United Kingdom

The rapid advancements in Information and Communication Technologies (ICTs) have been greatly changing our society, with clear societal and economic benefits. Mobile technology, Cloud, Big Data, Internet of things, services and technologies that are becoming more and more pervasive and conveniently accessible, towards to the realization of a &#39;smart&#39; society’. At the heart of this evolution is the ability to collect, analyze, process and share an ever-increasing amount of data, to extract knowledge for offering personalized and advanced services. A major concern, and potential obstacle, towards the full realization of such evolution is represented by security and privacy issues. As a matter of fact, the (actual or perceived) loss of control over data and potential compromise of their confidentiality can have a strong detrimental impact on the realization of an open framework for enabling collection, processing, and sharing of data, typically stored or processed by external cloud services. In this talk, I will illustrate some security and privacy issues arising in emerging scenarios, focusing in particular on the problem of managing data while guaranteeing confidentiality and integrity of data stored or processed by external providers.

ICISSIP 2022

Data Security and Privacy in Emerging Scenarios

The International Conference on Cloud Computing and Services Science (CLOSER), focuses on the highly important area of Cloud Computing, inspired by some latest advances that concern the infrastructure, operations, and available services through the global network. Further, the conference considers as essential the link to Services Science, acknowledging the service-orientation in most current IT-driven collaborations. The conference is nevertheless not about the union of these two (already broad) fields, but about Cloud Computing where we are also interested in how Services Science can provide theory, methods and techniques to design, analyze, manage, market and study various aspects of Cloud Computing.

CLOSER 2022

The International Conference on Cloud Computing and Services Science (CLOSER), focuses on the highly important area of Cloud Computing, inspired by some latest advances that concern the infrastructure, operations, and available services through the global network. 

The rapid advancements in Information and Communication Technologies (ICTs) have been greatly changing our society, with clear societal and economic benefits. Mobile technology, Cloud, Big Data, Internet of things, services and technologies that are becoming more and more pervasive and conveniently accessible, towards to the realization of a 'smart' society’. At the heart of this evolution is the ability to collect, analyze, process and share an ever-increasing amount of data, to extract knowledge for offering personalized and advanced services. A major concern, and potential obstacle, towards the full realization of such evolution is represented by security and privacy issues. As a matter of fact, the (actual or perceived) loss of control over data and potential compromise of their confidentiality can have a strong detrimental impact on the realization of an open framework for enabling collection, processing, and sharing of data, typically stored or processed by external cloud services. In this talk, I will illustrate some security and privacy issues arising in emerging scenarios, focusing in particular on the problem of managing data while guaranteeing confidentiality and integrity of data stored or processed by external providers.

keynote

The International Conference on Information Systems Security and Privacy provides a meeting point for researchers and practitioners, addressing the trust, security and privacy challenges of information systems from both technological and social perspectives. The conference welcomes papers of either practical or theoretical nature, and is interested in research or applications addressing all aspects of trust, security and privacy, and encompassing issue of concern for organizations, individuals and society at large.

The International Conference on Information Systems Security and Privacy provides a meeting point for researchers and practitioners, addressing the trust, security and privacy challenges of information systems from both technological and social perspectives. 

Cyber security is increasingly in the spotlight, with almost daily news of high profile cyber attacks and data or service losses. At the same time, there are regular reports of large-scaleshortages in the cyber security workforce. Cyber security education and training needs to meet these shortages. However, it is also important that our approach to doing so is based on a rigorous scientific basis. In this talk I will discuss the experienceof developing such a rigorous approach in the form of CyBOK, the cyber security body of knowledge (https://www.cybok.org), over the last five years. We will not only look at the scientific methods used to define the scope of CyBOK and the rigorous, peer-review,mechanisms to develop the detailed knowledge area descriptions. We will also discuss the variety of use cases enabled by such a knowledge-based framework looking in detail at its role in providing a means to systematically contrast the focus of different professionaland academic educational programmes and the knowledge one can expect students to have after completing a particular certification or course. We will also touch on other use cases of CyBOK such as a common framework to define knowledge requirements for rolesin the sector and the ability to benchmark knowledge capacity within an organisation or even at a national level.

Why Rigorous Underpinnings for Cyber Security Education and Training Matter? Experiences from CyBOK: The Cyber Security Body of Knowledge

New privacy regulations such as the EU's GDPR or California's CCPA/CPRA require more detailed data practice disclosures and require giving users greater control over their data. While these regulations are enhancing consumer's protection and influencing developments around the world, their practical impact is hampered by fundamental usability challenges: privacy policies, which no one ever reads, have become even longer, privacy choices have become more numerous and complex, and dark patterns aimed at tricking people to make decisions that are not in their best interest abound. In this presentation, I will discuss some of these limitations and how work conducted over the past ten years at Carnegie Mellon University aims to overcome these challenges. The presentation will in particular draw on research conducted in the context of the Usable Privacy Policy Project (https://usableprivacy.org) and Personalized Privacy Assistant Project (https://privacyassistant.org) as well as follow-on projects.

Premium content

Downloads

Next from ICISSIP 2022

Why Rigorous Underpinnings for Cyber Security Education and Training Matter? Experiences from CyBOK: The Cyber Security Body of Knowledge

Similar lecture

Data Security and Privacy in Emerging Scenarios