Ακαδημαϊκό Προσωπικό
Μήτρου Λίλιαν
Προσωπικά Στοιχεία
Μήτρου Λίλιαν
Καθηγήτρια
l [dot] mitrou [at] aegean [dot] gr
00302273082250
Πανεπιστήμιο Αιγαίου - Κ. Παλαμά 2
Πέμπτη 11.00-13.00
Copyright Notice: Το υλικό αυτό παρουσιάζεται για έγκαιρη διάδοση επιστημονικής και τεχνικής εργασίας. Τα πνευματικά δικαιώματα και όλα τα σχετικά δικαιώματα παραμένουν στους συγγραφείς ή σε άλλους κατόχους πνευματικών δικαιωμάτων. Όσοι αντιγράφουν αυτές τις πληροφορίες αναμένεται να τηρούν τους όρους και τους περιορισμούς που επιβάλλει το πνευματικό δικαίωμα κάθε συγγραφέα. Στις περισσότερες περιπτώσεις, τα έργα αυτά δεν μπορούν να αναδημοσιευτούν ή να αναπαραχθούν μαζικά χωρίς τη ρητή άδεια του κατόχου των πνευματικών δικαιωμάτων.
Επιστημονικά Συνέδρια
L. Mitrou, Marijn Janssen, E. Loukis, Human Control and Discretion in AI-driven Decision-making in Government, 14th International Conference on Theory and Practice of Electronic Governance – ICEGOV 2021, Loukis Euripidis, Macadar Marie Anne, Meyerhoff Nielsen Morten , Oct, 2021, Athens, Greece, ACM
Περίληψη:
Traditionally public decision-makers have been given discretion in many of the decisions they have to make in how to comply with legislation and policies. In this way, the context and specific circumstances can be taken into account when making decisions. This enables more acceptable solutions, but at the same time, discretion might result in treating individuals differently. With the advance of AI-based decisions, the role of the decision-makers is changing. The automation might result in fully automated decisions, humans in-the-loop or AI might only be used as recommender systems in which humans have the discretion to deviate from the suggested decision. The predictability of and the accountability of the decisions might vary in these circumstances, although humans always remain accountable. Hence, there is a need for human-control and the decision-makers should be given sufficient authority to control the system and deal with undesired outcomes. In this direction this paper analyzes the degree of discretion and human control needed in AI-driven decision-making in government. Our analysis is based on the legal requirements set/posed to the administration, by the extensive legal frameworks that have been created for its operation, concerning the rule of law, the fairness – non-discrimination, the justifiability and accountability, and the certainty/ predictability.
Traditionally public decision-makers have been given discretion in many of the decisions they have to make in how to comply with legislation and policies. In this way, the context and specific circumstances can be taken into account when making decisions. This enables more acceptable solutions, but at the same time, discretion might result in treating individuals differently. With the advance of AI-based decisions, the role of the decision-makers is changing. The automation might result in fully automated decisions, humans in-the-loop or AI might only be used as recommender systems in which humans have the discretion to deviate from the suggested decision. The predictability of and the accountability of the decisions might vary in these circumstances, although humans always remain accountable. Hence, there is a need for human-control and the decision-makers should be given sufficient authority to control the system and deal with undesired outcomes. In this direction this paper analyzes the degree of discretion and human control needed in AI-driven decision-making in government. Our analysis is based on the legal requirements set/posed to the administration, by the extensive legal frameworks that have been created for its operation, concerning the rule of law, the fairness – non-discrimination, the justifiability and accountability, and the certainty/ predictability.
Λήψη PDFMaria Eleni Skarkala, M. Maragoudakis, S. Gritzalis, L. Mitrou, PP-TAN: a Privacy Preserving Multi-party Tree Augmented Naive Bayes Classifier, SEEDA CECNSM 2020 5th South East Europe Design, Automation, Computer Engineering, Computer Networks and Social Media Conference, Sep, 2020, Corfu, Greece, IEEE CPS Conference Publishing Services, https://hilab.di.ionio.gr/seeda2020/
Περίληψη:
The rapid growth of Information and Communication Technologies emerges deep concerns on how data mining techniques and intelligent systems parse, analyze and manage enormous amount of data. Due to sensitive information contained within, data can be exploited by potential aggressors. Previous research has shown the most accurate approach to acquire knowledge from data while simultaneously preserving privacy is the exploitation of cryptography. In this paper we introduce an extension of a privacy preserving data mining algorithm designed and developed for both horizontally and vertically partitioned databases. The proposed algorithm exploits the multi-candidate election schema and its capabilities to build a privacy preserving Tree Augmented Naive Bayesian classifier. Security analysis and experimental results ensure the preservation of private data throughout mining processes.
