Search Results

Documents authored by Strufe, Thorsten


Document
PETs and AI: Privacy Washing and the Need for a PETs Evaluation Framework (Dagstuhl Seminar 25112)

Authors: Emiliano De Cristofaro, Kris Shrishak, Thorsten Strufe, Carmela Troncoso, and Felix Morsbach

Published in: Dagstuhl Reports, Volume 15, Issue 3 (2025)


Abstract
As public awareness of data collection practices and regulatory frameworks grows, privacy-enhancing technologies (PETs) have emerged as a promising approach to reconciling data utility with individual privacy rights. PETs underpin privacy-preserving machine learning (PPML), integrating tools like differential privacy, homomorphic encryption, and secure multiparty computation to safeguard data throughout the AI lifecycle. However, despite significant technical progress, PETs face critical policy and governance challenges. Recent works have raised concerns about efficacy and deployment of PETs, observing that fundamental rights of people are continually being harmed, including, paradoxically, privacy. PETs have been used in surveillance applications and as a privacy washing tool. Current approaches often fail to address broader harms beyond data protection, highlighting the need for a more comprehensive privacy evaluation framework. This Dagstuhl Seminar brought together scholars in computer science and law, along with policymakers, regulators, and industry leaders, to discuss privacy washing and the challenges of detecting privacy washing through PETs and explored pathways toward a framework to address these challenges.

Cite as

Emiliano De Cristofaro, Kris Shrishak, Thorsten Strufe, Carmela Troncoso, and Felix Morsbach. PETs and AI: Privacy Washing and the Need for a PETs Evaluation Framework (Dagstuhl Seminar 25112). In Dagstuhl Reports, Volume 15, Issue 3, pp. 77-93, Schloss Dagstuhl – Leibniz-Zentrum für Informatik (2025)


Copy BibTex To Clipboard

@Article{decristofaro_et_al:DagRep.15.3.77,
  author =	{De Cristofaro, Emiliano and Shrishak, Kris and Strufe, Thorsten and Troncoso, Carmela and Morsbach, Felix},
  title =	{{PETs and AI: Privacy Washing and the Need for a PETs Evaluation Framework (Dagstuhl Seminar 25112)}},
  pages =	{77--93},
  journal =	{Dagstuhl Reports},
  ISSN =	{2192-5283},
  year =	{2025},
  volume =	{15},
  number =	{3},
  editor =	{De Cristofaro, Emiliano and Shrishak, Kris and Strufe, Thorsten and Troncoso, Carmela and Morsbach, Felix},
  publisher =	{Schloss Dagstuhl -- Leibniz-Zentrum f{\"u}r Informatik},
  address =	{Dagstuhl, Germany},
  URL =		{https://drops.dagstuhl.de/entities/document/10.4230/DagRep.15.3.77},
  URN =		{urn:nbn:de:0030-drops-248999},
  doi =		{10.4230/DagRep.15.3.77},
  annote =	{Keywords: Privacy Enhancing Technologies (PET), Privacy Evaluation, Privacy Harm, Privacy Threats, Privacy Washing}
}
Document
Cybersafety in Modern Online Social Networks (Dagstuhl Reports 17372)

Authors: Jeremy Blackburn, Emiliano De Cristofaro, Michael Sirivianos, and Thorsten Strufe

Published in: Dagstuhl Reports, Volume 7, Issue 9 (2018)


Abstract
This report documents the program and the outcomes of Dagstuhl Seminar 17372 "Cybersafety in Modern Online Social Networks." The main motivation behind the seminar stems from the increased relevance of threats and challenges in the context of cybersafety, especially in modern online social networks, where the range of malicious activities perpetrated by malevolent actors is regrettably wide. These include spreading malware and spam, controlling and operating fake/compromised accounts, artificially manipulating the reputation of accounts and pages, and spreading false information as well as terrorist propaganda.The reasons for the success of such attacks are manifold. The users of social networking services tend to extend their trust of the services and profiles of their acquaintances to unknown users and other third parties: despite the service providers' attempts at keeping their audiences identifiable and accountable, creating a fake profile, also in another person's name, is very simple. Even partially or fully taking over a profile is comparatively easy, and comes with the benefit of the trust this profile has accrued over time, as many credentials are easy to acquire. Further, even seemingly innocuous issues such as the design and presentation of user interfaces can result in implications for cybersafety. The failure to understand the interfaces and ramifications of certain online actions can lead to extensive over-sharing. Even the limited information of partial profiles may be sufficient for abuse by inference on specific features only. This is especially worrisome for new or younger users of a system that might unknowingly expose information or have unwanted interactions simply due to not fully understanding the platform they are using. Unfortunately, research in cybersafety has looked at the various sub-problems in isolation, almost exclusively relying on algorithms aimed at detecting malicious accounts that act similarly, or analyzing specific lingual patterns. This ultimately yields a cat-and-mouse game, mostly played on economic grounds, whereby social network operators attempt to make it more and more costly for fraudsters to evade detection, which unfortunately tends to fail to measure and address the impact of safety threats from the point of view of regular individuals. This prompts the need for a multi-faceted, multi-disciplinary, holistic approach to advancing the state of knowledge on cybersafety in online social networks, and the ways in which it can be researched and protected. Ultimately, we want to work towards development of a cutting-edge research agenda and technical roadmap that will allow the community to develop and embed tools to detect malice within the systems themselves, and to design effective ways to enhance their safety online. This seminar was intended to bring together researchers from synergistic research communities, including experts working on information and system security on one hand, and those with expertise in human/economic/sociological factors of security on the other. More specifically, in the field of cybersafety, there exist a number of interconnected, complex issues that cannot be addressed in isolation, but have to be tackled and countered together. Moreover, it is necessary for these challenges to be studied under a multi-disciplinary light. Consequently, we identified and focused on the most relevant issues in cybersafety, and explored both current and emerging solutions. Specifically, we discussed four problems that are the most pressing both in terms of negative impact and potential danger on individuals and society, and challenging open research problems requiring a multi-disciplinary approach: Cyberbullying & Hate Speech, CyberFraud & Scams, Reputation Manipulation & Fake Activities, and Propaganda. Overall, the seminar was organized to include a number of long talks from senior experts in the field, covering the four main topics above, followed by a series of short talks from the participants about work in progress and recent results, and finally working groups to foster collaborations, brainstorming, and setting of a research agenda forward.

