loading
Papers Papers/2022 Papers Papers/2022

Research.Publish.Connect.

Affiliation

Institute of Information Science and Technologies “Alessandro Faedo” of the National Research Council
Context (please use complete words only)
Field
Sort by

Papers:

The GDPR Compliance and Access Control Systems: Challenges and Research Opportunities

Topics: Legal and Regulatory Issues; Access and Usage Control

Authors: Said Daoudagh and Eda Marchetti

Affiliation: ISTI-CNR, Pisa, Italy

Digital Object Identifier: 10.5220/0010912300003120

Proceedings of ICISSP 2022, ISBN: 978-989-758-553-1

Collapse Button Quick Abstract
The General Data Protection Regulation (GDPR) is changing how Personal Data should be processed. Using Access Control Systems (ACSs) and their specific policies as practical means for assuring a by-design lawfully compliance with the privacy-preserving rules and provision is currently an increasingly researched topic. As a result, this newly born research field raises several research questions and paves the way for different solutions. This position paper would like to provide an overview of research challenges and questions concerning activities for analyzing, designing, implementing, and testing Access Control mechanisms (systems and policies) to guarantee compliance with the GDPR. Some possible answers to the open issues and future research directions and topics are also provided.

How to Improve the GDPR Compliance through Consent Management and Access Control

Topics: Legal and Regulatory Issues; Access and Usage Control

Authors: Said Daoudagh 1 ; 2 , Eda Marchetti 1 , Vincenzo Savarino 3 , Roberto Di Bernardo 3 and Marco Alessi 3

Affiliations: 1 ISTI-CNR, Pisa, Italy , 2 University of Pisa, Pisa, Italy , 3 Engineering Ingegneria Informatica, Italy

Digital Object Identifier: 10.5220/0010260205340541

Proceedings of ICISSP 2021, ISBN: 978-989-758-491-6

Collapse Button Quick Abstract
This paper presents a privacy-by-design solution based on Consent Manager (CM) and Access Control (AC) to aid organizations to comply with the GDPR. The idea is to start from the GDPR’s text, transform it into a machine-readable format through a given CM, and then convert the obtained outcome to a set of enforceable Access Control Policies (ACPs). As a result, we have defined a layered architecture that makes any given system privacy-aware, i.e., systems that are compliant by-design with the GDPR. Furthermore, we have provided a proof-of-concept by integrating a Consent Manager coming from an industrial context and an AC Manager coming from academia.

MENTORS: Monitoring Environment for System of Systems

Topics: Ontology Discovering, Modelling, Retrieving and the Semantic Web; Knowledge Representation and Reasoning on the Web

Authors: Antonello Calabrò , Said Daoudagh and Eda Marchetti

Affiliation: ISTI-CNR, Pisa, Italy

Digital Object Identifier: 10.5220/0010658900003058

Proceedings of WEBIST 2021, ISBN: 978-989-758-536-4

Collapse Button Quick Abstract
Context: Systems Of Systems (SoSs) are becoming a widespread emerging architecture, and they are used in several daily life contexts. Therefore, when a new device is integrated into an existing SoS, facilities able to efficaciously assess and prevent anomalous and dangerous situations are necessary. Objective: The aim is to define a reference environment conceived for monitoring and assessing the behavior of SoS when a new device is added. Method: In this paper, we present MENTORS, a monitoring environment for SoS. MENTORS is based on semantic web technologies to formally represent SoS and Monitoring knowledge through a core ontology, called MONTOLOGY. Results and Conclusion: We defined the conceptual model of MENTORS, which is composed of two phases: Off-line and On-line, supported by a reference architecture that allows its (semi-)automation. Validation of the proposal with real use-cases is part of future activities.

