2002 Conferences
11th CACR Information Security Workshop &
3rd Annual Privacy and Security Workshop
Privacy and Security: Totally Committed


November 7-8, 2002
The Faculty Club, 41 Willcocks Street, University of Toronto
Slides and Recordings of presentations can
be found in the Schedule of Talks here.
Free software for viewing the recordings can be downloaded from
here.
Introduction:
The 11th CACR Information Security
Workshop: Privacy & Security: Totally Committed will be held
November 7 & 8, 2002, at the University of Toronto, Canada. This is
the third annual conference jointly organized by the Office of the
Information & Privacy Commissioner/Ontario and the Center for Applied
Cryptographic Research, University of Waterloo.
Theme:
Privacy concerns on the part of citizens and consumers continue to grow
according to a number of surveys conducted over 2002. As well, many
governments and companies have found that each individual’s trust and
confidence must be won and retained to successfully carry out their respective
businesses. Consumers and citizens expect privacy and security, not one at
the sacrifice of the other. For practitioners in the e-space, whether
e-government or e-commerce, it should mean a total commitment to privacy and
security.
This year’s conference will focus on the mutually dependent relationship
that privacy and security have. At one level, privacy and security will be
examined in the post 9:11 world through the paradigm that views both privacy
and security as tools that protect democratic freedoms. On a technological
level, privacy and security will be examined in a special workshop targeted
to government Chief Information Offices and Privacy Commissions as they
discuss issues of identity, linkability and observability of personal
information. The mutual dependence of privacy and security will also be
explored in an extended workshop on health privacy and security. This will
take the form of an investigation in which the delegates will take on the
role of investigator and be challenged to unravel the case and make
recommendations. Finally, a number of internationally recognized experts will
provide keynote addresses and lead workshops to help the delegates gain a
better understanding of the need for total commitment to both privacy and
security in their professional capacities.
This year’s conference is highly interactive, with sessions designed to
be driven by delegates in their questions and presentation of problems. On
the first day, there is an answer panel that will dispense with presentations
and focus on answering the problems posed by the delegates. The goal of this
year’s conference is to fundamentally change the day-to-day decisions
that delegates make regarding privacy and security issues. This will be done
by providing insight into the privacy and security interrelationship and by
showcasing the key privacy and security tools and resources available for
successfully working in the e-space.
Audience:
The intended audience includes technology and security experts, CIO's,
senior technology executives, health professionals, cryptographers, engineers,
law enforcement, practitioners, academics, private sector leaders, privacy
experts and students.
Sponsors:
- Centre for Innovation Law and Policy, University of Toronto
- Certicom Corp.
- Communications Security Establishment (CSE)
- Fields Institute
- IBM Canada
- Microsoft Canada
- MITACS
- Office of the Information & Privacy Commissioner, Ontario
- Pitney Bowes
- University of Waterloo
Organizers:
- Mike Gurski (Conference Chair), Office of the Information &
Privacy Commissioner/Ontario
- Alfred Menezes, University of Waterloo
Program Co-ordinators:
- Patricia D'Costa, Office of the Information & Privacy
Commissioner/Ontario
- Debra Grant, Office of the Information & Privacy
Commissioner/Ontario
- Pasha Peroff, Office of the Information & Privacy
Commissioner/Ontario
Speakers:
- Steven Adler, IBM
- Ken Anderson, Office of the Information & Privacy Commissioner/Ontario
- Carol Appathurai, Ministry of Health
- Ronda Bessner, Legal and Policy Cousultant
- Steven Booth, Communications Security Establishment (CSE)
- Stefan Brands, Credentica
- Ruth Carey, HIV & AIDS Legal Clinic (Ontario)
- Ann Cavoukian, Information & Privacy Commission/Ontario
- Nancy Cheng, Communications Security Establishment (CSE)
- Lorrie Cranor, AT&T Labs-Research
- Roger Dingledine, Massachusetts Institute of Technology
- Michael Eisen, Microsoft Canada
- Hugh Ellis, Cinnabar Networks
- Ross Fraser, Sextant Software
- Beth Givens, Privacy Rights Clearing House
- Debra Grant, Information & Privacy Commission/Ontario
- Peter Hope-Tindall, DataPrivacy Partners
- Susan Hyatt, Canada Health Infoway
- Giovanni Iachello, Georgia Institute of Technology
- Noela Inions, IPC/Alberta
- Ian Kerr, University of Ottawa
- Larry Korba, National Research Council, Canada
- Patricia Kosseim, Canadian Institutes of Health Research
- The Honourable Horace Krever
- Duncan McDuff, Sun Life Financial
- David McMahon, EWA-Canada Ltd.
- Dr. Jay G. Mercer
- Richard Owens, Centre for Innovation Policy and Law
- Stephanie Perrin, Digital Discretion
- Richard Purcell, Microsoft Corporation
- Kent Roach, Faculty of Law, University of Toronto
- Jeff Rosen, author of The Unwanted Gaze, George Washington University
- Malcolm Saravanamuttoo, EKOS Research
- Ari Schwartz, Center for Democracy and Technology
- Chris Severin, IPC/Ontario
- Janice G. Stein, Munk Centre, University of Toronto
- Michael Waidner, IBM/Zurich
- Miyo Yamashita, University Health Network
- Jason Young, Faculty of Law, Queen's University
- Paul Zatychec, EWA-Canada Ltd.
