Quantitative Information Flow, Relations and Polymorphic Types

This paper uses Shannon's information theory to give a quantitative definition of information flow in systems that transform inputs to outputs. For deterministic systems, the definition is shown to specialise to a simpler form when the information source and the known inputs jointly determine the inputs. For this special case, the definition is related to the classical security condition of non-interference and an equivalence is established between non-interference and independence of random variables. Quantitative information flow for deterministic systems is then presented in relational form. With this presentation, it is shown how relational parametricity can be used to derive upper and lower bounds on information flows through families of functions defined in the second order lambda calculus.

Trends and guidelines in online privacy policy

Online privacy policies (OPP) are important mechanisms for informing online consumers about the level of information privacy protection afforded when visiting web sites. To date, societal mechanisms and technologies have been the focus of attempts to improve the quality and effectiveness of OPPs. We present findings from a longitudinal, empirical study of online privacy policies. Our research found that although online privacy policies have improved in quality and effectiveness since 2000, they still fall well short of the level of privacy assurance desired by consumers. This study analyses trends in OPPs over the two years of the study, identifying areas of deficiency and improvements, and offering a solution in the form of a detailed set of guidelines for organisational online privacy policy. Our study adds to existing theory in this area and, more immediately, will assist businesses concerned about the effect of privacy issues on consumer web usage.

Developing and teaching information systems for construction management students: a perspective in Deakin University

A new unit named Information Systems in Construction was developed and taught for the first time in the School of Architecture and Building at Deakin University in Semester 1 2003 for first-year construction management students. This paper reports on key issues that arose during the unit development process and the implementation of teaching activities. Special consideration is given to the learners (first year students), the teaching environment (online teaching and learning), the unit background (information technology and information system), and the discipline (international construction). Several suggestions are outlined for improving the unit development and delivery in the next round.