Welcome & Introductory Remarks - IEEE 2014 Web 2.0 Security & Privacy Workshop
Download as PPTX, PDF1 like593 views
The 2014 IEEE Workshop on Web 2.0 Security and Privacy presented various statistics about submissions and accepted papers, highlighting a high submission rate from the United States. A notable paper discussed geo-inference attacks through browser cache, revealing vulnerabilities in 62% of the top 100 websites for identifying user locations. The keynote speaker, Michelle Finneran Dennedy, emphasized the importance of privacy practices in technology and her extensive background in data governance and privacy.
Welcome & Introductory Remarks - IEEE 2014 Web 2.0 Security & Privacy Workshop
- 1. The 2014 IEEE Workshop on Web 2.0 Security and Privacy May 18th, 2014
- 2. • Statistics • Post-Workshop Impact • Best Paper Announcement • KeyNote Introduction
- 10. Impact
- 11. Post-Workshop Publication Venues IEEE Internet Computing 18% IEEE Software 12% IEEE IT Professional 26% No Venue 44%
- 12. Best Paper
- 13. I Know Where You’ve Been: Geo-Inference Attacks via the Browser Cache Many websites customize their services according to different geo- locations of users, to provide more relevant content and better responsiveness, including Google, Craigslist, etc. Recently, mobile devices further allow web applications to directly read users’ geo-location information from GPS sensors. However, if such websites leave location- sensitive content in the browser cache, other sites can sniff users’ geo- locations by utilizing timing side-channels. In this paper, we demonstrate that such geo-location leakage channels are widely open in popular web applications today, including 62% of Alexa Top 100 websites. With geo- inference attacks that measure the timing of browser cache queries, we can locate users’ countries, cities and neighborhoods in our case studies. We also discuss whether existing defenses can effectively prevent such attacks and additional support required for a better defense deployment. Yaoqi Jia, Xinshu Dong, Zhenkai Liang, Prateek Saxena.
- 14. Keynote Michelle Finneran Dennedy Vice President & Chief Privacy Officer, McAfee
- 15. Michelle currently serves as Chief Privacy Officer to McAfee, an Intel Company. She is responsible to creating a privacy practice that is focused on quality and excellence in McAfee’s policies, products, procedures and governance efforts. Her team is a staunch supporter of McAfee’s outreach efforts to educate and protect children, families and communities in the Digital Age. Before coming to McAfee, Michelle founded The iDennedy Project, a consulting and advisory company specializing in privacy and security sensitive organizations. Michelle is also a founder and editor in chief of a new media site—TheIdentityProject.com—that was started as an advocacy and education site, currently focused on the growing crime of Child ID theft. Michelle was the Vice President for Security & Privacy Solutions for the Oracle Corporation. Her team worked closely with customers to enable them to proceed with the confidence that information is protected and accelerated as an asset. Before the Oracle acquisition of Sun, Michelle was Chief Data Governance Officer within the Cloud Computing division at Sun Microsystems, Inc. Michelle worked closely with Sun's business, technical and legal teams to create to the best data governance policies and processes possible for cloud computing to build trust for cloud environments through vendor transparency. Michelle also served as Sun’s Chief Privacy Officer where she was responsible for the development and implementation of Sun's data privacy policies and practices, working across Sun's business groups to drive the company's continued data privacy excellence. Michelle has a JD from Fordham University School of Law and a BS degree with university honors from The Ohio State University. In 2009, she was awarded the Goodwin Procter-IAPP Vanguard award for lifetime achievement and the EWF – CSO Magazine Woman of Influence award for work in the privacy and security fields. In 2012, she was honored by the National Diversity Council as one of California’s Most Powerful and Influential Women. Michelle is a Coauthor, The Privacy Engineer's Manifesto: Getting from Policy to Code to QA to Value, 2014, Apress Media."