Testing privacy policies using models

Proceedings - 6th IEEE International Conference on Software Engineering and Formal Methods, SEFM 2008

Volumn , Issue , 2008, Pages 117-126

  Salas, Percy Pari ^a   Krishnan, Padmanabhan ^a  

^a BOND UNIVERSITY   (Australia)

Author keywords

[No Author keywords available]

Indexed keywords

HIGH LEVEL LANGUAGES; SOFTWARE ENGINEERING; SOFTWARE TESTING;

APPLICATIONS.; FORMAL MODELS; PRIVACY POLICIES; SOFTWARE SYSTEMS; TEST CASES; TESTING PROCESSES;

FORMAL METHODS;

EID: 58049165637     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SEFM.2008.7     Document Type: Conference Paper

References (14)

1. A. H. Anderson. A comparison of two privacy policy languages: Epal and xacml. In SWS '06: Proceedings of the 3rd ACM workshop on Secure web services, pages 53-60, New York, NY, USA, 2006. ACM Press.
2. M. Backes, G. Karjoth, W. Bagga, and M. Schunter. Efficient comparison of enterprise privacy policies. In SAC '04: Proceedings of the 2004 ACM symposium on Applied computing, pages 375-382, New York, NY, USA, 2004. ACM.
3. A. Barth, A. Datta, J. C. Mitchell, and H. Nissenbaum. Privacy and contextual integrity: Framework and applications. In SP '06: Proceedings of the 2006 IEEE Symposium on Security and Privacy (S&P'06), pages 184-198, Washington, DC, USA, 2006. IEEE Computer Society.
4. L. Cranor, B. Dobbs, S. Egelman, G. Hogben, J. Humphrey, M. Langheinrich, M. Marchiori, M. Presler-Marshall, J. M. Reagle, M. Schunter, D. A. Stampley, and R. Wenning. The platform for privacy preferences 1.1 (p3p1.1) specification. Note NOTE-P3P11-20061113, World Wide Web Consortium, November 2006.
5. S. Gürses, J. H. Jahnke, C. Obry, A. Onabajo, T. Santen, and M. Price. Eliciting confidentiality requirements in practice. In CASCON '05: Proceedings of the 2005 conference of the Centre for Advanced Studies on Collaborative research, pages 101-116. IBM Press, 2005.
6. K. Irwin, T. Yu, and W. H. Winsborough. On the modeling and analysis of obligations. In CCS '06: Proceedings of the 13th ACM conference on Computer and communications security, pages 134-143, New York, NY, USA, 2006. ACM Press.
7. C. Jackson, A. Bortz, D. Boneh, and J. C. Mitchell. Protecting browser state from web privacy attacks. In WWW '06: Proceedings of the 15th international conference on World Wide Web, pages 737-744, New York, NY, USA, 2006. ACM Press.
8. G. Karjoth and M. Schunter. A privacy policy model for enterprises. In CSFW '02: Proceedings of the 15th IEEE workshop on Computer Security Foundations, page 271, Washington, DC, USA, 2002. IEEE Computer Society.
9. Y. H. Li, H. Y. Paik, B. Benatallah, and S. Benbernou. Formal consistency verification between bpel process and privacy policy. In Privacy Security Trust 2006 (PST 2006), pages 212-223. McGraw Hill, October 2006.
10. E. Martin and T. Xie. A fault model and mutation testing of access control policies. In WWW '07: Proceedings of the 16th international conference on World Wide Web, pages 667-676, New York, NY, USA, 2007. ACM Press.
11. E. Martin, T. Xie, and T. Yu. Defining and measuring policy coverage in testing access control policies. In Proceedings of the 8th International Conference on Information and Communications Security, volume 4307 of Lecture Notes in Computer Science, pages 139-158. Springer, 2006.
12. P. N. Otto and A. I. Antón. The role of law in requirements engineering. Technical Report TR-2007-07, North Carolina State University, 2007.
13. C. Powers and M. Schunter. Enterprise privacy authorization language (EPAL 1.2). W3C Member Submission, November 2003.
14. E. Yu and L. Cysneiros. Designing for privacy and other competing requirements. In Proceedings of the 2nd Symposium on Requirements Engineering for Information Security (SREIS-02),, 2002.