§16§Althoughcryptographyandsecuritytechniqueshavebeenaroundfor quitesome time, emerging technologies such as ubiquitous computing and ambient intel- gence that exploit increasingly interconnected networks, mobility and pers- alization put new requirements on security with respect to data management. As data is accessible anytime anywhere, according to these new concepts, it - comes much easier to get unauthorized data access. Furthermore, it becomes simpler to collect, store, and search personal information and endanger people s privacy. Therefore,researchin the area of secure data management is of growing importance, attracting the attention of both the data management and security researchcommunities.Theinterestingproblemsrangefromtraditionalones,such as access control (with all variations, like dynamic, context-aware, role-based), database security (e.g., e?cient database encryption schemes, search over - crypted data, etc.), and privacy-preserving data mining to controlled sharing §16§ of data. In addition to the aforementioned subject, this year we also called for - pers devoted to secure data management in healthcare as a domain where data security and privacy issues are traditionally important. The call for papers - tracted 38 papers both from universities and industry. The ProgramCommittee selected 16 research papers for presentation at the workshop. These papers are also collected in this volume which we hope will serve you as a useful research and reference material. §04§Encrypted Data Access.- Efficient Key Updates in Encrypted Database Systems.- Metadata Management in Outsourced Encrypted Databases.- Experiments with Queries over Encrypted Data Using Secret Sharing.- Access Control.- An Authorization Framework for Sharing Data in Web Service Federations.- User-Managed Access Control for Health Care Systems.- Specifying an Access Control Model for Ontologies for the Semantic Web.- A Formal Access Control Model for XML Databases.- Information Disclosure Control in Databases.- Can Attackers Learn from Samples?.- Dynamic Disclosure Monitor (D 2 Mon): An Improved Query Processing Solution.- Detecting Privacy Violations in Sensitive XML Databases.- Suppressing Microdata to Prevent Probabilistic Classification Based Inference.- On Deducibility and Anonymisation in Medical Databases.- Privacy and Security Support for Distributed Applications.- Protecting Privacy Against Location-Based Personal Identification.- Information SeeSaw: Availability vs. Securi §04§ty Management in the UbiComp World.- XML Security in the Next Generation Optical Disc Context.- Improvement of Hsu-Wu-He's Proxy Multi-signature Schemes.
