Towards automated privacy compliance checking of applications in Cloud and Fog environments - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2021

Towards automated privacy compliance checking of applications in Cloud and Fog environments

Abstract

Internet application users are increasingly concerned about the way applications handle their personal data. However, manually checking whether applications actually respect the claims made in their privacy policy is both error-prone and time-consuming. This paper claims that the privacy compliance of applications hosted in cloud or fog computing platforms can and should be automatically carried by the platform itself. We discuss the feasibility of unintrusive and application-agnostic monitoring in the platform layer to check the privacy compliance of applications. First, the platform may monitor an application's privacy-oriented behavior through signals such as its network traffic characteristics. Second, these signals can be analyzed and compared with the principles found in the application's privacy policy. We present a procedure based on machinelearning techniques to identify the type of data being shared by applications with external third-parties even if the application uses encrypted communications. Our classifiers identify traffic samples of applications with 86% accuracy.
Fichier principal
Vignette du fichier
main.pdf (559.44 Ko) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-03257252 , version 1 (10-06-2021)

Identifiers

  • HAL Id : hal-03257252 , version 1

Cite

Mozhdeh Farhadi, Guillaume Pierre, Daniele Miorandi. Towards automated privacy compliance checking of applications in Cloud and Fog environments. FiCloud 2021 - 8th International Conference on Future Internet of Things and Cloud, Aug 2021, Rome / Virtual, Italy. pp.1-8. ⟨hal-03257252⟩
195 View
204 Download

Share

Gmail Mastodon Facebook X LinkedIn More