Schedule of Talks:
Speaker's Only Kick-off Dinner: November 6, 2002
Flavelle House, Faculty of Law, University of Toronto
78 Queen's Park Crescent
5:30-7:00pm |
Refreshments
& Dinner
(For Speakers Only)
Hosted by
the Centre for Innovation Law and Policy, University of Toronto
|
7:00-8:00pm |
Address to Speakers - Hosted by Microsoft Canada
text of speech (pdf)
Michael Eisen,
Sr. VP, Microsoft Canada
(For Speakers Only)
|
Day 1: November 7, 2002
Faculty Club, University of Toronto, 41 Willcocks Street
8:00am
|
Breakfast
|
9:00-9:20am
|
Introduction to Conference
Themes and Objectives
Mike Gurski,
Conference Chair, IPC/Ontario
|
9:20-10:00am
|
Getting to the Truth About Privacy and Security
slides (powerpoint)
Ann Cavoukian, Commissioner, IPC/Ontario
|
Recording of 9:00-10:00 am presentations
|
10:00-11:00am
|
Keynote Speech: Privacy and Security as Public Goods:
Efficiency and Accountability in a Networked World
outline of talk (Word file)
Janice Gross Stein, Munk
Centre for International Studies, University of Toronto
|
Recording of 10:00-11:00 am presentation
|
11:00-11:15am
|
Discussion Break
|
11:15-1:00pm
|
Anti-Terrorism and Privacy,
One Year After
Nancy Cheng, Communications Security Establishment
slides (powerpoint)
Richard Owens, Faculty of Law, University of Toronto
slides (powerpoint)
Kent Roach, Faculty of Law, University of Toronto
slides (powerpoint)
Malcolm Saravanamuttoo, EKOS Research
send request for slides
|
Recording of 11:15-1:00 pm presentations
|
1:00-2:15pm
|
LUNCH
Identity Theft: the Ins and Outs
slides (powerpoint)
Beth Givens, Privacy Rights Clearing House
|
Recording of 1:00-2:15 pm presentation
|
2:15-3:30pm
|
Breakout #1 PETs today,
PETS tomorrow
Moderator: Pasha Peroff
Roger Dingledine, Massachusetts Institute of Technology
slides (pdf)
Michael Waidner, IBM/Zurich
slides (pdf)
|
Breakout #2 The Future of P3P
Moderator:Jason Young, Queen's University
Lorrie Cranor, AT&T Labs-Research
Ari Schwartz, Centre for Democracy and Technology
slides (powerpoint)
|
Breakout #3: Continuing the
Dialogue between IPCs and CIOs
Opening: Ann Cavoukian
How Security Fits into Privacy:
Managing the Interface
Open Forum
|
3:30-4:00pm
|
Break
|
4:00-5:00pm
|
Ask the Experts how to Solve
your Privacy Problems
Moderator: Ken Anderson, IPC/Ontario
Peter Hope-Tindall, dataPrivacy Partners
Stephanie Perrin, Digital Discretion
Richard Purcell, Microsoft Corporation
Michael Waidner, IBM/Zurich
|
Breakout #3 cont’d
|
Recording of 4:00-5:00 pm presentations
|
5:00-8:30pm
|
Reception, Dinner, Presentation by Microsoft:
Richard Purcell, Corporate Privacy Officer,
Microsoft Corporation
|
Day 2: November 8, 2002
Faculty Club, University of Toronto, 41 Willcocks Street
8am
|
Breakfast
|
8:55am |
Opening Remarks
Mike Gurski,
Conference Chair, IPC/Ontario
|
9:00-9:05am |
Steven Booth,
Communications Security Establishment (CSE)
slides (powerpoint)
|
9:05-9:10am
|
Introduction
Ann Cavoukian, Commissioner, IPC/Ontario
|
9:10-10:10am
|
The 3 Greatest Challenges
Regarding Privacy
Jeff
Rosen, Author of
The Unwanted Gaze
|
Recording of 8:55-10:10 am presentations
|
10:10-10:30am
|
Break
|
10:30-12:15pm
|
Breakout #1
Mock Public Health Inquiry- Privacy: The First Eletronic Health Victim
Case Study and Investigation of Privacy Breach with Recommendations
The Honourable Horace Krever
Ken Anderson, IPC/Ontario
Carol Appathurai, Ministry of Health
Ruth Carey, HIV & AIDS Legal Clinic (Ontario)
Hugh Ellis, Cinnabar Networks
Ross Fraser, Sextant Software
Noela Inions, IPC/Alberta
Patricia Kosseim, Canadian Institutes of Health Research
Duncan McDuff, Sun Life Financial
David McMahon, EWA-Canada
Richard Owens, Faculty of Law, University of Toronto
Chris Severin, IPC/Ontario
Working Group:
Ronda Bessner, Legal and Policy Consultant
Debra Grant, IPC/Ontario
Susan Hyatt, Canada Health Infoway
Dr. Jay G. Mercer
Richard Owens, Faculty of Law, University of Toronto
Miyo Yamashita,University Health Network
Background Material:
Scenario,
Agenda,
Insurance forms,
References
|
Recording of 10:30-12:15 pm presentations
|
12:15-1:45pm
|
LUNCH
ISPs - Internet's Secret Police?
