13 results on '"Aldeco-Perez, Rocio"'
Search Results
2. Secure provenance-based auditing of personal data use
- Author
-
Aldeco Perez, Rocio and Moreau, Luc
- Subjects
005.8 ,HV Social pathology. Social and public welfare ,K Law (General) ,QA75 Electronic computers. Computer science - Abstract
In recent years, an increasing number of personalised services that require users to disclose personal information have appeared on the Web (e.g. social networks, governmental sites, on-line selling sites). By disclosing their personal information, users are given access to a wide range of new functionality and benefits. However, there exists a risk that their personal information is misused. To strike a balance between the advantages of personal information disclosure and protection of information, governments have created legal frameworks, such as the Data Protection Act, Health Insurance Portability & Accountability Act (HIPAA) or Safe Harbor, which place restrictions on how organisations can process personal information. By auditing the way in which organisations used personal data, it is possible to determine whether they process personal information in accordance with the appropriate frameworks. The traditional way of auditing collects evidence in a manual way. This evidence is later analysed to assess the degree of compliance to a predefined legal framework. These manual assessments are long, since large amounts of data need to be analysed, and they are unreliable, since there is no guarantee that all data is correctly analysed. As several cases of data leaks and exposures of private data have proven, traditional audits are also prone to intentional and unintentional errors derived from human intervention. Therefore, this thesis proposes a provenance-based approach to auditing the use of personal information by securely gathering and analysing electronic evidence related to the processing of personal information. This approach makes three contributions to the state of art. The first contribution is the Provenance-based Auditing Architecture that defies a set of communication protocols to make existing systems provenance-aware. These protocols specify which provenance information should be gathered to verify the compliance with the Data Protection Act. Moreover, we derive a set of Auditing Requirements by analysing a Data Protection Act case study and demonstrate that provenance can be used as electronic evidence of past processing. The second contribution is the Compliance Framework, which is a provenance-based auditing framework for automatically auditing the compliance with the Data Protection Act's principles. This framework consist of a provenance graph representation (Processing View), a novel graph-based rule representation expressing processing rules (Usage Rules Definition) and a novel set of algorithms that automatically verify whether information was processed according to the Auditing Requirements by comparing the Processing View against the Usage Rules Definition. The third contribution is the Secure Provenance-based Auditing Architecture that ensures any malicious alteration on provenance during the entire provenance life cycle of recording, storage, querying and analysis can be detected. This architecture, which relies on cryptographic techniques, guarantees the correctness of the audit results
- Published
- 2012
3. Securing Provenance-Based Audits
- Author
-
Aldeco-Pérez, Rocío, Moreau, Luc, Hutchison, David, Series editor, Kanade, Takeo, Series editor, Kittler, Josef, Series editor, Kleinberg, Jon M., Series editor, Mattern, Friedemann, Series editor, Mitchell, John C., Series editor, Naor, Moni, Series editor, Nierstrasz, Oscar, Series editor, Pandu Rangan, C., Series editor, Steffen, Bernhard, Series editor, Sudan, Madhu, Series editor, Terzopoulos, Demetri, Series editor, Tygar, Doug, Series editor, Vardi, Moshe Y., Series editor, Weikum, Gerhard, Series editor, McGuinness, Deborah L., editor, Michaelis, James R., editor, and Moreau, Luc, editor
- Published
- 2010
- Full Text
- View/download PDF
4. A Provenance-Based Compliance Framework
- Author
-
Aldeco-Pérez, Rocío, Moreau, Luc, Hutchison, David, Series editor, Kanade, Takeo, Series editor, Kittler, Josef, Series editor, Kleinberg, Jon M., Series editor, Mattern, Friedemann, Series editor, Mitchell, John C., Series editor, Naor, Moni, Series editor, Nierstrasz, Oscar, Series editor, Pandu Rangan, C., Series editor, Steffen, Bernhard, Series editor, Sudan, Madhu, Series editor, Terzopoulos, Demetri, Series editor, Tygar, Doug, Series editor, Vardi, Moshe Y., Series editor, Weikum, Gerhard, Series editor, Berre, Arne J., editor, Gómez-Pérez, Asunción, editor, Tutschku, Kurt, editor, and Fensel, Dieter, editor
- Published
- 2010
- Full Text
- View/download PDF
5. Geolocation of Tweets in Spanish with Transformer Encoders
- Author
-
Ambrosio-Aguilar, Agustin-Daniel, primary, Barcenas, Everardo, additional, Molero-Castillo, Guillermo, additional, and Aldeco-Perez, Rocio, additional
- Published
- 2021
- Full Text
- View/download PDF
6. Tender System Verification with Satisfiability Modulo Theories
- Author
-
Davila, Rene, primary, Aldeco-Perez, Rocio, additional, and Barcenas, Everardo, additional
