A pattern language for developing privacy enhancing technologies

Software - Practice and Experience

Volumn 43, Issue 7, 2013, Pages 769-787

  Hafiz, Munawar ^a  

^a AUBURN UNIVERSITY   (United States)

Author keywords

pattern; pattern language; PET; privacy

Indexed keywords

LOCATION MONITORING; ON-LINE COMMUNICATION; ONLINE DATA SHARING; PATTERN; PATTERN LANGUAGES; PERSONALLY IDENTIFIABLE INFORMATION; PRIVACY ENHANCING TECHNOLOGIES; RESEARCH AND DEVELOPMENT;

ONLINE SYSTEMS; POLYETHYLENE TEREPHTHALATES;

DATA PRIVACY;

EID: 84878677619     PISSN: 00380644     EISSN: 1097024X     Source Type: Journal    
DOI: 10.1002/spe.1131     Document Type: Article

References (70)

1. Warren SD, Brandeis LD,. The right to privacy. Harvard Law Review December 1890; 4 (5): 193-220.
2. Westin AF,. Privacy and Freedom. Atheneum: NY, 1967.
3. van Rossum H, Gardeniers H, Borking J, Cavioukian A, Brans J, Muttupulle N, Magistrale N,. Privacy enhancing technologies-The path to anonymity. Technical report, Registratiekammer, The Netherlands and Inofrmation and Privacy Commissioner, Ontario, Canada, 1995.
4. van Blarkom G, Borking J, Olk J, (eds). Handbook of Privacy and Privacy-Enhancing Technologies: The Case of Intelligent Software Agents. College Bescherming Persoonsgegevens: The Hague, The Netherlands, 2003.
5. Schumacher M,. Security patterns and security standards-with selected security patterns for anonymity and privacy. In Proceedings of the European Conference on Patterns Language of Programming (EuroPLoP'02), Bavaria, Germany, 2002.
6. Schummer T,. The public privacy-Patterns for filtering personal information in collaborative systems. In Proceedings of CHI workshop on Human-Computer-Human-Interaction Patterns, Vienna, Austria, 2004.
7. Romanosky S, Acquisti A, Hong J, Cranor LF, Friedman B,. Privacy patterns for online interactions. Proceedings of the 2006 Conference on Pattern Languages of Programs, PLoP '06, Portland, OR, 2006.
8. Sadicoff M, Larrando-Petrie MM, Fernandez EB,. Privacy aware network-client pattern. In Proceedings of the 12th Conference on Patterns Language of Programming (PLoP'05), Monticello, IL, 2005.
9. EPIC. Privacy & human rights, An international survey of privacy laws and developments. Electronic Privacy and Information Centre and Privacy International, 2002.
10. Cranor L, Langheinrich M, Marchiori M, Presler-Marshall M, Reagle J,. The Platform for Privacy Preferences 1.0 (P3P1.0) Specification, W3C, April 2002. [Accessed: August, 2011].
11. Dingledine R, Mathewson N, Syverson PF,. Tor: The second-generation onion router. In Proceedings of the 13th Conference on Usenix Security Symposium, San Diego, CA. USENIX Association: Berkeley, CA, 2004; 303-320.
12. Antõn I, Earp B,. A requirements taxonomy for reducing web site privacy vulnerabilities. Required Engineering August 2004 9: 169-185.
13. Goldberg I, Wagner D, Brewer E,. Privacy-enhancing technologies for the Internet. In Proceedings of 42nd IEEE Spring COMPCON. IEEE Computer Society Press: Los Alamitos, CA, Feb. 1997.
14. Goldberg I,. 2002. Privacy-enhancing technologies for the Internet, II: five years later. In International Workshop on Privacy Enhancing Technologies (PET), San Francisco, CA, Vol. 2, LNCS. Springer: New York, NY.
15. Evans J, Holfelder W, Kawamoto M, (eds). Proceedings of the First International Workshop on Vehicular Ad Hoc Networks, VANET 2004, Philadelphia, PA, USA, October 1, 2004. ACM: New York, NY, 2004.
16. Clarke I, Sandberg O, Wiley B, Hong TW,. Freenet: A distributed anonymous information storage and retrieval system. Lecture Notes in Computer Science 2001; 2009: 46-66.
17. Reiter MK, Rubin AD,. Crowds: Anonymity for Web transactions. ACM Transactions on Information and System Security 1998; 1 (1): 66-92.
18. Pfitzmann A, Waidner M,. Networks without user observability-Design options. In Advances in cryptology: Proceedings of a Workshop on the Theory and Application of Cryptographic Techniques (EUROCRYPT '85), Vol. 219, Pichler F, (ed.), LNCS. Springer: Linz, Austria, Apr. 1985; 245-253.
19. Hafiz M, Adamczyk P, Johnson RE,. Organizing security patterns. IEEE Software 2007; 24 (4): 52-60.
20. Viega J, McGraw G,. Building secure software: How to avoid security problems the right way. Addison-Wesley: Boston, MA, 2002.
21. Fayad ME, Altman A,. An introduction to software stability. Communications of the ACM 2001; 44 (9): 95-98.
