March 20–22, 2019, in Stuttgart/Germany

The aim of the OAuth Security Workshop (OSW) is to improve the security of OAuth and related Internet protocols by a direct exchange of views between academic researchers, IETF OAuth Working Group members and industry. The workshop is jointly hosted by the Institute of Information Security (SEC) and Informatik-Forum Stuttgart e.V. at the University of Stuttgart.

While the standardization process of OAuth ensures extensive reviews (both security and non-security related), further analysis by security experts from academia and industry is essential to ensure high quality specifications. Contributions to this workshop can help to improve the security of the Web and the Internet.

We seek proposals for sessions (talks, interactive discussions, …) and tutorials related to OAuth, OpenID Connect, and other technologies using OAuth under the hood. Contributions regarding technologies that are used in OAuth, such as JOSE, or impact the security of OAuth, such as web technology, are also welcome.

Areas of interest where OAuth can be used as enabler of innovative scenarios include:

• IoT, SmartCities and Industry 4.0.
• Mobile and Strong authentication.
• Federated Identity.
• Privacy-enhancing technologies.

Each session in the OSW can be a talk, an interactive discussion, or a tutorial. By default, non-tutorial sessions will be provided a 25 minute time slot. A longer time slot can be assigned if needed. Please state your requirements in the remark section of the submission form. Tutorials can be up to three hours.

While the target audience of most sessions are researchers, industry representatives, and the OAuth working group, the audience of tutorials are mainly industry representatives.

• Session / Tutorial submission deadline (extended): February 21, 2019 (Anywhere on Earth, AoE, UTC-12).
• Author notification: February 25, 2019.
• Rooms blocked in campus.guest hotel: until February 27, 2019.
• (Early bird) Registration deadline: March 5, 2019 (CET, UTC+1).
• Workshop: March 20­–22, 2019.

Schedule

• Wednesday Mar 20
  • 09:00-12:30 Tutorials
  • 13:30-16:30 Talks and Discussions
  • 18:00 Conference Dinner
• Thursday Mar 21
  • 09:00-10:00 Talks
  • 10:00-17:30 Unconference
  • 19:00 Dinner (not included in conference fees)
• Friday Mar 22
  • 09:00-11:00 Talks and Discussions
  • 11:00-12:30 Invited Talk (attendance does not require registration)
  • 13:30-15:00 Unconference

You can find all details in the full program.

If you are interested in supporting the OSW 2019, please follow this link to our sponsoring opportunities.

We solicit sessions that highlight challenges and lessons-learned from OAuth-based work. As all presentations will be shared online without a formal proceedings, we accept original contributions as well as already published or preliminary works.

>> Please follow this link to submit your proposal. << (closed)

• Hannes Tschofenig (ARM Limited, IETF OAuth Working Group Co-Chair)
• Torsten Lodderstedt (yes.com)
• Ralf Küsters (University of Stuttgart, SEC)

The registration fee is 300 Euro if booked no later than March 5, 2019. The fee for late registrations is 330 Euro.

The registration fee includes:

• Full access to the conference on all three days.
• Lunch and coffee breaks
• Conference dinner on the Stuttgart TV Tower on Wednesday

Please note that the maximum number of participants has been reached. We therefore cannot accept any new registrations.

The workshop will be held at

Stuttgart University
Computer Science Building
Universitätsstraße 38
70569 Stuttgart
Germany

We recommend staying at the university's guest house campus.guest, which is conveniently located next to the venue. This hotel is fully booked during the workshop, but we've blocked some rooms for attendees of the workshop. Please use the keyword OSW 2019 when making your reservation. With this keyword you will also be granted the special rate of EUR 79,00 for a single room per night (including breakfast and sales tax).

For reservations, please contact the campus.guest directly. Please make your reservation before February 27th.

For further questions please contact the organizing committee at guido.schmitz@sec.uni-stuttgart.de.

• Guido Schmitz
• Daniel Fett
• Dagmar Gahr
• Michael Matthiesen

• 1st OAuth Security Workshop, July 14 and 15, 2016, Trier/Germany
• 2nd OAuth Security Workshop, July 13 and 14, 2017, Zurich/Switzerland
• 3rd OAuth Security Workshop, March 14–16, 2018, Trento/Italy

Picture TV Tower: pjt56 / Wikimedia Commons / CC-BY-3.0 & GDFL