ACM CCS2008 DIM Workshop

As the competitive edge of the global economy is shifting to “services” delivered over the Internet, we need a way of making identity available on-demand to the services in an open, scalable, and secure manner. Identity for services is a holistic concern that must satisfy technology, regulatory and business needs for existing and emerging markets, such as Software as a Service (SaaS) and Service Oriented Architectures (SOA). Identity services should introduce consistency, efficiency and scalability in IT infrastructures built on the Internet to form the new “identity layer”. Also, it should be easy for developers to incorporate identity services as part of distributed application logic.

To fully achieve the potential benefits of identity managed as a set of services, such as cost-effectiveness and shorter deployment times, several security and privacy challenges must be addressed. Such challenges arise because of the complex and distributed systems across different organizations involved in identity service offerings. The goal of the workshop is to lay the foundation and agenda for further research and development in this area. Under the broad umbrella of “Services and Identity”, we encourage both researchers and practitioners to participate and submit papers on topics including, but not limited to the following:

Identity management for SaaS
SOA for identity
Scalability issues in identity management
Resilient identity service provisioning
Dynamic mutual trust negotiation
SLA for identity services
Identity based access control
Migration to identity services
Identity service discovery
Virtual directories
Identity management process assurance
Identity life-cycle

Externalization of identity
Risk management for identity
Identity oracles
Translation and resolution of namespaces
Network transport as a service
Privacy and hosted services
Mobile identities
Balance between de-centralization of identity and centralization of controls
Privacy preservation during orchestration of services in multiple domains

Submitted papers must not substantially overlap with papers that have been published or that are simultaneously submitted to a journal or a conference with proceedings. Papers should be at most 10 pages, using at least 10.5-point font and reasonable margins on A4 or US letter-size paper (8.5 inch x 11 inch). Committee members are not required to read the appendices, and so submissions should be intelligible without them. Each submission should start with the title, abstract, and names and contact information of authors. The introduction should give background and summarize the contributions of the paper at a level appropriate for a non-specialist reader. Authors of accepted papers must guarantee that their paper will be presented at the workshop.

Gail-Joon Ahn, Arizona State University, USA
Abhilasha Bhargav-Spantzel, Intel, USA
Doug Blough, Georgia Tech, USA
Jan Camenisch, IBM Research, Switzerland
Marco Casassa Mont, HP Labs, UK
David Chadwick, University of Kent, UK
Rachna Dhamija, Harvard University, USA
Hidehito Gomi, Yahoo! Japan Research, Japan
Thomas Gross, IBM Research, Switzerland
Carl A. Gunter, Univ. of Illinois at Urbana-Champaign, USA
Seung-Hyun Kim, ETRI, Korea
Brian LaMacchia, Microsoft, USA
Howard Lipson, CERT, USA

Paul Madsen, NTT, Canada
Eve Maler, Sun Microsystems, USA
Toshihiko Matsuo, NTT Data, Japan
Piotr Pacyna, AGH Univ. of Science and Technology, Poland
Andreas Pfitzmann, Dresden University of Technology, Germany
Rakesh Radhakrishnan, Sun Microsystems, USA
Samir Saklikar, Motorola Labs, India
Ravi Sandhu, Univ. of Texas at San Antonio, USA
Amardeo Sarma, NEC Laboratories Europe, Germany
Diana Smetters, PARC, USA
Anna C. Squicciarini, Pennsylvania State Univ., USA
Tsuyoshi Takagi, Future University - Hakodate, Japan

For further information: Write to dim2008-chairs_at_lab.ntt.co.jp or visit www2.pflab.ecl.ntt.co.jp/dim2008/