Full Professor
Department of Computer Science and Communication
Via Mazzini 5, 21100 Varese
Tel: +39 0332 21 8915
Fax: +39 0332 21 8909
E-mail: elena.ferrari@uninsubria.it

Elena Ferrari is a full professor of Computer Science at the University of Insubria, Varese (Italy). From 1998 until January 2001, she was an assistant professor at the Department of Computer Science of the University of Milano (Italy). She received the MS degree in Computer Science from the University of Milano (Italy) in 1992. In 1998, she received a Ph.D. in Computer Science from the same university. During summer 1996 she was a visiting researcher at the Department of Computer Science of George Mason University, Fairfax (Virginia). During summers 1997 and 1998 she was a visiting researcher at Rutgers University, Newark (New Jersey). Her research activities are related to various aspects of data management systems, including web security, access control and privacy, multimedia databases, and temporal databases. On these topics she has published more than a hundred scientific publications in international journals and conference proceedings. She gave several invited lectures and tutorials in Italian and foreign universities as well as on international conferences and workshops.

Dr. Ferrari has served as Program Chair of the 4th ACM Symposium on Access Control Models and Technologies (SACMAT'04), Software Demonstration Chair of the 9th International Conference on Extending Database Technology (EDBT'04), Co-Chair of the first COMPSAC'02 Workshop on Web Security and Semantic Web, the first ECOOP Workshop on XML and Object Technology (XOT 2000), and the first ECOOP Workshop on Object-oriented Databases.

She has also served as Program Committee member of several international conferences and workshops. Prof. Ferrari is in the Editorial Board of the VLDB Journal and the International Journal of Information Technology (IJIT). She is a member of the ACM and senior member of IEEE.

Current research includes:

• Access control systems, secure publishing techniques and secure broadcast for XML data
• Security and privacy for web services
• Next generation access control models and systems
• Trust negotiation languages and privacy
• Filtering systems for web pages and sites
• Advanced query techniques for multimedia databases

Current and recent projects:

• SPADA-WEB, Management and Modeling of Geographical Data over the Web, PRIN project funded by the Italian Ministry of University, Education and Research. 2003-2005
• DHX , Digital Ecological and Artistic Heritage Exchange, EU Project (IST-2001-33476), 2002-2004
• EUFORBIA, Experiments about the Filtering of Internet Documents according to an Unbiased and Semantic-rich Approach, EU Project (IAP-26505), 2001-2003
• Models and Mechanisms to Specify and Enforce Access Control Policies on XML Document Sources, 2000-2001 (Microsoft Research)
• DAM Project, joint project between La Scala Theatre and University of Milano, 2000-2001
  

2005/2006 and 2004/2005:

• Database Systems
• Advanced Database Systems

2003/2004:

• Database Systems
• Information Systems Security
  

B. Carminati, E. Ferrari, P. C. K. Hung. Exploring Privacy Issues in Web Services Discovery Agencies. IEEE Security & Privacy Magazine, October 2005.

B. Carminati, E. Ferrari. AC-XML Documents: Improving the Performance of a Web Access Control Module. In Proc. of the 10th ACM Symposium on Access Control Models and Techologies (SACMAT'05) , Stockolm, Sweden, June 2005.

B. Carminati, E. Ferrari. Trusted Privacy Manager: A System for Enforcing Privacy on Outsourced Data. In Proc. of the ICDE'05 International Workshop on Privacy Data Management , Tokyo, Japan, April 2005.

B. Carminati, E. Ferrari, P. Hung. Web Services Composition: A Security Perspective. In Proc. of the ICDE'05 International Workshop on Challanges in Web Information Retrieval and Integration , Tokyo, Japan, April 2005.

E. Bertino, B. Carminati, E. Ferrari, B. Thuraisingham, A. Gupta. Selective and Authentic Third-Party Distribution of XML Documents. IEEE Transactions on Knowledge and Data Engineering, 16(10):1263--1278, 2004.

E. Bertino, E. Ferrari, A. C. Squicciarini. Trust-X: a Peer to Peer Framework for Trust Establishment. IEEE Transactions on Knowledge and Data Engineering, 16(7): 827-842, 2004.

