A contextual privacy-aware access control model for network monitoring workflows: work in progress

Authors:
Eugenia I. Papagiannakopoulou;Maria N. Koukovini;Georgios V. Lioudakis;Joaquin Garcia-Alfaro;Dimitra I. Kaklamani;Iakovos S. Venieris
Affiliations:
School of Electrical and Computer Engineering, National Technical University of Athens, Athens, Greece;School of Electrical and Computer Engineering, National Technical University of Athens, Athens, Greece;School of Electrical and Computer Engineering, National Technical University of Athens, Athens, Greece;Institut TELECOM, TELECOM Bretagne, Cesson-Sévigné, Rennes, France;School of Electrical and Computer Engineering, National Technical University of Athens, Athens, Greece;School of Electrical and Computer Engineering, National Technical University of Athens, Athens, Greece
Venue:
FPS'11 Proceedings of the 4th Canada-France MITACS conference on Foundations and Practice of Security
Year:
2011

Citing 18
Cited 2

A technique for counting natted hosts

Proceedings of the 2nd ACM SIGCOMM Workshop on Internet measurment
Prefix-preserving IP address anonymization: measurement-based security evaluation and a new cryptography-based scheme

Computer Networks: The International Journal of Computer and Telecommunications Networking
The devil and packet trace anonymization

ACM SIGCOMM Computer Communication Review
Hierarchical hippocratic databases with minimal disclosure for virtual organizations

The VLDB Journal — The International Journal on Very Large Data Bases
Hippocratic databases

VLDB '02 Proceedings of the 28th international conference on Very Large Data Bases
Legal issues surrounding monitoring during network research

Proceedings of the 7th ACM SIGCOMM conference on Internet measurement
Constraint based role based access control in the SECTET-framework: A model-driven approach

Journal of Computer Security - Privacy, Security and Trust (PST) Technologies: Evolution and Challenges
Purpose based access control for privacy protection in relational database systems

The VLDB Journal — The International Journal on Very Large Data Bases
Modeling contextual security policies

International Journal of Information Security
A Workflow-Based Access Control Framework for e-Health Applications

AINAW '08 Proceedings of the 22nd International Conference on Advanced Information Networking and Applications - Workshops
PuRBAC: Purpose-Aware Role-Based Access Control

OTM '08 Proceedings of the OTM 2008 Confederated International Conferences, CoopIS, DOA, GADA, IS, and ODBASE 2008. Part II on On the Move to Meaningful Internet Systems
The role of network trace anonymization under attack

ACM SIGCOMM Computer Communication Review
Exploiting cryptography for privacy-enhanced access control: A result of the PRIME Project

Journal of Computer Security - EU-Funded ICT Research on Trust and Security
Privacy-aware role-based access control

ACM Transactions on Information and System Security (TISSEC)
SecureSOA Modelling Security Requirements for Service-Oriented Architectures

SCC '10 Proceedings of the 2010 IEEE International Conference on Services Computing
Privacy-Aware Access Control and Authorization in Passive Network Monitoring Infrastructures

CIT '10 Proceedings of the 2010 10th IEEE International Conference on Computer and Information Technology
Dynamic deployment of context-aware access control policies for constrained security devices

Journal of Systems and Software
Contextual privacy management in extended role based access control model

DPM'09/SETOP'09 Proceedings of the 4th international workshop, and Second international conference on Data Privacy Management and Autonomous Spontaneous Security

A workflow checking approach for inherent privacy awareness in network monitoring

DPM'11 Proceedings of the 6th international conference, and 4th international conference on Data Privacy Management and Autonomous Spontaneus Security
A privacy-aware access control model for distributed network monitoring

Computers and Electrical Engineering

Quantified Score

Hi-index	0.00

Visualization

Abstract

Network monitoring activities are surrounded by serious privacy implications. The inherent leakage-proneness is harshened due to the increasing complexity of the monitoring procedures and infrastructures, that may include multiple traffic observation points, distributed mitigation mechanisms and even inter-operator cooperation. In this paper, we report a work in progress policy model that aims at addressing these concernes, by verifying access requests from network monitoring workflows, with privacy features already contained since their specification phase. We survey related work, outline some of their limitations, and describe an early version of our proposal.