Processing of botnet tracking data under the GDPR

Leon Böck

doi:10.1016/j.clsr.2021.105652

Processing of botnet tracking data under the GDPR

2022-07-01

5

OA

AI

Emmanouil Vasilomanolakis

DOI：10.1016/j.clsr.2021.105652

原文链接

查看原文

摘要

En 中文

Botnet research is one of the many research areas affected by the coming into force of the General Data Protection Regulation (GDPR). This article aims to identify the most appropriate legal bases that would legitimise data processing in the context of botnet tracking and to give an overview of the practical implications for practitioners. First, we give a technical introduction to botnet tracking techniques and the types of processed data. Afterward, we argue that botnet tracking qualifies as processing of personal data and falls under the material scope of the GDPR. We then present three scenarios where these botnet tracking techniques apply: botnet tracking research in the public interest, botnet tracking in the commercial interest and botnet tracking conducted by Internet service providers. For each scenario, we discuss the differing goals, identify the appropriate legal bases, and elaborate on the practical implications. This article concludes that the legal implications are very different for each of the three scenarios, highlighting the importance of carefully considering the legal bases before engaging in botnet tracking. (c) 2022 Leon Bock, Martin Fejrskov, Katerina Demetzou, Shankar Karuppayah, Max Muhlhauser, Emmanouil Vasilomanolakis. Published by Elsevier Ltd. This is an open access article under the CC BY license ( http://creativecommons.org/licenses/by/4.0/ )

Keyword:

Botnets

GDPR

Legal ground

Legitimate interest

Research

Processing of botnet tracking data under the GDPR

摘要

AI总结

期刊

机构

引用论文