secappdev.org's video: Selective disclosure for identity management - George Danezis

Authentication and authorization should not compromise our privacy. All too often we are giving more data than is necessary. Could we have less privacy-invasive systems? George explains how zero-knowledge protocols can be used to authenticate and to do access control without exposing unnecessary information about ourselves. This lecture was delivered at SecAppDev 2015. George Danezis is a Reader in Security and Privacy Engineering at the Department of Computer Science of University College London. He has been working on anonymous communications, privacy enhancing technologies (PET), and traffic analysis since 2000. He has previously been a researcher for Microsoft Research, Cambridge; a visiting fellow at K.U.Leuven (Belgium); and a research associate at the University of Cambridge (UK), where he also completed his doctoral dissertation under the supervision of Prof. R.J. Anderson. His theoretical contributions to the PET field include the established information theoretic metric for anonymity and pioneering the study of statistical attacks against anonymity systems. On the practical side he is one of the lead designers of the anonymous mail system Mixminion, and has worked on the traffic analysis of deployed protocols such as Tor. His current research interests focus around smart grid privacy, peer-to-peer and social network security, as well as the application of machine learning techniques to security problems. He has published over 50 peer-reviewed scientific papers on these topics in international conferences and journals. He was the co-program chair of ACM Computer and Communications Security Conference in 2011 and 2012, IFCA Financial Cryptography and Data Security in 2011, the Privacy Enhancing Technologies Workshop in 2005 and 2006. He sits on the PET Symposium board and he regularly serves in program committees of leading conferences in the field of privacy and security.