Protection of personal data in security alert sharing platforms

摘要: In order to ensure confidentiality, integrity and availability (so called CIA triad) of data within network infrastructure, it is necessary be able detect handle cyber security incidents. For this purpose, vital for Computer Security Incident Response Teams (CSIRT) have enough on relevant events threats. That why CSIRTs share alerts incidents using various sharing platforms. Even though they do so primarily protect privacy users, their use also lead additional processing personal data, which may cause new risks. European protection law, especially with the adoption General regulation, sets out very strict rules one hand leads greater individual's rights, but other creates great obstacles those who need any data. This paper analyses Data Protection Regulation (GDPR), case-law by Article 29 Working Party propose optimal methods level effective alert platforms, would legally compliant appropriate balance between