Security and ethical aspects of data 2019-2020

Lectures

Instructor: Nataliia Bielova, researcher at PRIVATICS team, Inria (France)
Language: English
Invited lecture on Pseudonymisation: Cedric Lauradoux, researcher at PRIVATICS team, Inria (France)

Schedule

Date	Topic	Reading	Slides (PDF)
Nov 22, 9:00- 12:00	Introduction to Privacy and Pseudonymisation	'I've Got Nothing to Hide' and Other Misunderstandings of Privacy by Daniel J. Solov. San Diego Law Review, Vol. 44, p. 745, 2007. Unpacking “Privacy” for a Networked World. Leysia Palen and Paul Dourish. CHI 2003. The Pitfalls of Hashing for Privacy Levent Demir, Amrit Kumar, Mathieu Cunche, Cédric Lauradoux Communications Surveys and Tutorials, IEEE Communications Society, 2018.	Introduction GDPR and Personal Data Pseudonymisation
Nov 29, 9:00-12:00	Overview of the GDPR	The General Data Protection Regulation (GDPR) 2016/679. The European Union General Data Protection Regulation: What It Is And What It Means by Hoofnagle, C.J., van der Sloot, B., Zuiderveen Borgesius, F. Information & Communications Technology Law, 2019. ications Society, 2018.	GDPR overview
Dec 6, 9:00-12:00	Online tracking: cookies and browser fingerprinting	Third-Party Web Tracking: Policy and Technology Jonathan R. Mayer and John C. Mitchell. IEEE Symposium on Security and Privacy (IEEE S&P),2012. Online tracking: A 1-million-site measurement and analysis. S. Englehardt and A. Narayanan. ACM CCS 2016. How Unique is Your Web Browser? P. Eckersley. In Proceedings of the 10th International Conference on Privacy Enhancing Technologies, PETS 2010. Beauty and the Beast: Diverting modern web browsers to build unique browser fingerprints. P. Laperdrix, W. Rudametkin, and B. Baudry. IEEE Symposium on Security and Privacy, 2016. We Value Your Privacy - Now Take Some Cookies: Measuring the GDPR's Impact on Web Privacy. Martin Degeling, Christine Utz, Christopher Lentzsch, Henry Hosseini, Florian Schaub, Thorsten Holz. Network and Distributed System Security Symposium (NDSS 2019). Missed by Filter Lists: Detecting Unknown Third-Party Trackers with Invisible Pixels. Imane Fouad, Nataliia Bielova, Arnaud Legout, Natasa Sarafijanovic-Djukic. To appear in Privacy Enhancing Technologies Symposium (PETS 2020). The Impact of User Location on Cookie Notices (Inside and Outside of the European Union). Van Eijk, R., Asghari, H., Winter, P., Narayanan, A. (2019). IEEE Workshop on Technology and Consumer Protection (ConPro ‘19).	Cookie-based tracking Browser fingerprinting
Dec 19, 9:00-12:00	GDPR subject access rights and protection from online tracking	How Portable is Portable?: Exercising the GDPR's Right to Data Portability. Janis Wong and Tristan Henderson. UbiComp '18. Personal Information Leakage by Abusing the GDPR 'Right of Access' Mariano Di Martino and Pieter Robyns, Winnie Weyts, Wim Lamotte, Ken Andries. Proceedings of the Symposium on Usable Privacy and Security (SOUPS 2019). Security Analysis of Subject Access Request Procedures. Coline Boniface, Imane Fouad, Nataliia Bielova, Cédric Lauradoux, and Cristiana Santos. Annual Privacy Forum (APF 2019).	GDPR Subject Access Request (SAR) procedures Authentication during SAR (by Coline Boniface) Protection from Web tracking