Titulo Estágio
Monitoring Transparency and Privacy in Data Management Systems
Local do Estágio
SSE-CISUC
Enquadramento
Privacy concerns are at an all-time high, both due to the recent scandals and also due to the new regulations, in particular the EU General Data Protection Regulation. This makes necessary that special attention should be placed in the development of new systems, to be compliant with regulations and to provide trustworthy services to users.
However, in this moment there is a technical gap between the regulations and the existent technology. In practice, companies need new and more adequate solutions to deal with all the GDPR requirements.
In particular, data management systems are not prepared to deal with privacy risk and transparency issues. This is particularly evident when we think that data is relatively harmless when considered isolated, can be used in the long run to privacy issues (e.g. by promoting the de-anonymization of anonymized data).
The classical example is the one in which successive queries keep selecting results according to different criteria, in such a way that the overlapping between each of these resultsets reduces more and more until a sufficiently low number of records remains that would allow their de-anonymization.
This problem is further increased when we consider matters of transparency, and the information that is necessary to track to make sure individuals data is being used lawfully, fairly and only for the consented purposes.
Objetivo
The main goal of this work is to research and develop mechanisms that can monitor data management systems activity to continuously measure privacy risk in runtime, while storing transparency related information. As risk-based mechanisms, they must work with incomplete information, providing a configurable trade-off between the amount of monitored information and the performance overhead.
These mechanisms should work seamlessly for the final application, and therefore we propose the development of a module of the data management system that would be in charge of this. Several datasets and applications must be selected to serve as reference, for evaluation.
Plano de Trabalhos - Semestre 1
T1. [10/09/2018 to 31/10/2018] State of the art analysis.
T2. [15/10/2018 to 30/11/2018] Definition of the proposed approach. Definition of the application domain and of the data management system to use as case study.
T3. [01/11/2018 to 31/12/2018] Preliminary evaluation of the feasibility of the proposed approach.
T4. [15/11/2018 to 21/01/2019] Write the Dissertation Plan.
Plano de Trabalhos - Semestre 2
T5. [01/02/2019 to 15/04/2019] Development of the proposed solution.
T6. [20/03/2019 to 30/04/2019] Experimentation and validation.
T7. [15/04/2019 to 31/05/2019] Write a scientific publication.
T8. [15/05/2019 to 01/07/2019] Write the thesis.
Condições
The work is to be executed at the laboratories of the CISUC’s Software and Systems Engineering Group. A work place will be provided as well as the required computational resources.
Observações
The work is part of the contribution of the University of Coimbra to the H2020 Projects POSEIDON and ATMOSPHERE, which increases the impact and visibility of the work and its results.
Orientador
Nuno Antunes
nmsa@dei.uc.pt 📩