ACM CCS2007 DIM Workshop

As the Web 2.0 trend exemplifies, user experiences on the Net are becoming more and more interactive, dynamic, and personalized. With appropriate control over the number and use of their identity(s), users can enjoy the advantages of highly sophisticated personal services without the management burden they currently face or sacrificing their privacy. However, standing in the way of this attractive goal are malicious identity-motivated attacks (such as phishing & pharming), inadequate user understanding of the underlying trust models (including the consequences of poorly set security and privacy preferences), and the complexity of managing how identities are to be used, shared, and delegated. To address such issues, many technological solutions have been already proposed, both in the industry and academia, to date with mixed success.

To ensure that the emerging identity management technologies are accepted by end-users, we must reconcile (or strike the right balance between) two goals that are generally thought to be contradictory: the usability of the systems on one hand and their security and privacy on the other. The aim of this workshop is to gather vendors, users, and researchers, in the areas of identity management, to discuss and provide recommendations for the best approaches for making implementable and deployable improvements to the usability of identity management. Topics of particular interest include (but are not limited to) :

User interaction design for identity management
Social identity
User centric identity
Expressing trustworthiness of identity management to users
Empirical analysis of usability problems with identity management systems
Evaluation methodologies for usability of identity management systems
Novel user interface technologies for identity management
Privacy enhanced user interaction

User education on identity management
Elicitation of privacy preferences from end users
Identity theft prevention
User-readable privacy policies
Methodologies and interfaces for managing multiple identities including delegation
Privacy-enhancing identity management
Consistent UI for identity transactions

David Chadwick, University of Kent, UK
Lorrie Cranor, Carnegie Mellon University, USA
Johannes Ernst, NetMesh, USA
Hidehito Gomi, Yahoo! JAPAN Research, Japan
Hubert Le Van Gong, Sun Microsystems, USA
Thomas Gross, IBM Research, Switzerland
Seung-Hyun Kim, ETRI, Korea
Brian LaMacchia, Microsoft, USA
Paul Madsen, NTT, Canada
Eve Maler, Sun Microsystems, USA

Rob Marano, Falkin Systems and InDorse Technologies, USA
Toshihiko Matsuo, NTT Data, Japan
Samir Saklikar, Motorola Labs, India
Ravi Sandhu, TriCipher and George Mason Univ., USA
Angela Sasse, University College London, UK
Diana Smetters, PARC, USA
Tsuyoshi Takagi, Future University - Hakodate, Japan
Kenji Takahashi, NTT, Japan
Phillip Windley, BYU, USA

For further information: Write to ccs2007-dim_at_lab.ntt.co.jp or visit www2.pflab.ecl.ntt.co.jp/dim2007/