Automated text mining for requirements analysis of policy documents

2013 21st IEEE International Requirements Engineering Conference, RE 2013 - Proceedings

Volumn , Issue , 2013, Pages 4-13

  Massey, Aaron K ^a   Eisenstein, Jacob ^a   Anton, Annie I ^a   Swire, Peter P ^b  

^a Georgia Institute of Technology   (United States)

^b OHIO STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DATA MINING;

BUSINESS PRACTICES; LARGE-SCALE ANALYSIS; MANUAL PROCESS; POLICY DOCUMENTS; PRIVACY POLICIES; PRIVACY PROTECTION; REQUIREMENTS ANALYSIS; REQUIREMENTS ANALYSIS TECHNIQUES;

REQUIREMENTS ENGINEERING;

EID: 84891067949     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/RE.2013.6636700     Document Type: Conference Paper

References (48)

1. M. Andreessen, "Why Software is Eating the World," Wall Street Journal, http://online.wsj.com/article/ SB10001424053111903480904576512250915629460.html, Aug. 2011
2. K. Cukier, "Data, data everywhere," The Economist, http://www. economist.com/node/15557443, Feb. 2010
3. B. Schneier and M. Pasiewicz, "On People, the Death of Privacy, and Data Pollution," EDUCAUSE Review, http://www.educause.edu/ero/ article/people-death-privacy-And-data-pollution, March / April 2008
4. A. Ant'on, J. Earp, Q. He, W. Stufflebeam, D. Bolchini, and C. Jensen, "Financial privacy policies and the need for standardization," Security and Privacy, IEEE, vol. 2, no. 2, pp. 36-45, Mar- Apr 2004
5. A. I. Ant'on and J. B. Earp, "A requirements taxonomy for reducing web site privacy vulnerabilities," Requirements Engineering, vol. 9, no. 3, pp. 169-185, 2004
6. A. I. Anton, J. B. Eart, M.W. Vail, N. Jain, C. M. Gheen, and J. M. Frink, "Hipaa's effect on web site privacy policies," Security and Privacy, IEEE, vol. 5, no. 1, pp. 45-52, Jan-Feb. 2007
7. J. D. Young and A. I. Ant'on, "A Method for Identifying Software Requirements Based on Policy Commitments," 18th International IEEE Requirements Engineering Conference, 2010
8. J. D. Young, "Commitment Analysis to Operationalize Software Requirements from Privacy Notices," Requirements Engineering, vol. 16, no. 1, pp. 33-46, March 2010
9. I. Rubinstein, "Regulating privacy by design," Berkeley Technology Law Jounral, vol. 26, p. 1409, 2012
10. A. I. Ant'on and J. B. Earp, "Strategies for developing policies and requirements for secure e-commerce systems," in Recent Advances in E-Commerce Security and Privacy, A. Gosh, Ed. Kluwer Academic Publishers, 2001, pp. pp. 29-46
11. A. I. Ant́on, J. B. Earp, and R. A. Carter, "Precluding incongruous behavior by aligning software requirements with security and privacy policies," Information and Software Technology, vol. 45, no. 14, pp. 967-977, 2003
12. T. Breaux and A. Ant́on, "Deriving semantic models from privacy policies," Policies for Distributed Systems and Networks, 2005. Sixth IEEE International Workshop on, pp. 67-76, June 6-8, 2005 2005
13. D. S. Allison, H. F. El Yamany, and M. Capretz, "Metamodel for privacy policies within SOA," in IWSESS '09: Proceedings of the 2009 ICSE Workshop on Software Engineering for Secure Systems. Washington, DC, USA: IEEE Computer Society, 2009, pp. 40-46
14. W. Robinson, "Implementing rule-based monitors within a framework for continuous requirements monitoring," System Sciences, 2005. HICSS '05. Proceedings of the 38th Annual Hawaii International Conference on, pp. 188a-188a, Jan. 2005
15. P. N. Otto and A. I. Ant'on, "Addressing Legal Requirements in Requirements Engineering," Requirements Engineering Conference, 2007. RE '07. 15th IEEE International, pp. 5-14, 15-19 Oct. 2007
16. M. W. Vail, J. B. Earp, and A. I. Ant́on, "An empirical study of consumer perceptions and comprehension of web site privacy policies," Engineering Management, IEEE Transactions on, vol. 55, no. 3, pp. 442-454, Aug. 2008
17. A. McDonald, R. Reeder, P. Kelley, and L. Cranor, "A comparative study of online privacy policies and formats," in Privacy Enhancing Technologies, ser. Lecture Notes in Computer Science, I. Goldberg and M. Atallah, Eds. Springer Berlin Heidelberg, 2009, vol. 5672, pp. 37-55
18. A. M. McDonald and L. F. Cranor, "The Cost of Reading Privacy Policies," I/S: A Journal of Law and Policy for the Information Society, vol. 2008 Privacy Year in Review Issue, 2008
19. A. Acquisti and J. Grossklags, "Privacy and rationality in individual decision making," IEEE Security and Privacy, vol. 3, no. 1, pp. 26-33, Jan-Feb. 2005
20. D. M. Blei, "Probabilistic topic models," Commun. ACM, vol. 55, no. 4, pp. 77-84, Apr. 2012
