A Privacy Assessment Approach for Serviced Oriented Architecture Application

Abstract

Web services are middle-tier technologies used to access backend applications to perform various operations. Their usage has significantly increased in ecommerce applications since their introduction. Because of their wide usage, security in web services has become an important point of interest for many. User data provided by users during their transactions with online web services can be stolen and illegally used. Thus web service providers have started to strengthen security. This can lead to lack of user privacy. Privacy has received relatively less attention during the growth of information technology. User privacy management needs to be both from the user side and from web application side. User awareness about information security is the factor for user side privacy management. On the application side, the web applications must be compliant to privacy policies. In this paper, an approach is designed and implemented for a Privacy Policy Checker engine that automatically verifies and certifies a web service application based on the levels of overall privacy principle compliance and privacy statement compliance.

Assessing Privacy Protection in Alumni Service

“…To fulfill privacy protection, developer and designer select suitable existing plug-ins and build new plug-ins for missing controls. Thus our work extends from simply assessment to a more practical guideline as compared to previous work [35].…”

Defining Inspection Techniques for Detecting Privacy Problems in Online Social Networks

“…From this same perspective, Lichtenstein and Swatman [32] Anthonysamy et al [33] and Yu et al [34] have sought to add value to the privacy policies aspect through the development of guidelines, approaches, and methods. Yu et al [34] point out the importance of anonymity and confidentiality as points that must be specified by policies to establish trust and ensure user privacy.…”

“…From this same perspective, Lichtenstein and Swatman [32] Anthonysamy et al [33] and Yu et al [34] have sought to add value to the privacy policies aspect through the development of guidelines, approaches, and methods. Yu et al [34] point out the importance of anonymity and confidentiality as points that must be specified by policies to establish trust and ensure user privacy. The authors emphasize that policy documents should explicitly explain how users' personal information, which is provided in login or financial transactions, are protected, and under what circumstances these applications may disclose such information, i.e., in cases required by law.…”

“…To assist in achieving clearer and more consistent privacy policies, PIT-OSN 3 has verification items that help inspectors detect a possible privacy defect in the OSN policy landscape. Based on the theoretical contribution of [31], [20], [33], [34], the dimensions which structure the technique in focus have been formulated, which are described below. the method of collection and the purpose for which the data is collected.…”

Towards protecting consumer's privacy in Service-Oriented Architecture

“…An approach to evaluate the privacy compliance level of Web service applications was developed [13]. The approach includes a component called privacy policy checker, which can be plugged into applications to perform different verifications.…”