United Kingdom

New privacy regulations such as the EU&#39;s GDPR or California&#39;s CCPA/CPRA require more detailed data practice disclosures and require giving users greater control over their data. While these regulations are enhancing consumer&#39;s protection and influencing developments around the world, their practical impact is hampered by fundamental usability challenges: privacy policies, which no one ever reads, have become even longer, privacy choices have become more numerous and complex, and dark patterns aimed at tricking people to make decisions that are not in their best interest abound. In this presentation, I will discuss some of these limitations and how work conducted over the past ten years at Carnegie Mellon University aims to overcome these challenges. The presentation will in particular draw on research conducted in the context of the Usable Privacy Policy Project (https://usableprivacy.org) and Personalized Privacy Assistant Project (https://privacyassistant.org) as well as follow-on projects.

ICISSIP 2022

Why Usability Has Become Privacy&#39;s Biggest Challenge and What We Can Do About It

The purpose of the AAAI conference series is to promote research in Artificial Intelligence (AI) and foster scientific exchange between researchers, practitioners, scientists, students, and engineers across the entirety of AI and its affiliated disciplines. AAAI-23 is the Thirty-Seventh AAAI Conference on Artificial Intelligence. The theme of this conference is to create collaborative bridges within and beyond AI. Like previous AAAI conferences, AAAI-23 will feature technical paper presentations, special tracks, invited speakers, workshops, tutorials, poster sessions, senior member presentations, competitions, and exhibit programs, and two new activities: a Bridge Program and a Lab Program. Many of these activities are tailored to the theme of bridges and all are selected according to the highest standards, with additional programs for students and young researchers. 
AAAI is providing you with a conference planner, which you can use to help organize your itinerary of activities. This includes talks to attend in person, talks to attend remotely, breaks with colleagues and your site seeing activities. To access this conference planner, please go to [https://aaai-2023.takemobi.io](https://aaai-2023.takemobi.io).

In order to access this site, you need to register. If you haven't already, please register [here](https://aaai.org/Conferences/AAAI-23/registration/).


AAAI 2023

The purpose of the AAAI conference series is to promote research in Artificial Intelligence (AI) and foster scientific exchange between researchers, practitioners, scientists, students, and engineers across the entirety of AI and its affiliated disciplines.

New privacy regulations such as the EU's GDPR or California's CCPA/CPRA require more detailed data practice disclosures and require giving users greater control over their data. While these regulations are enhancing consumer's protection and influencing developments around the world, their practical impact is hampered by fundamental usability challenges: privacy policies, which no one ever reads, have become even longer, privacy choices have become more numerous and complex, and dark patterns aimed at tricking people to make decisions that are not in their best interest abound. In this presentation, I will discuss some of these limitations and how work conducted over the past ten years at Carnegie Mellon University aims to overcome these challenges. The presentation will in particular draw on research conducted in the context of the Usable Privacy Policy Project (https://usableprivacy.org) and Personalized Privacy Assistant Project (https://privacyassistant.org) as well as follow-on projects.

Why Usability Has Become Privacy's Biggest Challenge and What We Can Do About It

keynote

The International Conference on Information Systems Security and Privacy provides a meeting point for researchers and practitioners, addressing the trust, security and privacy challenges of information systems from both technological and social perspectives. The conference welcomes papers of either practical or theoretical nature, and is interested in research or applications addressing all aspects of trust, security and privacy, and encompassing issue of concern for organizations, individuals and society at large.

The International Conference on Information Systems Security and Privacy provides a meeting point for researchers and practitioners, addressing the trust, security and privacy challenges of information systems from both technological and social perspectives. 

Cyber security is increasingly in the spotlight, with almost daily news of high profile cyber attacks and data or service losses. At the same time, there are regular reports of large-scaleshortages in the cyber security workforce. Cyber security education and training needs to meet these shortages. However, it is also important that our approach to doing so is based on a rigorous scientific basis. In this talk I will discuss the experienceof developing such a rigorous approach in the form of CyBOK, the cyber security body of knowledge (https://www.cybok.org), over the last five years. We will not only look at the scientific methods used to define the scope of CyBOK and the rigorous, peer-review,mechanisms to develop the detailed knowledge area descriptions. We will also discuss the variety of use cases enabled by such a knowledge-based framework looking in detail at its role in providing a means to systematically contrast the focus of different professionaland academic educational programmes and the knowledge one can expect students to have after completing a particular certification or course. We will also touch on other use cases of CyBOK such as a common framework to define knowledge requirements for rolesin the sector and the ability to benchmark knowledge capacity within an organisation or even at a national level.

Why Rigorous Underpinnings for Cyber Security Education and Training Matter? Experiences from CyBOK: The Cyber Security Body of Knowledge

The rapid advancements in Information and Communication Technologies (ICTs) have been greatly changing our society, with clear societal and economic benefits. Mobile technology, Cloud, Big Data, Internet of things, services and technologies that are becoming more and more pervasive and conveniently accessible, towards to the realization of a 'smart' society’. At the heart of this evolution is the ability to collect, analyze, process and share an ever-increasing amount of data, to extract knowledge for offering personalized and advanced services. A major concern, and potential obstacle, towards the full realization of such evolution is represented by security and privacy issues. As a matter of fact, the (actual or perceived) loss of control over data and potential compromise of their confidentiality can have a strong detrimental impact on the realization of an open framework for enabling collection, processing, and sharing of data, typically stored or processed by external cloud services. In this talk, I will illustrate some security and privacy issues arising in emerging scenarios, focusing in particular on the problem of managing data while guaranteeing confidentiality and integrity of data stored or processed by external providers.

Premium content

Downloads

Next from ICISSIP 2022

Why Rigorous Underpinnings for Cyber Security Education and Training Matter? Experiences from CyBOK: The Cyber Security Body of Knowledge

Similar lecture

Echo of Neighbors: Privacy Amplification for Personalized Private Federated Learning with Shuffle Model

Stay up to date with the latest Underline news!

PRESENTATIONS

CONFERENCES

COMPANY

RESOURCES