Graph-based data-collection policies for the internet of things

TY - CHAP

T1 - Graph-based data-collection policies for the internet of things

AU - Fernández, Maribel

AU - Jaimunk, Jenjira

AU - Thuraisingham, Bhavani

PY - 2018/12/4

Y1 - 2018/12/4

N2 - Smart industrial control systems (e.g., smart grid, oil and gas systems, transportation systems) are connected to the internet, and have the capability to collect and transmit data; as such, they are part of the IoT. The data collected can be used to improve services; however, there are serious privacy risks. This concern is usually addressed by means of privacy policies, but it is often difficult to understand the scope and consequences of such policies. Better tools to visualise and analyse data collection policies are needed. Graph-based modelling tools have been used to analyse complex systems in other domains. In this paper, we apply this technique to IoT data-collection policy analysis and visualisation. We describe graphical representations of category-based data collection policies and show that a graph-based policy language is a powerful tool not only to specify and visualise the policy, but also to analyse policy properties. We illustrate the approach with a simple example in the context of a chemical plant with a truck monitoring system. We also consider policy administration: we propose a classification of queries to help administrators analyse policies, and we show how the queries can be answered using our technique.

AB - Smart industrial control systems (e.g., smart grid, oil and gas systems, transportation systems) are connected to the internet, and have the capability to collect and transmit data; as such, they are part of the IoT. The data collected can be used to improve services; however, there are serious privacy risks. This concern is usually addressed by means of privacy policies, but it is often difficult to understand the scope and consequences of such policies. Better tools to visualise and analyse data collection policies are needed. Graph-based modelling tools have been used to analyse complex systems in other domains. In this paper, we apply this technique to IoT data-collection policy analysis and visualisation. We describe graphical representations of category-based data collection policies and show that a graph-based policy language is a powerful tool not only to specify and visualise the policy, but also to analyse policy properties. We illustrate the approach with a simple example in the context of a chemical plant with a truck monitoring system. We also consider policy administration: we propose a classification of queries to help administrators analyse policies, and we show how the queries can be answered using our technique.

KW - Category-Based Data Collection

KW - Internet of Things

KW - Policy Analysis

KW - Policy Visualisation

KW - Privacy Policy

UR - http://www.scopus.com/inward/record.url?scp=85060606557&partnerID=8YFLogxK

U2 - 10.1145/3295453.3295455

DO - 10.1145/3295453.3295455

M3 - Conference paper

AN - SCOPUS:85060606557

SP - 9

EP - 16

BT - Proceedings - 4th Annual Industrial Control System Security Workshop, ICSS 2018

PB - Association for Computing Machinery

T2 - 4th Annual Industrial Control System Security Workshop, ICSS 2018

Y2 - 4 December 2018

ER -