Visual analysis of privacy risks in web services

Proceedings - 2007 IEEE International Conference on Web Services, ICWS 2007

Volumn , Issue , 2007, Pages 671-678

  Yee, George ^a  

^a NATIONAL RESEARCH COUNCIL CANADA   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

E HEALTH; E-COMMERCE; EXISTING METHOD; INTERNATIONAL CONFERENCES; PRIVACY RISKS; SERVICE LIFE CYCLE; SERVICE USERS; VISUAL ANALYSIS; VISUAL TECHNIQUES;

ELECTRONIC COMMERCE; HEALTH RISKS; INFORMATION SERVICES; RISK ANALYSIS; RISK ASSESSMENT; RISKS; SAFETY FACTOR; WEB SERVICES;

WORLD WIDE WEB;

EID: 46849107129     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICWS.2007.189     Document Type: Conference Paper

References (18)

1. M. O'Neill et al, Web Services Security, McGraw-Hill/Osbome, 2003.
2. V.S. Iyengar, "Transforming Data to Satisfy Privacy Constraints", Proceedings, SIGKDD'02, Edmonton, Alberta, 2002.
3. A. Kobsa, J. Schreck, "Privacy through Pseudonymity in User-Adaptive Systems", ACM Transactions in Internet Technology, Vol. 3, No. 2, May 2003, pp. 149-183.
4. R. Song, L. Korba, and G. Yee, "Pseudonym Technology for E-Services", chapter in Privacy Protection for E-Services, edited by G. Yee, Idea Group, Inc., 2006.
5. C. Adams and K. Barbieri, "Privacy Enforcement in E-Services Environments", chapter in Privacy Protection for E-Services, edited by G. Yee, Idea Group, Inc., 2006.
6. S. Kenny and L. Korba, "Adapting Digital Rights Management to Privacy Rights Management", Computers & Security, Vol. 21, No. 7, November 2002, pp. 648-664.
7. G. Yee, L. Korba, "Privacy Policy Compliance for Web Services", Proceedings, 2004 IEEE International Conference on Web Services (ICWS 2004), San Diego, California, July 6-9, 2004.
8. Treasury Board of Canada, "The Privacy Impact Assessment Guidelines: A Framework to Manage Privacy Risk", available as of May 6, 2006, from: http://www.tbs-sct.gc.ca/pgol-pged/piatppfefvp/coursel/mod2/mod2-5_e.asp
9. I. Goldberg, D. Wagner, and E. Brewer, "Privacy-Enhancing Technologies for the Internet", IEEE COMPCON'97, 1997, pp. 103-109.
10. G. Yee, L. Korba, "Semi-Automatic Derivation and Use of Personal Privacy Policies in E-Business", International Journal of E-Business Research, Vol. 1, No. 1, Idea Group Publishing, 2005, pp. 54-69.
11. G. Yee, L. Korba, R. Song, L., "Legislative Bases for Personal Privacy Policy Specification", chapter in Privacy Protection for E-Services, edited by G. Yee, Idea Group, Inc., 2006.
12. W3C; "A P3P Preference Exchange Language 1.0 (APPEL 1.0)"; W3C Working Draft 15 April 2002, available as of February 28, 2007 at: http://www.w3.org/TR/P3P-preferences/
13. G. Yee, L. Korba, "Bilateral E-services Negotiation Under Uncertainty", Proceedings, The 2003 International Symposium on Applications and the Internet (SAINT2003), Orlando, Florida, Jan. 27-31, 2003.
14. G. Yee, L. Korba, "The Negotiation of Privacy Policies in Distance Education", Proceedings, 14th IRMA International Conference, Philadelphia, Pennsylvania, May 18-21, 2003.
15. J.I. Hong, J.D. Ng, S. Lederer, J.A. Landay, "Privacy Risk Models for Designing Privacy-Sensitive Ubiquitous Computing Systems", Proceedings, 2004 Conference on Designing Interactive Systems: Processes, Practices, Methods, and Techniques, Cambridge, MA, USA, 2004, pp. 91-100.
16. P.A. Karger, "Privacy and Security Threat Analysis of the Federal Employee Personal Identity Verification (PIV) Program", Proceedings of the Second Symposium on Usable Privacy and Security, Pittsburgh, Pennsylvania, USA, 2006, pp. 114-121.
17. C. Salter, O. Sami Saydjari, B. Schneier, J. Wallner, "Towards a Secure System Engineering Methodology", Proceedings of New Security Paradigms Workshop, Sept. 1998.
18. Wikipedia, "Data Flow Diagram", available at: http://en.wikipedia.org/wiki/Data_flow_diagram (visited July 1, 2006).