Detecting repurposing and over-collection in multi-party privacy requirements specifications

Breaux, Travis D.; Smullen, Daniel; Hibshi, Hanan

doi:10.1109/re.2015.7320419

Cited by 20 publications

(8 citation statements)

References 21 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Further research and guidelines may help companies to properly specify these policies. Third, and consequence from the second issue, we should include the ability to analyze not just one but a set of inter-related policies and automatically identify inconsistencies among the requirements stated in these policies, that increasingly appear in multi-tier systems, in which each tier may be owned and operated by a different party, and raising additional problems such as over-collection and repurposing (Breaux et al, 2015). Rei, andPonder.…”

Section: Discussionmentioning

confidence: 99%

An Evaluation of the Challenges of Multilingualism in Data Warehouse Development

Dediź

Stanier

2016

Proceedings of the 18th International Conference on Enterprise Information Systems

View full text Add to dashboard Cite

ICEIS 2016 received 257 paper submissions from 42 countries in all continents, which makes it one of the largest conferences in the World in the area of Information Systems, thus demonstrating the success and global dimension of this conference. From these, 42 papers were selected for publication and presentation at the Conference as full papers. These numbers, leading to a full-paper acceptance ratio of 16%, show the intention of preserving a high quality forum for this conference, a quality that we intend to maintain in the future, for the next editions of this conference.The high number and high quality of the received papers imposed difficult choices in the selection process. To evaluate each submission, a double blind paper review was performed by the Program Committee, whose members are highly qualified researchers in ICEIS topic areas.All presented papers will be available at the SCITEPRESS Digital Library and will be submitted for indexation by Thomson Reuters Conference Proceedings Citation Index (ISI), INSPEC, DBLP, EI (Elsevier Index) and Scopus.Additionally, a short list of presented papers will be selected to be expanded into a forthcoming book of ICEIS 2016 Selected Papers to be published by Springer in the LNBIP Series.The technical program of the conference included a panel and 4 invited talks delivered by internationally distinguished speakers, namely: Claudia Loebbecke (University of Cologne, Germany), Sergio Gusmeroli (TXT e-solutions SPA, Italy), Wil Van Der Aalst (Technische Universiteit Eindhoven, Netherlands) and Jan Vom Brocke (University of Liechtenstein, Liechtenstein). Their participation positively contributes to reinforce the overall quality of the Conference and to provide a deeper understanding of the fields addressed by the conference.Moreover, ICEIS 2016 had a Doctoral Consortium on Enterprise Information Systems and 1 tutorial. We are thankful to the Conference Co-chairs (Olivier Camp and José Cordeiro) and Program Co-chairs (Slimane Hammoudi, Leszek Maciaszek and Michele M. Missikoff) for their dedication and hard work in organizing these events.We sincerely thank all the authors for their submissions and participation in ICEIS 2016. Furthermore, we would like to thank all the members of the program committee and reviewers, who helped us with their expertise, dedication and time. We would also like to thank the invited speakers for their excellent contribution in sharing their knowledge and vision and the workshop/special session chairs whose collaboration with ICEIS 2015 was much appreciated. Finally, we gratefully acknowledge the professional support of the ICEIS 2016 team for all organizational processes. XIIIWe hope that all colleagues find this a fruitful and inspiring conference. We hope to contribute to the development of the Enterprise Information Systems community and look forward to having additional research results presented at the next edition of ICEIS, details of which are available at http://www.iceis.org. Slimane Hammoudi University of Cologne, GermanyAbstract:...

show abstract

Section: Discussionmentioning

confidence: 99%

An Evaluation of the Challenges of Multilingualism in Data Warehouse Development

Dediź

Stanier

2016

Proceedings of the 18th International Conference on Enterprise Information Systems

View full text Add to dashboard Cite

show abstract

Section: Steps In Privacy Policy Analysismentioning

confidence: 99%

“…When identifying the personal information mentioned in privacy policies, we find that some sentences contain refinement phrases [42]. The refinement phrase refines one general concept with more specific concepts [27], [42]. The specific concept refers to a specific kind of information accessed by the app (e.g., device ID) and the general concept is an abstraction of the specific concept (e.g., device information).…”

Section: Steps In Privacy Policy Analysismentioning

confidence: 99%

See 1 more Smart Citation

PPChecker: Towards Accessing the Trustworthiness of Android Apps’ Privacy Policies

Wang

Chen

et al. 2021

IIEEE Trans. Software Eng.

View full text Add to dashboard Cite

Recent years have witnessed a sharp increase of malicious apps that steal users' personal information. To address users' concerns about privacy risks and to comply with data protection laws, more and more apps are supplied with privacy policies written in natural language to help users understand an app's privacy practices. However, little is known whether these privacy policies are trustworthy or not. Questionable privacy policies may be prepared by careless app developers or someone with malicious intention. In this paper, we carry out a systematic study on privacy policy by proposing a novel approach to automatically identify five kinds of problems in privacy policy. After tackling several challenging issues, we implement the approach in a system, named PPChecker, and evaluate it with real apps and their privacy policies. The experimental results show that PPChecker can effectively identify questionable privacy policies with high precision. Applying PPChecker to 2,500 popular apps, we find that 1,850 apps (i.e., 74.0%) have at least one kind of problems. This study sheds light on the research of improving and regulating apps' privacy policies.

show abstract

“…Breaux et al [7] also elaborated techniques for modelling multi-party data flows requirements and verifying the purpose specification as well as limitation principles.…”

Section: Related Workmentioning

confidence: 99%

Requirements Engineering for Global Systems: Cultural, Regulatory and Technical Aspects

Spichkova

Schmidt

2019

Proceedings of the 14th International Conference on Evaluation of Novel Approaches to Software Engineering

View full text Add to dashboard Cite

In this paper we present a formal framework for analysis and optimisation of the requirements specifications of systems developed to apply in several countries. As different countries typically have different regulations/laws as well as different cultural restrictions, the corresponding specific requirements might differ in each particular case. Our framework provides a basis for (1) systematic and formal analysis of the diversity and interdependencies within the sets of the requirements, to avoid non-compliance, contradictions and redundancies; (2) corresponding systematic process for change management in the case of global system development. a a Preprint.

show abstract

Detecting repurposing and over-collection in multi-party privacy requirements specifications

Cited by 20 publications

References 21 publications

An Evaluation of the Challenges of Multilingualism in Data Warehouse Development

An Evaluation of the Challenges of Multilingualism in Data Warehouse Development

PPChecker: Towards Accessing the Trustworthiness of Android Apps’ Privacy Policies

Requirements Engineering for Global Systems: Cultural, Regulatory and Technical Aspects

Contact Info

Product

Resources

About