Web Page for Marco Casassa Mont

I am a senior research scientist at the Hewlett Packard Laboratories in Bristol, UK - Systems Security Lab (SSL). My  R&D interests are in the following areas:  

• IT (Security) Risk Management
• Security Analytics
• Identity Analytics
• Identity Management Technologies and Solutions
• Policy Management
• Trust, Security and Privacy Technologies  for People, Enterprises and Internet-based B2B environments
• Privacy-aware Information Lifecycle Management  
• e-Commerce Systems and Solutions
• Web Services and Related Technologies
• Internet and Web technologies
• Adaptive Systems
• Automation
• Enterprise Web 2.0/Enterprise 2.0 and Identity 2.0

This web page contains public information about my R&D work, inventions, publications and technical reports and professional activity. Additional information is available about my biography and education.

I  currently run a blog on "Research on Identity Management" to share ideas and opinions on future R&D identity management areas. I am also co-chairing the W3C Policy Languages Interest Group (PLING).

Article published on IEEE Security & Privacy Magazine [February 2008]: Siani Pearson, Marco Casassa Mont, Manny Novoa - Securing Information Transfer in Distributed Computing Environments, pp. 34-42, January/February 2008

Marco Casassa Mont, Robert Thyne -  Privacy Policy Enforcement in Enterprises with Identity Management Solutions, Volume 16, Number 2/2008, 2008.

Phil Hunt (Oracle), Marco Casassa Mont -  Identity Governance Framework: Liberty Alliance's Initiative Addressing Privacy and SOX, 2008.

Adrian Baldwin, Marco Casassa Mont, Yolanta Beres, Simon Shiu -  On Identity Assurance in the Presence of Federated Identity Management Systems  (the entire DIM 2007 program and related presentations  are available here).

New W3C Policy Languages Interest Group (PLING) [October 2007]: A new Interest Group - PLING - has just been announced by W3C. It is going to be chaired by Marco Casassa Mont (HP Labs) and Renato Iannella (NICTA).

Marco Casassa Mont, Boris Balacheff -  On Device-based Identity Management in Enterprises  (my .ppt presentation is available here).

I have been invited and I have given a  presentation at a TrustBus Panel, focusing on the topic:  "Managing Digital Identities: Challenges and Opportunities". My presentation, along with a list of top challenges and opportunities, can be found here. I also chaired a session on "Policy Management".

Identity Governance Framework (IGF) [July 2007]: a new document is available in the Liberty Alliance site, about Identity Governance Framework, titled "Id Governance - Privacy and Access Policies Market Requirements". This document can be downloaded here.

On behalf of HP/HP Labs I contributed to the definition of requirements, use cases and terminology.

I have also been involved in a panel on "Business-driven IT Management" and impact research on policies can have in this space. Here is my presentation (.ppt) highlighting my vision. 

Paper Presented at PST 2006 - 4th International Conference on Privacy, Security and Trust  [30 October - 1 November 2006]: Marco Casassa Mont, Robert Thyne - Privacy Policy Enforcement in Enterprises with Identity Management Solutions  - Conference Presentation: slides (MS .ppt)

I served as a member of the Program Committee. I also chaired a session at PST 2006 on "Privacy and Security Issues".

I also served as a member of the Program Committee.

The Workshop Agenda and the complete list of submitted Position Papers can be found here 

Marco Casassa Mont - Towards Scalable Management of Privacy Obligations in Enterprises - Conference Presentation: slides (MS .ppt)

Marco Casassa Mont, Siani Pearson, Robert Thyne - A Systematic Approach to Privacy Enforcement and Policy Compliance Checking in Enterprises - Conference Presentation: slides (MS .ppt)

I also served as a member of the Program Committee and chaired a session on "Security requirements and Development".

I have also served as a member of  the Program Committee

• Presentation at the Press Event: Marco Casassa Mont - HP Labs Privacy Management: Vision, Research and Work (presentation .ppt)
• Presentation at a Technical Session: Archie Reed, Marco Casassa Mont - Privacy Management with HP OpenView Identity Management (presentation .ppt)

Article Published by Information Security Bulleting (ISB) Magazine [September 2005]:

Marco Casassa Mont, Kwok-Nga (Annie) Chan, Pete Bramhall - Management and Enforcement of Privacy Obligations in Enterprises  - Information Security Bulletin

Marco Casassa Mont, Robert Thyne, Pete Bramhall - Privacy Enforcement for IT Governance: Doing it for Real - Conference Presentation: slides (MS .ppt)

Marco Casassa Mont, Siani Pearson - An Adaptive Privacy Management System for Data Repositories - Conference Presentation: slides (MS .ppt)

I also served as a member of the Program Committee.

• Stephen Crane, Marco Casassa Mont, Siani Pearson -  On Helping Individuals to Manage Privacy and Trust - HPL-2005-53
• Marco Casassa Mont, Stephen Crane, Siani Pearson - Handling Privacy Obligations and Constraints to Underpin Trust and Assurance - HPL-2005-54
• Siani Pearson,  Marco Casassa Mont, Stephen Crane - Analysis of Trust Properties and Related Impact of Trusted Platforms - HPL-2005-55