Individual Privacy Supporting Organisational Security

Abstract

The large-scale change emergent from the global proliferation of cloud computing, smart homes, the internet of things and machine learning requires a novel view on the flow of confidential information and its classification. The security of an organisation is affected by the privacy enjoyed by its members. Sufficient data on those members can be leveraged in a so-called abduction attack aiming to extract confidential information from the organisation. The intention of this paper is to foster awareness of this effect. To illustrate it we develop a model of actors and data flows and discuss three scenarios in which he confidentiality achievable by an organisation is limited by the privacy of its members.