Testing software in age of data privacy: A balancing act

SIGSOFT/FSE 2011 - Proceedings of the 19th ACM SIGSOFT Symposium on Foundations of Software Engineering

Volumn , Issue , 2011, Pages 201-211

  Taneja, Kunal ^a   Grechanik, Mark ^b   Ghani, Rayid ^b   Xie, Tao ^a  

^a NORTH CAROLINA STATE UNIVERSITY   (United States)

^b ACCENTURE   (United States)

Author keywords

Data anonymity; PRIEST; Privacy framework; Software testing; Utility

Indexed keywords

CODE COVERAGE; DATA ANONYMITY; ENTERPRISE COMPUTING; LOWER COST; PRIEST; PROGRAM ANALYSIS; SENSITIVE INFORMATIONS; TEST COVERAGE; TEST ENGINEERS; TESTING SOFTWARE; UTILITY;

DATA PRIVACY; DATABASE SYSTEMS; SOFTWARE ENGINEERING; TESTING;

SOFTWARE TESTING;

EID: 80053203782     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2025113.2025143     Document Type: Conference Paper

References (39)

1. C. C. Aggarwal. On k-anonymity and the curse of dimensionality. In VLDB, pages 901-909, 2005. (Pubitemid 43991062)
2. C. C. Aggarwal. On randomization, public information and the curse of dimensionality. In ICDE, pages 136-145, 2007. (Pubitemid 47422017)
3. C. C. Aggarwal and P. S. Yu. On static and dynamic methods for condensation-based privacy-preserving data mining. ACM Trans. Database Syst., 33:2:1-2:39, March 2008.
4. C. C. Aggarwal and P. S. Yu. Privacy-Preserving Data Mining: Models and Algorithms. Springer, 2008.
5. J. T. Alexander, M. Davern, and B. Stevenson. Inaccurate age and sex data in the census pums files: Evidence and implications. Working Paper 15703, National Bureau of Economic Research, January 2010.
6. S. Ambler. Robust persistence layers. Softw. Dev., 6(2):73-75, 1998.
7. W. Aspray, F. Mayades, and M. Vardi. Globalization and Offshoring of Software. ACM, 2006.
8. C. Bialik. Census bureau obscured personal data - too well, some say. The Wall Street Journal, Feb. 2010.
9. J. Brickell and V. Shmatikov. The cost of privacy: destruction of data-mining utility in anonymized data publishing. In KDD, pages 70-78, 2008.
10. A. Budi, D. Lo, L. Jiang, and Lucia. b-anonymity: a model for anonymized behaviour-preserving test and debugging data. In PLDI, pages 447-457, 2011.
11. M. Castro, M. Costa, and J.-P. Martin. Better bug reporting with better privacy. In ASPLOS, pages 319-328, 2008. (Pubitemid 351585417)
12. L. A. Clarke. A system to generate test data and symbolically execute programs. IEEE Trans. Softw. Eng., 2(3):215-222, 1976.
13. J. Clause and A. Orso. Penumbra: Automatically identifying failure-relevant inputs using dynamic tainting. In ISSTA, pages 249-260, 2009.
14. J. A. Clause and A. Orso. Camouflage: automated anonymization of field data. In ICSE, pages 21-30, 2011.
15. G. Cormode and D. Srivastava. Anonymized data: generation, models, usage. In SIGMOD, pages 1015-1018, 2009.
16. Datamonitor. Application testing services: global market forecast model. Datamonitor Research Store, Aug. 2007.
17. R. A. DeMillo and A. J. Offutt. Constraint-based automatic test data generation. IEEE Trans. Softw. Eng., 17(9):900-910, 1991. (Pubitemid 21717628)
18. I. Dinur and K. Nissim. Revealing information while preserving privacy. In PODS, pages 202-210, 2003.
19. J. Domingo-Ferrer and D. Rebollo-Monedero. Measuring risk and utility of anonymized data using information theory. In EDBT/ICDT, pages 126-130, 2009.
20. A. Endres and D. Rombach. A Handbook of Software and Systems Engineering. Pearson Addison-Wesley, 2003.
21. B. C. M. Fung, K. Wang, A. W.-C. Fu, and P. S. Yu. Introduction to Privacy-Preserving Data Publishing: Concepts and Techniques. Data Mining and Knowledge Discovery. Chapman & Hall/CRC, August 2010.
22. P. Godefroid. Compositional dynamic test generation. In POPL, pages 47-54, 2007.
23. M. Grechanik, C. Csallner, C. Fu, and Q. Xie. Is data privacy always good for software testing? In ISSRE, pages 368-377, 2010.
24. M. Grechanik, C. McMillan, L. DeFerrari, M. Comi, S. Crespi, D. Poshyvanyk, C. Fu, Q. Xie, and C. Ghezzi. An empirical investigation into a large-scale Java open source code repository. In ESEM, pages 11:1-11:10, 2010.
25. C. Jones. Software Engineering Best Practices. McGraw-Hill, Inc., New York, NY, USA, 1 edition, 2010.
26. G. M. Kapfhammer and M. L. Soffa. A family of test adequacy criteria for database-driven applications. In ESEC/FSE, pages 98-107, 2003.
27. W. Landi. Undecidability of static analysis. ACM Lett. Program. Lang. Syst., 1(4):323-337, 1992.
28. T. Li and N. Li. On the tradeoff between privacy and utility in data publishing. In KDD, pages 517-526, 2009.
29. R. Majumdar and K. Sen. Hybrid concolic testing. In ICSE, pages 416-426, 2007.
30. T. E. Murphy. Managing test data for maximum productivity. http://www.gartner.com/DisplayDocument?doc-cd=163662&ref=g-economy-2reduce, Dec. 2008.
31. Y. Rachlin, K. Probst, and R. Ghani. Maximizing privacy under data distortion constraints in noise perturbation methods. In PinKDD, pages 92-110, 2008.
32. S. P. Reiss. Practical data-swapping: the first steps. ACM Trans. Database Syst., 9:20-37, March 1984.
33. S. P. Reiss, M. J. Post, and T. Dalenius. Non-reversible privacy transformations. In PODS, pages 139-146, 1982.
34. P. Samarati. Protecting respondents'identities in microdata release. IEEE Trans. Knowl. Data Eng., 13(6):1010-1027, 2001.
35. I. Shield. International data privacy laws. http://www.informationshield. com/intprivacylaws.html, 2010.
36. L. Sweeney. k-anonymity: A model for protecting privacy. International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems, 10(5):557-570, 2002. (Pubitemid 35384857)
37. K. Taneja, Y. Zhang, and T. Xie. MODA: Automated test generation for database applications via mock objects. In ASE, pages 289-292, 2010.
38. B. G. Thompson. H.R.6423: Homeland Security Cyber and Physical Infrastructure Protection Act of 2010. U.S.House, 111th Congress, Nov. 2010.
39. S. Yoo and M. Harman. Regression testing minimisation, selection and prioritisation: A survey. STVR, to appear, 2011.