Symposium On Usable Privacy and Security 2015 In-cooperation with USENIX http://cups.cs.cmu.edu/soups/ July 22-24, 2015 Ottawa, Canada CALL FOR PAPERS http://cups.cs.cmu.edu/soups/2015/cfp.php The 2015 Symposium on Usable Privacy and Security (SOUPS) will bring together an interdisciplinary group of researchers and practitioners in human computer interaction, security, and privacy. The program will feature: - technical papers, - a poster session, - panels and invited talks, - lightning talks and demos, and - workshops and tutorials. This year SOUPS will be held at Carleton University in Ottawa, Canada. See a full list of important dates below. TECHNICAL PAPERS (see the SOUPS website for details on other types of submissions) Paper Registration Deadline: March 6, 2015, 5pm US Pacific time Paper Submission Deadline: March 13, 2015, 5pm US Pacific time Rebuttal Period: April 20-24, 2015, 5pm US Pacific time Paper Notifications: May 19, 2015 Camera Ready Deadline: June 12, 2015 Anonymization: Papers MUST be anonymized Length: 12 pages excluding bibliography & non-essential appendices (20 pgs max) Formatting: Use SOUPS MS Word or LaTeX templates Submission site: https://cups.cs.cmu.edu/hotcrp/soups2015/ We invite authors to submit original papers describing research or experience in all areas of usable privacy and security. We welcome a variety of research methods, including both qualitative and quantitative approaches. Topics include, but are not limited to: - innovative security or privacy functionality and design, - new applications of existing models or technology, - field studies of security or privacy technology, - usability evaluations of new or existing security or privacy features, - security testing of new or existing usability features, - longitudinal studies of deployed security or privacy features, - studies of administrators or developers and support for security and privacy, - the impact of organizational policy or procurement decisions, and - lessons learned from the deployment and use of usable privacy and security features, - reports of replicating previously published studies and experiments, - reports of failed usable security studies or experiments, with the focus on the lessons learned from such experience. All submissions must relate to both human aspects and either security or privacy. Papers on security or privacy applications that do not address usability or human factors will not be considered. Papers need to describe the purpose and goals of the work, cite related work, show how the work effectively integrates usability and security or privacy, and clearly indicate the innovative aspects of the work or lessons learned as well as the contribution of the work to the field. Papers must use the SOUPS formatting template (available for MS Word or LaTeX) and be up to 12 pages in length, excluding the bibliography and any supplemental appendices. Authors have the option to attach to their paper supplemental appendices containing study materials (e.g. surveys) that would not otherwise fit within the body of the paper. These appendices may be included to assist reviewers who may have questions that fall outside the stated contribution of your paper, on which your work is to be evaluated. Reviewers are not required to read any appendices so your paper should be self contained without them. Accepted papers will be published online with their supplemental appendices included. Submissions must be no more than 20 pages including bibliography and appendices. For the body of your paper, brevity is appreciated, as evidenced by the fact that many papers in prior years have been well under this limit. All submissions must be in PDF format and should not be blinded. Submit your paper electronically at https://cups.cs.cmu.edu/hotcrp/soups2015/. Anonymization: Reviewing is double blind: Author names and affiliations should not appear on the title page, and papers should avoid revealing the authors' identity in the text. Any references to the authors' own work should be made in the third person. Contact the program chairs at soups-chairs@cups.cs.cmu.edu if you have any questions. Submissions that violate these requirements may be rejected without review. Registering & submitting your paper: Technical papers must be registered by 5pm, US Pacific time, March 6 and submitted by 5pm, US Pacific time, March 13. These are hard deadlines! (Registering a paper in the submission system requires filling out all the fields that describe the submission, but does not require uploading a PDF of the paper.) Authors will be notified of technical paper acceptance by May 19, and camera-ready final versions of technical papers will be due June 12. Rebuttals: This year, authors of submitted SOUPS papers will be given a chance to see and correct factual errors in early-round reviews during the rebuttal period, April 20-24. Accepted papers will be published by the USENIX Association, and will be freely available on the USENIX and SOUPS websites. Authors will retain copyright of their papers. Submitted papers must not significantly overlap papers that have been published or that are simultaneously submitted to a peer-reviewed venue or publication. Any overlap between your submitted paper and other work either under submission or previously published must be documented in a clearly-marked explanatory note at the front of the paper. State precisely how the two works differ in their goals, any use of shared experiments or data sources, and the unique contributions. If the other work is under submission elsewhere, the program committee may ask to review that work to evaluate the overlap. Please note that program committees frequently share information about papers under review and reviewers usually work on multiple conferences simultaneously. Technical reports are exempt from this rule. If in doubt, please contact the program chairs for advice. You may also release pre-prints of your accepted work to the public at your discretion. Authors are encouraged to review: Common Pitfalls in Writing about Security and Privacy Human Subjects Experiments, and How to Avoid Them. Note that this paper addresses research work taking an experimental and quantitative approach, with hypothesis testing and statistical inference. However, SOUPS welcomes submissions that take other approaches, and recognizes that other methodological considerations will be appropriate. User experiments should follow the basic principles of ethical research, e.g., beneficence (maximizing the benefits to an individual or to society while minimizing harm to the individual), minimal risk (appropriateness of the risk versus benefit ratio), voluntary consent, respect for privacy, and limited deception. Authors are encouraged to include in their submissions explanation of how ethical principles were followed, and may be asked to provide such an explanation should questions arise during the review process. Technical Papers Committee Robert Biddle, Carleton University, Canada (co-chair) Sunny Consolvo, Google, USA (co-chair) Richard Beckwith, Intel, USA Joseph Bonneau, Princeton University, USA Sonia Chiasson, Carleton University, Canada Paul Dunphy, Newcastle University, UK Serge Egelman, University of California, Berkeley, USA Will Enck, North Carolina State University, USA Alain Forget, Carnegie Mellon University, USA Simson Garfinkel, US Naval Postgraduate School, USA Cormac Herley, Microsoft Research, USA Iulia Ion, Google, USA Maritza Johnson, Google, USA Adrienne Porter Felt, Google, USA Emilee Rader, Michigan State University, USA Rob Reeder, Google, USA Michael Reiter, University of North Carolina at Chapel Hill, USA Matthew Smith, University of Bonn, Germany Frank Stajano, University of Cambridge, UK Janice Tsai, Microsoft Research, USA Kami Vaniea, Indiana University, USA David Wagner, University of California Berkeley, USA Rick Wash, Michigan State University, USA