Guidelines for Stego/Malware Detection Tools: Achieving GDPR Compliance
Aleksandra Pawlicka, Dagmara Jaroszewska-Choraś, Michał Choraś, Marek Pawlicki
Abstract
Never before has cybersecurity been as significant for societies as today; its importance is still on the rise as people rely on computer systems every day. Recently, the ever-growing issues of personal data being stolen or misused have been addressed by several legal regulations, the most significant of them being the General Data Protection Regulation (GDPR). The paper deals with a specific cybersecurity measure, malware/stegomalware detection. This solution, which is meant to protect personal data from being used in a way that breaks the GDPR, has to be GDPR-compliant itself. This work describes the GDPR regulation in detail, indicates the specific challenges that may arise when applying malware/stegomalware solutions, and provides several recommendations for ensuring compliance with the regulation.