- Published
- 2021
- Full Text
- View/download PDF
7. Modeling a multi-layered blockchain framework for digital services that governments can implement.
- Author
-
Rebollar, Fernando, Aldeco-Perez, Rocio, Ramos, Marco A., Pinto, David, Beltrán, Beatriz, and Singh, Vivek
- Subjects
- *
BLOCKCHAINS , *DATA integrity , *INFORMATION technology security , *GOVERNMENT property , *PANDEMICS - Abstract
The general population increasingly uses digital services, meaning services which are delivered over the internet or an electronic network, and events such as pandemics have accelerated the need of using new digital services. Governments have also increased their number of digital services, however, these digital services still lack of sufficient information security, particularly integrity. Blockchain uses cryptographic techniques that allow decentralization and increase the integrity of the information it handles, but it still has disadvantages in terms of efficiency, making it incapable of implementing some digital services where a high rate of transactions are required. In order to increase its efficient, a multi-layer proposal based on blockchain is presented. It has four layers, where each layer specializes in a different type of information and uses properties of public blockchain and private blockchain. An statistical analysis is performed and the proposal is modeled showing that it maintains and even increases the integrity of the information while preserving the efficiency of transactions. Besides, the proposal can be flexible and adapt to different types of digital services. It also considers that voluntary nodes participate in the decentralization of information making it more secure, verifiable, transparent and reliable. [ABSTRACT FROM AUTHOR]
- Published
- 2022
- Full Text
- View/download PDF
8. Formal Verification of a Database Management System
- Author
-
Medina-Martinez, Diego, primary, Barcenas, Everardo, additional, Molero-Castillo, Guillermo, additional, Velazquez-Mena, Alejandro, additional, and Aldeco-Perez, Rocio, additional
- Published
- 2020
- Full Text
- View/download PDF
9. Securing Provenance-based Audits
- Author
-
Aldeco Perez, Rocio and Moreau, Luc
- Abstract
Given the significant increase of on-line services that require personal information from users, the risk that such information is misused has become an important concern. In such a context, information accountability is desirable since it allows users (and society in general) to decide, by means of audits, whether information is used appropriately. To ensure information accountability, information flow should be made transparent. It has been argued that data provenance can be used as the mechanism to underpin such a transparency. Under these conditions, an audit's quality depends on the quality of the captured provenance information. Thereby, the integrity of provenance information emerges as a decisive issue in the quality of a provenance-based audit. The aim of this paper is to secure provenance-based audits by the inclusion of cryptographic elements in the communication between the involved entities as well as in the provenance representation. This paper also presents a formalisation and an automatic verification of a set of security properties that increase the level of trust in provenance-based audit results.
- Published
- 2010
10. A Provenance-based Compliance Framework
- Author
-
Aldeco Perez, Rocio and Moreau, Luc
- Abstract
Given the significant amount of personal information available on the Web, verifying its correct use emerges as an important issue. When personal information is published, it should be later used under a set of usage policies. If these policies are not followed, sensitive data could be exposed and used against its owner. Under these circumstances, processing transparency is desirable since it allows users to decide whether information is used appropriately. It has been argued that data provenance can be used as the mechanism to underpin such a transparency. Thereby, if provenance of data is available, processing becomes transparent since the provenance of data can be analysed against usage policies to decide whether processing was performed in compliance with such policies. The aim of this paper is to present a Provenance-based Compliance Framework that uses provenance to verify the compliance of processing to predefined information usage policies. It consists of a provenance-based view of past processing of information, a representation of processing policies and a comparison stage in which the past processing is analysed against the processing policies. This paper also presents an implementation using a very common on-line activity: on-line shopping.
- Published
- 2010
11. Information Accountability supported by a Provenance-based Compliance Framework
- Author
-
Aldeco-Perez, Rocio and Moreau, Luc
- Abstract
An accountable system is defined as a system that makes information usage transparent so that it can be determined later whether the use of such information is appropriate or not under a given set of rules. Weitzner et al. have argued that provenance could be used in the creation of accountable systems helping users to answer questions related to the processing of information. Provenance consists of causal dependencies between data and events explaining what contributed to a result in a specific state. If provenance of data is available, processing becomes transparent since the provenance of data can be analysed against usage rules to decide whether processing was performed in compliance with such rules.
- Published
- 2009
12. Modelado e Implementación de losServicios de Autenticación y Privacidadcon Curvas Elípticas para elEstándar IEEE 802.11
- Author
-
Aldeco Perez,Rocio Alejandra
- Published
- 2005
13. Secure provenance-based auditing of personal data use
- Author
-
Aldeco Perez, Rocio. and Aldeco Perez, Rocio.
- Abstract
In recent years, an increasing number of personalised services that require users to disclose personal information have appeared on the Web (e.g. social networks, governmental sites, on-line selling sites). By disclosing their personal information, users are given access to a wide range of new functionality and benefits. However, there exists a risk that their personal information is misused. To strike a balance between the advantages of personal information disclosure and protection of information, governments have created legal frameworks, such as the Data Protection Act, Health Insurance Portability & Accountability Act (HIPAA) or Safe Harbor, which place restrictions on how organisations can process personal information. By auditing the way in which organisations used personal data, it is possible to determine whether they process personal information in accordance with the appropriate frameworks. The traditional way of auditing collects evidence in a manual way. This evidence is later analysed to assess the degree of compliance to a predefined legal framework. These manual assessments are long, since large amounts of data need to be analysed, and they are unreliable, since there is no guarantee that all data is correctly analysed. As several cases of data leaks and exposures of private data have proven, traditional audits are also prone to intentional and unintentional errors derived from human intervention. Therefore, this thesis proposes a provenance-based approach to auditing the use of personal information by securely gathering and analysing electronic evidence related to the processing of personal information. This approach makes three contributions to the state of art. The first contribution is the Provenance-based Auditing Architecture that defies a set of communication protocols to make existing systems provenance-aware. These protocols specify which provenance information should be gathered to verify the complian
- Published
- 2012
Catalog
Discovery Service for Jio Institute Digital Library
For full access to our library's resources, please sign in.