TY - GEN
T1 - Security as a service for user customized data protection
AU - Takahashi, Kenichi
AU - Matsuzaki, Takanori
AU - Mine, Tsunenori
AU - Kawamura, Takao
AU - Sugahara, Kazunori
PY - 2011
Y1 - 2011
N2 - Some of Internet services require users to provide their sensitive information such as credit card number, and an ID-password pair. In these services, the manner in which the provided information is used is solely determined by the service providers. As a result, even when the manner in which information is used by a service provider appears vulnerable, users have no choice but to allow such usage. In this paper, we propose a framework that enables users to select the manner in which their sensitive information is protected. In our framework, a policy, which defines the type of information protection, is offered as a Security as a Service. According to the policy, users can incorporate the type of information protection into a program. By allowing a service provider to use their sensitive information through this program, users can protect their sensitive information according to the manner chosen by them.
AB - Some of Internet services require users to provide their sensitive information such as credit card number, and an ID-password pair. In these services, the manner in which the provided information is used is solely determined by the service providers. As a result, even when the manner in which information is used by a service provider appears vulnerable, users have no choice but to allow such usage. In this paper, we propose a framework that enables users to select the manner in which their sensitive information is protected. In our framework, a policy, which defines the type of information protection, is offered as a Security as a Service. According to the policy, users can incorporate the type of information protection into a program. By allowing a service provider to use their sensitive information through this program, users can protect their sensitive information according to the manner chosen by them.
UR - http://www.scopus.com/inward/record.url?scp=79960381896&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=79960381896&partnerID=8YFLogxK
U2 - 10.1007/978-3-642-22191-0_27
DO - 10.1007/978-3-642-22191-0_27
M3 - Conference contribution
AN - SCOPUS:79960381896
SN - 9783642221903
T3 - Communications in Computer and Information Science
SP - 298
EP - 309
BT - Software Engineering and Computer Systems - Second International Conference, ICSECS 2011, Proceedings
T2 - 2nd International Conference on Software Engineering and Computer Systems, ICSECS 2011
Y2 - 27 June 2011 through 29 June 2011
ER -