Toward strong, usable access control for personal data

Michelle Mazurek
Carnegie Mellon University

1:00pm Thursday, 6 March 2014, ITE 325b, UMBC

Users create, store and access a lot of personal data, both on their devices and in the cloud. Although this provides tremendous benefits, it also creates risks to security and privacy, ranging from the inconvenient (private photos posted around the office) to the serious (loss of a job; withdrawal of college admission). Simply refusing to share personal data is not feasible or desirable, but sharing indiscriminately is equally problematic. Instead, users should be able to efficiently accomplish their primary goals without unnecessarily compromising their privacy. In this talk, I describe my work toward developing usable access-control mechanisms for personal data. I review the results of three user studies that provided insight into users’ policy needs and preferences. I then discuss the design and implementation of Penumbra, a distributed file system with built-in access control designed to support those needs. Penumbra has two key building blocks: semantic-tag-based policy specification and logic-based policy enforcement. Our results show that Penumbra can enforce users’ preferred policies securely with low overhead.

Michelle Mazurek is a Ph.D. candidate in Electrical and Computer Engineering at Carnegie Mellon University, co-advised by Lujo Bauer and Greg Ganger. Her research interests span security, systems, and HCI, with particular emphasis on designing systems from the ground up for usable security. She has worked on projects related to usable access control, distributed systems, and passwords.

Host: Penny Rheingans, Sorry, you need javascript to view this email address.

Toward strong, usable access control for personal data

Michelle Mazurek
Carnegie Mellon University

1:00pm Thursday, 6 March 2014, ITE 325b, UMBC

Users create, store and access a lot of personal data, both on their devices and in the cloud. Although this provides tremendous benefits, it also creates risks to security and privacy, ranging from the inconvenient (private photos posted around the office) to the serious (loss of a job; withdrawal of college admission). Simply refusing to share personal data is not feasible or desirable, but sharing indiscriminately is equally problematic. Instead, users should be able to efficiently accomplish their primary goals without unnecessarily compromising their privacy. In this talk, I describe my work toward developing usable access-control mechanisms for personal data. I review the results of three user studies that provided insight into users’ policy needs and preferences. I then discuss the design and implementation of Penumbra, a distributed file system with built-in access control designed to support those needs. Penumbra has two key building blocks: semantic-tag-based policy specification and logic-based policy enforcement. Our results show that Penumbra can enforce users’ preferred policies securely with low overhead.

Michelle Mazurek is a Ph.D. candidate in Electrical and Computer Engineering at Carnegie Mellon University, co-advised by Lujo Bauer and Greg Ganger. Her research interests span security, systems, and HCI, with particular emphasis on designing systems from the ground up for usable security. She has worked on projects related to usable access control, distributed systems, and passwords.

Host: Penny Rheingans, Sorry, you need javascript to view this email address.

Due to uncertainty about the weather, this talk has
been postponed and will be rescheduled soon

Underwater Acoustic Communication and
Networking for Ocean Sampling

Dr. Aijun Song

Assistant Research Professor
College of Earth, Ocean, and Environment
University of Delaware, Newark, DE 19716

Noon – 1:00pm Monday, 3 March 2014, ITE325b, UMBC

On our planet Earth, the marine ecosystem is undergoing significant changes due to human activities and natural processes. These changes call for enhanced capabilities to sample and communicate in the oceans. With this background, underwater acoustic communication has attracted much attention across multiple disciplines, as a means to access oceanographic data in real-time and to support navigation of underwater vehicles. This talk will focus on my recent efforts in 1) characterization and modeling of the ocean environment as a communication medium, 2) development of high data rate acoustic modems, both software and hardware, and 3) application of underwater acoustic communication networks in ocean sampling.

Dr. Aijun Song received his Ph.D. degree in the Department of Electrical Engineering, University of Delaware, Newark, Delaware in 2005. From 2005 to 2008, he was a postdoctoral research associate at the College of Earth, Ocean, and Environment (CEOE), University of Delaware. During this period, he was also an Office of Naval Research (ONR) postdoctoral fellow, supported by the special research award in the Ocean Acoustics program. Since 2008, he has been an Assistant Research Professor of the CEOE, University of Delaware. His research interests include advanced signal processing and communication techniques for mobile radio frequencies as well as for underwater acoustic environments, underwater acoustic signal propagation, and the general area of ocean sampling.

CSEE’s Dr. Rick Forno, Cybersecurity GPD and Assistant Director of the UMBC Center for Cybersecurity, was a guest on WEAA’s ‘The Marc Steiner Show’ where he joined Dr. Lisa Yeo of Loyola University in discussing cybersecurity issues and best practices in light of recent high-profile data breaches such as those at the University of Maryland, Target, and Indiana University.

CSEE’s Dr. Rick Forno, Cybersecurity GPD and Assistant Director of the UMBC Center for Cybersecurity, was a guest on WEAA’s ‘The Marc Steiner Show’ where he joined Dr. Lisa Yeo of Loyola University in discussing cybersecurity issues and best practices in light of recent high-profile data breaches such as those at the University of Maryland, Target, and Indiana University.

Interested in applied learning and gaining real-life experience that complements classroom learning? Did you know you can receive academic credit and transcript notation for an internship?

First: Please schedule an appointment online using UMBCworks, stop by our office (Math/Psyc 212) or call our office (410-455-2216) for a 30 minute appointment. During this appointment we will review your resume and approve you to begin applying for internships using UMBCworks.

Next: How to find internships?

UMBCworks is a great tool to use for applying for internships.

Companies also come to campus. You can also use the great resources on our website. Please see the calendar (http://www.careers.umbc.edu/news_events/calendar.php) on our website to see when employers will be visiting campus, for networking events, for On the Road events, and For Lunch & Learn events.

There is also a list of resources on our website. (http://www.careers.umbc.edu/skills/intern/resources.php)

After you have obtained an internship:

If interested, please schedule an appointment so you can receive transcript notation, academic credit, and register for Practicum 98 (http://www.careers.umbc.edu/skills/intern/prac.php).

Registration for transcript notation, academic credit, and  Practicum 98 for summer internships will begin around the first week of April.

The practicum is a co-requisite to internships. A coordinator will help monitor the Practicum. You will also receive professional development via the practicum.

For more information, feel free to call/visit our office, meet with a specialist, or check out our website.

Summer Training in Alcohol Research

The University of Kentucky offers a 10-­week, paid laboratory experience for talented undergraduate students interested in gaining research experience in alcohol-­related disorders such as alcoholism, fetal alcohol syndrome, cancer, and pain. This is a competitive program designed for students considering a career in a science, technology, engineering or math-­related fields, but especially graduate study. Opportunities range from applied psychological approaches in humans to basic cellular mechanisms of alcohol action in cell culture. Students will spend the summer performing independent research under the supervision of faculty mentors, graduate students and postdoctoral fellows, give a scientific presentation that describes their accomplishments, and have the opportunity to contribute to front-­line research in either of these areas.

The Shriver Center's 096 Community Service & Learning spring 2014 registration officially closes by this Friday at 10 am!