Privacy arguments: Analysing selective disclosure requirements for mobile applications

2012 20th IEEE International Requirements Engineering Conference, RE 2012 - Proceedings

Volumn , Issue , 2012, Pages 131-140

  Tun, Thein Than ^a   Bandara, Arosha K ^a   Price, Blaine A ^a   Yu, Yijun ^a   Haley, Charles ^b   Omoronyia, Inah ^c   Nuseibeh, Bashar ^a,c  

^a OPEN UNIVERSITY   (United Kingdom)

^b Frogfish Technologies   (United Kingdom)

^c Lero ^*  (Ireland)

Author keywords

mobile applications; privacy arguments; privacy requirements

Indexed keywords

CONTEXT-SENSITIVE; KEY PRIVACY; MOBILE APPLICATIONS; PRIVACY REQUIREMENTS; RESEARCH PROGRAMMES; RUNTIMES;

INFORMATION MANAGEMENT; REQUIREMENTS ENGINEERING;

MOBILE TELECOMMUNICATION SYSTEMS;

EID: 84870703690     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/RE.2012.6345797     Document Type: Conference Paper

References (24)

1. Associated Press, "CEO apologizes after Path uploads contact lists, " Yahoo! News.
2. A. Barth, A. Datta, J. C. Mitchell, and H. Nissenbaum, "Privacy and Contextual Integrity: Framework and Applications, " in Proc. of the IEEE Symp. on Security and Privacy, Washington, DC, USA, 2006, pp. 184-198.
3. E. T. Mueller, Commonsense reasoning. Morgan Kaufmann, 2006.
4. I. Altman, "Privacy Regulation: Culturally Universal or Culturally Specific?, " Journal of Social Issues, vol. 33, no. 3, pp. 66-84, Jul. 1977.
5. T. Erickson and W. A. Kellogg, "Social translucence: an approach to designing systems that support social processes, " ACM Trans. Comput.-Hum. Interact., vol. 7, no. 1, pp. 59-83, Mar. 2000.
6. M. Jackson, Problem Frames: Analysing and Structuring Software Development Problems. Addison-Wesley/ACM Press, 2001.
7. M. Jackson, "Problems and requirements [software development], " in Proc. of 2nd Int. Symp. on Requirements Engineering, 1995, pp. 2-8.
8. C. Haley, R. Laney, J. Moffett, and B. Nuseibeh, "Security Requirements Engineering: A Framework for Representation and Analysis, " IEEE Trans. Softw. Eng., vol. 34, no. 1, pp. 133-153, 2008.
9. V. N. L. Franqueira, T. T. Tun, Y. Yu, R. Wieringa, and B. Nuseibeh, "Risk and argument: A risk-based argumentation method for practical security, " in Proc. of 19th Int. Conf. on Requirements Engineering, Trento, Italy, 2011, pp. 239-248.
10. S. Barnum, "Common Attack Pattern Enumeration and Classification (CAPEC) Schema Description, " 2008.
11. T. T. Tun, A. Bandara, B. A. Price, Y. Yu, C. B. Haley, I. Omoronyia, and B. Nuseibeh, "Privacy Arguments: Analysing Selective Disclosure Requirements for Mobile Applications, " The Open University, Milton Keynes, TR2012/05, Jun. 2012.
12. T. T. Tun, T. Trew, M. Jackson, R. Laney, and B. Nuseibeh, "Specifying features of an evolving software system, " Software: Practice and Experience, vol. 39, no. 11, pp. 973-1002, Aug. 2009.
13. S. Liaskos, S. A. McIlraith, S. Sohrabi, and J. Mylopoulos, "Representing and reasoning about preferences in requirements engineering, " Requir. Eng., vol. 16, no. 3, pp. 227-249, Aug. 2011.
14. J. R. Cordy, "The TXL source transformation language, " Sci. Comput. Program., vol. 61, no. 3, pp. 190-210, Aug. 2006.
15. Y. Yu, T. T. Tun, A. Tedeschi, V. N. Franqueira, and B. Nuseibeh, "OpenArgue: Supporting argumentation to evolve secure software systems, " in Proc. of 19th Int. Conf. on Requirements Engineering, 2011, pp. 351-352.
16. D. Corapi, O. Ray, A. Russo, A. Bandara, and E. Lupu, "Learning Rules from User Behaviour, " in Proc. of AIAI, Boston, MA, 2009, vol. 296, pp. 459-468.
17. T. Fahey, "Privacy and the Family: Conceptual and Empirical Reflections, " Sociology, vol. 29, no. 4, pp. 687-702, Nov. 1995.
18. M. L. Yiu, C. S. Jensen, X. Huang, and H. Lu, "SpaceTwist: Managing the Trade-Offs Among Location Privacy, Query Performance, and Query Accuracy in Mobile Services, " in Proc. of 24th Int. Conf. on Data Engineering, 2008, pp. 366-375.
19. L. Palen and P. Dourish, "Unpacking 'privacy' for a networked world, " in Proc. of SIGCHI Conf. on Human factors in computing systems, New York, NY, USA, 2003, pp. 129-136.
20. T. D. Breaux and A. I. Anton, "Analyzing Regulatory Rules for Privacy and Security Requirements, " IEEE Transactions on Software Engineering, vol. 34, no. 1, pp. 5-20, Feb. 2008.
21. E. Yu and L. M. Cysneiros, "Designing for Privacy and Other Competing Requirements, " Proc. of 2nd Symp. on RE for Inf. Security, pp. 15-16, 2002.
22. C. Mancini, K. Thomas, Y. Rogers, B. A. Price, L. Jedrzejczyk, A. K. Bandara, A. N. Joinson, and B. Nuseibeh, "From spaces to places: Emerging contexts in mobile privacy, " in Proc. of 11th Int. Conf. on Ubiquitous Computing, 2009, pp. 1-10.
23. N. Seyff, N. Maiden, K. Karlsen, J. Lockerbie, P. Grunbacher, F. Graf, and C. Ncube, "Exploring how to use scenarios to discover requirements, " Requir. Eng., vol. 14, no. 2, pp. 91-111, Apr. 2009.
24. J. Yang, K. Yessenov, and A. Solar-Lezama, "A language for automatically enforcing privacy policies, " in Proc. of 39th Symp. on Princ. of Prog. Lang., New York, NY, USA, 2012, pp. 85-96.