TY - GEN
T1 - Developing a Framework of Comprehensive Criteria for Privacy Protections
AU - Wang, Tian
AU - Hayes, Carol Mullins
AU - Bashir, Masooda
N1 - Publisher Copyright:
© 2022, The Author(s), under exclusive license to Springer Nature Switzerland AG.
PY - 2022
Y1 - 2022
N2 - Cloud computing holds the promise of democratizing access to many computer resources, such as software, by effectively outsourcing computing tasks. However, this raises a variety of security and privacy concerns. Researchers and professionals must maintain security and privacy protections when managing data and information in cloud environments. While several security-related strategies and protections have already been established, there is still no comprehensive set of controls or criteria that specifically addresses privacy protection in the cloud. In this paper, we propose an all-encompassing privacy framework for cloud computing: the Comprehensive Criteria for Privacy Protections (C2P2) framework. The C2P2 framework was developed through qualitative analysis and evaluation of ten major existing privacy-related documents. This paper aims to present our initial and novel synthesis of the C2P2 framework, for which we found 107 unique privacy criteria across thirteen categories. This is the first assessment of its kind for the current privacy-related frameworks and serves as the first step towards establishing a comprehensive set of privacy protection criteria in cloud computing. We believe this framework provides an essential roadmap towards an inclusive privacy standard that information researchers and professionals can use to build controls and certifications.
AB - Cloud computing holds the promise of democratizing access to many computer resources, such as software, by effectively outsourcing computing tasks. However, this raises a variety of security and privacy concerns. Researchers and professionals must maintain security and privacy protections when managing data and information in cloud environments. While several security-related strategies and protections have already been established, there is still no comprehensive set of controls or criteria that specifically addresses privacy protection in the cloud. In this paper, we propose an all-encompassing privacy framework for cloud computing: the Comprehensive Criteria for Privacy Protections (C2P2) framework. The C2P2 framework was developed through qualitative analysis and evaluation of ten major existing privacy-related documents. This paper aims to present our initial and novel synthesis of the C2P2 framework, for which we found 107 unique privacy criteria across thirteen categories. This is the first assessment of its kind for the current privacy-related frameworks and serves as the first step towards establishing a comprehensive set of privacy protection criteria in cloud computing. We believe this framework provides an essential roadmap towards an inclusive privacy standard that information researchers and professionals can use to build controls and certifications.
KW - Cloud computing
KW - Information privacy
KW - Privacy framework
UR - http://www.scopus.com/inward/record.url?scp=85126919537&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=85126919537&partnerID=8YFLogxK
U2 - 10.1007/978-3-030-98015-3_61
DO - 10.1007/978-3-030-98015-3_61
M3 - Conference contribution
AN - SCOPUS:85126919537
SN - 9783030980146
T3 - Lecture Notes in Networks and Systems
SP - 905
EP - 918
BT - Advances in Information and Communication - Proceedings of the 2022 Future of Information and Communication Conference, FICC
A2 - Arai, Kohei
PB - Springer
T2 - Future of Information and Communication Conference, FICC 2022
Y2 - 3 March 2022 through 4 March 2022
ER -