Detecting privacy infractions in applications: A framework and methodology

2009 IEEE 6th International Conference on Mobile Adhoc and Sensor Systems, MASS '09

Volumn , Issue , 2009, Pages 694-701

  Smit, Michael ^a   Lyons, Kelly ^b   McAllister, Michael ^c   Slonim, Jacob ^c  

^a UNIVERSITY OF ALBERTA   (Canada)

^b UNIVERSITY OF TORONTO   (Canada)

^c DALHOUSIE UNIVERSITY   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

BUSINESS PROCESS; COMPLIANCE TESTING; CONSUMER PREFERENCES; PERSONAL INFORMATION; PRIVACY POLICIES; PRIVACY RULE; SOFTWARE APPLICATIONS; VALIDATION AND VERIFICATION;

COMPUTER SOFTWARE SELECTION AND EVALUATION; CRIME; ELECTRONIC COMMERCE; MANAGEMENT; SOFTWARE TESTING; VERIFICATION;

SENSORS;

EID: 74249102450     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/MOBHOC.2009.5336935     Document Type: Conference Paper

References (20)

1. L. Brandeis and S. Warren, "The right to privacy," Harvard Law Review, vol. IV, no. 5, pp. 193-220, 1890.
2. M. J. Maullo and S. B. Calo, "Policy management: An architecture and approach," in Proceedings of the IEEE First International Workshop on Systems Management, Los Angeles, CA, April 1993.
3. IBM Corporation, "IBM Tivoli Privacy Manager for ebusiness," last visited May 2008, http://www-306.ibm.com/software/tivoli/products/privacy- mgr-e-bus/.
4. R. J. Ziegler, "Business policies and decision making," in Meredith Publishing Company, New York, N.Y., 1966.
5. Treasury Board of Canada Secretariat, "Privacy impact assessment guidelines: A framework to manage privacy risks," 2002, http://www.tbs-sct.gc.ca/pubs-pol/ciopubs/pia-pefr/paipg-pefrld-e.asp.
6. M. Howard and D. LeBlanc, Writing Secure Code. Microsoft Press, 2002.
7. F. Swiderski and W. Snyder, Threat Modeling. Microsoft Press, 2004.
8. J. I. Hong, J. D. Ng, S. Lederer, and J. A. Landay, "Privacy risk models for designing privacy-sensitive ubiquitous computing systems," in Proceedings of the 2004 conference on Designing interactive systems: processes, practices, methods, and techniques. New York, NY: ACM Press, August 2004.
9. "Personal Information Protection and Electronic Documents Act (Canada)," Second Session, Thirty-sixth Parliament, 48-49 Elizabeth II, 1999-2000. Assented to April 2000.
10. Canadian Standards Association, "Model code for the protection of personal information," March 1996.
11. "Children's Online Privacy Protection Act (United States of America)," 15 U.S.C. § 6501; P.L. 105-277, 1998. Approved 1998.
12. European Parliament, "Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data," October 1995.
13. Harris Interactive, "Most people are "privacy pragmatists" who, while concerned about privacy, will sometimes trade it off for other benefits," 2003, http://www.harrisinteractive. com/harris-poll/index.asp? PID=365.
14. M. J. Culnan and P. K. Armstrong, "Information privacy concerns, procedural fairness, and impersonal trust: An empirical investigation," Organization Science, vol. 10, no. 1, pp. 104-115, 1999.
15. B. Givens, "Identity theft: How it happens, its impact on victims, and legislative solutions," Privacy Rights Clearinghouse, Written Testimony for U.S. Senate Judiciary Subcommittee on Technology, Terrorism, and Government Information, last updated July 2000, http://www.privacyrights.org/ar/id-theft. htm.
16. Roy Morgan Research, "Community attitudes to privacy," Office of the Federal Privacy Commissioner, Australia, 2001, http://www.privacy.gov.au/ publications/rcommunity.html.
17. R. C. Angell, "Preferences for moral norms in three problem areas," The American Journal ofSociology, vol. 67, no. 6, pp. 650-660, May 1962.
18. TRUSTe, "Consumers have false sense of security about online privacy actions inconsistent with attitudes," 2006.
19. D. Georgakopoulos, M. Hornick, and A. Sheth, "An overview of workflow management: From process modeling to workflow automation infrastructure," Distributed and Parallel Databases, vol. 3, no. 2, pp. 119-153, 1995.
20. M. Smit, Privacy in e-Commerce Software. VDM Verlag Dr. Mueller e.K., 2007.