A privacy-aware access control model for distributed network monitoring

  • Authors:

  • Eugenia I. Papagiannakopoulou;Maria N. Koukovini;Georgios V. Lioudakis;Joaquin Garcia-Alfaro;Dimitra I. Kaklamani;Iakovos S. Venieris;Frédéric Cuppens;Nora Cuppens-Boulahia

  • Affiliations:

  • School of Electrical and Computer Engineering, National Technical University of Athens, Athens, Greece;School of Electrical and Computer Engineering, National Technical University of Athens, Athens, Greece;School of Electrical and Computer Engineering, National Technical University of Athens, Athens, Greece;Institut TELECOM, TELECOM Bretagne, CS 17607, 35576 Cesson-Sévigné, Rennes, France;School of Electrical and Computer Engineering, National Technical University of Athens, Athens, Greece;School of Electrical and Computer Engineering, National Technical University of Athens, Athens, Greece;Institut TELECOM, TELECOM Bretagne, CS 17607, 35576 Cesson-Sévigné, Rennes, France;Institut TELECOM, TELECOM Bretagne, CS 17607, 35576 Cesson-Sévigné, Rennes, France

  • Venue:
  • Computers and Electrical Engineering
  • Year:
  • 2013

Quantified Score

Hi-index 0.00

Visualization

Abstract

In this paper, we introduce a new access control model that aims at addressing the privacy implications surrounding network monitoring. In fact, despite its importance, network monitoring is natively leakage-prone and, moreover, this is exacerbated due to the complexity of the highly dynamic monitoring procedures and infrastructures, that may include multiple traffic observation points, distributed mitigation mechanisms and even inter-operator cooperation. Conceived on the basis of data protection legislation, the proposed approach is grounded on a rich in expressiveness information model, that captures all the underlying monitoring concepts along with their associations. The model enables the specification of contextual authorisation policies and expressive separation and binding of duty constraints. Finally, two key innovations of our work consist in the ability to define access control rules at any level of abstraction and in enabling a verification procedure, which results in inherently privacy-aware workflows, thus fostering the realisation of the Privacy by Design vision.