The 1st ACM Workshop on Network Data Anonymization (NDA 2008)

George Mason University, VA, USA
October 31, 2008

In association with the 15th ACM Conference on Computer and Communications Security (CCS)

Program and Registration


The workshop program is available here

The online registration is available here.

Call for Participation


We are pleased to announce, and invite you to participate in, the First ACM Workshop on Network Data Anonymization (NDA 2008), held at George Mason University in Fairfax, Virginia, USA, near Washington, DC, on Friday 31 October 2008, in association with the Fifteenth ACM Conference on Computer and Communications Security (CCS 2008).

This inaugural workshop focuses on the theory and practice of anonymization as it applies to network data for use by the Internet measurement research community and operators deploying network measurement technologies. Though the application of anonymization techniques to network traffic data is not a new area of work, several factors are now converging to focus attention on network data anonymization. These include a growing requirement for "real" network data for Internet measurement research studies as Internet measurement matures as a science; increasing interest in network data sharing across administrative domains for network operations and security purposes; and the continued scaling up of network monitoring and measurement activities, with the attendant increase in difficulty of maintaining the privacy of the end users of the network.

The program consists of an invited talk, two panels, five papers, and addresses a wide variety of issues surrounding these factors. The talk and panel discussions focus on the interaction of network measurement, data sharing, and anonymization within their greater social, political, legal contexts, and feature jurists, researchers, technologists, and operators, for a wide and varied perspective on the field. Papers address advances in anonymization itself, especially relating to anonymization metrics and operational applications of anonymization, and in novel approaches to the problems anonymization is intended to solve.

The workshop program is available here. The workshop is held in association with ACM CCS; see http://www.sigsac.org/ccs/CCS2008/ for registration and hotel details. Note that the workshop will be held at George Mason University in Fairfax, not at the Hilton Alexandria Mark Center with the main conference program; transportation will be available from the conference hotel, see the CCS page for details.

We look forward to seeing you at the workshop!

Abstract


Over the last decade, the network security community (and the Internet measurement community in general) has suffered from two fundamental and related problems: (1) lack of "real" network data for research studies and prototype testing, and (2) a lack of network data sharing among organizations, which impedes cooperation in network defense; as attacks typically cross organizational boundaries, effective prevention requires defenders to look beyond their own perimeter in cooperation with other organizations.

Anonymization techniques are crucial for the safe sharing of network data. They are necessary to obscure certain identifying information (e.g., IP addresses) in order to protect the privacy of end users and the security of internal networks. While current network data anonymization techniques are generally acknowledged to be useful, it is difficult to ensure they are free from information leakage. Furthermore, anonymization involves fundamental tradeoffs between the protection of user privacy and the utility of the resulting data, and these tradeoffs need to be better understood.

This workshop seeks to focus on new and innovative solutions for anonymizing network data that will ensure appropriate protection of host identities, network configurations, and network security practices within enterprise networks.

Topics of Interest


Topics may include, but are not limited to, the following:

  • data sharing via anonymization
  • privacy-preserving data mining
  • data anonymization tools
  • data anonymization policy creation/implementation
  • data anonymization case studies/best practices
  • streaming data anonymization
  • anonymization issues specific to network data
  • business services enabled by anonymization
  • data protection laws relevant to data anonymization

Papers submitted documenting attacks on anonymized systems are strongly encouraged to propose a corresponding protection solution. While the focus of this workshop is on network data anonymization, applications of anonymization to other data domains ( e.g., medical data, homeland security, reputation systems, government records, transportation etc.) are welcome if the authors include a statement of relevance.

Submission Instructions


NDA is open to two classes of submissions:

1. Research papers

Research papers describing original work, survey papers broadly describing the state of work in topic areas of interest, and position papers posing new problems in network data anonymization and privacy preservation will be considered. All papers should be at most 8 pages long (double column) in an 11-point font with at least 1-inch margins. Significantly shorter papers will also be considered in terms of the degree to which they might contribute to the workshop's goals of fostering a data anonymization research community. Papers should list all authors and their affiliations; in case of multiple authors, the contact author must be indicated (NDA does not require anonymized submissions). All accepted papers will appear in the ACM NDA Proceedings.

Note that all papers that are submitted must be original unpublished work and must not be simultaneously submitted or under review for any other workshop, conference or journal (including ACM CCS). Any paper found to be in violation of these rules will be rejected without review. (We may share information about submissions with the program chairs of other conferences considering papers during the review period.) Papers accompanied by non-disclosure agreement forms will not be considered. All submissions are treated as confidential, both as a matter of policy and in accordance with the U.S. Copyright Act of 1976.

2. Panel proposals

Panel proposals must include the title of the panel, a 2-paragraph abstract describing the topic and why it should be of interest to the NDA community, and a list of panelists that have agreed to serve on the panel. Panels are expected to be at most 1 hour long, comprised of short presentations by the panelists followed by discussion among panel members and the audience; other formats may be used, but should be described in the proposal.

Please submit both research papers and panel proposals via the following link: Paper submission

3. Paper format

Authors should follow the ACM SIG proceedings template for preparing their submission.

Important Dates


1 June, 2008 (23:59 PST) Paper submission deadline (Extended)
7 July, 2008Notification of acceptance
10 August, 2008Camera-ready papers due
31 October, 2008Workshop co-located with CCS in Alexandria, VA, USA

Committees


Organizing Committee

  • Bill Yurcik, University of Texas at Dallas (USA) [Program Chair]
  • Michele Bezzi, SAP Research (France)
  • Elisa Boschi, Hitachi Europe (Switzerland)
  • Brian Trammell, CERT/NetSA (USA)
  • Spiros Antonatos, ICS-FORTH (Greece)

Technical Program Committee

  • Nikita Borisov, University of Illinois at Urbana-Champaign (USA)
  • Matthias Bossardt, KPMG (Switzerland)
  • Nevil Brownlee, CAIDA (New Zealand)
  • k claffy, CAIDA (USA)
  • Michael Collins, CERT/NetSA (USA)
  • Marco Cremonini, University of Milan (Italy)
  • Michalis Foukarakis, ICS-FORTH (Greece)
  • Carrie Gates, CA Labs (USA)
  • David Maltz, Microsoft (USA)
  • John McHugh, Dalhousie University (Canada)
  • Ruoming Pang, Google (USA)
  • Stefano Paraboschi, University of Bergamo (Italy)
  • Dave Plonka, University of Wisconsin at Madison (USA)
  • Carsten Schmoll, Fraunhofer FOKUS (Germany)
  • Tim Shimeall, CERT/NetSA (USA)
  • Panos Trimintzios, European Network and Information Security Agency (Greece)

Further Questions


If you have any questions, feel free to send an email to the Program Chair.