TY - GEN
T1 - How to capture, model, and verify the knowledge of legal, security, and privacy experts
T2 - 11th International Conference on Artificial Intelligence and Law
AU - Compagna, L.
AU - El Khoury, P.
AU - Massacci, F.
AU - Thomas, R.
AU - Zannone, N.
PY - 2007
Y1 - 2007
N2 - Laws set requirements that force organizations to assess the security and privacy of their IT systems and impose the adoption of the implementation of minimal precautionary security measures. Several frameworks have been proposed to deal with thii issue. For instance, purpose-based access control is normally considered a good solution for meeting the requirements of privacy legislation. Yet, understanding why, how, and when such solutions to security and privacy problems have to be deployed is often unanswered. In this paper, we look at the problem from a broader perspective, accounting for legal and organizational issues. Security engineers and legal experts should be able to start from the organizational model and derive from there the points where security and privacy problems may arise and determine which solutions best fit the (legal) problems that they face. In particular, we investigate the methodology needed to capture security and privacy requirements for a Health Care Centre using a smart items infrastructure. Copyright 2007 ACM.
AB - Laws set requirements that force organizations to assess the security and privacy of their IT systems and impose the adoption of the implementation of minimal precautionary security measures. Several frameworks have been proposed to deal with thii issue. For instance, purpose-based access control is normally considered a good solution for meeting the requirements of privacy legislation. Yet, understanding why, how, and when such solutions to security and privacy problems have to be deployed is often unanswered. In this paper, we look at the problem from a broader perspective, accounting for legal and organizational issues. Security engineers and legal experts should be able to start from the organizational model and derive from there the points where security and privacy problems may arise and determine which solutions best fit the (legal) problems that they face. In particular, we investigate the methodology needed to capture security and privacy requirements for a Health Care Centre using a smart items infrastructure. Copyright 2007 ACM.
U2 - 10.1145/1276318.1276346
DO - 10.1145/1276318.1276346
M3 - Conference contribution
T3 - Proceedings of the International Conference on Artificial Intelligence and Law
SP - 149
EP - 153
BT - Eleventh International Conference on Artificial Intelligence and Law, Proceedings
Y2 - 4 June 2007 through 8 June 2007
ER -