(Image from William Miller) Sources Transformation: End-Point Input Validation Ensuring integrity of data collected from sensors Sensors can detect abnormal temperature/environmental conditions for Real Time Security packages with special requirements. They can also detect Monitoring leaks/radiation. Data Discovery and Classification Secure Data Aggregation Aggregating data from sensors securely Transformation Uses: Sensor collected data can be private and can reveal information about the package and geo-information. Privacy preserving data analytics and Revealing such information needs to be privacy dissemination preserving. Compliance with regulations Dept of Homeland Security may monitor suspicious Govt access to data and freedom of expression packages moving into/out of the country. concerns Transformation Data Infrastructure: Data Centric Security such as identity/policy-based encryption Private, sensitive sensor data, package data should only be available to authorized individuals. Third party companies Policy management for access control like LoJack have low level access to the data. Computing on the encrypted data: searching/filtering/deduplicate/fully homomorphic encryption Audits Data Infrastructure: Securing Data Storage and Logging sensor data is essential for tracking packages. They should be Transaction logs kept in secure data stores. Key Management For encrypted data. Diversity of sensor types and data types may necessitate use of Security Best Practices for
(Image from William Miller) Sources Transformation: End-Point Input Validation Ensuring integrity of data collected from sensors Real Time Security Monitoring Sensors can detect abnormal temperature/environmental conditions for packages with special requirements. They can also detect leaks/radiation. Data Discovery and Classification Secure Data Aggregation Aggregating data from sensors securely Transformation Uses: Privacy preserving data analytics and dissemination Sensor collected data can be private and can reveal information about the package and geo-information. Revealing such information needs to be privacy preserving. Compliance with regulations Govt access to data and freedom of expression concerns Dept of Homeland Security may monitor suspicious packages moving into/out of the country. Transformation Data Infrastructure: Data Centric Security such as identity/policy-based encryption Policy management for access control Private, sensitive sensor data, package data should only be available to authorized individuals. Third party companies like LoJack have low level access to the data. Computing on the encrypted data: searching/filtering/deduplicate/fully homomorphic encryption Audits Data Infrastructure: Securing Data Storage and Transaction logs Logging sensor data is essential for tracking packages. They should be kept in secure data stores. Key Management For encrypted data. Security Best Practices for Diversity of sensor types and data types may necessitate use of