Data privacy laws and regulations in certain areas prohibit the use of subject’s real names or identifiers which can easily be attributed to a subject (e.g. account names like jdoe).

Sentinel should provide the capability of hiding these identifiers from analysts. Analysts should work with pseudonyms instead. A pseudonym is an identifier of a subject other than one of the subject’s real names (http://dud.inf.tu-dresden.de/Anon_Terminology.shtml). Once malicious activity has been detected, the linking between a pseudonym and its holder may be revealed to certain parties.

RMS#31991

by: Norbert K. | over a year ago | Dashboards/Visualizations

Comments

• We are accepting this idea into our backlog. When it is planned for development, the status of the idea will be changed to "Planned".

  by: Ted Ernst | over a year ago

  official response

• Integration with Voltage may help. Arcsight already has this use case implemented to help respond to GDPR. Just thought to comment...

  by: Jean-Paul G. | over a year ago