ACM Transactions on information and systems security