@inproceedings{BL_HST11,
 author = {Travis D. Breaux and Catherine B. Lotrionte},
 affiliation = {Carnegie Mellon University and Georgetown University},
 title = {Towards a Privacy Management Framework for Distributed Cybersecurity in the New Data Ecology},
 year = {2011},
 month = {November},
 booktitle = {HST'11: Proceedings of the IEEE International Conference on Technologies for Homeland Security},
 publisher = {IEEE},
 pages = {6--12},
 location = {Waltham, Massachusetts},
 abstract = {Cyber security increasingly depends on advance
notice of emerging threats as individuals, groups or nations
attempt to exfiltrate information or disrupt systems
and services. Advance notice relies on having access to the
right information at the right time. This information includes
trace digital evidence, distributed across public and
private networks that are governed by various privacy
policies, inter-agency agreements, federal and state laws
and international treaties. To enable rapid and assured
information sharing that protects privacy, the US government
needs a means to balance privacy with the need to
share. In this paper, we review US laws and policies governing
government surveillance and describe key elements
for a privacy management framework that seeks to enable
government investigations while protecting privacy in a
systematic way. The framework aligns existing Federal
investigative guidelines for attributing a cyberattack with
concerns for automated decision making that arise from
the Fourth Amendment Òreasonable expectation of privacyÓ
and several fair information practice principles. We
discuss technical challenges for those seeking to implement
this framework.},
}