slides (powerpoint)
Ian Kerr,
Canada Research Chair in Ethics, Law and Technology,
University of Ottawa and Special Counsel, Technology Law,
Nelligan O'Brien Payne LLP
|
Recording of 12:15-1:45 pm presentation
|
1:45-3:15pm
|
Breakout #1 Mock Health
Inquiry: Continued
|
Breakout #2
Cutting Edge of Privacy
Technology: Examination of new tools that help design privacy
into technology.
Moderator: Patricia D'Costa, IPC/Ontario
Stefan Brands, Credentica
slides (powerpoint)
Peter Hope-Tindall, dataPrivacy Partners
slides
Larry Korba, National Research Council
slides (powerpoint)
|
Breakout #3 Sharing Best
Practices and Pitfalls
CIOs and IPCs
Closed door session - By invitation only
|
Recording of 1:45-3:15 pm Breakout #1 presentations
|
3:15-3:30pm |
Break |
3:30-4:30pm
|
Breakout #1 Mock Health Inquiry:
Continued
|
Breakout#2
Testing and Evaluation of
Technologies using the Common Criteria
Moderator:Steve Adler, IBM
Giovanni Iachello, Georgia Institute of Technology
slides (powerpoint)
Paul Zatychec, EWA-Canada
slides (powerpoint)
|
Breakout #3 Round Table Continued
|
Recording of 3:30-4:30 pm Breakout #1 presentations
|
4:30-5:30pm
|
Summations: Closing Comments
by selected speakers
|
Registration:
There is no registration fee for guests invited by the sponsors
(Centre for Innovation Law and Policy, Certicom, Communications
Security Establishment, Fields Institute, IBM, Information & Privacy
Commissioner, Microsoft, MITACS, and Pitney Bowes). The registration
fee for other participants is Cdn $300 (US $200).
Please register as soon as possible as space is limited for this
workshop; registration is on a first-come first-serve basis.
Registration fees will include admission to all presentations,
breakfasts, lunches, the banquet, and handouts.
To register, complete, in full, the attached REGISTRATION FORM and
return it along with your payment (if applicable) to:
Mrs. Frances Hannigan,
C&O Dept.,
University of Waterloo,
Waterloo, Ontario, Canada N2L 3G1.
You may also register by email (fhannigan@math.uwaterloo.ca) or by
phone (Frances Hannigan: 519-888-4027). Payment is also acceptable
by credit card (VISA or MasterCard only) at the start of the
conference. However, your credit card number is required at that
time and receipt of payment will only be forwarded at the end of
the conference.
Accommodations:
The Faculty Club is located on Wilcocks Street between Spadina and Huron. You
can find the closest hotels listed on the Fields Institute web-site at:
www.fields.utoronto.ca/resources/housing.html. There are no rooms set aside specifically for this workshop,
however, you can still request for the Fields Institute Corporate rate when booking
your room.
------------------------cut from here---------------------------------
11th CACR INFORMATION SECURITY WORKSHOP REGISTRATION FORM
PRIVACY AND SECURITY: TOTALLY COMMITTED
Full name:
_________________________________________________________
Affiliation:
_________________________________________________________
Address:
_________________________________________________________
_________________________________________________________
_________________________________________________________
_________________________________________________________
_________________________________________________________
E-Mail Address:
_________________________________________________________
Telephone #:
_________________________________________________________
Please specify which Session you wish to attend
[there is limited space, so please let us know]
November 7, 2002
Breakout #1 [ ] Breakout #2 [ ] Breakout #3 [ ]
Steps toward Security & Privacy: IPCs & CIOs
STEPS The Tug of War
Dinner with Microsoft [ ]
November 8, 2002
Breakout #1 PM [ ] Breakout #2 PM [ ] Breakout #3 [ ]
Health Inquiry Privacy Technology CIOs and IPCs Only
Cont'd from AM
Registration Fee: Please check the appropriate box:
[ ] Registration..........................$300 Cdn
[ ] Registration..........................$200 US
[ ] Invited by sponsor....................no fee
Sponsor's Name: ____________________________
Total $___________
**Make Cheque/Money Order Payable in Cdn or US funds only to: CACR
Credit Card Payments:
[ ] Visa [ ] MasterCard
Cardholder's Name: ________________________________________________
Card Number: ______________________________________________________
Expiration Date: __________________________________________________
Signature: ________________________________________________________
-------------------------cut from here-------------------------------
Back to CACR home page

|