Istituto di Informatica e Telematica     
Matteucci I., Petrocchi M., Casassa-Mont M., Sbodio M. L. Towards Safer Information Sharing in the Cloud. In: International Journal of Information Security, vol. 14 (4) pp. 319 - 334. Springer, 2015.
Web interactions usually require the exchange of personal and confidential information for a variety of purposes, including enabling business transactions and the provisioning of services. A key issue affecting these interactions is the lack of trust and control on how data is going to be used and processed by the entities that receive it. In the traditional world, this problem is addressed by using contractual agreements, those are signed by the involved parties, and law enforcement. This could be done electronically as well but, in ad- dition to the trust issue, there is currently a major gap between the definition of legal contracts regulat- ing the sharing of data, and the software infrastructure required to support and enforce them. How to enable organisations to provide more automation in this pro- cess? How to ensure that legal contracts can be actually enforced by the underlying IT infrastructure? How to enable end-users to express their preferences and con- straints within these contracts? This article describes our R&D work to make progress towards addressing this gap via the usage of electronic Data Sharing Agree- ments (e-DSA). The aim is to share our vision, discuss the involved challenges and stimulate further research and development in this space. We specifically focus on a cloud scenario because it provides a rich set of use cases involving interactions and information shar- ing among multiple stakeholders, including users and service providers.  
DOI: 10.1007/s10207-014-0258-5
Subject Policy Enforcement
Policy Deployment
Policy Authoring
Policy Analysis
Data Sharing Agreements
Data-centric Information Sharing
Cloud Security

Icona documento 1) Download Document PDF

Icona documento Open access Icona documento Restricted Icona documento Private


Per ulteriori informazioni, contattare: Librarian http://puma.isti.cnr.it

Valid HTML 4.0 Transitional