PRIPARE: Integrating Privacy Best Practices into a Privacy Engineering Methodology

Notario, Nicolás; Crespo, Alberto; Martín, Yod-Samuel; Álamo, José M. Del; Métayer, Daniel Le; Antignac, Thibaud; Kung, Antonio; Kroener, Inga; Wright, David

doi:10.1109/spw.2015.22

Cited by 82 publications

(72 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…A system designer is thus still required to have a thorough understanding of privacy and the forces involved, to design a privacy friendly system. Clearly, more guidance and a more methodological approach is required to establish a privacy engineering process as, for example, worked on by the PRIPARE project [38].…”

Section: On Privacy Strategies and Privacy Patternsmentioning

confidence: 99%

Tales from the Dark Side: Privacy Dark Strategies and Privacy Dark Patterns

Bösch¹,

Erb²,

Kargl³

et al. 2016

Proceedings on Privacy Enhancing Technologies

199

119

View full text Add to dashboard Cite

Privacy strategies and privacy patterns are fundamental concepts of the privacy-by-design engineering approach. While they support a privacy-aware development process for IT systems, the concepts used by malicious, privacy-threatening parties are generally less understood and known. We argue that understanding the "dark side", namely how personal data is abused, is of equal importance. In this paper, we introduce the concept of privacy dark strategies and privacy dark patterns and present a framework that collects, documents, and analyzes such malicious concepts. In addition, we investigate from a psychological perspective why privacy dark strategies are effective. The resulting framework allows for a better understanding of these dark concepts, fosters awareness, and supports the development of countermeasures. We aim to contribute to an easier detection and successive removal of such approaches from the Internet to the benefit of its users.

show abstract

Section: On Privacy Strategies and Privacy Patternsmentioning

confidence: 99%

Tales from the Dark Side: Privacy Dark Strategies and Privacy Dark Patterns

Bösch¹,

Erb²,

Kargl³

et al. 2016

Proceedings on Privacy Enhancing Technologies

199

119

View full text Add to dashboard Cite

show abstract

“…Firstly, it was established to facilitate the information system with privacy and security by design methodology, as well as supporting its practice to the ICT community. Secondly, it was developed to foster risk management culture through educational material targeted at stakeholders [21,69]. PRIPARE proposed a methodology for the application of PbD that can be easily combined with most system development phases.…”

Section: Priparementioning

confidence: 99%

A Systematic Literature Review on Privacy by Design in the Healthcare Sector

et al. 2020

View full text Add to dashboard Cite

In this digital age, we are observing an exponential proliferation of sophisticated hardware- and software-based solutions that are able to interact with the users at almost every sensitive aspect of our lives, collecting and analysing a range of data about us. These data, or the derived information out of it, are often too personal to fall into unwanted hands, and thus users are almost always wary of the privacy of such private data that are being continuously collected through these digital mediums. To further complicate the issue, the infringement cases of such databanks are on a sharp rise. Several frameworks have been devised in various parts of the globe to safeguard the issue of data privacy; in parallel, constant research is also being conducted on closing the loopholes within these frameworks. This study aimed to analyse the contemporary privacy by design frameworks to identify the key limitations. Seven contemporary privacy by design frameworks were examined in-depth in this research that was based on a systematic literature review. The result, targeted at the healthcare sector, is expected to produce a high degree of fortification against data breaches in the personal information domain.

show abstract

“…[73] PbD is a process that involves technical and organizational means that embed and implement privacy and data protection principles in systems with distinct functionalities. [64] PbD means that privacy and data protection are embedded throughout the entire life cycle of technologies, from the early design stage to their deployment, use and ultimate disposal. [56] PbD implies that privacy protection is a system requirement that must be treated like any other functional requirement.…”

Section: Number Of Papersmentioning

confidence: 99%

A Systematic Mapping Study on Privacy by Design in Software Engineering

Morales-Trujillo

García-Mireles

Matla-Cruz

et al. 2019

CLEIej

View full text Add to dashboard Cite

Protecting personal data in current software systems is a complex issue that requires legal regulations and constraints to manage personal data as well as a methodological support to develop software systems that would safeguard data privacy of their respective users. Privacy by Design (PbD) approach has been proposed to address this issue and has been applied to systems development in a variety of application domains. The aim of this work is to determine the presence of PbD and its extent in software development efforts. A systematic mapping study was conducted in order to identify relevant literature that collects PbD principles and goals in software development as well as methods and/or practices that support privacy aware software development. 53 selected papers address PbD mostly from a theoretical perspective with proposals validation based primarily on experiences or examples. The findings suggest that there is a need to develop privacy-aware methods to be integrated at all stages of software development life cycle and validate them in industrial settings.

show abstract

PRIPARE: Integrating Privacy Best Practices into a Privacy Engineering Methodology

Cited by 82 publications

References 14 publications

Tales from the Dark Side: Privacy Dark Strategies and Privacy Dark Patterns

Tales from the Dark Side: Privacy Dark Strategies and Privacy Dark Patterns

A Systematic Literature Review on Privacy by Design in the Healthcare Sector

A Systematic Mapping Study on Privacy by Design in Software Engineering

Contact Info

Product

Resources

About