Assessing Testing Strategies for Access Control Systems: A Controlled Experiment

Topics: Security; Access and Usage Control

Authors: Said Daoudagh 1 ; 2 , Francesca Lonetti 2 and Eda Marchetti 2

Affiliations: 1 Department of Computer Science, University of Pisa, Pisa, Italy , 2 ISTI-CNR, Pisa, Italy

Digital Object Identifier: 10.5220/0008974201070118

Proceedings of ICISSP 2020, ISBN: 978-989-758-399-5

Collapse Button Quick Abstract
This paper presents a Controlled Experiment (CE) for assessing testing strategies in the context of Access Control (AC); more precisely, the CE is performed by considering the AC Systems (ACSs) based on the XACML Standard. We formalized the goal of the CE, and we assessed two available test cases generation strategies in terms of three metrics: Effectiveness, Size and Average Percentage Faults Detected (APFD). The experiment operation is described and the main results are analyzed.

Defining Controlled Experiments Inside the Access Control Environment

Topics: Model-Based Testing and Validation; Model Quality

Authors: Said Daoudagh 1 ; 2 and Eda Marchetti 2

Affiliations: 1 Department of Computer Science, University of Pisa, Pisa, Italy , 2 ISTI-CNR, Pisa, Italy

Digital Object Identifier: 10.5220/0009358201670176

Proceedings of MODELSWARD 2020, ISBN: 978-989-758-400-8

Collapse Button Quick Abstract
In ICT systems and modern applications access control systems are important mechanisms for managing resources and data access. Their criticality requires high security levels and consequently, the application of effective and efficient testing approaches. In this paper we propose standardized guidelines for correctly and systematically performing the testing process in order to avoid errors and improve the effectiveness of the validation. We focus in particular on Controlled Experiments, and we provide here a characterization of the first three steps of the experiment process (i.e., Scoping, Planning and Operation) by the adoption of the Goal-Question-Metric template. The specialization of the three phases is provided through a concrete example.

Enhancing Business Process Modelling with Data Protection Compliance: An Ontology-based Proposal

Topics: Privacy Enhancing Technologies; Legal and Regulatory Issues

Authors: Cesare Bartolini 1 , Antonello Calabró 2 and Eda Marchetti 2

Affiliations: 1 University of Luxembourg, Interdisciplinary Centre for Security, Reliability and Trust (SnT) and Luxembourg , 2 Istituto di Scienza e Tecnologie dell’Informazione “A. Faedo”, Consiglio Nazionale delle Ricerche (CNR) via G. Moruzzi, 1 - 56124 Pisa and Italy

Digital Object Identifier: 10.5220/0007392304210428

Proceedings of ICISSP 2019, ISBN: 978-989-758-359-9

Collapse Button Quick Abstract
The research and industrial environments are struggling to identify practical approaches to highlight the (new) duties of controllers of personal data and foster the transition of IT-based systems, services, and tools to comply with the GDPR. In this paper, we present a solution for enhancing the modelling of business processes with facilities to help evaluate the compliance with the GDPR. The proposal is based on a model describing the constituents of the data protection domain: a structured form of the legal text, an ontology of data protection concepts, and a machine-readable translation of the GDPR provisions. An example of application is also provided.
Collapse Button Related Ontology Subjects/Areas/Topics (2)
Information and Systems Security

Privacy Enhancing Technologies

Towards a Lawful Authorized Access: A Preliminary GDPR-based Authorized Access

Topics: Requirements Engineering; Data-driven Software Engineering; Software and Systems Modeling; Software Development Lifecycle

Authors: Cesare Bartolini 1 , Said Daoudagh 2 , Gabriele Lenzini 1 and Eda Marchetti 3

Affiliations: 1 Interdisciplinary Centre for Security, Reliability and Trust (SnT), University of Luxembourg and Luxembourg , 2 Istituto di Scienza e Tecnologie dell’Informazione “A. Faedo”, CNR, via G. Moruzzi 1, 56124, Pisa, Italy, Computer Science Department, University of Pisa, Pisa and Italy , 3 Istituto di Scienza e Tecnologie dell’Informazione “A. Faedo”, CNR, via G. Moruzzi 1, 56124, Pisa and Italy

