Taking account of privacy when designing cloud computing services

Proceedings of the 2009 ICSE Workshop on Software Engineering Challenges of Cloud Computing, CLOUD 2009

Volumn , Issue , 2009, Pages 44-52

  Pearson, Siani ^a  

^a HEWLETT PACKARD LABORATORIES   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

CLOUD COMPUTING; DESIGN PRINCIPLES; LEGAL COMPLIANCE; PRODUCTION ENVIRONMENTS; SOFTWARE ENGINEERS;

COMPUTER SOFTWARE;

COMPUTER SCIENCE;

EID: 70349836055     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CLOUD.2009.5071532     Document Type: Conference Paper

References (37)

1. J. B. Horrigan, "Use of cloud computing applications and services", Pew Internet & American Life project memo, Sept 2008. http://www.pewinternet.org/pdfs/PIP-Cloud.Memo.pdf
2. A. Greenberg, "Cloud Computing's Stormy Side", Forbes Magazine, 19 Feb 2008. http://www.forbes.com/2008/02/17/web-application- cloud-tech-intel-cx-ag-0219cloud.html
3. nd International Conference on Privacy and Data Protection, 2000. http://www.privacy.gov.au/publications/seals.pdf
4. T. E. Elahi and S. Pearson, "Privacy Assurance: Bridging the Gap Between Preference and Practice", C. Lambrinoudakis, G. Pernul, A.M. Tjoa (eds.), Proc. TrustBus 2007, LNCS 4657, Springer-Verlag Berlin Heidelberg, 2007, pp. 65-74.
5. Microsoft Corporation, "Privacy Guidelines for Developing Software Products and Services", Version 2.1a, 26th April 2007. http://www. microsoft.com/Downloads/details.aspx?FamilyID=c48cf80f-6e87-48f5-83ec- a18d1ad2fc1f&displaylang=en
6. Information Commissioners Office, "Privacy by Design", Report, November 2008. www.ico.gov.uk
7. The Royal Academy of Engineering, "Dilemmas of Privacy and Surveillance: Challenges of Technological Change", March 2007. Available via www.raeng.org.uk/policy/reports/default.htm
8. D.J. Solove, "A Taxonomy of Privacy", University of Pennyslavania Law Review, vol 154, no 3, January 2006, p. 477. http://papers.ssrn.com/so13/papers.cfm?abstract-id=667622
9. J. Salmon, "Clouded in uncertainty - the legal pitfalls of cloud computing", Computing, 24 Sept 2008. http://www.computing.co.uk/ computing/features/2226701/clouded-uncertainty-4229153
10. A. Tweney and S. Crane, "Trustguide2: An exploration of privacy preferences in an online world", Expanding the Knowledge Economy: Issues, Applications, Case Studies, P. Cunningham and M. Cunningham (eds), IOS Press, 2007.
11. Salesforce.com, inc., Sales Force Automation web page, 2008. http://www.salesforce.com/products/sales-force-automation/
12. Federal Trade Commission, Privacy Online: Fair Information Practices in the Electronic Marketplace: A Federal Trade Commission Report to Congress. Washington DC: FTC, May 22, 2000.
13. Organization for Economic Co-operation and Development (OECD), "Guidelines governing the protection of privacy and transborder flows of personal data", Paris, 1980 and "Guidelines for consumer protection for e-commerce", 1999. www.ftc.gov/opa/1999/9912/oecdguide.htm
14. R. Clarke, "Xamax consultancy - PIA guidelines", 1999. http://www.xamax.com/au/.
15. Information Commissioner's Office, "PIA handbook", 2007. http://www.ico.gov.uk/
16. Office of the Privacy Commissioner of Canada, "Fact sheet: Privacy impact assessments", 2007. http://www.privcom.gc.ca/.
17. J.C. Cannon, "Privacy: What Developers and IT Professionals Should Know", Addison Wesley, 2004.
18. th6c
19. W3C EPAL and P3P. P3P, http://www.w3.org/TR/P3P/. EPAL, http://www.zurich.ibm.com/security/enterprise-privacy/epa1/
20. L. Cranor, Web Privacy with P3P, O'Reilly & Associates, September 2002. ISBN 0-59600-371-4.
21. PRIME, Privacy and Identity Management for Europe. 2008. http://www.prime-project.org.eu
22. EXOCOM Group, Inc., "Privacy Technology Review", August 2001. http://www.hc-sc.gc.ca/ohih-bsi/pubs/2001-tech/tech-e.html
23. J. Borking and C. Raab, "Law, PETs and Other Technologies for Privacy Protection." Journal of Information, Law and Technology, (University of Warwick), 2001 (1), February 28, 2001.
24. S. Fischer-Hubner, IT-Security and Privacy: Design and Use of Privacy-Enhancing Security Mechanisms, LNCS 1958, Springer, 2001.
25. Information Commissioners Office, "Privacy by Design: An overview of privacy enhancing technologies", November 2008. Available via http://www.ico.gov.uk/upload/documents/pdb-report-html/pbd-pets-paper.pdf
26. B. Schneier, Applied Cryptography. New York: John Wiley & Sons, 2nd edition, 1996.
27. Voltage, "Format-Preserving Encryption", 2009. http://www.voltage.com/technology/Technology-FormatPreservingEncryption.htm
28. M. Mowbray and S. Pearson, "A Client-Based Privacy Manager for Cloud Computing", HP Technical Report, 2009.
29. Y. Lindell, and B. Pinkas, "Privacy Preserving Data Mining", Journal of Cryptology, vol 15, no. 3, 2002.
30. M. Casassa-Mont, S. Pearson and P. Bramhall, "Towards Accountable Management of Identity and Privacy: Sticky Policies and Enforceable Tracing Services", Proc. DEXA 2003, IEEE Computer Society, 2003, pp. 377-382.
31. A. Patrick and S. Kenny, "From Privacy Legislation to Interface Design: Implementing Information Privacy in Human-Computer Interactions", R. Dingledine (ed.), PET 2003, LNCS 2760, pp. 107-124, Springer-Verlag Berlin Heidelberg, 2003.
32. rd conference on European Conference on Computer-Supported Cooperative Work, Italy, 1993, pp. 77-92.
33. EnCoRe, EnCoRe: Ensuring Consent and Revocation, http://www.encore- proiect.info
34. D. Cohen, M. Lindvall and P. Costa, "An introduction to agile methods", Advances in Computers, New York, Elsevier Science, 2004, pp. 1-66.
35. C. Alexander, S. Ishikawa, M. Silverstein, M. Jacobson, I. Fiksdahl-King and S. Angel, A Pattern Language: Towns, Buildings, Construction, New York, Oxford University Press, 1977. ISBN 978-0195019193.
36. Arista, "Cloud Networking: Design Patterns for 'Cloud Centric' Application Environments", January 2009. www.aristanetworks.com/en/ CloudCentricDesignPatterns.pdf
37. M. Hafiz, "A collection of privacy design patterns", Proc. 2006 Conference on Pattern Languages of Programs, ACM, NY, 2006, pp. 1-13.