An Integrated Knowledge Graph to Automate GDPR and PCI DSS Compliance
| Autor: | Elluri, Lavanya, Nagar, Ankur, Joshi, Karuna Pande |
|---|---|
| Rok vydání: | 2018 |
| Předmět: |
Organizations
Ontology 0202 electrical engineering electronic engineering information engineering ComputerApplications_COMPUTERSINOTHERSYSTEMS 020206 networking & telecommunications 020201 artificial intelligence & image processing UMBC Ebiquity Research Group 02 engineering and technology Data Protection ComputingMilieux_MISCELLANEOUS General Data Protection Regulation |
| Zdroj: | 2018 IEEE International Conference on Big Data (Big Data). |
| DOI: | 10.1109/bigdata.2018.8622236 |
| Popis: | Proceedings of the 2018 IEEE International Conference on Big Data, Seattle Big data analytics related to consumer behavior, market analysis, opinions, and recommendation often deal with end user's derived and inferred data, along with the observed data. To ensure consumer data protection, rules defined by the European Union’s General Data Protection Regulation (EU GDPR) must be adhered to by every organization using Personally Identifiable Information (PII) data for Big Data analysis. Similarly, Payment Card Industry Data Security Standard (PCI DSS) has policy guidelines specifically for organizations handling consumer’s payment card data. Both data regulation policies are currently available only in textual format and require significant manual effort to ensure their compliance. We have developed an integrated, semantically rich Knowledge Graph (or Ontology) to represent the rules mandated by both PCI DSS and EU GDPR. In the Ontology, we have also identified the obligations defined in these regulations and related them with corresponding Cloud Security Alliance (CSA) controls. We have validated this Knowledge Graph against the data policies of major vendors that deal with Big Data. This Knowledge Graph that is available in the public domain can be used by Big Data practitioners to automate data protection compliance in their organization. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|