Designing Secure and Privacy-Preserving Information Systems for Industry Benchmarking

Abstract

Benchmarking is an essential tool for industrial organizations to identify potentials that allows them to improve their competitive position through operational and strategic means. However, the handling of sensitive information, in terms of (i) internal company data and (ii) the underlying algorithm to compute the benchmark, demands strict (technical) confidentiality guarantees—an aspect that existing approaches fail to address adequately. Still, advances in private computing provide us with building blocks to reliably secure even complex computations and their inputs, as present in industry benchmarks. In this paper, we thus compare two promising and fundamentally different concepts (hardware- and software-based) to realize privacy-preserving benchmarks. Thereby, we provide detailed insights into the concept-specific benefits. Our evaluation of two real-world use cases from different industries underlines that realizing and deploying secure information systems for industry benchmarking is possible with today’s building blocks from private computing.

Collection
Lecture Notes in Computer Science
Publication
Proceedings of the 35th International Conference on Advanced Information Systems Engineering (CAiSE '23)
Dr. rer. nat. Jan Pennekamp
Dr. rer. nat. Jan Pennekamp
Postdoctoral Researcher
Eduard Vlad
Eduard Vlad
Joscha Loos
Joscha Loos
Placeholder Avatar
Niklas Rodemann
Placeholder Avatar
Patrick Sapel
Placeholder Avatar
Seth Schmitz
Placeholder Avatar
Christian Hopmann
Placeholder Avatar
Matthias Jarke
Placeholder Avatar
Günther Schuh
Klaus Wehrle
Klaus Wehrle
Head of Group