Learning a Privacy Incidents Database

Abstract

A repository of privacy incidents is essential for understanding the attributes of products and policies that lead to privacy incidents. We describe our vision for a novel privacy incidents database and our progress toward building a prototype. Key challenges in gathering such a database include bootstrapping and sustainability. We propose a semi-automated framework that can recognize privacy incidents and related information from various online sources such as news, blogs, and social media. The crux of our framework is an incident classi er that identi es whether a piece of text in natural language is related to a privacy incident or not. We curate a dataset consisting of 1324 news articles of which 543 articles are about one or more privacy incidents. We train the incident classi er on this dataset, considering a variety of feature engineering, feature selection, and classi cation techniques. We nd that our incident classi er yields an F 1 measure of 93.1%, which is about 12% higher than the keyword search-based baselines we adopt. CCS CONCEPTS • Security and privacy → Human and societal aspects of security and privacy; • Information systems → Data analytics;

Diachronic Embeddings for People in the News

“…The Guardian provides all their content via an API called OpenPlatform 2 , launched in 2009 (Anderson, 2009). This data source has seen only tangential use in the scientific community (Li et al, 2016;Guimarães and Figueira, 2017;Murukannaiah et al, 2017) and has not been used for diachronic models before.…”

Çorba: crowdsourcing to obtain requirements from regulations and breaches

“…Breaches are frequently caused by social (user misbehavior) and technical (flaws in software) violations. Breach reports [21,34,47], often legally mandated, describe cases where deployed systems fail, or are maliciously or accidentally misused [31,41], and suggest actions to prevent, detect, and recover from future breaches [28,38]. Breach reports can help security analysts understand regulations by providing instances where regulations are violated.…”