Innovations in Mobile Privacy & Security (IMPS) 2017 was a one-day workshop held on 29th April 2017 in conjunction with EuroS&P 2017 in Paris, France.

IMPS aims to bring together researchers working on challenges in security and privacy for mobile platforms, broadly considered. We are interested in investigations into existing security platforms, their users, applications and app store ecosystems, and research into novel security or privacy mechanisms, tools and analysis techniques. Besides established mobile platforms such as iOS and Android, the workshop will consider new and emerging platforms including those for small and embedded devices for example, in the Internet-of-Things setting.

IMPS 2017 is the second meeting of the workshop, following IMPS 2016 held in London as part of ESSoS 16.

Areas of interest include but are not restricted to:

• Secure application development tools and practices
• Privacy enhancing techniques for devices and connected services
• Secure or trusted computing mechanisms
• Static and dynamic analysis for security
• Formal methods for mobile security
• Vulnerability detection and prevention
• Mobile operating system security features
• Security and privacy for IoT and other constrained devices
• Secure communication protocols for limited devices
• Usable security and privacy for small or mobile devices
• Studies of privacy or security "in the wild"
• User-awareness, understanding, mental models for mobile devices
• Mobile malware and potentially unwanted programs, analysis and reverse engineering

The key aspect for work to be in scope is that a security or privacy issues are studied for devices that are constrained and/or sensor rich. As a workshop, we particularly encourage work describing novel or non-conventional, innovative techniques and solutions.

Programme

08:00-9:00   Registration & Breakfast
09:00-9:15   Welcome to IMPS
09:15-10:30   Invited Talk: Industry Security Research: An Insider's View from an ex-Academic. Federico Maggi, Trend Micro
10:30-11:00   Coffee Break
11:00-11:30   Anindya Maiti, Kirsten Crager, Murtuza Jadliwala, Jibo He, Kevin Kwiat and Charles Kamhoua. RandomPad: Usability of Randomized Mobile Keypads for Defeating Inference Attacks.
11:30-12:00   Joseph Hallett and David Aspinall. Common Concerns in BYOD Policies.
12:00-14:00   Lunch Break
14:00-15:30   Panel: Research Challenges in Mobile Privacy and Security
                         Alastair Beresford, University of Cambridge
                         Andrea Lanzi, University of Milan
                         Daniele Sgandurra, Royal Holloway, University of London
                         Federico Maggi, Trend Micro
                         Sascha Fahl, CISPA, Saarland University
15:30-16:00   Coffee Break
16:00-17:00   Invited Talk: Challenges on Developing Secure Mobile Applications. Sascha Fahl, CISPA, Saarland University
17:00-17:30   Bram Bonné, Peter Quax and Wim Lamotte. The Privacy API: Facilitating Insights In How One’s Own User Data Is Shared.
17:30-18:00   Stephan A. Kollmann and Alastair R. Beresford. The Cost of Push Notifications for Smartphones using Tor Hidden Services.
18:00-18:05   Concluding remarks

Organisation

Programme Committee:

• David Barrera, ETH Zurich
• Alastair Beresford, University of Cambridge
• Mihai Christodorescu, Qualcomm
• Jonathan Crussell, Sandia National Laboratories
• Manuel Egele, Boston University
• William Enck, NC State
• Andrea Lanzi, University of Milan
• Martina Lindorfer, UC Santa Barbara
• Federico Maggi, Trend Micro
• Michalis Polychronakis, Stony Brook University
• William Robertson, Northeastern University
• Nassim Seghir, UCL
• Gianluca Stringhini, UCL
• Guillermo Suarez-Tangil, Royal Holloway, University of London
• Melanie Volkamer, Karlstad
• Roland Yap, NUS

Organisers and PC chairs:

• David Aspinall, University of Edinburgh (PC co-Chair)
• Lorenzo Cavallaro, Royal Holloway, University of London (PC co-Chair)
• Guillermo Suarez-Tangil, Royal Holloway, University of London (Publication Chair)

Please with any questions regarding IMPS.