Provenance-based Auditing of Private Data Use

Aldeco Perez, R. and Moreau, L. (2008) Provenance-based Auditing of Private Data Use. BCS.

Download

Preview

Published Version PDF 243Kb

Abstract

Across the world, organizations are required to comply with regulatory frameworks dictating how to manage personal information. Despite these, several cases of data leaks and exposition of private data to unauthorized recipients have been publicly and widely advertised. For authorities and system administrators to check compliance to regulations, auditing of private data processing becomes crucial in IT systems. Finding the origin of some data, determining how some data is being used, checking that the processing of some data is compatible with the purpose for which the data was captured are typical functionality that an auditing capability should support, but difficult to implement in a reusable manner. Such questions are so-called provenance questions, where provenance is defined as the process that led to some data being produced. The aim of this paper is to articulate how data provenance can be used as the underpinning approach of an auditing capability in IT systems. We present a case study based on requirements of the Data Protection Act and an application that audits the processing of private data, which we apply to an example manipulating private data in a university.

Item Type:	Book
Creator/Authors:	Rocio Aldeco Perez Luc Moreau
Research Group:	Current ECS Groups > Web and Internet Science Old ECS Groups > Intelligence, Agents, Multimedia
Date:	1 August 2008
Information about this record:
Citations:	Google Scholar: 10
Downloads (2010):	65
ID Code:	16580
Last Modified:	23 Sep 2011 10:37
Deposited On:	19 Aug 2008 14:09 by Aldeco Perez, Rocio

Tools & Metadata

Download Statistics

Members of ECS may view the download statistics dashboard for this record.

Corrections

ECS staff and postgraduates may modify this record