21. M. Steyvers and T. Griffiths, "Probabilistic topic models," in Latent Semantic Analysis: A Road to Meaning., T. Landauer, D. Mcnamara, S. Dennis, and W. Kintsch, Eds. Laurence Erlbaum, 2006
22. K. Ryan, "The role of natural language in requirements engineering," in Requirements Engineering, 1993., Proceedings of IEEE International Symposium on, Jan 1993, pp. 240-242
23. J. Grimmer and B. M. Stewart, "Text as Data : The Promise and Pitfalls of Automatic Content Analysis Methods for Political Texts," Political Analysis (forthcoming), 2013
24. J. Grimmer, "A bayesian hierarchical topic model for political texts: Measuring expressed agendas in senate press releases," Political Analysis, vol. 18, no. 1, pp. 1-35, 2010
25. D. M. Blei, A. Ng, and M. Jordan, "Latent dirichlet allocation," JMLR, vol. 3, pp. 993-1022, 2003
26. L. F. Cranor, "Necessary But Not Sufficient: Standardized Mechanisms for Privacy Notice and Choice," Journal of Telecommunications and High Technology Law, vol. 10, no. 2, 2012
27. I. Reay, P. Beatty, S. Dick, and J. Miller, "A survey and analysis of the p3p protocol's agents, adoption, maintenance, and future," Dependable and Secure Computing, IEEE Transactions on, vol. 4, no. 2, pp. 151- 164, April-June 2007
28. The World Bank, "Internet Users (per 100 people)," The World Bank Group, http://data.worldbank.org/ indicator/IT.NET.USER.P2?cid= GPD 44, 2012
29. R. F. Flesch, "A New Readability Yardstick," Journal of Applied Psychology, vol. 32, pp. 221-233, 1948
30. R. Gunning, The Technique of Clear Writing. McGraw-Hill International Book Co, 1952
31. G. McLaughlin, "SMOG grading- A new readability," Journal of Reading, May 1969
32. J. Kincaid, J. R.P. Fishburne, R. Rogers, and B. Chissom, "Derivation of new readability formulas (Automated Readability Index, Fog Count and Flesch Reading Ease Formula) for Navy enlisted personnel," Research Branch Report 8-75, Naval Technical Training, U. S. Naval Air Station, Memphis, TN., 1975
33. J. Kincaid and E. Smith, "Derivation and Validation of the Automated Readability Index for use with Technical Materials," Human Factors, vol. 12, pp. 457-464, 1970
34. E. Fry, "A readability formula for short passages," Journal of Reading, vol. 33, no. 8, pp. 594-597, 1990
35. J. Chall and E. Dale, Readability Revisited: The New Dale-Chall Readability Formula. Brookline Books, Cambridge, MA., 1995
36. L. Si and J. P. Callan, "A statistical model for scientific readability," CIKM 2001, pp. 574- 576, 2001
37. K. Collins-Thompson and J. P. Callan, "A language modeling approach to predicting reading difficulty," HLT-NAACL, pp. 193-200, 2004
38. C. Templeton, "Topic Modeling in the Humanities: An Overview," Maryland Institute for Technology in the Humanities, http://mith.umd. edu/ topic-modeling-in-The-humanities-An-overview/, 2011
39. D. Sontag and D. M. Roy, "Complexity of Inference in Latent Dirichlet Allocation," Twenty-Fifth Annual Conference on Neural Information Processing Systems, 2011
40. T. Griffiths and M. Steyvers, "Finding scientific topics," Proceedings of the National Academy of Sciences of the United States of America, vol. 101, no. Suppl 1, pp. 5228-5235, 2004
41. A. Asuncion, M. Welling, P. Smyth, and Y. W. Teh, "On smoothing and inference for topic models," in Proceedings of the Twenty-Fifth Conference on Uncertainty in Artificial Intelligence, ser. UAI '09. Arlington, Virginia, United States: AUAI Press, 2009, pp. 27-34
42. R Development Core Team, "R: A Language and Environment for Statistical Computing," R Foundation for Statistical Computing, http: //www.R-project.org, 2012
43. M. Porter, "An Algorithm for Suffix Stripping," Program, vol. 14, no. 3, pp. 130-137, 1980
44. K.S. Jones, "A statistical interpretation of term specificity and its application in retrieval," Journal of Documentation, vol. 28, no. 1, pp. 11-21, 1972
45. P. F. Brown, S. A. D. Pietra, V. J. D. Pietra, J. C. Lai, and R. L. Mercer, "An Estimate of an Upper Bound for the Entropy of English," Computational Linguistics, vol. 18, no. 1, 1992
46. H. Wallach, I. Murray, R. Salakhutdinov, and D. Mimno, "Evaluation methods for topic models," in Proceedings of the 26th Annual International Conference on Machine Learning. ACM, 2009, pp. 1105-1112
47. D. M. Blei, "Introduction to Probabilistic Topic Models," Available: Http://www.cs.princeton.edu/-blei/topicmodeling.html, 2012
48. L. Cranor, "P3P: Making privacy policies more useful," IEEE Security and Privacy, vol. 1, no. 6, pp. 50-55, Nov-Dec. 2003