22. Fayad M, Wu S,. Thinking objectively: Merging multiple conventional models in one stable model. Communications of the ACM 2002; 45 (9): 102-106.
23. Anonymizer.com. Online privacy services.
24. iProxy.net. iProxy anonymizer service. Available from: http://iproxy.net/.
25. Helsingius J,. The anon.penet.fi anonymous server. help file, 1995.
26. Beresford AR, Stajano F,. Location privacy in pervasive computing. IEEE Pervasive Computing 2003; 2 (1): 46-55.
27. Freudiger J, Raya M, Félegyházi M, Papadimitratos P, Hubaux J-P,. Mix-zones for location privacy in vehicular networks, 2007.
28. Sampigethaya K, Li M, Huang L, Poovendran R,. AMOEBA: Robust location privacy scheme for VANET. IEEE Journal on Selected Areas in Communications 2007; 25 (8): 1569-1589.
29. Gruteser M, Grunwald D,. 2003. Anonymous usage of location-based services through spatial and temporal cloaking. In Proceedings of the 1st International Conference on Mobile Systems, Applications and Services, MobiSys '03. ACM: New York, NY, USA; 31-42.
30. Thielscher C, Gottfried M, Umbreit S, Boegner F, Haack J, Schroeders N,. Patent: Data processing system for patient data, International Patent, WO 03/034294 A2, 2005.
31. Riedl B, Grascher V, Fenz S, Neubauer T,. Pseudonymization for improving the privacy in e-health applications. In Proceedings of the proceedings of the 41st Annual Hawaii International Conference on System Sciences, HICSS '08. IEEE Computer Society: Washington, DC, USA, 2008; 255.
32. Minshall G,. Tcpdpriv, release 1.1.10, Aug. 1997.
33. Fan J, Xu J, Ammar MH, Moon SB,. Prefix-preserving IP address anonymization: Measurement-based security evaluation and a new cryptography-based scheme. Computer Networks (Amsterdam, Netherlands: 1999) Oct. 2004; 46 (2): 253-272.
34. Juels A,. Minimalist cryptography for low-cost RFID tags (extended abstract). In Security in Communication Networks, Vol. 3352, Lecture Notes in Computer Science. Springer: Berlin / Heidelberg, 2005; 149-164.
35. Rieback MR, Crispo B, Tanenbaum AS,. RFID Guardian: A battery-powered mobile device for RFID privacy management. In ACISP, Vol. 3574, Boyd C, Nieto JMG, (eds), Lecture Notes in Computer Science. Springer: New York, NY, 2005; 184-194.
36. Juels A, Syverson PF, Bailey DV,. High-power proxies for enhancing RFID privacy and utility. In Privacy Enhancing Technologies, Vol. 3856, Lecture Notes in Computer Science. Springer: New York, NY, 2005; 210-226.
37. Neubauer T, Ekelhart A,. An evaluation of technologies for the pseudonymization of medical data. In Proceedings of the 2009 ACM Symposium on Applied Computing, SAC '09. ACM, 2009; 857-858.
38. Newman R,. The Church of Scientology vs. Grady Ward, 24 July 1996.
39. Helsingius J,. Johan Helsingius Closes His Internet Remailer, 30 Aug. 1996.
40. Chaum D,. Untraceable electronic mail, return addresses, and digital pseudonyms. Communications of the ACM 1981; 24 (2): 84-88.
41. Shields C, Levine BN,. A protocol for anonymous communication over the Internet. CCS '00: Proceedings of the 7th ACM Conference on Computer and Communications Security, Athens, Greece, 2000; 33-42.
42. Dötzer F,. Privacy issues in vehicular ad hoc networks. In Privacy Enhancing Technologies, Vol. 3856, Danezis G, Martin D, (eds), Lecture Notes in Computer Science. Springer: New York, NY, 2005; 197-209.
43. Chaum D,. E-voting: secret-ballot receipts: True voter-verifiable elections. IEEE Security and Privacy Jan. Feb. 2004 2 (1): 38-47.
44. Neff CA,. A verifiable secret shuffle and its application to e-voting. In Proceedings of the 8th ACM Conference on Computer and Communications Security (CCS 2001). ACM Press: New York, NY, November 2001; 116-125.
45. Sweeney L,. k-Anonymity: A model for protecting privacy. International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems 2002; 10 (5): 557-570.
46. Sarma S, Weis S, Engels D,. RFID systems and security and privacy implications. In Cryptographic Hardware and Embedded Systems-CHES 2002, Vol. 2523, Lecture Notes in Computer Science. Springer: Berlin / Heidelberg, 2003; 1-19.
47. Gülcü C, Tsudik G,. Mixing e-mail with Babel. In Proceedings of the symposium on network and distributed systems security (NDSS '96). Internet Society: San Diego, California, Feb. 1996.
48. Rennhard M, Plattner B,. Introducing MorphMix: Peer-to-peer based anonymous Internet usage with collusion detection. In WPES '02: Proceedings of the 2002 ACM Workshop on Privacy in the Electronic Society. ACM Press: New York, NY, USA, 2002; 91-102.
