An empirical study of natural language parsing of privacy policy rules using the SPARCLE policy workbench

ACM International Conference Proceeding Series

Volumn 149, Issue , 2006, Pages 8-19

  Brodie, Carolyn A ^a   Karat, Clare Marie ^a   Karat, John ^a  

^a IBM T J WATSON RESEARCH CENTER   (United States)

Author keywords

Design; Policy; Privacy; Security; Social and legal issues; Usability

Indexed keywords

NATURAL LANGUAGE; PRIVACY POLICIES; SPARCLE POLICY; WORKBENCH;

CONFORMAL MAPPING; DATA REDUCTION; HUMAN COMPUTER INTERACTION; NATURAL LANGUAGE PROCESSING SYSTEMS; SOCIETIES AND INSTITUTIONS; XML;

DATA PRIVACY;

EID: 34250717425     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1143120.1143123     Document Type: Conference Paper

References (24)

1. Ackerman, M., & Mainwaring, S. (2005). Privacy issues in human-computer interaction. In L. Cranor & S. Garfinkel (Eds.) Security and Usability: Designing Secure Systems That People Can Use, Sebastopol, CA: O'Reilly, 381-400.
2. Anderson R. J. A (1996). Security Policy Model for Clinical Information Systems. In the Proceedings of the 1996 IEEE Symposium on Security and Privacy, 30-43.
3. Anderson R. J. (2000). Privacy Technology Lessons from Healthcare. In the Proceedings of the 2000 IEEE Symposium on Security and Privacy.
4. Agrawal, R., Kiernan, J., Srikant, R., and Xu, Y. (2003). Implementing P3P Using Database Technology. Proceedings of the 19' International Conference on Data Engineering, Bangalore, India.
5. Ashley, P., Hada, S., Karjoth, G., Powers, C., and Schunter, M. (2003). Enterprise Privacy Architecture Language (EPAL 1.2). W3C Member Submission. http://www.w3.org/Submission/EPAL/
6. th International Conference on Electronic Commerce Research (ICECR-6).
7. Brodie, C., Karat, C., and Karat, J. (2005). Usable Security and Privacy: A Case Study of Developing Privacy Management Tools. Proceedings of the Symposium on Usable Privacy and Security, (SOUPS '05), ACM Digital Library.
8. CRA Conference on "Grand Research Challenges in Information Security and Assurance". http://www.cra.org/Activities/grand.challenges/ security/. November 16-19, 2003.
9. Cranor, L. (2002). Web Privacy with P3P. Cambridge: O'Reilly.
10. Cranor, L. (2005). Privacy policies and privacy preferences. In L. Cranor & S. Garfinkel (Eds.) Security and Usability: Designing Secure Systems That People Can Use, Sebastopol, CA: O'Reilly, 447-472.
11. IBM Research UIMA(2005) http://www.research.ibm.com/UIMA/
12. IBM Tivoli Privacy Manager for eBusiness (2004). http://www-306.ibm. com/software/tivoli/products/privacy-mgr-e-bus/.
13. Karat, C., Karat, J., Brodie, C., and Feng, J. (2006). Evaluating interfaces for privacy policy rule authoring. Proceedings of the Conference on Human Factors in Computing Systems - CHI 2006, ACM Press, 83-92.
14. Karat, J., Karat, C., Brodie, C., and Feng, J. (2005). Privacy in information technology: Designing to enable privacy policy management in organizations. International Journal of Human Computer Studies, 63, 1-2, 153-174.
15. th IEEE Computer Security Foundations Workshop, 271-281.
16. Michael, J.B., Ong V. L., and Rowe N. C, (2001) "Natural-language processing support for developing policy-governed software systems", 39th International Conference on Technology for Object-Oriented Languages and Systems, IEEE Computer Society Press, pp. 263-274.
17. Microsoft Internet Explorer (2004). Help Safeguard your privacy on the web. http://www.microsoft.com/windows/ie/using/howto/privacy/config.mspx
18. Neff, M., Byrd, R., and Boguraev, B. (2003) The Talent system: TEX-TRACT architecture and data model. In Proceedings of HLT-NAACL Workshop on Software Engineering and Architectures of Language Technology Systems, Edmonton, Alberta, Canada.
19. OASIS (2005). extensible Access Control Markup Language Version 2.0. http://docs.oasis-open.org/xacml/2.0/access_control-xacml-2.0-core-spec-os. pdf.
20. OASIS (2005). Privacy Policy Profile of XACML v2.0. http://docs.oasis- open.orig/xacml/2.0/PRIVACYPROFILE/access_control-xacml-2.0-privacy_profile- specos.pdf.
21. Ponemon Institute and IAPP. (2004). 2003 Benchmark Study of Corporate Privacy Practices.
22. Smith, J. (1993). Privacy policies and practices: Inside the organizational maze. Communications of the ACM, 36, 12, 105-122.
23. Whitten, A. and Tygar J. D. (1999) Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0. In Proceedings of the 9th USENIX Security Symposium, August, 1999.
24. W3C (2002) A P3P Preference Exchange Language 1.0 (APPEL 1.0). http://www.w3.org/TR/P3P-preferences/