A Test Process Model to Evaluate Performance Impact of Privacy Protection Solutions

Abstract

Organizational Information Systems (IS) collect, store, and manage personal information through web applications and services. Due to regulation laws and to protect the privacy of clients, such information must be kept private. Some solutions were developed to protect privacy personal information. Obviously, this additional resource will produce a performance impact and evaluating it is essential to determine the feasibility of the solution. This paper presents a process model to evaluate the performance impact introduced by privacy protection solutions in web applications. Case study shows the tests were useful to identify the conditions in which the solution under evaluation is able to work with minimal performance impact.

A Database Framework for Expressing and Enforcing Personal Privacy Preferences

“…With respect to the validation of the proposed solution, we decided to adopt the process proposed by Mello et al (2014) because it has already been applied to the evaluation of a privacy solution integrated in a web application. Furthermore, it supports the definition of tests scenarios, their execution and the comparison of the tests results, especially when using and not using the privacy solution.…”

“…To evaluate the proposed database framework effectiveness, a prototype tool was implemented and an experimental evaluation was conducted, both in terms of performance and scalability. We used the test process proposed by Mello et al (2014) and results show that, in practice, the proposed approach allows collecting the user preferences (criticality levels) and enforcing access control considering these preferences. This is done in a non-intrusive way and with an acceptable performance overhead.…”