RuleKeeper: GDPR-Aware Personal Data Compliance for Web Frameworks

Ferreira, Mafalda; Brito, Tiago; Santos, José Augusto Rodrigues dos; Santos, Nuno Rebelo dos

doi:10.1109/sp46215.2023.10179395

Cited by 4 publications

(1 citation statement)

References 43 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Lastly, Data Compliance [157] and security share a strong interdependency. Data Compliance measures ensure that organizations handle, store, process, and transmit data securely and with privacy in mind.…”

Section: Continuous Security Data Preserving and Data Compliancementioning

confidence: 99%

Security in Cloud-Native Services: A Survey

Theodoropoulos,

Rosa,

Benzaid

et al. 2023

JCP

View full text Add to dashboard Cite

Cloud-native services face unique cybersecurity challenges due to their distributed infrastructure. They are susceptible to various threats like malware, DDoS attacks, and Man-in-the-Middle (MITM) attacks. Additionally, these services often process sensitive data that must be protected from unauthorized access. On top of that, the dynamic and scalable nature of cloud-native services makes it difficult to maintain consistent security, as deploying new instances and infrastructure introduces new vulnerabilities. To address these challenges, efficient security solutions are needed to mitigate potential threats while aligning with the characteristics of cloud-native services. Despite the abundance of works focusing on security aspects in the cloud, there has been a notable lack of research that is focused on the security of cloud-native services. To address this gap, this work is the first survey that is dedicated to exploring security in cloud-native services. This work aims to provide a comprehensive investigation of the aspects, features, and solutions that are associated with security in cloud-native services. It serves as a uniquely structured mapping study that maps the key aspects to the corresponding features, and these features to numerous contemporary solutions. Furthermore, it includes the identification of various candidate open-source technologies that are capable of supporting the realization of each explored solution. Finally, it showcases how these solutions can work together in order to establish each corresponding feature. The insights and findings of this work can be used by cybersecurity professionals, such as developers and researchers, to enhance the security of cloud-native services.

show abstract

Section: Continuous Security Data Preserving and Data Compliancementioning

confidence: 99%

Security in Cloud-Native Services: A Survey

Theodoropoulos,

Rosa,

Benzaid

et al. 2023

JCP

View full text Add to dashboard Cite

show abstract

Enforcing the GDPR

Hublet,

Basin,

Krstić

2024

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Violations of data protection laws such as the General Data Protection Regulation (GDPR) are ubiquitous. Currently building IT support to implement such laws is difficult and the alternatives such as manual controls augmented by auditing are limited and scale poorly. This calls for new automated enforcement techniques that can build on, and enforce, a formalization of the law. In this paper, we present the first enforceable specification of a core set of GDPR provisions, centered on data-subject rights, and describe an architecture that automatically enforces this specification in web applications. We evaluate our architecture by implementing three case studies and show that our approach incurs only modest development and runtime overhead, while covering the most relevant privacy-related aspects of GDPR that can be enforced at runtime.

show abstract