Ethical Considerations of Sharing Data for Cybersecurity Research
Ethical Considerations of Sharing Data for Cybersecurity Research
复制标题
网络安全研究共享数据的伦理考虑
DOI：
10.1007/978-3-642-29889-9_15
复制
发表时间：
2011
期刊：
影响因子：
--
通讯作者：
Darren Shou
中科院分区：
文献类型：
--
作者：
Darren Shou
进行网络安全研究的政府、公司和科学家需要基于真实的系统和用户的参考数据集，以测试给定理论预测的有效性和有效性。然而，各种道德和实际问题使何时以及如何共享专有运营数据变得复杂。在本文中，我们讨论了假设和实际的例子，以说明增加合法研究目的的数据的可用性的原因。我们还讨论了限制数据共享的原因，例如隐私和竞争。我们讨论了现有的几种数据共享模型的能力和局限性。我们提出了一个专门设计的基础设施，用于使专有的操作数据可用于网络安全研究和实验。最后，我们讨论了一个新的基础设施，葡萄酒，平衡开放的价值观，健全的实验，和隐私，使数据共享与隐私控制的方式。
Governments, companies, and scientists performing cyber security research need reference data sets, based on real systems and users, to test the validity and efficacy of the predictions of a given theory. However, various ethical and practical concerns complicate when and how proprietary operational data should be shared. In this paper, we discuss hypothetical and actual examples to illustrate the reasons for increasing the availability of data for legitimate research purposes. We also discuss the reasons, such as privacy and competition, to limit data sharing. We discuss the capabilities and limitations of several existing models of data sharing. We present an infrastructure specifically designed for making proprietary operational data available for cyber security research and experimentation. We conclude by discussing the ways in which a new infrastructure, WINE, balances the values of openness, sound experimentation, and privacy by enabling data sharing with privacy controls.