A privacy impact assessment tool for cloud computing

Proceedings - 2nd IEEE International Conference on Cloud Computing Technology and Science, CloudCom 2010

Volumn , Issue , 2010, Pages 667-676

  Tancock, David ^a   Pearson, Siani ^a   Charlesworth, Andrew ^b  

^a HEWLETT PACKARD LABORATORIES   (United Kingdom)

^b UNIVERSITY OF BRISTOL   (United Kingdom)

Author keywords

Cloud computing; Cloud storage; Decision support; Privacy impact assessment

Indexed keywords

BUSINESS PROCESS; COMPLIANCE CHECKING; COMPUTING ENVIRONMENTS; DATA SECURITY; DECISION MAKERS; DECISION SUPPORT; DECISION SUPPORT TOOLS; EXISTING SYSTEMS; IMPACT ASSESSMENTS; LEGAL COMPLIANCE; POSSIBLE FUTURES; PRIVACY IMPACT ASSESSMENT; PRIVACY ISSUE; PRIVACY LAW; REACTIVE PROCESS; SYSTEMATIC PROCESS;

COMPUTER SYSTEMS; DECISION SUPPORT SYSTEMS; RATING;

CLOUD COMPUTING;

EID: 79952417616     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CloudCom.2010.27     Document Type: Conference Paper

References (34)

