DIMACS Workshop on Usable Privacy and Security Software

July 7 - 8, 2004
DIMACS Center, CoRE Building, Rutgers University, Piscataway, NJ

Organizers:: Lorrie Cranor, Chair, Carnegie Mellon University, lorrie@acm.org, lorrie.cranor.org; Mark Ackerman, University of Michigan, ackerm@umich.edu, www.eecs.umich.edu/~ackerm/; Fabian Monrose, Johns Hopkins University, fabian@cs.jhu.edu, www.cs.jhu.edu/~fabian/; Andrew Patrick, NRC Canada, Andrew.Patrick@nrc-cnrc.gc.ca, www.andrewpatrick.ca/; Norman Sadeh, Carnegie Mellon University, sadeh@cs.cmu.edu, almond.srv.cs.cmu.edu/~sadeh/

Presented under the auspices of the Special Focus on Communication Security and Information Privacy.

Workshop Program:

This is a preliminary program.

Wednesday, July 7, 2004

 8:15 -  8:50  Breakfast and Registration - CoRE Bldg., 4th floor

 8:50 -  9:00  Welcome and Opening Remarks
               Brenda Latka, DIMACS Associate Director

 9:00 -  9:15  Opening Session
               Welcome: Lorrie Cranor, Carnegie Mellon University

 9:15 - 11:30  CHALLENGES, APPROACHES, AND MENTAL MODELS 
               Moderator: Lorrie Cranor

               Usable Security: Beyond the Interface
               Angela Sasse, University College London

               HCI Issues in Privacy
               Mark Ackerman, University of Michigan

               Security as Experience and Practice: Supporting Everyday Security
               Paul Dourish, UC Irvine

               Best Practices for Usable Security In Desktop Software
               Simson Garfinkel, MIT 

               Short Talk: A Flock of Birds, Safely Staged
               Scott Flinn, National Research Council of Canada

11:30 - 12:00  BREAK

12:00 - 12:45  Keynote:  Privacy and Security: Putting People First
               Elizabeth Mynatt, Georgia Institute of Technology

12:45 - 1:45   LUNCH

 1:45 - 2:30   Keynote: Human-Scale Security
               Matt Blaze, University of Pennsylvania

 2:30 - 3:00   BREAK

 3:00 - 5:30   AUTHENTICATION 
               Moderator: Andrew Patrick

               Some Practical Guidance for Improved Password Usability
               Mike Just, Treasury Board of Canada

               Fingerprint authentication: The user experience
               Lynne Coventry, NCR

               Authentication for Humans
               Rachna Dhamija, UC Berkeley

               On user choice in graphical password schemes
               Fabian Monrose, Johns Hopkins University

               Short talk: Secure Web Authentication with Mobile Phones
               Min Wu, MIT

               Short talk: Toward Usable Security
               Dirk Balfanz, Palo Alto Research Center

5:30           Reception

6:15           Dinner

Thursday, July 8, 2004

 8:30 -  9:00  Breakfast and Registration
 
 9:00 - 10:30  PRIVACY, ANONYMITY, AND ENCRYPTION TOOLS (part I)
               Moderator: Lorrie Cranor

               Cryptography and Information Sharing in Civil Society
               Marc Levine, Benetech

               Anonymity loves company: Usability as a security parameter
               Roger Dingledine, The Free Haven Project

               Making Security Visible
               Alma Whitten, Google

               Short talk: Techniques for Visual Feedback of Security State
               Tara Whalen, Dalhousie University

10:30 - 11:00  BREAK

11:00 - 12:30  PRIVACY, ANONYMITY, AND ENCRYPTION TOOLS (part II)
               Moderator: Norman Sadeh

               Privacy Analysis for the Casual User Through Bugnosis
               David Martin, University of Massachusetts Lowell

               Protecting privacy in software agents: Lessons from the PISA project
               Andrew Patrick, National Research Council, Canada

               Architectural issues in distributed, privacy-protecting 
               social networking
               Lenny Foner, MIT

               Short talk: Privacy in Instant Messaging
               Sameer Patil, University of California, Irvine


12:45 -  1:45  LUNCH

 1:45 -  3:15  UBIQUITOUS COMPUTING
               Moderator: Mark Ackerman

               Knowing What You're Doing: A Design Goal for Usable Ubicomp Privacy
               Scott Lederer, UC Berkeley

               Privacy Challenges in Ubiquitous Computing
               Marc Langheinrich, ETH Zurich

               Semantic Web Technologies to Reconcile Privacy and Context Awareness
               Norman Sadeh, Carnegie Mellon University

 3:15 -  3:45  BREAK

 3:45 -  5:30  ADMINISTRATION AND ACCESS CONTROL
               Moderator: Fabian Monrose

               Better Tools for Security Administration:
               Enhancing the Human-Computer Interface with Visualization
               Bill Yurcik, National Center for Supercomputing Applications

               Approaches for Designing Flexible Mandatory System Security Policies
               Trent Jaeger, IBM

               Useless Metaphors: Why Specifying Policy is So Hard?
               Patrick McDaniel, AT&T Labs-Research

               Chameleon: Towards Usable RBAC
               Chris Long, Carnegie Mellon University