Invited Keynote Paper -- How Anonymous Is k-Anonymous? Look at Your Quasi-ID -- Database Security -- Simulatable Binding: Beyond Simulatable Auditing -- ARUBA: A Risk-Utility-Based Algorithm for Data Disclosure -- Responding to Anomalous Database Requests -- Auditing Inference Based Disclosures in Dynamic Databases -- Trust Management -- An Approach to Evaluate Data Trustworthiness Based on Data Provenance -- Exploiting Preferences for Minimal Credential Disclosure in Policy-Driven Trust Negotiations -- A Trusted Approach to E-Commerce -- Privacy Protection -- A Game-Theoretical Approach to Data-Privacy Protection from Context-Based Inference Attacks: A Location-Privacy Protection Case Study -- Query Rewriting for Access Control on Semantic Web -- Security and Privacy in Healthcare -- On the Facilitation of Fine-Grained Access to Distributed Healthcare Data -- A Type-and-Identity-Based Proxy Re-encryption Scheme and Its Application in Healthcare -- Position Papers -- A Methodology for Bridging between RBAC and an Arbitrary Application Program -- An Anonymity Model Achievable Via Microaggregation -- Engineering Privacy Requirements in Business Intelligence Applications.