United Kingdom

New privacy regulations such as the EU&#39;s GDPR or California&#39;s CCPA/CPRA require more detailed data practice disclosures and require giving users greater control over their data. While these regulations are enhancing consumer&#39;s protection and influencing developments around the world, their practical impact is hampered by fundamental usability challenges: privacy policies, which no one ever reads, have become even longer, privacy choices have become more numerous and complex, and dark patterns aimed at tricking people to make decisions that are not in their best interest abound. In this presentation, I will discuss some of these limitations and how work conducted over the past ten years at Carnegie Mellon University aims to overcome these challenges. The presentation will in particular draw on research conducted in the context of the Usable Privacy Policy Project (https://usableprivacy.org) and Personalized Privacy Assistant Project (https://privacyassistant.org) as well as follow-on projects.

ICISSIP 2022

Why Usability Has Become Privacy&#39;s Biggest Challenge and What We Can Do About It

 **RTSS 2021** has successfully concluded. Hope you have enjoyed it, and look forward to seeing you next year in person.
    Announcement for the Awards:
 * Best Paper Award goes to: Monte Carlo Response-Time Analysis, Sergey Bozhko, Georg von der Brüggen, and Björn Brandenburg
 * Best Student Paper Award goes to: Automatic Energy-Hotspot Detection and Elimination in Real-Time Deeply Embedded Systems, Mohsen Shekarisaz, Lothar Thiele, and Mehdi Kargahi.
 * Best Solution Award for Industry Session goes to: Toward Real-Time Guaranteed Scheduling for Autonomous Driving Systems. Jinghao Sun, Tianyi Wang, Kailu Duan, Bin Lu, Jiankang Ren, Zhishan Guo, and Guozhen Tan.



IEEE RTSS 2021

The IEEE Real-Time Systems Symposium (RTSS) is the premier conference in the field of real-time systems, and is a venue for researchers and practitioners to showcase innovations covering all aspects of real-time systems, including theory, design, analysis, implementation, evaluation, and experience. 

New privacy regulations such as the EU's GDPR or California's CCPA/CPRA require more detailed data practice disclosures and require giving users greater control over their data. While these regulations are enhancing consumer's protection and influencing developments around the world, their practical impact is hampered by fundamental usability challenges: privacy policies, which no one ever reads, have become even longer, privacy choices have become more numerous and complex, and dark patterns aimed at tricking people to make decisions that are not in their best interest abound. In this presentation, I will discuss some of these limitations and how work conducted over the past ten years at Carnegie Mellon University aims to overcome these challenges. The presentation will in particular draw on research conducted in the context of the Usable Privacy Policy Project (https://usableprivacy.org) and Personalized Privacy Assistant Project (https://privacyassistant.org) as well as follow-on projects.

Why Usability Has Become Privacy's Biggest Challenge and What We Can Do About It

keynote

The International Conference on Information Systems Security and Privacy provides a meeting point for researchers and practitioners, addressing the trust, security and privacy challenges of information systems from both technological and social perspectives. The conference welcomes papers of either practical or theoretical nature, and is interested in research or applications addressing all aspects of trust, security and privacy, and encompassing issue of concern for organizations, individuals and society at large.

The International Conference on Information Systems Security and Privacy provides a meeting point for researchers and practitioners, addressing the trust, security and privacy challenges of information systems from both technological and social perspectives. 

Cyber security is increasingly in the spotlight, with almost daily news of high profile cyber attacks and data or service losses. At the same time, there are regular reports of large-scaleshortages in the cyber security workforce. Cyber security education and training needs to meet these shortages. However, it is also important that our approach to doing so is based on a rigorous scientific basis. In this talk I will discuss the experienceof developing such a rigorous approach in the form of CyBOK, the cyber security body of knowledge (https://www.cybok.org), over the last five years. We will not only look at the scientific methods used to define the scope of CyBOK and the rigorous, peer-review,mechanisms to develop the detailed knowledge area descriptions. We will also discuss the variety of use cases enabled by such a knowledge-based framework looking in detail at its role in providing a means to systematically contrast the focus of different professionaland academic educational programmes and the knowledge one can expect students to have after completing a particular certification or course. We will also touch on other use cases of CyBOK such as a common framework to define knowledge requirements for rolesin the sector and the ability to benchmark knowledge capacity within an organisation or even at a national level.

Why Rigorous Underpinnings for Cyber Security Education and Training Matter? Experiences from CyBOK: The Cyber Security Body of Knowledge

The rapid advancements in Information and Communication Technologies (ICTs) have been greatly changing our society, with clear societal and economic benefits. Mobile technology, Cloud, Big Data, Internet of things, services and technologies that are becoming more and more pervasive and conveniently accessible, towards to the realization of a 'smart' society’. At the heart of this evolution is the ability to collect, analyze, process and share an ever-increasing amount of data, to extract knowledge for offering personalized and advanced services. A major concern, and potential obstacle, towards the full realization of such evolution is represented by security and privacy issues. As a matter of fact, the (actual or perceived) loss of control over data and potential compromise of their confidentiality can have a strong detrimental impact on the realization of an open framework for enabling collection, processing, and sharing of data, typically stored or processed by external cloud services. In this talk, I will illustrate some security and privacy issues arising in emerging scenarios, focusing in particular on the problem of managing data while guaranteeing confidentiality and integrity of data stored or processed by external providers.

Premium content

Downloads

Next from ICISSIP 2022

Why Rigorous Underpinnings for Cyber Security Education and Training Matter? Experiences from CyBOK: The Cyber Security Body of Knowledge

Similar lecture

AI Meets Real-Time: Addressing Real-World Complexities in Graph Response-Time Analysis

Stay up to date with the latest Underline news!

PRESENTATIONS

CONFERENCES

COMPANY

RESOURCES