"Show me the data": resolving challenges in network data sharing

ABSTRACT

This panel will address current and proposed solutions to navigating network data sharing restrictions discussed by the prior panel. The underlying dynamics which prevent or impede research access to network data are similar across several data-sharing regimes related to networked infrastructure vulnerabilities. We hope to engage technologists, policy makers, researchers and legal professionals across industry, government, law enforcement and academia as we discuss how to balance the interests of:

• Network researchers pursuing knowledge that will inform business models and communications policies,
Network users seeking the benefits of technology advancement without having to surrender control of personal information,
Network/platform owners exercising their rights to design and protect intellectual property, infrastructure, and business and customer relationships.

The intended outcome of this panel is to help raise the level of discourse surrounding network data sharing, to inform and instigate actionable solutions that effectively balance the interests of these stakeholders. The following discussion questions will help frame the conversation:

• What are the economic, social and cultural incentives to sharing data and how do we leverage law and technology to create or improve them?
What are the costs involved in sharing network data? How can those costs be reallocated?
What is the role of technologies (code) and law (contract, regulation, case law) in striking a balanced solution?
Is it necessary to revise current laws to protect network research interests, or can we more efficiently and effectively undertake more informal routes, i.e., privacy impact assessments, resolutions by authoritative bodies (ICANN, IETF, ACM, Internet2), reliance on third party trusted intermediaries?
Can we construct a framework to guide risk analysis as well as the design and implementation of policies and mechanisms to address the trust and privacy issues that hamper data sharing? What are the essential capabilities of such a framework, e.g., auditability, certification, enforcement, negotiation, validation, informed consent, redressability?
What mechanisms prevent abuse of authority regarding the shared data, i.e., provable compliance thru audit, privacy forensics; anonymization; filtering? How do we develop consensus on levels of confidence in these mechanisms? How do we protect the integrity of the shared data and enable trust to promote adoption and efficiency in sharing arrangements?
How does the network research community generate collective action to steward its interests and inform policy? How does the community articulate its interests to influence the debate, i.e., via legislation, lobbying, etc.?

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.3 Network Operations
          Subjects: Network monitoring

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.5 Local and Wide-Area Networks
          Subjects: Internet (e.g., TCP/IP)

  K. Computing Milieux
  K.4 COMPUTERS AND SOCIETY
      K.4.1 Public Policy Issues
          Subjects: Privacy

General Terms:
Human Factors, Legal Aspects, Management, Measurement

Keywords:
anonymization, protected data-sharing