Access Control -- A Unified Conflict Resolution Algorithm -- Multi-layer Audit of Access Rights -- Refinement for Administrative Policies -- Database Security -- Authenticating kNN Query Results in Data Publishing -- Query Rewriting Algorithm Evaluation for XML Security Views -- Answering Queries Based on Imprecision and Uncertainty Trade-Offs in Numeric Databases -- Architecture for Data Collection in Database Intrusion Detection Systems -- Common Secure Index for Conjunctive Keyword-Based Retrieval over Encrypted Data -- Privacy Protection -- Generating Microdata with P-Sensitive K-Anonymity Property -- Preventing Privacy-Invasive Software Using Collaborative Reputation Systems -- Towards Improved Privacy Policy Coverage in Healthcare Using Policy Refinement -- Positon Papers -- Requirements of Secure Storage Systems for Healthcare Records -- An Intrusion Detection System for Detecting Phishing Attacks -- A Three-Dimensional Conceptual Framework for Database Privacy -- Novel RFID Authentication Schemes for Security Enhancement and System Efficiency.

Although a number of cryptography and security techniques have been around for quite some time, emerging technologies, such as ubiquitous computing and ambient intelligence that exploit increasingly interconnected networks, mobility and personalization, put new requirements on privacy and security with respect to data management. As data are accessible anytime anywhere, according to these new concepts, it becomes much easier to get unauthorized data access. As another consequence, the use of new technologies has brought some privacy concerns. It becomes simpler to collect, store, and search personal information and endanger people's privacy. Therefore, research in the area of secure data management is of growing importance, attracting the attention of both the data managementand securityresearchcommunities. The interesting problemsrange from traditional topics, such as access control and general database security, via privacy preserving data mining, to new research directions, such as search on encrypted data and privacy-enhancing technologies. This year, the call for papers attracted 29 papers both from universities and industry. For presentation at the workshop,the ProgramCommittee selected 11 full papers (37% acceptance rate) as well as 4 position papers. These papers are also collected in this volume, which we hope will serve you as a useful research and reference material.