Proceedings of the 12th ACM workshop on Workshop on privacy in the electronic society最新文献_第3页

Privacy-preserving billing for e-ticketing systems in public transportation 公共交通电子票务系统的隐私保护计费

Proceedings of the 12th ACM workshop on Workshop on privacy in the electronic society Pub Date : 2013-11-04 DOI: 10.1145/2517840.2517848

F. Kerschbaum, Hoonwei Lim, I. Gudymenko

引用次数: 21

Secure genomic testing with size- and position-hiding private substring matching 安全基因组测试与大小和位置隐藏私人子字符串匹配

Proceedings of the 12th ACM workshop on Workshop on privacy in the electronic society Pub Date : 2013-11-04 DOI: 10.1145/2517840.2517849

Emiliano De Cristofaro, Sky Faber, G. Tsudik

{"title":"Secure genomic testing with size- and position-hiding private substring matching","authors":"Emiliano De Cristofaro, Sky Faber, G. Tsudik","doi":"10.1145/2517840.2517849","DOIUrl":"https://doi.org/10.1145/2517840.2517849","url":null,"abstract":"Recent progress in genomics and bioinformatics is bringing complete and on-demand sequencing of human (and other) genomes closer and closer to reality. Despite exciting new opportunities, affordable and ubiquitous genome sequencing prompts some serious privacy and ethical concerns, owing to extreme sensitivity and uniqueness of genomic information. At the same time, new medical applications, such as personalized medicine, require testing genomes for specific markers that themselves represent sensitive (e.g., proprietary) material. This paper focuses on privacy challenges posed by such genetic tests. It presents a secure and efficient protocol called: Size- and Position-Hiding Private Substring Match- ing (SPH-PSM). This protocol allows two parties -- one with a digitized genome and the other with a set of DNA markers -- to conduct a test, such that the result is only learned by the former, and no other information is learned by either party. In particular, the genome owner does not even learn the size or the position of the markers, which makes SPH-PSM the first of its kind. Finally, we report on a prototype of the proposed technique which attests to its practicality.","PeriodicalId":406846,"journal":{"name":"Proceedings of the 12th ACM workshop on Workshop on privacy in the electronic society","volume":"9 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-11-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126983578","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 65

No surprises: measuring intrusiveness of smartphone applications by detecting objective context deviations 毫不奇怪:通过检测客观环境偏差来衡量智能手机应用程序的侵入性

Proceedings of the 12th ACM workshop on Workshop on privacy in the electronic society Pub Date : 2013-11-04 DOI: 10.1145/2517840.2517864

Frances Zhang, Fuming Shih, D. Weitzner

{"title":"No surprises: measuring intrusiveness of smartphone applications by detecting objective context deviations","authors":"Frances Zhang, Fuming Shih, D. Weitzner","doi":"10.1145/2517840.2517864","DOIUrl":"https://doi.org/10.1145/2517840.2517864","url":null,"abstract":"We address the challenge of improving transparency for smartphone applications by creating tools that assesses privacy risk. Specifically, we invented a framework for qualitatively assessing and quantitatively measuring the intrusiveness of smartphone applications based on their data access behaviors. Our framework has two essential components. The first component is the Privacy Fingerprint, a novel visualization that is concise yet holistic. It captures each app's unique access patterns to sensitive personal data, including which types of behaviors and under which privacy-relevant usage contexts the data are collected. The second component is a new Intrusiveness Score that numerically measures out-of-context data collection, based on real data accesses gathered from empirical testing on 33 popular Android apps across 4 app categories. Specific attention is paid to the proportion of data accesses that occurs while the user is idle, raising the perceived level of intrusiveness and exposing the profiling potential of an app. Together, these components will help smartphone users decide whether to install an app because they will be able to easily and accurately assess the relative intrusiveness of apps. Our study also demonstrates that the Intrusiveness Score is helpful to compare apps that exhibit similar types of data accesses.","PeriodicalId":406846,"journal":{"name":"Proceedings of the 12th ACM workshop on Workshop on privacy in the electronic society","volume":"33 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-11-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116057335","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 7

Proactive insider threat detection through social media: the YouTube case 通过社交媒体主动检测内部威胁:YouTube案例

Proceedings of the 12th ACM workshop on Workshop on privacy in the electronic society Pub Date : 2013-11-04 DOI: 10.1145/2517840.2517865

