Privacy injector - Automated privacy enforcement through aspects

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4258 LNCS, Issue , 2006, Pages 99-117

  Berghe, Chris Vanden ^a,b   Schunter, Matthias ^a  

^a IBM RESEARCH ZURICH   (Switzerland)

^b UNIVERSITY OF LEUVEN   (Belgium)

Author keywords

[No Author keywords available]

Indexed keywords

CUSTOMER ACCEPTANCE; PERSONAL DATA; POLICY LANGUAGE; POLICY PARADIGM; PRACTICAL IMPLEMENTATION; PRIVACY ENFORCEMENT; PRIVACY POLICIES;

DATA HANDLING; JET PUMPS; METADATA;

DATA PRIVACY;

EID: 77049125775     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11957454_6     Document Type: Conference Paper

References (31)

1. Rakesh Agrawal, Jerry Kiernan, Ramakrishnan Srikant, and Yirong Xu. Hippocratic databases. In Proceedings of the 28th Int'l Conf. on Very Large Databases (VLDB), Hong Kong, 2002.
2. Michael Backes, Walid Bagga, Günter Karjoth, and Matthias Schunter. Efficient comparison of enterprise privacy policies. 19th ACM Symposium on Applied Computing, Special Track Security, Nicosia, Cyprus, 2004.
3. Michael Backes, Birgit Pfitzmann, and Matthias Schunter. A toolkit for managing enterprise privacy policies. 8th European Symposium on Research in Computer Security (ESORICS 2003), Lecture Notes in Computer Science, 2808:162-180, 2003.
4. Claudio Bettini, Sushil Jajodia, X. Sean Wang, and Duminda Wijesekerat. Obligation monitoring in policy management. In Proceedings of the 3rd IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY), pages 2-12, 2002.
5. Piero A. Bonatti, Ernesto Damiani, Sabrina De Capitani di Vimercati, and Pierangela Samarati. A component-based architecture for secure data publication. In Proceedings of the 17th Annual Computer Security Applications Conference, pages 309-318, 2001.
6. Grady Booch, Jim Rumbaugh, and Ivar Jacobson. The Unified Modeling Language User Guide. Addison-Wesley, 1998.
7. N. Damianou, N. Dulay, E. Lupo, and M. Sloman. The ponder policy specification language. Policies for Distributed Systems and Networks (Policy 2001), Lecture Notes in Computer Science 1995, pages 18-39, 2001.
8. S. Egelman, L. Cranor, and A. Chowdhury. An analysis of p3p-enabled web sites among top-20 search results. In Proceedings of the Eighth International Conference on Electronic Commerce, 2006.
9. Robert Filman, Tzilla Elrad, Siobhán Clarke, and Mehmet Akşit. Aspect-Oriented Software Development. Addison-Wesley, 2004.
10. Simone Fischer-Hübner. IT-security and privacy: Design and use of privacy-enhancing security mechanisms, volume 1958 of Lecture Notes in Computer Science. Springer, 2002.
11. E. Gamma, R. Helm, R. Johnson, and J. Vlissides. Design Patterns: Elements of Reusable Object-Oriented Software. Addison-Wesley, 1995.
12. IBM. Declarative privacy monitoring. Web page at http://alphaworks.ibm. com/tech/dpm.
13. Sushil Jajodia, Michiharu Kudo, and V. S. Subrahmanian. Provisional authorization. In Proceedings of the E-commerce Security and Privacy, pages 133-159. Kluwer Academic Publishers, 2001.
14. Günter Karjoth and Matthias Schunter. A privacy policy model for enterprises. In Proceedings of the 15th IEEE Computer Security Foundations Workshop (CSFW), pages 271-281, 2002.
15. Günter Karjoth, Matthias Schunter, and Els Van Herreweghen. Enterprise privacy practices vs. privacy promises - how to promise what you can keep. 4th IEEE International Workshop on Policies for Distributed Systems and Networks (Policy '03), Lake Como, Italy, pages 135-146, 2003.
16. Günter Karjoth, Matthias Schunter, and Michael Waidner. The platform for enterprise privacy practices - privacy-enabled management of customer data. In Proceedings of the Privacy Enhancing Technologies Conference, volume 2482 of Lecture Notes in Computer Science, pages 69-84. Springer, 2002.
17. Gregor Kiczales, Erik Hilsdale, Jim Hugunin, Mik Kersten, Jeffrey Palm, and William G. Griswold. An overview of AspectJ. Lecture Notes in Computer Science, 2072:327-355, 2001.
18. Gregor Kiczales, John Lamping, Anurag Menhdhekar, Chris Maeda, Cristina Lopes, Jean-Marc Loingtier, and John Irwin. Aspect-oriented programming. In Mehmet Akşit and Satoshi Matsuoka, editors, Proceedings of the European Conference on Object-Oriented Programming, volume 1241, pages 220-242. Springer-Verlag, Berlin, Heidelberg, and New York, 1997.
19. A. Myers and B. Liskov. Protecting privacy using the decentralized label model. ACM Transactions on Software Engineering and Methodology, pages 410-442, 2000.
20. Andrew C. Myers. JFlow: Practical mostly-static information flow control. In Proceedings of the Symposium on Principles of Programming Languages, pages 228-241, 1999.
21. Oasis. eXtensible Access Control Markup Language (XACML). Web page at http://www.oasis-open.org/committees/tchome.php?wg abbrev=xacml.
22. Platform for Privacy Preferences (P3P). W3C Recommendation, April 2002. http://www.w3.org/TR/2002/REC-P3P-20020416/.
23. David L. Parnas. On the criteria to be used in decomposing systems into modules, 1972.
24. Tadeusz Pietraszek and Chris Vanden Berghe. Defending against injection attacks through context-sensitive string evaluation. In Proceedings of the 8th International Symposium on Recent Advances in Intrusion Detection (RAID2005), pages 124-145, 2005.
25. AspectJ Project. The AspectJ home page. Web page at http://eclipse.org/ aspectj/.
26. Hibernate Project. Hibernate. Web page at http://hibernate.org/.
27. Carlos Ribeiro, Andre Zuquete, Paulo Ferreira, and Paulo Guedes. SPL: An access control language for security policies with complex constraints. In Proceedings of the Network and Distributed System Security Symposium (NDSS), 2001.
28. A. Sabelfeld and A. Myers. Language-based information-flow security, 2003.
29. Latanya Sweene. k-anonymity: A model for protecting privacy. International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems, 10(5):557-570, 2002.
30. Watchfire. Watchfire. Web page at http://watchfire.com/.
31. Bart De Win, Frank Piessens, Wouter Joosen, and Tine Verhanneman. On the importance of the separation-of-concerns principle in secure software engineering. In Proceedings of the ACSA Workshop on the Application of Engineering Principles to System Security Design, pages 1-10, 2003.