A Privacy-Aware Access Control Model for Distributed Network Monitoring

Eugenia I. Papagiannakopoulou (1) , Maria N. Koukovini (1) , Georgios V. Lioudakis (1) , Joaquin Garcia Alfaro (2, 3) , Dimitra I. Kaklamani (1) , Iakovos S. Venieris (1) , Frédéric Cuppens (4) , Nora Cuppens-Boulahia (2, 3)

1 ICCS - School of Electrical and Computer Engineering, National Technical University of Athens
2 LUSSI - Département Logique des Usages, Sciences sociales et Sciences de l'Information
3 Lab-STICC - Laboratoire des sciences et techniques de l'information, de la communication et de la connaissance
4 Lab-STICC_TB_CID_SFIIS

In this paper, we introduce a new access control model that aims at addressing the privacy implications surrounding network monitoring. In fact, despite its importance, network monitoring is natively leakage-prone and, moreover, this is exacerbated due to the complexity of the highly dynamic monitoring procedures and infrastructures, that may include multiple traffic observation points, distributed mitigation mechanisms and even inter-operator cooperation. Conceived on the basis of data protection legislation, the proposed approach is grounded on a rich in expressiveness information model, that captures all the underlying monitoring concepts along with their associations. The model enables the specification of contextual authorisation policies and expressive separation and binding of duty constraints. Finally, two key innovations of our work consist in the ability to define access control rules at any level of abstraction and in enabling a verification procedure, which results in inherently privacy-aware workflows, thus fostering the realisation of the Privacy by Design vision.

Keywords: Access Control; Privacy model; Privacy by design

Domains: Cryptography and Security [cs.CR]

Eugenia I. Papagiannakopoulou, Maria N. Koukovini, Georgios V. Lioudakis, Joaquin Garcia Alfaro, Dimitra I. Kaklamani, et al.. A Privacy-Aware Access Control Model for Distributed Network Monitoring. Computers and Electrical Engineering, 2013, 39 (7), pp.2263-2281. ⟨10.1016/j.compeleceng.2012.08.003⟩. ⟨hal-00949776⟩