Assured Information Sharing - Concepts and Issues

摘要

The need to share information across organization is an imperative for many organizations, in both the private and public sectors. Sharing must not however undermine privacy and confidentiality of information. Accountability about the use of information, integrity, and support for compliance with respect to organizational policies are also crucial requirements. In this paper we introduce the notion of assured information sharing lifecycle as a framework for reasoning about approaches and techniques for securely sharing information. We then focus on policies relevant in the context of secure information sharing and discuss tools for policy management.