A Risk Based Approach to Logging and Retrieval of User Data : Design and Implementation of a Remote Logging System using Action Design Research (ADR)
Antonis Glykas, Khalid Abdullah · Epubl LTU · 2014
This research project is aimed at creating a centralized remote logging Data Retention System (DRS) to be used in real world scenarios. The system is designed to follow the Swedish Data Retention Directive while being flexible to adapt to several existing network layouts. The DRS was designed and implemented by Abdullah as a service provided by the company he works for. The target of the DRS will be the Swedish market exclusively as it complies only with the Swedish Data Retention Directive. The project run using the ADR method as will be detailed below. Action Design Research (ADR) was the methodology used for this project. ADR combines the hands- on findings of Action Research (AR) and the theoretical knowledge of Design Science (DS) to solve problems through intervention and evaluation. As a result, an IT artifact (in this case, our DRS) was created and evaluated according to the ADR method. The duration of the project was initially calculated to be six months between April and October 2013, however in reality the project was finished and the first customer connected in December 2013. Several findings emerged related to the testing of Design Principles (DPs) extracted from earlier and poor research on Data retention since it is a new issue. The testing of ADR in the context of an Data retention system as well as the results of the implementation in the clients premises are also presented as well as the things to do in future projects. The output of the research project is the implementation of the DRS which was then offered as a service to City Network Operators wishing to comply with the mandatory Swedish Data Retention Directive at that time. This research provides an overview of the current state of Data retention directive in EU and in other countries around the world. Moreover we present an implementation of a logging system and how it can be used in a big organization.