Cite as

Jeremy Blackburn, Emiliano De Cristofaro, Michael Sirivianos, and Thorsten Strufe. Cybersafety in Modern Online Social Networks (Dagstuhl Reports 17372). In Dagstuhl Reports, Volume 7, Issue 9, pp. 47-61, Schloss Dagstuhl – Leibniz-Zentrum für Informatik (2018)


Copy BibTex To Clipboard

@Article{blackburn_et_al:DagRep.7.9.47,
  author =	{Blackburn, Jeremy and De Cristofaro, Emiliano and Sirivianos, Michael and Strufe, Thorsten},
  title =	{{Cybersafety in Modern Online Social Networks (Dagstuhl Reports 17372)}},
  pages =	{47--61},
  journal =	{Dagstuhl Reports},
  ISSN =	{2192-5283},
  year =	{2018},
  volume =	{7},
  number =	{9},
  editor =	{Blackburn, Jeremy and De Cristofaro, Emiliano and Sirivianos, Michael and Strufe, Thorsten},
  publisher =	{Schloss Dagstuhl -- Leibniz-Zentrum f{\"u}r Informatik},
  address =	{Dagstuhl, Germany},
  URL =		{https://drops.dagstuhl.de/entities/document/10.4230/DagRep.7.9.47},
  URN =		{urn:nbn:de:0030-drops-85886},
  doi =		{10.4230/DagRep.7.9.47},
  annote =	{Keywords: Cybersafety, Online Social Networks, Security and Privacy, Legal and Ethical Issues on the Web}
}
Document
Decentralized Systems for Privacy Preservation (Dagstuhl Seminar 13062)

Authors: Sonja Buchegger, Jon Crowcroft, Balachander Krishnamurthy, and Thorsten Strufe

Published in: Dagstuhl Reports, Volume 3, Issue 2 (2013)


Abstract
This report documents the program and the outcomes of Dagstuhl Seminar 13062 "Decentralized Systems for Privacy Preservation". In recent years, a number of concerns have risen about the existence of large, organizationally centralized online services (cloud services, online social networks, repositories, etc). The concerns include risks to users' data from organizational failures and threats to user privacy. In this seminar, the organizers brought together a somewhat more diverse collection of theoreticians and practitioners from industry and academia including social scientists and economists. In keeping with the nature of the interdisciplinary attendees, the organizers also attempted a seminar organization structure intended to promote innovative, cross-discipline working. The results were mixed: some clear agenda setting outputs emerged with some less clear ones.

Cite as

Sonja Buchegger, Jon Crowcroft, Balachander Krishnamurthy, and Thorsten Strufe. Decentralized Systems for Privacy Preservation (Dagstuhl Seminar 13062). In Dagstuhl Reports, Volume 3, Issue 2, pp. 22-44, Schloss Dagstuhl – Leibniz-Zentrum für Informatik (2013)


Copy BibTex To Clipboard

@Article{buchegger_et_al:DagRep.3.2.22,
  author =	{Buchegger, Sonja and Crowcroft, Jon and Krishnamurthy, Balachander and Strufe, Thorsten},
  title =	{{Decentralized Systems for Privacy Preservation (Dagstuhl Seminar 13062)}},
  pages =	{22--44},
  journal =	{Dagstuhl Reports},
  ISSN =	{2192-5283},
  year =	{2013},
  volume =	{3},
  number =	{2},
  editor =	{Buchegger, Sonja and Crowcroft, Jon and Krishnamurthy, Balachander and Strufe, Thorsten},
  publisher =	{Schloss Dagstuhl -- Leibniz-Zentrum f{\"u}r Informatik},
  address =	{Dagstuhl, Germany},
  URL =		{https://drops.dagstuhl.de/entities/document/10.4230/DagRep.3.2.22},
  URN =		{urn:nbn:de:0030-drops-40177},
  doi =		{10.4230/DagRep.3.2.22},
  annote =	{Keywords: Privacy, Decentralized Systems, Economics, Usability, Mobility}
}
Any Issues?
X

Feedback on the Current Page

CAPTCHA

Thanks for your feedback!

Feedback submitted to Dagstuhl Publishing

Could not send message

Please try again later or send an E-mail