Miltiadis Kandias, V. Stavrou, Nick Bozovic, D. Gritzalis

{"title":"Proactive insider threat detection through social media: the YouTube case","authors":"Miltiadis Kandias, V. Stavrou, Nick Bozovic, D. Gritzalis","doi":"10.1145/2517840.2517865","DOIUrl":"https://doi.org/10.1145/2517840.2517865","url":null,"abstract":"Insider threat is a major issue in cyber and corporate security. In this paper we study the psychosocial perspective of the insider via social media, Open Source Intelligence, and user generated content classification. Inductively, we propose a prediction method by evaluating the predisposition towards law enforcement and authorities, a personal psychosocial trait closely connected to the manifestation of malevolent insiders. We propose a methodology to detect users holding a negative attitude towards authorities. For doing so we facilitate the use of machine learning techniques and of a dictionary-based approach, so as to detect comments expressing negative attitude. Thus, we can draw conclusions over a user behavior and beliefs via the content the user generated within the limits a social medium. We also use an assumption free flat data representation technique in order to decide over the user's attitude. Furthermore, we compare the results of each method and highlight the common behavior manifested by the users. The demonstration is applied on a crawled community of users on YouTube.","PeriodicalId":406846,"journal":{"name":"Proceedings of the 12th ACM workshop on Workshop on privacy in the electronic society","volume":"9 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-11-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116460949","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 66

Thinking inside the BLAC box: smarter protocols for faster anonymous blacklisting 在BLAC盒子里思考:更智能的协议，更快的匿名黑名单

Proceedings of the 12th ACM workshop on Workshop on privacy in the electronic society Pub Date : 2013-11-04 DOI: 10.1145/2517840.2517855

Ryan Henry, I. Goldberg

引用次数: 17

Proceedings of the 12th ACM workshop on Workshop on privacy in the electronic society 第12届美国计算机学会电子社会隐私研讨会论文集

Proceedings of the 12th ACM workshop on Workshop on privacy in the electronic society Pub Date : 2013-11-04 DOI: 10.1145/2517840

A. Sadeghi, S. Foresti

引用次数: 6

You cannot hide for long: de-anonymization of real-world dynamic behaviour 你不能隐藏太久:真实世界动态行为的去匿名化

Proceedings of the 12th ACM workshop on Workshop on privacy in the electronic society Pub Date : 2013-11-04 DOI: 10.1145/2517840.2517846

G. Danezis, C. Troncoso

引用次数: 24

Outsourced private information retrieval 外包私人信息检索

Proceedings of the 12th ACM workshop on Workshop on privacy in the electronic society Pub Date : 2013-11-04 DOI: 10.1145/2517840.2517854

Yizhou Huang, I. Goldberg

{"title":"Outsourced private information retrieval","authors":"Yizhou Huang, I. Goldberg","doi":"10.1145/2517840.2517854","DOIUrl":"https://doi.org/10.1145/2517840.2517854","url":null,"abstract":"We propose a scheme for outsourcing Private Information Retrieval (PIR) to untrusted servers while protecting the privacy of the database owner as well as that of the database clients. We observe that by layering PIR on top of an Oblivious RAM (ORAM) data layout, we provide the ability for the database owner to perform private writes, while database clients can perform private reads from the database even while the owner is offline. Our system is compatible with existing PIR access control and pricing schemes on a per-record basis for these reads. This extends the usual ORAM model by allowing multiple database readers without requiring trusted hardware; indeed, almost all of the computation in our scheme during reads is performed by untrusted cloud servers. We make a second observation that the database owner can always conduct a private read as an ordinary database client, and the private write protocol does not have to provide a \"read\" functionality as a standard ORAM protocol does. Based on the two observations, we construct an end-to-end system that privately updates a 1 MB record in a 1 TB database with an amortized end-to-end response time as low as 300 ms when the database owner has a fast network connection to the database servers, and about 1 minute over a slow ADSL connection. Private read times by the database readers are on the order of seconds in either case.","PeriodicalId":406846,"journal":{"name":"Proceedings of the 12th ACM workshop on Workshop on privacy in the electronic society","volume":"26 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-11-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125184606","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 27

On the limits of provable anonymity 论可证明匿名性的极限

Proceedings of the 12th ACM workshop on Workshop on privacy in the electronic society Pub Date : 2013-11-04 DOI: 10.1145/2517840.2517850

Nethanel Gelernter, A. Herzberg

引用次数: 27

Conscript your friends into larger anonymity sets with JavaScript 用JavaScript将你的朋友编入更大的匿名集

Proceedings of the 12th ACM workshop on Workshop on privacy in the electronic society Pub Date : 2013-09-04 DOI: 10.1145/2517840.2517866

Henry Corrigan-Gibbs, B. Ford

引用次数: 5