tailieunhanh - Computer Security: Chapter 10 - P2D2 - A Mechanism for Privacy-Preserving Data Dissemination

Computer Security: Chapter 10 - P2D2 - A Mechanism for Privacy-Preserving Data Dissemination Introduction (Interactions and Trust, Building Trust, Recognition of Need for Privacy Guarantees,.), Problem and Challenges, Proposed Approach, Prototype Implementation. | 10. P2D2: A Mechanism for Privacy-Preserving Data Dissemination Bharat Bhargava Department of Computer Sciences Purdue University With contributions from Prof. Leszek Lilien and Dr. Yuhui Zhong Supported in part by NSF grants IIS-0209059 and IIS-0242840. P2D2 - Mechanism for Privacy-Preserving Data Dissemination Outline Introduction ) Interactions and Trust ) Building Trust ) Trading Weaker Partner’s Privacy Loss for Stronger Partner’s Trust Gain ) Privacy-Trust Tradeoff and Dissemination of Private Data ) Recognition of Need for Privacy Guarantees Problem and Challenges ) The Problem ) Trust Model ) Challenges 3) Proposed Approach: Privacy-Preserving Data Dissemination (P2D2) Mechanism ) Self-descriptive Bundles ) Apoptosis of Bundles ) Context-sensitive Evaporation of Bundles 4) Prototype Implementation 5) Conclusions 6) Future Work 12/21/05 1) Introduction ) Interactions and Trust Trust – new paradigm of security Replaces/enhances CIA (confid./integr./availab.) Adequate degree of trust required in interactions In social or computer-based interactions: From a simple transaction to a complex collaboration Must build up trust . interaction partners Human or artificial partners Offline or online We focus on asymmetric trust relationships: One partner is “weaker,” another is “stronger” Ignoring “same-strength” partners: Individual to individual, most B2B, 12/21/05 ) Building Trust (1) a) Building Trust By Weaker Partners Means of building trust by weaker partner in his strongeer (often institutional) partner (offline and online): Ask around Family, friends, co-workers, Check partner’s history and stated philosophy Accomplishments, failures and associated recoveries, Mission, goals, policies (incl. privacy policies), Observe partner’s behavior Trustworthy or not, stable or not, Problem: Needs time for a fair judgment Check reputation databases Better Business Bureau, consumer advocacy groups, Verify . | 10. P2D2: A Mechanism for Privacy-Preserving Data Dissemination Bharat Bhargava Department of Computer Sciences Purdue University With contributions from Prof. Leszek Lilien and Dr. Yuhui Zhong Supported in part by NSF grants IIS-0209059 and IIS-0242840. P2D2 - Mechanism for Privacy-Preserving Data Dissemination Outline Introduction ) Interactions and Trust ) Building Trust ) Trading Weaker Partner’s Privacy Loss for Stronger Partner’s Trust Gain ) Privacy-Trust Tradeoff and Dissemination of Private Data ) Recognition of Need for Privacy Guarantees Problem and Challenges ) The Problem ) Trust Model ) Challenges 3) Proposed Approach: Privacy-Preserving Data Dissemination (P2D2) Mechanism ) Self-descriptive Bundles ) Apoptosis of Bundles ) Context-sensitive Evaporation of Bundles 4) Prototype Implementation 5) Conclusions 6) Future Work 12/21/05 1) Introduction ) Interactions and Trust Trust – new paradigm of security Replaces/enhances CIA .