A roadmap towards improving managed security services from a privacy perspective
| Autor: | Nils Ulltveit-Moe |
|---|---|
| Rok vydání: | 2014 |
| Předmět: |
VDP::Mathematics and natural science: 400::Information and communication science: 420::Security and vulnerability: 424
Information privacy managed security services Privacy by Design business.industry Computer science Digital forensics Big data ethical awareness security Intrusion detection system Library and Information Sciences privacy Computer security computer.software_genre Computer Science Applications Outsourcing Information sensitivity intrusion detection and prevention systems outsourcing business computer Register of data controllers |
| Zdroj: | Ethics and Information Technology |
| ISSN: | 1572-8439 1388-1957 |
| DOI: | 10.1007/s10676-014-9348-3 |
| Popis: | Published version of an article in the journal: Ethics and Information Technology. Also available from the publisher at: http://dx.doi.org/10.1007/s10676-014-9348-3 This paper proposes a roadmap for how privacy leakages from outsourced managed security services using intrusion detection systems can be controlled. The paper first analyses the risk of leaking private or confidential information from signature-based intrusion detection systems. It then discusses how the situation can be improved by developing adequate privacy enforcement methods and privacy leakage metrics in order to control and reduce the leakage of private and confidential information over time. Such metrics should allow for quantifying how much information that is leaking, where these information leakages are, as well as showing what these leakages mean. This includes adding enforcement mechanisms ensuring that operation on sensitive information is transparent and auditable. The data controller or external quality assurance organisations can then verify or certify that the security operation operates in a privacy friendly manner. The roadmap furthermore outlines how privacy-enhanced intrusion detection systems should be implemented by initially providing privacy-enhanced alarm handling and then gradually extending support for privacy enhancing operation to other areas like digital forensics, exchange of threat information and big data analytics based attack detection. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|
Full text from SpringerLink