Enforcement of Privacy Requirements - Security and Privacy Protection in Information Processing Systems Access content directly
Conference Papers Year : 2013

Enforcement of Privacy Requirements

Abstract

Enterprises collect and use private information for various purposes. Access control can limit who can obtain such data. However, the purpose of their use is not clear. In this paper we focus on the purpose of data access and demonstrate that dynamic role-based access control (RBAC) mechanism is not sufficient for enforcement of privacy requirements. To achieve this we extend RBAC with monitoring capability and describe a formal approach to determining whether access control policies actually implement privacy requirements based on the behaviour of the system. We demonstrate the advantages of our approach using various examples and describe the prototype implementation of our technique.
Fichier principal
Vignette du fichier
978-3-642-39218-4_21_Chapter.pdf (226.82 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-01463860 , version 1 (09-02-2017)

Licence

Attribution

Identifiers

Cite

Padmanabhan Krishnan, Kostyantyn Vorobyov. Enforcement of Privacy Requirements. 28th Security and Privacy Protection in Information Processing Systems (SEC), Jul 2013, Auckland, New Zealand. pp.272-285, ⟨10.1007/978-3-642-39218-4_21⟩. ⟨hal-01463860⟩
528 View
91 Download

Altmetric

Share

Gmail Facebook X LinkedIn More