Digital Object Identifier: 10.5220/0007978703310338

Proceedings of ICSOFT 2019, ISBN: 978-989-758-379-7

Collapse Button Quick Abstract
The General Data Protection Regulation (GDPR)’s sixth principle, Integrity and Confidentiality, dictates that personal data must be protected from unauthorised or unlawful processing. To this aim, we propose a systematic approach for authoring access control policies that are by-design aligned with the provisions of the GDPR. We exemplify it by considering realistic use cases.
Collapse Button Related Ontology Subjects/Areas/Topics (5)
Artificial Intelligence

Knowledge-Based Systems

Symbolic Systems
Knowledge Management and Information Sharing

Requirements Engineering

Design of a Simulation Framework for Model-based Learning

Topics: Business Process Modeling; Model Execution and Simulation; Domain-Specific Modeling

Authors: Sarah Zribi 1 , Antonello Calabrò 2 , Francesca Lonetti 2 , Eda Marchetti 2 , Tom Jorquera 1 and Jean-Pierre Lorré 1

Affiliations: 1 Linagora, France , 2 Istituto di Scienza e Tecnologie dell'Informazione "A. Faedo'' - CNR, Italy

Digital Object Identifier: 10.5220/0005688606310639

Proceedings of MODELSWARD 2016, ISBN: 978-989-758-168-7

Collapse Button Quick Abstract
In model-driven learning, simulation of Business Process is a key step for improving the learners's skills and enhancing teaching performance. In this paper, we provide the architectural design and the main functionalities of a model-based learning simulation framework. The main objectives of the proposed framework are: i) enable user-friendly learning simulation with a strong support for collaboration and social interactions; ii) provide a process-driven learning environment that allows emulation of the learner behavior when no learners are available to be involved on the simulation; iii) include event-based monitoring aiming at providing feedbacks for the learner assessment.
Collapse Button Related Ontology Subjects/Areas/Topics (16)
Applications and Software Development

Enterprise Information Systems

Model-Driven Software Development

Artificial Intelligence

Knowledge Management and Information Sharing

Models

Business Process Management

Knowledge-Based Systems

Paradigm Trends

Domain-Specific Modeling and Domain-Specific Languages

Languages, Tools and Architectures

Software Engineering

e-Business

Model Execution and Simulation

Symbolic Systems
Enterprise Engineering

Fiscal Software Certification - An Italian Experience of Certification Against the Fiscal Legislation

Authors: Isabella Biscoglio , Giuseppe Lami and Gianluca Trentanni

Affiliation: Institute of Information Science and Technologies “Alessandro Faedo” of the National Research Council, Italy

Digital Object Identifier: 10.5220/0005844800540061

Proceedings of AMARETTO 2016/MODELSWARD, ISBN: 978-989-758-166-3

Collapse Button Quick Abstract
This paper describes an experience of software certification in the specific fiscal software domain. The Italian Fiscal Software Certification scenario and the cash register, as specific kind of fiscal device running fiscal software, are outlined. Besides, some requirements, extracted from the current legislation, are shown. As the Italian legislation does not provide it, a Business Process Model (BPM) presenting the fiscal software certification process is illustrated. The BPM was built by means of a study of the current legislation and it constitutes the original contribution to the paper. Finally, the challenges of the further technological adjustments according to the Italian legislation are discussed.

Context (please use complete words only)
Field
Sort by

Topic(s):

Filter listed results, by

Publication date

From:
To:
Author
Locate Author in list below
Add Author(s) to filter:

- Science and Technology Publications, Lda.
RESOURCES

Proceedings

Papers

Authors

Ontology

CONTACTS

Science and Technology Publications, Lda
Avenida de S. Francisco Xavier, Lote 7 Cv. C,
2900-616 Setúbal, Portugal.

Phone: +351 265 520 185 (National fixed network call)
Fax: +351 265 520 186
Email: info@scitepress.org

EXTERNAL LINKS

PRIMORIS

INSTICC

SCITEVENTS

CROSSREF

PROCEEDINGS SUBMITTED FOR INDEXATION BY:

dblp

Ei Compendex

SCOPUS

Semantic Scholar

Google Scholar

Microsoft Academic