International Journal of Information Security and Privacy