Comparing privacy requirements engineering approaches

Proceedings - 2012 7th International Conference on Availability, Reliability and Security, ARES 2012

Volumn , Issue , 2012, Pages 574-581

  Beckers, Kristian ^a  

^a UNIVERSITY OF DUISBURG ESSEN   (Germany)

Author keywords

Comparison; Framework for privacy requirements engineering; privacy requirements engineering

Indexed keywords

COMPARISON; CONCEPTUAL FRAMEWORKS; PRIVACY REQUIREMENTS; SECURITY REQUIREMENTS ENGINEERING;

TERMINOLOGY;

REQUIREMENTS ENGINEERING;

EID: 84869482172     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2012.29     Document Type: Conference Paper

References (18)

1. B. Fabian, S. Gürses, M. Heisel, T. Santen, and H. Schmidt, "A comparison of security requirements engineering methods," Requirements Engineering - Special Issue on Security Requirements Engineering, vol. 15, no. 1, pp. 7-40, 2010.
2. C. Kalloniatis, E. Kavakli, and S. Gritzalis, "Addressing privacy requirements in system design: the pris method," Requir. Eng., vol. 13, pp. 241-255, August 2008.
3. M. Deng, K. Wuyts, R. Scandariato, B. Preneel, and W. Joosen, "A privacy threat analysis framework: supporting the elicitation and fulfillment of privacy requirements," Requir. Eng., vol. 16, pp. 3-32, March 2011.
4. S. Spiekermann and L. F. Cranor, "Engineering Privacy," IEEE Transactions on Software Engineering, vol. 35, no. 1, pp. 67-82, Jan. 2009.
5. OECD, "OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data," Organisation for Economic Co-operation and Development (OECD), Tech. Rep., 1980. [Online]. Available: http://www.oecd.org/ document/18/0,3746,en-2649-34255-1815186-1-1-1-1,00&&en-USS-01DBC.html
6. EU, "Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data," European Community(EU), Tech. Rep., 1995. [Online]. Available: http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX:31995L0046:en:HTML
7. M. Hansen, A. Schwartz, and A. Cooper, "Privacy and identity management," IEEE Security and Privacy, vol. 6, no. 2, pp. 38-45, 2008.
8. P. Karpati, G. Sindre, and A. L. Opdahl, "Characterising and analysing security requirements modelling initiatives," in Proceedings of the International Conference on Availability, Reliability and Security (ARES). IEEE Computer Society, 2011, pp. 710-715.
9. M. Jackson, Problem Frames. Analyzing and structuring software development problems. Addison-Wesley, 2001.
10. A. F. Westin, Privacy and Freedom. New York: Atheneum, 1967.
11. C. P. Pfleeger and S. L. Pfleeger, Security In Computing, 4th ed. Prentice Hall PTR, 2007.
12. A. Pfitzmann and M. Hansen, "A terminology for talking about privacy by data minimization: Anonymity, unlinkability, unobservability, pseudonymity, and identity management - version v0.34," TU Dresden and ULD Kiel, Tech. Rep., 2011. [Online]. Available: http://dud.inf.tu-dresden.de/literatur/Anon- Terminology-v0.34.pdf
13. ISO and IEC, "Common Criteria for Information Technology Security Evaluation," International Organization for Standardization (ISO) and International Electrotechnical Commission (IEC), ISO/IEC 15408, 2009.
14. H. Nissenbaum, "Privacy as contextual integrity," Washington Law Review, vol. 79, no. 1, pp. 101-139, 2004.
15. A. Kung, J.-C. Freytag, and F. Kargl, "Privacy-by-design in its applications : The way forward," in Second International Workshop on Data Security and PrivAcy in wireless Networks, D-SPAN 2011. IEEE Computer Society, June 2011.
16. E. S. K. Yu, "Towards modeling and reasoning support for early-phase requirements engineering," in Proceedings of the 3rd IEEE International Symposium on Requirements Engineering, ser. RE '97. IEEE Computer Society, 1997, pp. 226-235.
17. L. Liu, E. Yu, and J. Mylopoulos, "Security and privacy requirements analysis within a social setting," in Proceedings of the 11th IEEE International Conference on Requirements Engineering. Washington, DC, USA: IEEE Computer Society, 2003, pp. 151-161.
18. G. Danezis and S. Gürses, "A critical review of 10 years of privacy technology," in Proceedings of Surveillance Cultures: A Global Surveillance Society?, UK, 2011. [Online]. Available: http://homes.esat. kuleuven.be/~sguerses/papers/DanezisGuersesSurveillancePets2010.pdf