Cargando…

Computer security for data collection technologies()

Many organizations in the developing world (e.g., NGOs), include digital data collection in their workflow. Data collected can include information that may be considered sensitive, such as medical or socioeconomic data, and which could be affected by computer security attacks or unintentional mishan...

Descripción completa

Detalles Bibliográficos
Autores principales: Cobb, Camille, Sudar, Samuel, Reiter, Nicholas, Anderson, Richard, Roesner, Franziska, Kohno, Tadayoshi
Formato: Online Artículo Texto
Lenguaje:English
Publicado: Elsevier Ltd 2018
Materias:
Acceso en línea:https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6277821/
https://www.ncbi.nlm.nih.gov/pubmed/30555887
http://dx.doi.org/10.1016/j.deveng.2017.12.002
_version_ 1783378236771663872
author Cobb, Camille
Sudar, Samuel
Reiter, Nicholas
Anderson, Richard
Roesner, Franziska
Kohno, Tadayoshi
author_facet Cobb, Camille
Sudar, Samuel
Reiter, Nicholas
Anderson, Richard
Roesner, Franziska
Kohno, Tadayoshi
author_sort Cobb, Camille
collection PubMed
description Many organizations in the developing world (e.g., NGOs), include digital data collection in their workflow. Data collected can include information that may be considered sensitive, such as medical or socioeconomic data, and which could be affected by computer security attacks or unintentional mishandling. The attitudes and practices of organizations collecting data have implications for confidentiality, availability, and integrity of data. This work, a collaboration between computer security and ICTD researchers, explores security and privacy attitudes, practices, and needs within organizations that use Open Data Kit (ODK), a prominent digital data collection platform. We conduct a detailed threat modeling exercise to inform our view on potential security threats, and then conduct and analyze a survey and interviews with technology experts in these organizations to ground this analysis in real deployment experiences. We then reflect upon our results, drawing lessons for both organizations collecting data and for tool developers.
format Online
Article
Text
id pubmed-6277821
institution National Center for Biotechnology Information
language English
publishDate 2018
publisher Elsevier Ltd
record_format MEDLINE/PubMed
spelling pubmed-62778212018-12-14 Computer security for data collection technologies() Cobb, Camille Sudar, Samuel Reiter, Nicholas Anderson, Richard Roesner, Franziska Kohno, Tadayoshi Dev Eng Article Many organizations in the developing world (e.g., NGOs), include digital data collection in their workflow. Data collected can include information that may be considered sensitive, such as medical or socioeconomic data, and which could be affected by computer security attacks or unintentional mishandling. The attitudes and practices of organizations collecting data have implications for confidentiality, availability, and integrity of data. This work, a collaboration between computer security and ICTD researchers, explores security and privacy attitudes, practices, and needs within organizations that use Open Data Kit (ODK), a prominent digital data collection platform. We conduct a detailed threat modeling exercise to inform our view on potential security threats, and then conduct and analyze a survey and interviews with technology experts in these organizations to ground this analysis in real deployment experiences. We then reflect upon our results, drawing lessons for both organizations collecting data and for tool developers. Elsevier Ltd 2018 /pmc/articles/PMC6277821/ /pubmed/30555887 http://dx.doi.org/10.1016/j.deveng.2017.12.002 Text en © 2018 The Authors http://creativecommons.org/licenses/by/4.0/ This is an open access article under the CC BY license (http://creativecommons.org/licenses/by/4.0/).
spellingShingle Article
Cobb, Camille
Sudar, Samuel
Reiter, Nicholas
Anderson, Richard
Roesner, Franziska
Kohno, Tadayoshi
Computer security for data collection technologies()
title Computer security for data collection technologies()
title_full Computer security for data collection technologies()
title_fullStr Computer security for data collection technologies()
title_full_unstemmed Computer security for data collection technologies()
title_short Computer security for data collection technologies()
title_sort computer security for data collection technologies()
topic Article
url https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6277821/
https://www.ncbi.nlm.nih.gov/pubmed/30555887
http://dx.doi.org/10.1016/j.deveng.2017.12.002
work_keys_str_mv AT cobbcamille computersecurityfordatacollectiontechnologies
AT sudarsamuel computersecurityfordatacollectiontechnologies
AT reiternicholas computersecurityfordatacollectiontechnologies
AT andersonrichard computersecurityfordatacollectiontechnologies
AT roesnerfranziska computersecurityfordatacollectiontechnologies
AT kohnotadayoshi computersecurityfordatacollectiontechnologies