1. B. Stewart. 1996. "Privacy Impact Assessments." Privacy Law & Policy Reporter. 3 (7), pp. 61-64. http://www.austii.edu/au/journals/PLPR/ 39.html.
2. C. Bennett. R. Bayley. A. Charlesworth. R. Clarke. 2007. "Privacy Impact Assessments: International study of their application and effects." http://www.ico.gov.uk/upload/documents/library/corporate/research-and-reports/ privacy-impact-assessment-international-study.011007.pdf#13.
3. D. Tancock. S. Pearson. A. Charlesworth. "Analysis of Privacy Impact Assessments within Major Jurisdictions." Proceedings Privacy Security and Trust (PST) 2010, Ottawa, Canada.
4. D. Tancock. S. Pearson. A. Charlesworth. 2010. "The Emergence of Privacy Impact Assessments." http://www.hpl.hp.com/techreports/2010/HPL- 2010-63.pdf.
5. A. Cavoukian. 2009. "Privacy by Design: The 7 Foundational Principles." http://www.ipc.on.ca/images/Resources/7foundationalprinciples. pdf.
6. ServiceOntario. 2010. "Personal Health Information Protection Act 2004." http://www.elaws.gov.on.ca/html/statues/english/elaws-statues-04p03- e.htm.
7. Canadian Treasury Board Secretariat. 2010. "Directive on Privacy Impact Assessment 2010." http://www.tbssct.gc.ca/pol/doc-eng.aspx?id= 18308§ion=text#cha1.
8. Information Commissioners Office. 2009. "Privacy Impact Assessment Handbook." http://www.ico.gov.uk/handbook/June.2009.
9. E. Knorr. G. Gruman. 2008. "What cloud computing really means." InfoWorld. http://www.infoworld.com/d/cloudcomputing/what-cloud- computing-really-means-031.
10. S. Pearson. A. Charlesworth. "Accountability as a Way Forward for Privacy Protection in the Cloud." Proceedings.1st CloudCom 2009,ed.M. G. Jaatun, G. Zhao, C. Rong, Beijing, Springer LNCS 5931, pp. 131-144.
11. S. Pearson. " Taking account of privacy when designing cloud computing services." Proceedings. ICSE Workshop on Software engineering Challenges of Cloud Computing, Vancouver, Canada, May 2009, pp. 44-52.
12. European Network and Information Security Agency (enisa). 2009. "Cloud Computing: Benefits, risks and recommendations for information security." http://www.enisa.europa.eu/act/rm/files/deliverables/cloud- computing-risk-assessment.
13. Cloud Security Alliance. 2009. "Security Guidance for Critical Areas of Focus in Cloud Computing V2.1." http://www.cloudsecurityalliance.org/ guidance/csaguide.pdf.
14. R. Gellman. 2009. "Privacy in the Clouds: Risks to Privacy and Confidentiality from Cloud Computing." http://worldprivacyforum.org/pdf/ WPF-Cloud-Privacy-Report.pdf.
15. K. Zeng. A. Cavoukian. 2010. "Modelling Cloud Computing Architecture without Compromising Privacy: A Privacy by Design Approach." http://www.ipc.on.ca/images/Resources/pbd-NECcloud.pdf.
16. J. Giarratano. 2005. "Expert Systems: Principles and Programming." Canada. Thomson Learning.
17. A. Andrenucci. E. Sneiders. "Automated question answering: review of the main approaches." Proceedings, 3rd IEEE International Conference on Information Technology and Applications (ICITA), 2005, pp. 514-519. volume 1.
18. JBoss Drools. 2010. http://jboss.org/drools.
19. D. Solove. 2008. "Understanding Privacy." Harvard, Harvard University Press, United States.
20. OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data. 2010. http://www.oecd.org/document/18/0,2340,en-2649-34255- 1815186-1-1-1-1,00.html.
21. T. Karol. 2009. "A Guide to Cross-Border Privacy Impact Assessments." http://www.isaca.org/Knowledge-Center/Research/ ResearchDeliverables/Pages/A-Guide-To-Cross-Border-Privacy-Impact-Assessments. aspx.
22. R. Susskind. 1989. "The latent damage system: a jurisprudential analysis." 2nd International Conference on Artificial Intelligence and Law. Vancouver, British Columbia, Canada, pp. 23-32. http://portal.acm.org/citation. cfm?doid=74014,74018.
23. J. Rhoton. 2009. "Cloud Computing Explained." 2nd edition. United States. Recursive Press.
24. Trusted Computing Group. 2010. "TCG Architecture Overview, Version 1.4." http://www.trustedcomputinggroup.org/resources/tcg-architecture- overview-version-14.
25. Hewlett Packard. 2010. "Home Location Register (HLR)." http://h20208.www2.hp.com/opencall/products/mobility/ochlr/index.jsp.
26. Nasuni. 2010. http://www.nasuni.com/.
27. S. Pearson. Y. Shen. M. Mowbray. "A Privacy Manager for Cloud Computing." Proceedings, 1st CloudCom 2009, ed. M. G. Jaatun. G. Zhao. C. Rong. Beijing, Springer LNCS 5931, pp. 90-106.
28. C. Preimesberger. 2010. "IBM, Aetna Join for New Cloud- Based Health Care Support System." http://www.eweek.com/c/a/Health-Care-IT/IBM-Aetna- Join-for-New-CloudBased-Health-Care-Support-System-667092/.
29. CambridgeSoft. 2010. "ChemBioOffice Cloud - An Integrated Decision Support System for CHDI." http://chembionews.cambridgesoft.com/WhitePapers/ Default.aspx?whitePaperID=43.
30. R. Harbird. M. Ahmed. A. Finkelstein. E. McKinney. A. Burroughs. 2007. "Privacy Impact Assessment with PRAIS." http://www.cs.ucl.ac.uk/staff/ A.Finkelstein/papers/hotpets.pdf.
31. Liberty Alliance Project. 2007. "ID governance - identify privacy and access policy, marketing requirements document." http://www. projectliberty.org/.
32. S. Pearson, T. Sander and R. Sharma. "Privacy Management for Global Organisations." Data Privacy Management and Autonomous Spontaneous Security, J. Garcia et al (Eds),LNCS 5939,pp. 9-17, Springer-Verlag Berlin Heidelburg, 2010. http://www.springerlink.com/content/a13142g81255p453/fulltext. pdf?page=1,March 2010 .
33. S. Pearson. P. Rao. T. Sander. A. Parry. A. Paull. S. Patruni. V. Dandamudi-Ratnakar. P. Sharma. "Scalable, Accountable Privacy Management for Large Organizations." INSPEC 2009: 2nd International Workshop on Security and Privacy Distributed Computing, Enterprise Distributed Object Conference Workshops (EDOCW 2009), IEEE, pp. 168-175.
34. T. Sander. S. Pearson. "Decision Support for Selection of Cloud Service Providers." To appear in International Journal on Computing (JoC), GTSF, 2010.