论文信息 - A GDPR compliance module for supporting the exchange of information between CERTs

A GDPR compliance module for supporting the exchange of information between CERTs

The goal of the project described in this paper is to describe a GDPR compliance checking model and tool for supporting the information exchange between CERTs. The paper first motivates the project, and then briefly discusses major aspects of GDPR, before presenting the developed model and the implemented prototype. A discussion and an outlook conclude the paper.

[1] Robin M. Ruefle,et al. Organizational Models for Computer Security Incident Response Teams (CSIRTs) , 2003 .

[2] Marcos Osorno,et al. Operationalizing the coordinated incident handling model , 2011, 2011 IEEE International Conference on Technologies for Homeland Security (HST).

[3] Stuart E. Madnick,et al. Institutions for Cyber Security: International Responses and Global Imperatives , 2014, Inf. Technol. Dev..

[4] Eric W. Burger,et al. Taxonomy Model for Cyber Threat Intelligence Information Exchange Technologies , 2014, WISCS '14.

[5] Reeshad S. Dalal,et al. An Organizational Psychology Perspective to Examining Computer Security Incident Response Teams , 2014, IEEE Security & Privacy.

[6] Edith Huber. Sicherheit in Cyber-Netzwerken , 2015 .

[7] Reeshad S. Dalal,et al. Psychosocial Dynamics of Cyber Security , 2016 .

[8] A. Cormack. Incident Response: Protecting Individual Rights Under the General Data Protection Regulation , 2016 .

[9] Ruth Breu,et al. Data Quality Challenges and Future Research Directions in Threat Intelligence Sharing Practice , 2016, WISCS@CCS.

[10] Benoît Dupont. Bots, cops, and corporations: on the limits of enforcement and the promise of polycentric regulation as a way to control large-scale cybercrime , 2016, Crime, Law and Social Change.