Assured information sharing: concepts and issues

ABSTRACT

The need to share information across organization is an imperative for many organizations, in both the private and public sectors. Sharing must not however undermine privacy and confidentiality of information. Accountability about the use of information, integrity, and support for compliance with respect to organizational policies are also crucial requirements. In this paper we introduce the notion of assured information sharing lifecycle as a framework for reasoning about approaches and techniques for securely sharing of information. We then focus on policies relevant in the context of secure information sharing and discuss tools for policy management.

REFERENCES

• 1: Biba, K.J. Integrity considerations for secure computer systems. Technical Report TR-3153, MITRE, 1977.
• 2: Rao, R., Lin, D., Bertino, E., Lobo, E. An approach to evaluate policy similarity systems. In Proceedings of ACM SACMAT 2007.

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.2 DATABASE MANAGEMENT
      H.2.0 General
          Subjects: Security, integrity, and protection**

General Terms:
Design, Management, Security

Keywords:
information lifecycle, information sharing, policy management systems, security policies