Other formats:
BibTeX
LaTeX
RIS
@inproceedings{1540676,
author = {Horák, Martin and Stupka, Václav and Husák, Martin},
address = {New York},
booktitle = {Proceedings of the 14th International Conference on Availability, Reliability and Security (ARES 2019)},
doi = {http://dx.doi.org/10.1145/3339252.3340516},
keywords = {CSIRT;GDPR;Information sharing;Intrusion detection;Personal data;Privacy},
howpublished = {elektronická verze "online"},
language = {eng},
location = {New York},
isbn = {978-1-4503-7164-3},
pages = {"36:1"-"36:8"},
publisher = {ACM},
title = {GDPR Compliance in Cybersecurity Software: A Case Study of DPIA in Information Sharing Platform},
url = {https://dl.acm.org/doi/10.1145/3339252.3340516},
year = {2019}
}
TY - JOUR
ID - 1540676
AU - Horák, Martin - Stupka, Václav - Husák, Martin
PY - 2019
TI - GDPR Compliance in Cybersecurity Software: A Case Study of DPIA in Information Sharing Platform
PB - ACM
CY - New York
SN - 9781450371643
KW - CSIRT;GDPR;Information sharing;Intrusion detection;Personal data;Privacy
UR - https://dl.acm.org/doi/10.1145/3339252.3340516
L2 - https://dl.acm.org/doi/10.1145/3339252.3340516
N2 - In this article, we discuss the issues of GDPR's impact on cyber-security software and operations, namely automated information sharing. We illustrate the topic on an example of an intrusion detection alert sharing platform. First, we had to investigate the risks to privacy in the alert sharing platform and ensure its compliance with the GDPR's obligations. Second, fears and uncertainties emerged in the alert sharing community regarding the GDPR and its obligations and, thus, willingness to share the information was negatively impacted. We conducted DPIA to investigate risks related to information sharing in cyber security and dismiss doubts within the community. Although our results suggest that the risks are not high, we point out that the hype around GDPR caused substantial development of the sharing platform. The DPIA helped in a deeper understanding of risks and their management and is a solid argument for information sharing in cyber security under GDPR.
ER -
HORÁK, Martin, Václav STUPKA and Martin HUSÁK. GDPR Compliance in Cybersecurity Software: A Case Study of DPIA in Information Sharing Platform. Online. In \textit{Proceedings of the 14th International Conference on Availability, Reliability and Security (ARES 2019)}. New York: ACM, 2019, p.~''36:1''-''36:8'', 8 pp. ISBN~978-1-4503-7164-3. Available from: https://dx.doi.org/10.1145/3339252.3340516.
|
