• DocumentCode
    1799828
  • Title

    Unified Model for Data Security - A Position Paper

  • Author

    Akram, Raja Naeem ; Ko, Ryan K. L.

  • Author_Institution
    Dept. of Comput. Sci., Univ. of Waikato, Hamilton, New Zealand
  • fYear
    2014
  • fDate
    24-26 Sept. 2014
  • Firstpage
    831
  • Lastpage
    839
  • Abstract
    One of the most crucial components of modern Information Technology (IT) systems is data. It can be argued that the majority of IT systems are built to collect, store, modify, communicate and use data, enabling different data stakeholders to access and use it to achieve different business objectives. The confidentiality, integrity, availability, audit ability, privacy, and quality of the data is of paramount concern for end-users ranging from ordinary consumers to multi-national companies. Over the course of time, different frameworks have been proposed and deployed to provide data security. Many of these previous paradigms were specific to particular domains such as military or media content providers, while in other cases they were generic to different verticals within an industry. There is a much needed push for a holistic approach to data security instead of the current bespoke approaches. The age of the Internet has witnessed an increased ease of sharing data with or without authorisation. These scenarios have created new challenges for traditional data security. In this paper, we study the evolution of data security from the perspective of past proposed frameworks, and present a novel Unified Model for Data Security (UMDS). The discussed UMDS reduces the friction from several cross-domain challenges, and has the functionality to possibly provide comprehensive data security to data owners and privileged users.
  • Keywords
    authorisation; cryptography; data integrity; data privacy; IT systems; UMDS; business objectives; comprehensive data security; data access; data auditability; data authorisation; data availability; data collection; data communication; data confidentiality; data integrity; data modification; data privacy; data quality; data sharing; data stakeholders; data storage; data use; holistic approach; information technology systems; unified model-for-data security; Access control; Computers; Cryptography; Data models; Software; Access Control; Cryptography; DRM; Data Provenance; Data Security; Information Sharing;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Trust, Security and Privacy in Computing and Communications (TrustCom), 2014 IEEE 13th International Conference on
  • Conference_Location
    Beijing
  • Type

    conf

  • DOI
    10.1109/TrustCom.2014.110
  • Filename
    7011334