On Enforcing the Digital Immunity of a Large Humanitarian Organization
On Enforcing the Digital Immunity of a Large Humanitarian Organization
复制标题
关于加强大型人道主义组织的数字免疫力
DOI：
--
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
J. Hubaux
中科院分区：
文献类型：
--
作者：
Stevens Le Blond;A. Cuevas;J. Troncoso;Philipp Jovanovic;B. Ford;J. Hubaux
人道主义行动是在危机情况下援助个人的过程，由于自然或人为灾害、发生人道主义行动的不利环境以及问题的规模和多学科性质，人道主义行动构成了独特的信息安全挑战。尽管存在这些挑战，人道主义组织正在向高度依赖所收集数据的数字化和数字化工具过渡，这提高了它们的有效性，但也使它们面临计算机安全威胁。在本文中，我们对红十字国际委员会（ICRC）的计算机安全挑战进行了定性分析，ICRC是一个拥有16000多名员工的大型人道主义组织，具有国际法律的人格，涉及特权和豁免权，以及150多年的全球武装冲突和其他暴力局势的经验。为了从操作、技术、法律的和管理的角度调查红十字国际委员会的计算机安全需求和做法，并考虑个人、组织和政府层面，我们采访了27名现场工作人员、IT人员、律师和管理人员。我们的研究结果首次揭示了人道主义组织在收集、处理、传输和共享数据时所面临的独特的安全和隐私挑战，这些数据是为了使人道主义行动能够用于多种敏感活动。这些结果突出表明，除其他挑战外，业务安全与所有利益攸关方的要求之间的权衡，各管辖区之间共享数据的法律的障碍;特别是需要以强有力的技术保障措施补充特权和豁免，以避免任何可能阻碍准入并可能损害人道主义行动的中立性、公正性和独立性的泄漏。
Humanitarian action, the process of aiding individuals in situations of crises, poses unique information-security challenges due to natural or manmade disasters, the adverse environments in which it takes place, and the scale and multi-disciplinary nature of the problems. Despite these challenges, humanitarian organizations are transitioning towards a strong reliance on the digitization of collected data and digital tools, which improves their effectiveness but also exposes them to computer security threats. In this paper, we conduct a qualitative analysis of the computer-security challenges of the International Committee of the Red Cross (ICRC), a large humanitarian organization with over sixteen thousand employees, an international legal personality, which involves privileges and immunities, and over 150 years of experience with armed conflicts and other situations of violence worldwide. To investigate the computer security needs and practices of the ICRC from an operational, technical, legal, and managerial standpoint by considering individual, organizational, and governmental levels, we interviewed 27 field workers, IT staff, lawyers, and managers. Our results provide a first look at the unique security and privacy challenges that humanitarian organizations face when collecting, processing, transferring, and sharing data to enable humanitarian action for a multitude of sensitive activities. These results highlight, among other challenges, the trade offs between operational security and requirements stemming from all stakeholders, the legal barriers for data sharing among jurisdictions; especially, the need to complement privileges and immunities with robust technological safeguards in order to avoid any leakages that might hinder access and potentially compromise the neutrality, impartiality, and independence of humanitarian action.