§16§The new emergingtechnologiesput new requirementsonsecurityanddata m- agement.Asdataareaccessibleanytimeanywhere,itbecomesmucheasiertoget unauthorized data access. Furthermore, the use of new technologies has brought some privacy concerns. It becomes simpler to collect, store, and search personal information thereby endangering people's privacy. Therefore, research in secure data management is gaining importance, attracting the attention of both the data management and the security research communities. The interesting pr- lems range from traditional topics, such as, access control and general database security, via privacy protection to new research directions, such as cryptogra- ically enforced access control and encrypted databases. This year, the call for papers attracted 24 papers both from universities and industry. For presentation at the workshop,the ProgramCommittee selected 10 full papers (41% acceptance rate). These papers are collected in this volume, which we hope will §16§ serve as a useful research and reference material. The papers in the proceeding are grouped into three sections. The ?rst s- tion focuses on database security which remains an important research area. The papers in this section address several interesting topics including query optimization in encrypted databases, database provenance, database intrusion detection, and con?dence policy compliant query evaluation. The second section changes the focal point to the topic of access control. The papers in this s- tion deal with provenance access control, access control model for collaborative editors, self-modifying access control policies, and enforcing access control on XML documents. The third section focuses on privacy protection addressing the privacy issues around location-based servicesand anonymity/diversity for the micro-data release problem. §04§Database Security.- Query Optimization in Encrypted Relational Databases by Vertical Schema Partitioning.- Do You Know Where Your Data's Been? - Tamper-Evident Database Provenance.- Database Intrusion Detection Using Role Profiling with Role Hierarchy.- Query Processing Techniques for Compliance with Data Confidence Policies.- Access Control.- An Access Control Language for a General Provenance Model.- A Flexible Access Control Model for Distributed Collaborative Editors.- On the Construction and Verification of Self-modifying Access Control Policies.- Controlling Access to XML Documents over XML Native and Relational Databases.- Privacy Protection.- Longitude: Centralized Privacy-Preserving Computation of Users' Proximity.- L-Cover: Preserving Diversity by Anonymity.