The rapid growth of Information and Communication Technologies emerges deep concerns on how data mining techniques and intelligent systems parse, analyze and manage enormous amount of data. Due to sensitive information contained within, data can be exploited by potential aggressors. Previous research has shown the most accurate approach to acquire knowledge from data while simultaneously preserving privacy is the exploitation of cryptography. In this paper we introduce an extension of a privacy preserving data mining algorithm designed and developed for both horizontally and vertically partitioned databases. The proposed algorithm exploits the multi-candidate election schema and its capabilities to build a privacy preserving Tree Augmented Naive Bayesian classifier. Security analysis and experimental results ensure the preservation of private data throughout mining processes.
[1]
Vorras A., L. Mitrou, Regulation and Policy in the Algorithmic Society, 9th International Conference on Information Law and Ethics, (to_appear), 2019, Rome, Italy
[2]
L. Mitrou, Vorras A., Unboxing the Black Box: Algorithmic transparency and/or a right to functional explainability ?, International Conference Regulation and Enforcement in the Digital Age, (to_appear), 2019
[3]
L. Mitrou, Artificial Intelligence and Data Protection, 9th International Conference on Information Law and Ethics, (to_appear), 2019, Rome, Italy
[1]
Pipyros K., Thraskias Ch., L. Mitrou, D. Gritzalis, Apostolopoulos T., Cyber-attack evaluation using SAW method, 10th MEDITERRANEAN CONFERENCE ON INFORMATION SYSTEMS, Sep, 2016, Paphos, Cyprus
[2]
M. Karyda, L. Mitrou, Data Breach Notification: Issues and Challenges for Security Management, 10th MEDITERRANEAN CONFERENCE ON INFORMATION SYSTEMS, Sep, 2016, Paphos, Cyprus
[1]
L. Mitrou, P. Drogkaris, G. Leventakis, Legal and Social Aspects of Surveillance Technologies: CCTV in Greece, International Conference on Citizens’ Perspectives on Surveillance, Security and Privacy: Controversies, Alternatives and Solutions, pp. 39-41, Nov, 2014, Vienna, Austria, Conference Proceedings
[2]
Pipyros K., L. Mitrou, D. Gritzalis, A cyber attack evaluation methodology, 13th European Conference on Cyber Warfare and Security (ECCWS-2014),, pp. 264-270, Jul, 2014, Greece
[3]
L. Mitrou, M. Kandias, V. Stavrou, D. Gritzalis, Social media profiling: A Panopticon or Omniopticon tool?, 6th Conference of the Surveillance Studies Network, Apr, 2014, Spain
[1]
M. Kandias, L. Mitrou, V. Stavrou, D. Gritzalis, Which side are you on? A new Panopticon vs. privacy, 10th International Conference on Security and Cryptography (SECRYPT 2013), Samarati P., et al. , (eds), pp. 98-110, Jul, 2013, Iceland
[2]
M. Kandias, K. Galbogini, L. Mitrou, D. Gritzalis, Insiders trapped in the mirror reveal themselves in social media, 7th International Conference on Network and System Security (NSS 2013), LNCS 7873, pp. 220-235, Jun, 2013, Spain, Springer
[3]
E. Lalas, L. Mitrou, C. Lambrinoudakis, ProCAVE: Privacy-Preserving Collection and Authenticity Validation of Online Evidence, 10th International Conference on Trust, Privacy & Security in Digital Business (TRUSTBUS 2013), LNCS 8058, S. Furnell, C. Lambrinoudakis, J. Lopez, (eds), pp. 137-148, 2013, Chech Republic, Springer
[4]
M. Kandias, V. Stavrou, N. Bozovic, L. Mitrou, D. Gritzalis, Predicting the insider threat via social media: The YouTube case, 12th Workshop on Privacy in the Electronic Society (WPES 2013), 2013, Berlin, ACM Press
[5]
M. Kandias, V. Stavrou, N. Bozovic, L. Mitrou, D. Gritzalis, Can we trust this user? Predicting insider’s attitude via YouTube usage profiling, 10th IEEE International Conference on Autonomous and Trusted Computing (ATC 2013), 2013, Italy, IEEE Press
[6]
