<br><tt><font size=2>The workshop chairs would like to invite you participate
in the 4th annual </font></tt>
<br><tt><font size=2>workshop on Web 2.0 Security and Privacy. Started
in 2007, this successful </font></tt>
<br><tt><font size=2>series of workshops has attracted participation from
both academia and </font></tt>
<br><tt><font size=2>industry, and participants from around the world.
This workshop is held</font></tt>
<br><tt><font size=2>in conjunction with the 2010 IEEE Symposium on Security
and Privacy. </font></tt>
<br>
<br>
<br><tt><font size=2><br>
<br>
Workshop Call for Papers<br>
W2SP 2010: Web 2.0 Security and Privacy 2010<br>
<br>
Thursday, May 20<br>
The Claremont Resort, Oakland, California<br>
Web site: </font></tt><a href=http://w2spconf.com/2010><tt><font size=2>http://w2spconf.com/2010</font></tt></a><tt><font size=2><br>
<br>
The goal of this one day workshop is to bring together researchers and<br>
practitioners from academia and industry to focus on understanding Web<br>
2.0 security and privacy issues, and establishing new collaborations<br>
in these areas.<br>
<br>
Web 2.0 is about connecting people and amplifying the power of working<br>
together. An ongoing explosion of new technology is powering<br>
increasingly complex social and business interactions as well as<br>
enabling an unprecedented level of unmediated information exchange and<br>
horizontal organization. These interactions rely on composition of<br>
content and services from multiple sources, commonly called mash-ups,<br>
leading to systems with complex trust boundaries. This trend is likely<br>
to continue because individuals, businesses, and other organizations<br>
desire the simplicity, efficiency, and utility these technologies<br>
offer.<br>
<br>
Though these technologies have had many positive effects, they raise<br>
issues about management of identities, personal safety, reputation,<br>
privacy, anonymity, transient and long-term relationships, and<br>
composition of function and content, both on the server and on the<br>
client side (web browsers and mobile platforms). Although many of the<br>
underlying security and privacy issues are not new, the use of these<br>
technologies by very large and disparate populations raises new<br>
questions. This workshop is intended to discuss the limitations of<br>
current technologies and explore alternatives.<br>
<br>
The scope of W2SP 2010 includes, but is not limited to:<br>
<br>
Trustworthy cloud-based services<br>
Usable security and privacy<br>
Security and privacy as a service<br>
Security for the mobile web<br>
Identity management and psuedonymity<br>
Web services/feeds/mashups<br>
Security and privacy policies for composible content<br>
Next-generation browser technology<br>
Secure extensions and plug-ins<br>
Advertisement and affiliate fraud<br>
<br>
Potential workshop participants should submit a paper on topics<br>
relevant to Web 2.0 security and privacy issues. We are seeking both<br>
short position papers (2 - 4 pages) and refereed papers (a maximum of<br>
8 pages, including references and appendices). Papers longer than 8<br>
pages may be automatically rejected by the chair or workshop<br>
committee. From the submissions, the program committee will strive to<br>
balance participation between academia and industry and across topics.<br>
Selected papers will appear on the workshop web site; W2SP has no<br>
formal published proceedings.<br>
<br>
For papers that focus primarily on the security and privacy of social<br>
networks, we encourage authors to submit their paper to the Social<br>
Network Security and Privacy (SNSP) workshop, which is concurrent and<br>
co-located with W2SP. Submitted papers may be referred to the SNSP<br>
program committee for consideration.<br>
<br>
Workshop Co-Chairs<br>
Larry Koved (IBM Research)<br>
Dan S. Wallach (Rice University)<br>
<br>
Program Chair<br>
Collin Jackson (Carnegie Mellon University)<br>
<br>
Program Committee<br>
Ben Adida (Harvard University)<br>
Dirk Balfanz (Google)<br>
Adam Barth (UC Berkeley)<br>
Konstantin (Kosta) Beznosov (University of British Columbia)<br>
Suresh Chari (IBM Research)<br>
Hao Chen (UC Davis)<br>
Collin Jackson (Carnegie Mellon University)<br>
Martin Johns (University of Passau)<br>
Rob Johnson (Stony Brook University)<br>
Engin Kirda (Institute Eurecom)<br>
Larry Koved (IBM Research)<br>
Shriram Krishnamurthi (Brown University)<br>
John C. Mitchell (Stanford University)<br>
Dawn Song (UC Berkeley)<br>
Dan S. Wallach (Rice University)<br>
Helen Wang (Microsoft Research)<br>
<br>
Important Dates<br>
<br>
Paper submission deadline: Tuesday, March 23, 2010 (11:59pm US-Eastern)<br>
Workshop acceptance notification date: April 11, 2010<br>
Workshop date: Thursday, May 20, 2010<br>
<br>
Registration: Workshop registration will be available via the 2010<br>
IEEE Symposium on Security and Privacy conference web site.<br>
</font></tt>
<br>
<br>