GDPR Compliance in Cybersecurity Software: A Case Study of DPIA in Information Sharing Platform
The result's identifiers
Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216224%3A14610%2F19%3A00109959" target="_blank" >RIV/00216224:14610/19:00109959 - isvavai.cz</a>
Result on the web
<a href="https://dl.acm.org/doi/10.1145/3339252.3340516" target="_blank" >https://dl.acm.org/doi/10.1145/3339252.3340516</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.1145/3339252.3340516" target="_blank" >10.1145/3339252.3340516</a>
Alternative languages
Result language
angličtina
Original language name
GDPR Compliance in Cybersecurity Software: A Case Study of DPIA in Information Sharing Platform
Original language description
In this article, we discuss the issues of GDPR's impact on cyber-security software and operations, namely automated information sharing. We illustrate the topic on an example of an intrusion detection alert sharing platform. First, we had to investigate the risks to privacy in the alert sharing platform and ensure its compliance with the GDPR's obligations. Second, fears and uncertainties emerged in the alert sharing community regarding the GDPR and its obligations and, thus, willingness to share the information was negatively impacted. We conducted DPIA to investigate risks related to information sharing in cyber security and dismiss doubts within the community. Although our results suggest that the risks are not high, we point out that the hype around GDPR caused substantial development of the sharing platform. The DPIA helped in a deeper understanding of risks and their management and is a solid argument for information sharing in cyber security under GDPR.
Czech name
—
Czech description
—
Classification
Type
D - Article in proceedings
CEP classification
—
OECD FORD branch
10200 - Computer and information sciences
Result continuities
Project
<a href="/en/project/EF16_019%2F0000822" target="_blank" >EF16_019/0000822: CyberSecurity, CyberCrime and Critical Information Infrastructures Center of Excellence</a><br>
Continuities
P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)
Others
Publication year
2019
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů
Data specific for result type
Article name in the collection
Proceedings of the 14th International Conference on Availability, Reliability and Security (ARES 2019)
ISBN
9781450371643
ISSN
—
e-ISSN
—
Number of pages
8
Pages from-to
„36:1“-„36:8“
Publisher name
ACM
Place of publication
New York
Event location
Canterbury
Event date
Aug 26, 2019
Type of event by nationality
WRD - Celosvětová akce
UT code for WoS article
000552726400036