49. Cotrell L,. Mixmaster & remailer attacks, 1995.
50. Danezis G, Dingledine R, Mathewson N,. Mixminion: Design of a type III anonymous remailer protocol. In Proceedings of the 2003 Symposium on Security and Privacy. IEEE Computer Society: Los Alamitos, CA, 2003; 2-15.
51. Syverson PF, Goldschlag DM, Reed MG,. Anonymous connections and onion routing. In IEEE Symposium on Security and Privacy, Oakland, California, 4-7 May 1997; 44-54.
52. Freedman MJ, Morris R,. Tarzan: A peer-to-peer anonymizing network layer. Proceedings of the 9th ACM Conference on Computer and Communications Security (CCS 2002), Washington, DC, November 2002.
53. Juels A, Pappu R,. Squealing Euros: Privacy protection in rfid-enabled banknotes. In Financial cryptography, Vol. 2742, Lecture Notes in Computer Science. Springer: Berlin / Heidelberg, 2003; 103-121.
54. Kesdogan D, Egner J, Bschkes R,. Stop-and-go-mixes providing probabilistic anonymity in an open system. In Information Hiding, Vol. 1525, Lecture Notes in Computer Science. Springer: New York, NY, 1998; 83-98.
55. Kido H, Yanagisawa Y, Satoh T,. Protection of location privacy using dummies for location-based services. In ICDE Workshops, Tokyo, Japan. IEEE Computer Society: Los Alamitos, CA, 2005; 1248.
56. Dinur I, Nissim K,. Revealing information while preserving privacy. In Proceedings of the 22nd ACM Symposium on Principles of Database Systems (PODS-03). ACM Press: New York, 2003; 202-210.
57. Reiss SP,. Practical data-swapping: The first steps. ACM Transactions on Database Systems March 1984 9: 20-37.
58. Agrawal R, Srikant R,. Privacy-preserving data mining. In Proceedings of the 2000 ACM SIGMOD International Conference on Management of Data, SIGMOD '00. ACM: New York, NY, USA, 2000; 439-450.
59. Pfitzmann A, Pfitzmann B, Waidner M,. ISDN-MIXes: Untraceable communication with very small bandwidth overhead. In Proceedings of the GI/ITG Conference on Communication in Distributed Systems. Springer-Verlag: Heidelberg, 1991; 451-463.
60. Dai W,. Pipenet 1.1. Usenet post, August 1996.
61. Fu X, Graham B, Bettati R, Zhao W,. On effectiveness of link padding for statistical traffic analysis attacks. In 23th International Conference on Distributed Computing Systems (23th ICDCS '03). IEEE Computer Society: Providence, RI, May 2003; 340-.
62. Wang W, Motani M, Srinivasan V,. Dependent link padding algorithms for low latency anonymity systems. In Proceedings of the 15th ACM Conference on Computer and Communications Security, CCS '08. ACM: New York, NY, USA, 2008; 323-332.
63. Yao AC,. Protocols for secure computations. In Foundations of Computer Science, 1982. SFCS '08. 23rd Annual Symposium on, Chicago, IL, 1982; 160-164.
64. Olumofin F, Goldberg I,. Privacy-preserving queries over relational databases. In Privacy enhancing technologies, vol. 6205, Atallah M, Hopper N, (eds), Lecture Notes in Computer Science. Springer: New York, NY, 2010.
65. Freedman MJ, Nissim K, Pinkas B,. Efficient private matching and set intersection. In Advances in Cryptology-EUROCRYPT 2004, Vol. 3027, Lecture Notes in Computer Science. Springer: New York, NY, 2004; 1-19.
66. ICANN Security and Stability Advisory Committee. Report on domain name front running, SAC 024, Feb. 2008.
67. Sassaman L, Cohen B, Mathewson N,. The Pynchon Gate: A secure method of pseudonymous mail retrieval. In Proceedings of the 2005 ACM Workshop on Privacy in the Electronic Society, WPES '05, Alexandria, VA, 2005.
68. Erkin Z, Franz M, Guajardo J, Katzenbeisser S, Lagendijk I, Toft T,. Privacy-preserving face recognition. In Proceedings of the 9th International Symposium on Privacy Enhancing Technologies, PETS '09. Springer-Verlag: Berlin, Heidelberg, 2009; 235 -; 253.
69. Danezis G, Diaz C, Troncoso C, Laurie B,. Drac: An architecture for anonymous low-volume communications. In Proceedings of the 10th International Conference on Privacy Enhancing Technologies, PETS '10. Springer-Verlag: Berlin, Heidelberg, 2010; 202-219.
70. Chung ES, Hong JI, Lin J, Prabaker MK, Landay JA, Liu AL,. Development and evaluation of emerging design patterns for ubiquitous computing. In Proceedings of the 5th Conference on Designing Interactive Systems: Processes, Practices, Methods, and Techniques, DIS '04. ACM: New York, NY, USA, 2004; 233-242.