Privacy Engineering: Shaping an Emerging Field of Research and Practice

Gürses, Seda; Álamo, José M. Del

doi:10.1109/msp.2016.37

Cited by 81 publications

(67 citation statements)

References 18 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Thus, the idea of designing privacy in ICT systems has been the subject of much debate in several organizations and domains. Moreover, in the literature, there are some works that aim to formulate privacy standards for ICT system design [17,20], but efforts to deal with privacy using technical means are still scattered and disconnected [29].…”

Section: Privacy and Designmentioning

confidence: 99%

Perceptions of ICT Practitioners Regarding Software Privacy

Canedo

Calazans

Masson

et al. 2020

Entropy

View full text Add to dashboard Cite

During software development activities, it is important for Information and Communication Technology (ICT) practitioners to know and understand practices and guidelines regarding information privacy, as software requirements must comply with data privacy laws and members of development teams should know current legislation related to the protection of personal data. In order to gain a better understanding on how industry ICT practitioners perceive the practical relevance of software privacy and privacy requirements and how these professionals are implementing data privacy concepts, we conducted a survey with ICT practitioners from software development organizations to get an overview of how these professionals are implementing data privacy concepts during software design. We performed a systematic literature review to identify related works with software privacy and privacy requirements and what methodologies and techniques are used to specify them. In addition, we conducted a survey with ICT practitioners from different organizations. Findings revealed that ICT practitioners lack a comprehensive knowledge of software privacy and privacy requirements and the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados Pessoais, LGPD, in Portuguese), nor they are able to work with the laws and guidelines governing data privacy. Organizations are demanded to define an approach to contextualize ICT practitioners with the importance of knowledge of software privacy and privacy requirements, as well as to address them during software development, since LGPD must change the way teams work, as a number of features and controls regarding consent, documentation, and privacy accountability will be required.

show abstract

Section: Privacy and Designmentioning

confidence: 99%

Perceptions of ICT Practitioners Regarding Software Privacy

Canedo

Calazans

Masson

et al. 2020

Entropy

View full text Add to dashboard Cite

show abstract

“…It has been widely recognized as the practical complement to PbD by the EDPS (European Data Protection Supervisor, which has created the Internet Privacy Engineering Network -IPEN), ENISA (European Network and Information Security Agency) [21], and the proponents of PbD themselves [22]. The keystones of this field are precisely the methods employed by engineers to capture and address privacy issues during the different stages of the development of sociotechnical systems, and the software tools that support engineers to perform the engineering tasks or activities prescribed by such methods [23].…”

Section: Position: Methods and Tools For Privacy Engineeringmentioning

confidence: 99%

Methods and Tools for GDPR Compliance Through Privacy and Data Protection Engineering

Martín

Kung

2018

2018 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW)

View full text Add to dashboard Cite

In this position paper we posit that, for Privacy by Design to be viable, engineers must be effectively involved and endowed with methodological and technological tools closer to their mindset, and which integrate within software and systems engineering methods and tools, realizing in fact the definition of Privacy Engineering. This position will be applied in the soon-tostart PDP4E project, where privacy will be introduced into existent general-purpose software engineering tools and methods, dealing with (risk management, requirements engineering, model-driven design, and software/systems assurance).

show abstract

“…For example, P5 said, The principles are complex and lengthy, how can I implement them?. Previous work has also challenged privacy practices such as PbD for being complex and too theoretical to be used within the software development processes [13,21,30,32]. These privacy practices are mostly generated through social and legal research [4,21], in order to broadly capture a vast amount of privacy requirements and present them in an abstract form, such as the respect for user privacy principle in PbD.…”

Section: Participants Had Trouble Relating Privacy Requirements Into mentioning

confidence: 99%

“…With the phenomenon of privacy engineering, translating vague privacy concepts into engineering solutions for software developers has become an attractive area of research [13]. The systematic approach for PIA proposed by Oetzel et al [21] is one example which shows the development of privacy engineering solutions for developers to practice privacy within their development practices.…”

Section: Recommendationsmentioning

confidence: 99%

Why developers cannot embed privacy into software systems?

Senarath

Arachchilage

2018

Proceedings of the 22nd International Conference on Evaluation and Assessment in Software Engineering 2018

View full text Add to dashboard Cite

Pervasive use of software applications continue to challenge user privacy when users interact with software systems. Even though privacy practices such as Privacy by Design (PbD), have clear instructions for software developers to embed privacy into software designs, those practices are yet to become a common practice among software developers. The difficulty of developing privacy preserving software systems highlights the importance of investigating software developers and the problems they face when they are asked to embed privacy into application designs. Software developers are the community who can put practices such as PbD into action. Therefore identifying the problems they face when embedding privacy into software applications and providing solutions to those problems are important to enable the development of privacy preserving software systems. This study investigates 36 software developers in a software design task with instructions to embed privacy in order to identify the problems they face. We derive recommendation guidelines to address the problems to enable the development of privacy preserving software systems.

show abstract

Privacy Engineering: Shaping an Emerging Field of Research and Practice

Cited by 81 publications

References 18 publications

Perceptions of ICT Practitioners Regarding Software Privacy

Perceptions of ICT Practitioners Regarding Software Privacy

Methods and Tools for GDPR Compliance Through Privacy and Data Protection Engineering

Why developers cannot embed privacy into software systems?

Contact Info

Product

Resources

About