L. Mitrou, Naming and Blaming in Greece: Social Control as Law Enforcement Tool, Living in Surveillance Societies (LISS 2013), Webster W. et al., (eds), pp. 247-258, 2013, Great Britain
N.Marangos, P. Rizomiliotis, L. Mitrou, Digital Forensics in the Cloud Computing Era, IEEE GlobeCom 2012, Man-Sec Workshop, H. Eslambolchi, (ed), Dec, 2012, Anaheim, California, USA, IEEE Press
Περίληψη:
Cloud Computing (CC) is a promising next-generation computing paradigm providing network and computing resources on demand via the web. The cloud market is still in its infancy and all major issues, ranging from interoperability and standardization, to legislation and SLA contracts are still wide open. However, the main obstacle for a more catholic acceptance of the cloud model is security. In the CC model, the client has limited control over her data and computations as she outsources everything to the cloud provider. This basic CC feature influences several security related areas.
Cloud Computing (CC) is a promising next-generation computing paradigm providing network and computing resources on demand via the web. The cloud market is still in its infancy and all major issues, ranging from interoperability and standardization, to legislation and SLA contracts are still wide open. However, the main obstacle for a more catholic acceptance of the cloud model is security. In the CC model, the client has limited control over her data and computations as she outsources everything to the cloud provider. This basic CC feature influences several security related areas.
Maria Eleni Skarkala, Hannu Toivonen, Pirjo Moen, M. Maragoudakis, S. Gritzalis, L. Mitrou, Privacy Preservation by k-Anonymization of Weighted Social Networks, 2012 IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, P. Yu, K. Carley et al., (eds), pp. 423-428, Aug, 2012, Istanbul, Turkey, IEEE CPS Conference Publishing Services, http://dl.acm.org/ft_gateway.cfm?id=2457...
Περίληψη:
Privacy preserving analysis of a social network aims at a better understanding of the network and its behavior, while at the same time protecting the privacy of its individuals. We propose an anonymization method for weighted graphs, i.e., for social networks where the strengths of links are important. This is in contrast with many previous studies which only consider unweighted graphs. Weights can be essential for social network analysis, but they pose new challenges to privacy preserving network analysis. In this paper, we mainly consider prevention of identity disclosure, but we also touch on edge and edge weight disclosure in weighted graphs. We propose a method that provides k-anonymity of nodes against attacks where the adversary has information about the structure of the network, including its edge weights. The method is efficient, and it has been evaluated in terms of privacy and utility on real word datasets.
Privacy preserving analysis of a social network aims at a better understanding of the network and its behavior, while at the same time protecting the privacy of its individuals. We propose an anonymization method for weighted graphs, i.e., for social networks where the strengths of links are important. This is in contrast with many previous studies which only consider unweighted graphs. Weights can be essential for social network analysis, but they pose new challenges to privacy preserving network analysis. In this paper, we mainly consider prevention of identity disclosure, but we also touch on edge and edge weight disclosure in weighted graphs. We propose a method that provides k-anonymity of nodes against attacks where the adversary has information about the structure of the network, including its edge weights. The method is efficient, and it has been evaluated in terms of privacy and utility on real word datasets.
