2022 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW)
554-561
Yes
International
The 1st International Workshop on Ethics in Computer Security (EthiCS 2022)
10-06-2022
University of Genoa, CINI - Consorzio Interuniversitario Nazionale per l'Informatica
Genoa
Italy
[en] Pseudonymization ; security measures ; GDPR compliance ; research ethics ; Named Entity Recognition
[en] This article discussed the challenges of pseudonymizing unstructured, noisy social media data for cybersecurity research purposes and presents an open- source package developed to pseudonymize personal and confidential information (i.e., personal names, companies, and locations) contained in such data. Its goal is to facilitate compliance with EU data protection obligations and the upholding of research ethics principles like the respect for the autonomy, privacy and dignity of research participants, the social responsibility of researchers, and scientific integrity. We discuss the limitations of the pseudonymizer package, their ethical import, and the additional security measures that should be adopted to protect the confidentiality of the data.
Interdisciplinary Centre for Security, Reliability and Trust (SnT) > Socio-Technical Cybersecurity (IRiSC)