资源描述:
《contextual integrity and its formalization:语境完整性及其形式化》由会员上传分享,免费在线阅读,更多相关内容在教育资源-天天文库。
1、ContextualIntegrityanditsFormalizationAnupamDattaCMUFall2007-08WhatdoIdo?ResearchFoundations(ModelingandAnalysis)ofCryptographicprotocolsPrivacySecuresystemsUsingmethodsfromprogramminglanguagesandcryptographyConferences:IEEECSF,IEEES&P,ACMCCS,TCC,…Teaching1
2、8739:FoundationsofSecurityandPrivacy(Fall2007)PrivacyResearchSpaceWhatisPrivacy?[Philosophy,Law,PublicPolicy]FormalModel,PolicyLanguage,Compliance-checkAlgorithms[ProgrammingLanguages,Logic]Implementation-levelCompliance[SoftwareEngg,FormalMethods]DataPriva
3、cy[Databases,Cryptography]TODAYGoalOrganizationalprivacypolicyspecificationandenforcementExamplesoforganizationsHospitals,financialinstitutions,otherenterpriseshandlingsensitiveinformationExamplesofprivacyregulationsHIPAA,GLBA,COPPA,SB1386ContextualIntegrit
4、y[N2004]PhilosophicalframeworkforprivacyCentralconcept:ContextExamples:Healthcare,banking,educationWhatisacontext?SetofinteractingagentsinrolesRolesinhealthcare:doctor,patient,…NormsoftransmissionDoctorsshouldsharepatienthealthinformationaspertheHIPAArulesP
5、urposeImprovehealthOutlineMotivatingExampleFrameworkModelLogicofPrivacyandUtilityWorkflowsandResponsibilityAlgorithmicResultsWorkflowDesignassumingagentsresponsibleAuditinglogswhenagentsirresponsibleConclusionsNurseSecretaryMyHealth@VanderbiltWorkflowPatien
6、tDoctorHealthAnswerHealthAnswerHealthQuestionAppointmentRequestHealthQuestionHealthQuestionNowthatIhavecancer,ShouldIeatmorevegetables?Yes!exceptbroccoliHumans+ElectronicsystemPossibleEnhancementSecretaryhandleseverymessagePrivacyEfficiencyRobustnessMessage
7、sopaquetoMyHealthUnabletohelpsecretaryroutemessagesHindersaddingfeatureslikedelegationSuggestion:addshorttagstomessagesNurseSecretaryMyHealthwithMessageTagsPatientDoctorHealthAnswerHealthAnswerHealthQuestionAppointmentRequestHealthQuestionNowthatIhavecancer
8、,ShouldIeatmorevegetables?HealthQuestionYes!exceptbroccoliHealthAnswerNurseSecretaryRobustnesstoMistakenTagsPatientDoctorHealthAnswerHealthAnswerHealthQuestionAppointmentRequestHealthQuestionHealthQues