L. Mitrou, M. Karyda, EU΄s Data Protection Reform and the right to be forgotten - A legal response to a technological challenge?, 5th International Conference of Information Law and Ethics, Available at SSRN: http://ssrn.com/abstract=2165245, Jun, 2012, Corfu, Greece
Περίληψη:
Technological and social phenomena like cloud computing, behavioural advertising, online social networks as well as globalisation (of data flows) have profoundly transformed the way in which personal data are processed and used. This paper discusses the efficiency of the legislation in force and the impact of PETs and the concept of privacy by design on the enforcement of data protection rules. By recognizing the need to update the data protection regulation as a result of current technological trends that threaten to erode core principles of data protection, the paper addresses the question if the Draft-Regulation presents an adequate and efficient response to the challenges that technological changes pose to regulators. In this context the paper focuses on the right to be forgotten as a comprehensive set of existing and new rules to better cope with privacy risks online in the age of “perfect remembering” and we how persistency and high availability of information limit the right of individuals to be forgotten. The paper deals with both the normative and the technical instruments and requirements so as to ensure that personal information will not be permanently retained.
Technological and social phenomena like cloud computing, behavioural advertising, online social networks as well as globalisation (of data flows) have profoundly transformed the way in which personal data are processed and used. This paper discusses the efficiency of the legislation in force and the impact of PETs and the concept of privacy by design on the enforcement of data protection rules. By recognizing the need to update the data protection regulation as a result of current technological trends that threaten to erode core principles of data protection, the paper addresses the question if the Draft-Regulation presents an adequate and efficient response to the challenges that technological changes pose to regulators. In this context the paper focuses on the right to be forgotten as a comprehensive set of existing and new rules to better cope with privacy risks online in the age of “perfect remembering” and we how persistency and high availability of information limit the right of individuals to be forgotten. The paper deals with both the normative and the technical instruments and requirements so as to ensure that personal information will not be permanently retained.
Maria Eleni Skarkala, M. Maragoudakis, S. Gritzalis, L. Mitrou, Privacy Preserving Tree Augmented Naïve Bayesian Multi – party Implementation on Horizontally Partitioned Databases, TrustBus 2011 8th International Conference on Trust, Privacy and Security of Digital Business, S. Furnell, C. Lambrinoudakis, and G. Pernul, (eds), pp. 62 - 73, Aug, 2011, Toulouse, France, Lecture Notes in Computer Science LNCS, Springer, http://link.springer.com/content/pdf/10....
Περίληψη:
The evolution of new technologies and the spread of the Internet have led to the exchange and elaboration of massive amounts of data. Simultaneously, intelligent systems that parse and analyze patterns within data are gaining popularity. Many of these data contain sensitive information, a fact that leads to serious concerns on how such data should be managed and used from data mining techniques. Extracting knowledge from statistical databases is an essential step towards deploying intelligent systems that assist in making decisions, but also must preserve the privacy of parties involved. In this paper, we present a novel privacy preserving data mining algorithm from statistical databases that are horizontally partitioned. The novelty lies to the multi-candidate election schema and its capabilities of being a basic foundation for a privacy preserving Tree Augmented Naïve Bayesian (TAN) classifier, in order to obviate disclosure of personal information.
The evolution of new technologies and the spread of the Internet have led to the exchange and elaboration of massive amounts of data. Simultaneously, intelligent systems that parse and analyze patterns within data are gaining popularity. Many of these data contain sensitive information, a fact that leads to serious concerns on how such data should be managed and used from data mining techniques. Extracting knowledge from statistical databases is an essential step towards deploying intelligent systems that assist in making decisions, but also must preserve the privacy of parties involved. In this paper, we present a novel privacy preserving data mining algorithm from statistical databases that are horizontally partitioned. The novelty lies to the multi-candidate election schema and its capabilities of being a basic foundation for a privacy preserving Tree Augmented Naïve Bayesian (TAN) classifier, in order to obviate disclosure of personal information.
[1]
A.-M. Piskopani, L. Mitrou, Facebook: Reconstructing Communication and decostructing privacy law? , 4th Mediterranean Conference on Information Systems, Polymenakou/Pouloudi/Pramatari (eds.), Sep, 2009, Athens- Greece
[2]
E. Kosta, C. Kalloniatis, L. Mitrou, E. Kavakli, Search engines: gateway to a new “Panopticon”, TRUSTBUS -Trust, Privacy and Security in Digital Business, Lecture Notes in Computer Science, pp. 11-21, 2009, Berlin Heidelberg , Springer 2009
P. Drogkaris, D. Geneiatakis, S. Gritzalis, C. Lambrinoudakis, L. Mitrou, Towards an Enhanced Authentication Framework for eGovernment Services: The Greek case, EGOV’08 7th International Conference on Electronic Government, E. Ferro, J. Scholl, M. Wimmer, (eds), pp. 189-196, Sep, 2008, Torino, Italy, Trauner Verlag, http://www.icsd.aegean.gr/publication_fi...
