16th Annual Computer Security Applications Conference
December 11-15, 2000
New Orleans, Louisiana
Security against compelled disclosure
Ian Brown
Hidden Footprints
United Kingdom
Ben Laurie
A. L. Digital Ltd.
United Kingdom
Various existing and pending legislation can be used to force
individuals and organisations to disclose confidential information.
Courts may order a wide variety of data to be turned over by either
party in civil and criminal cases. Government agencies are explicitly
tasked with protecting ``national economic security.'' And organised
crime will target information just like any other valuable asset. In a
less than perfectly ethical world, companies require means to protect
their information assets against economic espionage, misuse of discovery
processes and criminal coercion. We describe actual and potential
examples of compelled disclosure abuses in the US and UK, and legal
enhancements to conventional security services for protecting
communications and stored data against their recurrence.
Read Paper (in PDF)