E. Ferrari. Web Data Protection: Principles and Research Issues, In Proc. of the 1st EDBT Workshop on Clustering on the Web, Heraklion, Crete, Greece, March 2004.

E. Ferrari, B. M. Thuraisingham. Security and Privacy for Web
Databases and Services. In Proc. of the 9th Int'l Conf. on Extending Database Technology (EDBT'04), LNCS 2992, Heraklion, Crete, Greece, March 2004. Springer-Verlag.

P. Hung, E. Ferrari, B. Carminati. Towards Standardized Web Services Privacy Technologies. In Proc. of the IEEE International Conference on Web Services (ICWS'04), San Diego, CA, USA, July 2004. IEEE Computer Society Press.

E. Bertino, B. Catania, E. Ferrari, P. Perlasca. A Logical Framework for Reasoning about Access Control Models. ACM Transactions on Information and System Security, 6(1): 71--127, 2003.

E. Bertino, J. Fan, E. Ferrari, M. Hacid, A. Elmagarmid, Xingquan Zhu. A Hierarchical Access Control Model for Video Database Systems. ACM Transactions on Information Systems, 21(2): 155-191, 2003.

B. Catania and E. Ferrari. Web Retrieval of XML Documents: Practice and Challenges. In A. Dahanayake and W. Gerhardt editors, Web-enabled Systems Integration: Practice and Challenges, Idea Publishing, 2003.

S. Castano and E. Ferrari. Protecting Datasources over the Web: Policies, Models, and Mechanisms. In D. Taniar and W. Rahayu editors, Web-powered Databases, Idea Publishing, 2003.

B. Carminati and E. Ferrari. Management of Access Control Policies for XML Document Sources. International Journal of Information Security, 1(4):236--260, 2003, Springer.

N. Adam, V. Atluri, E. Bertino, E. Ferrari. A Content-based Authorization Model for Digital Libraries. IEEE Transactions on Knowledge and Data Engineering, 14(2):296--315, 2002.

E. Bertino and E. Ferrari. Secure and Selective Dissemination of XML Documents. ACM Transactions on Information and System Security, 5(3), 2002.

E. Bertino, P. A. Bonatti, E. Ferrari. TRBAC: A Temporal Role-based Access Control Model, ACM Transactions on Information and System Security, 4(3):191-233, 2001.

E. Bertino, B. Catania, E. Ferrari. A Nested Transaction Model for Multilevel Secure Database Management Systems, ACM Transactions on Information and System Security, 4(4):321-370, 2001.

E. Bertino, E. Ferrari, M. Stolf. MPGS: An Interactive Tool for the Specification and Generation of Multimedia Presentations. IEEE Transactions on Knowledge and Data Engineering, 12(1):102-125, 2000.

E. Bertino and E. Ferrari. Secure Object Deletion and Garbage Collection in Multilevel Object Bases. Journal of Computer Security, 7(4):275--285, 1999.

E. Bertino, E. Ferrari, V. Atluri. The Specification and Enforcement of Authorization Constraints in Workflow Managenent Systems. ACM Transactions on Information and System Security, 2(1):65--104, 1999.

E. Ferrari, G. Haus. The Musical Archive Information System at Teatro alla Scala. In Proc. of the IEEE International Conference on Multimedia Computing and Systems (ICMCS'99), Florence, Italy, June 1999. IEEE Computer Society Press.

E. Bertino, C. Bettini, E. Ferrari, P. Samarati. An Access Control Model Supporting Periodicity Constraints and Temporal Reasoning. ACM Transactions on Database Systems, 23(3):231--285, 1998.

E. Bertino, S. De Capitani di Vimercati, E. Ferrari, P. Samarati. Exception-based Information Flow Control in Object-oriented Systems. ACM Transactions on Information and System Security, 1(1):26-65, 1998.

E. Bertino and E. Ferrari. Temporal Synchronization Models for Multimedia Data. IEEE Transactions on Knowledge and Data Engineering, 10(4):612--631, 1998.

E. Bertino, E. Ferrari, G. Guerrini. Navigational Accesses in a Temporal Object Model. IEEE Transactions on Knowledge and Data Engineering, 10(4):656--665, 1998.