GDPR Security and Confidentiality compliance in LMS' a problem analysis and engineering solution proposal

We have studied the main Learning Management Systems (LMSs) to comprehend how personal data is processed and stored. We found that all the users' personal information, activity, and logs are stored unencrypted on the server filesystem and databases. A user with access to such resources may have...

Descripción completa

Detalles Bibliográficos
Autores: Amo-Filvà, Daniel, Alier Forment, Marc, García-Peñalvo, Francisco J., Fonseca Escudero, David, Casany, María José
Tipo de recurso: artículo
Estado:Versión aceptada para publicación
Fecha de publicación:2019
País:España
Institución:Universidad de Salamanca (USAL)
Repositorio:GREDOS. Repositorio Institucional de la Universidad de Salamanca
OAI Identifier:oai:gredos.usal.es:10366/140549
Acceso en línea:http://hdl.handle.net/10366/140549
Access Level:acceso abierto
Palabra clave:Learning Analytics
GDPR
confidentiality
data privacy
digital identity
data security management
learning management systems
1203.17 Informática
id ES_c259c797fa44a8ef91c460c2e6f80be6
oai_identifier_str oai:gredos.usal.es:10366/140549
network_acronym_str ES
network_name_str España
repository_id_str
spelling GDPR Security and Confidentiality compliance in LMS' a problem analysis and engineering solution proposalAmo-Filvà, DanielAlier Forment, MarcGarcía-Peñalvo, Francisco J.Fonseca Escudero, DavidCasany, María JoséLearning AnalyticsGDPRconfidentialitydata privacydigital identitydata security managementlearning management systems1203.17 InformáticaWe have studied the main Learning Management Systems (LMSs) to comprehend how personal data is processed and stored. We found that all the users' personal information, activity, and logs are stored unencrypted on the server filesystem and databases. A user with access to such resources may have full access to all the personal information and metainformation stored. Therefore, the LMSs are very vulnerable to information leaks in front of targeted hacker attacks due to weak GDPR compliance. In this paper, we analyze this problem from a technical and operational perspective for the open-source market leader LMS Moodle, and we propose a solution and a prototype of implementation.202020202019info:eu-repo/semantics/articleinfo:eu-repo/semantics/acceptedVersionapplication/pdfhttp://hdl.handle.net/10366/140549reponame:GREDOS. Repositorio Institucional de la Universidad de Salamancainstname:Universidad de Salamanca (USAL)InglésAtribución-NoComercial-CompartirIgual 4.0 Internacionalhttp://creativecommons.org/licenses/by-nc-sa/4.0/info:eu-repo/semantics/openAccessoai:gredos.usal.es:10366/1405492026-06-07T06:28:51Z
dc.title.none.fl_str_mv GDPR Security and Confidentiality compliance in LMS' a problem analysis and engineering solution proposal
title GDPR Security and Confidentiality compliance in LMS' a problem analysis and engineering solution proposal
spellingShingle GDPR Security and Confidentiality compliance in LMS' a problem analysis and engineering solution proposal
Amo-Filvà, Daniel
Learning Analytics
GDPR
confidentiality
data privacy
digital identity
data security management
learning management systems
1203.17 Informática
title_short GDPR Security and Confidentiality compliance in LMS' a problem analysis and engineering solution proposal
title_full GDPR Security and Confidentiality compliance in LMS' a problem analysis and engineering solution proposal
title_fullStr GDPR Security and Confidentiality compliance in LMS' a problem analysis and engineering solution proposal
title_full_unstemmed GDPR Security and Confidentiality compliance in LMS' a problem analysis and engineering solution proposal
title_sort GDPR Security and Confidentiality compliance in LMS' a problem analysis and engineering solution proposal
dc.creator.none.fl_str_mv Amo-Filvà, Daniel
Alier Forment, Marc
García-Peñalvo, Francisco J.
Fonseca Escudero, David
Casany, María José
author Amo-Filvà, Daniel
author_facet Amo-Filvà, Daniel
Alier Forment, Marc
García-Peñalvo, Francisco J.
Fonseca Escudero, David
Casany, María José
author_role author
author2 Alier Forment, Marc
García-Peñalvo, Francisco J.
Fonseca Escudero, David
Casany, María José
author2_role author
author
author
author
dc.subject.none.fl_str_mv Learning Analytics
GDPR
confidentiality
data privacy
digital identity
data security management
learning management systems
1203.17 Informática
topic Learning Analytics
GDPR
confidentiality
data privacy
digital identity
data security management
learning management systems
1203.17 Informática
description We have studied the main Learning Management Systems (LMSs) to comprehend how personal data is processed and stored. We found that all the users' personal information, activity, and logs are stored unencrypted on the server filesystem and databases. A user with access to such resources may have full access to all the personal information and metainformation stored. Therefore, the LMSs are very vulnerable to information leaks in front of targeted hacker attacks due to weak GDPR compliance. In this paper, we analyze this problem from a technical and operational perspective for the open-source market leader LMS Moodle, and we propose a solution and a prototype of implementation.
publishDate 2019
dc.date.none.fl_str_mv 2019
2020
2020
dc.type.none.fl_str_mv info:eu-repo/semantics/article
info:eu-repo/semantics/acceptedVersion
format article
status_str acceptedVersion
dc.identifier.none.fl_str_mv http://hdl.handle.net/10366/140549
url http://hdl.handle.net/10366/140549
dc.language.none.fl_str_mv Inglés
language_invalid_str_mv Inglés
dc.rights.none.fl_str_mv Atribución-NoComercial-CompartirIgual 4.0 Internacional
http://creativecommons.org/licenses/by-nc-sa/4.0/
info:eu-repo/semantics/openAccess
rights_invalid_str_mv Atribución-NoComercial-CompartirIgual 4.0 Internacional
http://creativecommons.org/licenses/by-nc-sa/4.0/
eu_rights_str_mv openAccess
dc.format.none.fl_str_mv application/pdf
dc.source.none.fl_str_mv reponame:GREDOS. Repositorio Institucional de la Universidad de Salamanca
instname:Universidad de Salamanca (USAL)
instname_str Universidad de Salamanca (USAL)
reponame_str GREDOS. Repositorio Institucional de la Universidad de Salamanca
collection GREDOS. Repositorio Institucional de la Universidad de Salamanca
repository.name.fl_str_mv
repository.mail.fl_str_mv
_version_ 1869418658658254848
score 15,300719

Similares en LA Referencia