Περίληψη:
It is widely accepted that electronic Government environments have caused a complete transformation of the way individuals, businesses and governmental agencies interact with central government. However, the acceptance and success of e-Government services largely depend on the level of trust and confidence developed by the users to the provided services and the overall system security. Thus the employment of the appropriate authentication framework is a crucial factor. This paper focuses on the way to determine the appropriate trust level of an electronic service. Specifically, it provides guidelines according to the data required for a transaction, as well as to the available authentication and registration mechanisms. Moreover, a Single Sign-On architecture is proposed, supporting a uniform authentication procedure that depends on the level of trust required by the service. In the aforementioned research work specific requirements and limitations for Greece have been taken into account.
It is widely accepted that electronic Government environments have caused a complete transformation of the way individuals, businesses and governmental agencies interact with central government. However, the acceptance and success of e-Government services largely depend on the level of trust and confidence developed by the users to the provided services and the overall system security. Thus the employment of the appropriate authentication framework is a crucial factor. This paper focuses on the way to determine the appropriate trust level of an electronic service. Specifically, it provides guidelines according to the data required for a transaction, as well as to the available authentication and registration mechanisms. Moreover, a Single Sign-On architecture is proposed, supporting a uniform authentication procedure that depends on the level of trust required by the service. In the aforementioned research work specific requirements and limitations for Greece have been taken into account.
M. Karyda, L. Mitrou, Internet Forensics: Legal and Technical issues, 2nd Annual Workshop on Digital Forensics and Incident Analysis (WDFIA 2007), pp. 3-12, 2007, Samos, Greece, IEEE
Περίληψη:
This paper provides a combined approach on the major issues pertaining to the investigation of cyber crimes and the deployment of Internet forensics techniques. It discusses major issues from a technical and legal perspective and provides general directions on how these issues can be tackled. The paper also discusses the implications of data mining techniques and the issue of privacy protection with regard to the use of forensics methods.
This paper provides a combined approach on the major issues pertaining to the investigation of cyber crimes and the deployment of Internet forensics techniques. It discusses major issues from a technical and legal perspective and provides general directions on how these issues can be tackled. The paper also discusses the implications of data mining techniques and the issue of privacy protection with regard to the use of forensics methods.
[1]
L. Mitrou, E-voting: Constitutional and Legal Requirements in the Recommendation of the Council of Europe , 2nd Votobit International Conference, J. Barrat, (ed), pp. 20, Oct, 2004, Leon-Spain, University of Leon
[1]
L. Mitrou, K. Moulinos, Privacy and Data Protection in Electronic Communications, MMM-ACNS, V. Gorodetsky, L. Popyack, V. Shormin, (eds), pp. 432-436, Sep, 2003, St. Petersburg, Springer
[1]
L. Mitrou, D. Gritzalis, S. K. Katsikas, Revisiting legal and regulatory requirements for secure e-voting , Proceedings, IFIP SEC 2002, pp. 469-480, 2002, Cairo, Egypt
[1]
L. Mitrou, Data Protection: a new constitutional right, Center for European Consitutional Law - Conferences, D. Tsatsos, V. Venizelos, X. Kontiadis, (eds), pp. 143-157, Oct, 2001, Athens, Ekdoseis Sakkoula
[1]
L. Mitrou, Privacy Protection on the Internet, EETT, pp. 71-85, May, 1999, Athens, EETT
[1]
L. Mitrou, Technology, Commerce and Data Proetction, Conference of the Association of the Greek Commercialista, pp. 173-198, Nov, 1998, Delfoi
[2]
L. Mitrou, Privacy: The hesitant and uncertain course of personal data protection, Twenty years of the Greek Constitution, Sakkoulas, (ed), pp. 33-52, 1998, Athens-Komotini