocols (Chair: Roger Dingledine)
- DNS Privacy not so private: the traffic analysis perspective [video]
Sandra Siby, Marc Juarez, Narseo Vallina-Rodriguez, and Carmela Troncoso - Cross-domain Tracking with TLS Session Resumption [video]
Eric Sy
2:50 Break
3:10 [Un]deniable communication protocols (Chair: Cecylia Bocovich)
- Secure Collaborative Editing Without Central Servers [video]
Ben Ylvisaker, Michał Wisniewski, and Jay Batavia - No evidence of communication: Off-The-Record Protocol version 4 [video]
Ola Bini and Sofi Celi
4:00 Ice Cream Break
4:20 Balancing privacy and evidence (Chair: Aaron Johnson)
- Evidence as a posteriori security [video]
Alexander Hicks and Steven J. Murdoch - Private Smart Contracts [video]
Steven Goldfeder and Arvind Narayanan
5:10 Closing remarks and Best talk award
Saturday, July 28
PETS Hike
We will go to Montserrat to do the PETS 2018 Hike! Montserrat is a very special place in Catalonia, a mountain 1 hour and 15 minutes away from Barcelona (by car or bus) where many people do hikes, climbing or other mountain sports and activities.
You can find more information about Montserrat here: https://en.wikipedia.org/wiki/Montserrat_(mountain)
We'll meet the bus in Plaça de Catalunya, in front of the Hard Rock Cafe at 9:00 am sharp. If you're late, you will miss the bus.
We will do the hike called "la ruta de les ermites" (in English: the route of the hermitages). It is 4 hours of walking but we'll do some stops for breakfast, lunch, and to rest. You can see the path and some pictures here: https://www.wikiloc.com/hiking-trails/ruta-de-les-ermites-montserrat-5552707 Food will be provided, but you will carry your own. Bring plenty of water, sunscreen, and a hat. Wear sturdy shoes.
There is a cable car that goes up or down the mountain at about the half-way point of this hike. If you don't want to do the entire hike, you can do the first part and then take the cable car down. It is also possible to take the cable car up and meet the main hike at the half-way point. But if you do it this way, there will not be food transported for you to the top.
After the Hike, we can also do a cultural visit to the Benedictine abbey, and afterwards we'll take the train back to the city.
All activity is covered by the PETS Symposium except the train to go back to town (12.15€), and the cable car (7€ each way) if you want to take it. You can come back whenever you want.
If you're joining us for the hike, you need to register at the registration desk.
endPage(); ?>