Die Vorratsdatenspeicherung in Europa

Riebe, Thea; Haunschild, Jasmin; Divo, Felix; Lang, Matthias; Roitburd, Gerbert; Franken, Jonas; Reuter, Christian

doi:10.1007/s11623-020-1275-3

“…The surveillance by the NSA of non-U.S. and non-EU citizens needs to be further studied, focusing on the quality and quantity of surveillance technologies, as well as the question of global coverage while there is a lack of political representation in the discourse on proportionality. Regarding the assessment of metadata surveillance, a comparison to the discourse on data preservation programs by internet providers can be drawn (Riebe et al 2020). Second, the ambivalent role of ICT companies as surveillance intermediaries needs further investigation.…”

Section: Discussionmentioning

confidence: 99%

U.S. Security Policy: The Dual-Use Regulation of Cryptography and its Effects on Surveillance

Riebe

¹

,

Kühn

²

,

Imperatori

³

et al. 2022

Self Cite

View full text Add to dashboard Cite

Cryptography has become ubiquitous in communication technology and is considered a necessary part of information security. However, both the regulation to restrict access to cryptography, as well as practices to weaken or break encryption, are part of the States’ security policies. The United States (U.S.) regulate cryptography for export in international trade as a dual-use good. However, the regulation has been increasingly loosened and transferred to bilateral agreements with Information and Communication Technology companies. At the same time, the National Security Agency attempted to implement a government encryption standard to guarantee itself easier access to data, thus progressively expanding surveillance on non-U.S. citizens. In this paper, using comparative policy analysis, we examine the evolution of both security policies by tracing the historical development of U.S. regulation of cryptography as a dual-use good, and surveillance technologies, and practices used from the 1990s to today. We conclude that the impact of the dual-use regulation has affected the efficiency of surveillance technology, by loosening regulations only for mass communication services, thereby supporting the proliferation of surveillance intermediaries, while working on strategies to collaborate and exploit their coverage.

show abstract

“…The GDRP has greatly influenced the coverage of privacy topics in data protection, such as safeguarding user data "with the options to access and rectify their information" [31]. In contrast to other organizations, authorities can only collect data for a legitimate and legally approved reason and have to comply with retention periods [47].…”

Section: Implications For Design and Organizationmentioning

confidence: 99%

Privacy Concerns and Acceptance Factors of OSINT for Cybersecurity: A Representative Survey

Riebe

¹

,

Biselli

²

,

Kaufhold

³

et al. 2023

PoPETs

View full text Add to dashboard Cite

The use of Open Source Intelligence (OSINT) to monitor and detect cybersecurity threats is gaining popularity among Cybersecurity Emergency or Incident Response Teams (CERTs/CSIRTs). They increasingly use semi-automated OSINT approaches when monitoring cyber threats for public infrastructure services and incident response. Most of the systems use publicly available data, often focusing on social media due to timely data for situational assessment. As indirect and affected stakeholders, the acceptance of OSINT systems by users, as well as the conditions which influence the acceptance, are relevant for the development of OSINT systems for cybersecurity. Therefore, as part of the ethical and social technology assessment, we conducted a survey (N=1,093), in which we asked participants about their acceptance of OSINT systems, their perceived need for open source surveillance, as well as their privacy behavior and concerns. Further, we tested if the awareness of OSINT is an interactive factor that affects other factors. Our results indicate that cyber threat perception and the perceived need for OSINT are positively related to acceptance, while privacy concerns are negatively related. The awareness of OSINT, however, has only shown effects on people with higher privacy concerns. Here, particularly high OSINT awareness and limited privacy concerns were associated with higher OSINT acceptance. Lastly, we provide implications for further research and the use of OSINT systems for cybersecurity by authorities. As OSINT is a framework rather than a single technology, approaches can be selected and combined to adhere to data minimization and anonymization as well as to leverage improvements in privacy-preserving computation and machine learning innovations. Regarding the use of OSINT, the results suggest to favor approaches that provide transparency to users regarding the use of the systems and the data they gather.

show abstract

“…The GDRP has greatly influenced the coverage of privacy topics in data protection, such as safeguarding user data "with the options to access and rectify their information" [31]. In contrast to other organizations, authorities can only collect data for a legitimate and legally approved reason and have to comply with retention periods [47].…”

Section: Implications For Design and Organizationmentioning

confidence: 99%

Privacy Concerns and Acceptance Factors of OSINT for Cybersecurity: A Representative Survey

Riebe¹

2023

Technology Assessment of Dual-Use ICTs

1

0

View full text Add to dashboard Cite

The use of Open Source Intelligence (OSINT) to monitor and detect cybersecurity threats is gaining popularity among Cybersecurity Emergency or Incident Response Teams (CERTs/CSIRTs). They increasingly use semi-automated OSINT approaches when monitoring cyber threats for public infrastructure services and incident response. Most of the systems use publicly available data, often focusing on social media due to timely data for situational assessment. As indirect and affected stakeholders, the acceptance of OSINT systems by users, as well as the conditions which influence the acceptance, are relevant for the development of OSINT systems for cybersecurity. Therefore, as part of the ethical and social technology assessment, we conducted a survey (N=1,093), in which we asked participants about their acceptance of OSINT systems, their perceived need for open source surveillance, as well as their privacy behavior and concerns. Further, we tested if the awareness of OSINT is an interactive factor that affects other factors. Our results indicate that cyber threat perception and the perceived need for OSINT are positively related to acceptance, while privacy concerns are negatively related. The awareness of OSINT, however, has only shown effects on people with higher privacy concerns. Here, particularly high OSINT awareness and limited privacy concerns were associated with higher OSINT acceptance. Lastly, we provide implications for further research and the use of OSINT systems for cybersecurity by authorities. As OSINT is a framework rather than a single technology, approaches can be selected and combined to adhere to data minimization and anonymization as well as to leverage improvements in privacy-preserving computation and machine learning innovations. Regarding the use of OSINT, the results suggest to favor approaches that provide transparency to users regarding the use of the systems and the data they gather.

show abstract

Die Vorratsdatenspeicherung in Europa

Cited by 5 publications

References 0 publications

U.S. Security Policy: The Dual-Use Regulation of Cryptography and its Effects on Surveillance

U.S. Security Policy: The Dual-Use Regulation of Cryptography and its Effects on Surveillance

Privacy Concerns and Acceptance Factors of OSINT for Cybersecurity: A Representative Survey

Privacy Concerns and Acceptance Factors of OSINT for Cybersecurity: A Representative Survey

Contact Info

Product

Resources

About