Towards a Modeling and Analysis Framework for Privacy-Aware Systems

Abstract

Nowadays, almost any software application deals with private information. However, effective tools that support the specification and implementation of privacy-aware systems are still missing. This work makes a step to address this issue. In this paper we present MAPaS, a model based framework for the modeling and analysis of privacy-aware systems. MAPaS provides a modeling language for the privacy domain and a rich set of functionalities that allow users to easily analyze privacypreserving characteristics of a system at the early stages of its development. In this paper, besides presenting the main modules of MaPaS, we show how it can effectively help in the development of privacy-aware systems.

Privacy Data Management and Awareness for Public Administrations: A Case Study from the Healthcare Domain

“…The Privacy Safeguard (PriS) [18], a privacy requirements engineering methodology, incorporates privacy requirements into the system design process, where privacy requirements are modelled as organisational goals. Next, the Modelling and Analysis of Privacy-aware Systems (MAPaS) framework [7] models requirements for privacy-aware systems. The authors in [23] adopt the concepts of privacy-by-policy and privacy-by-architecture, and propose a three-sphere model of user privacy concerns, relating it to system operations (i.e.…”

A framework for privacy aware data management in relational databases

“…In our previous paper (Colombo and Ferrari, 2012) we focused on those used to derive the intended purposes associated with data based on assignments specified at multiple granularity levels (e.g., to tables and attributes). Since the focus of this work is on privacy aware data management, in the rest of this section we discuss functionalities supporting the analysis of SQL queries.…”

“…In Colombo and Ferrari (2012) we made a first step to fill this void by proposing MAPaS -the modelling and analysis of privacy-aware systems -framework that we have built around the formalisation of privacy concepts proposed in Byun and Li (2008). MAPaS, which has been developed as a plugin (McAffer and Lemieux, 2005) of IBM Rational Software Architect (RSA) (http://www-01.ibm.com/software/awdtools/swarchitect), consists of the Privacy Aware Modelling Language (PaML), a notation supporting the specification of privacy policies and the design of privacy aware systems, and toolkits supporting the editing, validation and analysis of the designed systems wrt the specified policies.…”

“…The work described in this article is a revised and expanded version of Colombo and Ferrari (2012). The extension proposed in this paper consists in the extension of MAPaS to the definition of SQL privacy-aware queries, that is, queries that access a given database satisfying purpose and role-based privacy policies.…”

“…The interested reader can refer to Colombo and Ferrari (2012) for additional functionalities. The rest of the paper is organised as follows.…”