Towards a UML profile for privacy-aware applications

Proceedings - 15th IEEE International Conference on Computer and Information Technology, CIT 2015, 14th IEEE International Conference on Ubiquitous Computing and Communications, IUCC 2015, 13th IEEE International Conference on Dependable, Autonomic and Secure Computing, DASC 2015 and 13th IEEE International Conference on Pervasive Intelligence and Computing, PICom 2015

Volumn , Issue , 2015, Pages 371-378

  Basso, Tania ^a   Montecchi, Leonardo ^b   Moraes, Regina ^a   Jino, Mario ^a   Bondavalli, Andrea ^b  

^a UNIVERSITY OF CAMPINAS   (Brazil)

^b UNIVERSITY OF FLORENCE   (Italy)

Author keywords

Conceptual model; Privacy; UML profile

Indexed keywords

DATA PRIVACY; UNIFIED MODELING LANGUAGE; WORLD WIDE WEB;

APPLICATION DESIGN; BUSINESS PARTNERS; CONCEPTUAL MODEL; PERSONAL INFORMATION; PRIVACY POLICIES; PRIVACY PROTECTION; UML PROFILES; WEB APPLICATION;

UBIQUITOUS COMPUTING;

EID: 84964282497     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CIT/IUCC/DASC/PICOM.2015.53     Document Type: Conference Paper

References (31)

1. E. Bertino, D. Lin, and W. Jiang, "A Survey of Quantification of Privacy Preserving Data Mining Algorithms", in Privacy-Preserving Data Mining, vol. 34, C. C. Aggarwal, P. S. Yu, and A. K. Elmagarmid, Orgs. Springer US, pp. 183-205 (2008).
2. Hoepman, J.-H. "Privacy Design Strategies". In Proceedings of 29th IFIP TC 11 International Conference, SEC 2014, Marrakech, Morocco, June 2014, pp 446-459.
3. Object Management Group. OMG Unified Modeling Language (OMG UML), Superstructure, Version 2.4.1. OMG Document {formal/2011-08-06}. Aug. 2011.
4. UML Profile Diagrams. [Online]. Available: http://www.umldiagrams.org/profile-diagrams.html [Accessed: 16-sep-2014].
5. Object Management Group. UML Profile for Modeling Quality of Service and Fault Tolerance Characteristics and Mechanisms (OMG QoS&FT), Version 1.1. OMG Document {formal/2008-04-05}. Apr. 2008
6. Object Management Group. A UML Profile for MARTE: Modeling and Analysis of Real-Time Embedded systems, Version 1.1. OMG Document {formal/2011-06-02}. June 2011.
7. Object Management Group. OMG Systems Modeling Language (OMG SysML), Version 1.3. OMG Document {formal/2012-06-01}. June 2012.
8. M. Casassa Mont, S. Pearson, S. Creese, M. Goldsmith, N. Papanikolaou, "A Conceptual Model for Privacy Policies with Consent and Revocation Requirements", Privacy and Identity Management for Life. IFIP Advances in Information and Communication Technology Volume 352, 2011, pp 258-270.
9. OASIS, eXtensible Access Control Markup Language (XACML), http://www.oasis-open.org/committees/tc-home.php?wg-abbrev=xacml.
10. Q. Ni, A. Trombetta, E. Bertino, J. Lobo. "Privacy-aware role based access control". Proceedings of the 12th ACM Symposium on Access Control Models and Technologies (Sophia Antipolis, France, June 20-22, 2007). ACM, New York, pp. 41-50, 2007.
11. N. Damianou, N. Dulay, E. Lupu, M. Sloman, "The Ponder Policy Specification Language", Policies for Distributed Systems and Networks Lecture Notes in Computer Science Volume 1995, 2001, pp 18-38.
12. L. Cranor, B. Dobbs, S. Egelman, G. Hogben, J. Humphrey, M. Langheinrich, M. Marchiori, M. Presler-Marshall, J. M. Reagle, M. Schunter, D. A. Stampley, and R. Wenning (2006). "The Platform for Privacy Preferences 1.1 (P3P1.1) Specification". World Wide Web Consortium NOTEP3P11-20061113.
13. P. Ashley, S. Hada, G. Karjoth, C. Powers, M. Schunter. "Enterprise Privacy Authorization Language (EPAL 1.2) ", 2003. [Online]. Available: http://www.zurich.ibm.com/security/enterpriseprivacy/epal/Specification/index.html. [Accessed: 23-mar-2015].
14. P. Kumaraguru, J. Lobo, L. F. Cranor, S. B. Calo, "A survey of privacy policy languages", Workshop on Usable IT Security Management (USM 07): Proceedings of the 3rd Symposium on Usable Privacy and Security, ACM, 2007.
15. J. Jurjens, "UMLsec: Extending UML for Secure Systems Development", Proceedings of the 5th International Conference on The Unified Modeling Language, 2002.
16. Ç. Cirit, F. Buzluca, "A UML profile for role-based access control", Proceedings of the 2nd International conference on Security of information and networks (SIN'09), 2009.
17. D. S. Allison, H. F. El Yamany, M. A. M. Capretz. "Metamodel for privacy policies within SOA", Software Engineering for Secure Systems, 2009. SESS'09. ICSE Workshop on, vol., no., pp. 40, 46, 19-19 May 2009.
18. Organization for Economic Co-operation and Development. "OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data", 2013. [Online] Available: http://www.oecd.org/sti/ieconomy/2013-oecd-privacy-guidelines.pdf [Accessed: 26-aug-2014].
19. A. Cavoukian. "Creation of a Global Privacy Standard", 2006. [Online]. Available: https://www.ipc.on. ca/images/resources/gps.pdf. [Accessed: 23-mar-2015].
20. A. Cavoukian, T. Hamilton. "The Privacy Payoff: How Successful Businesses Build Customer Trust", McGraw-Hill Ryerson Limited, Whitby, Ontario, Canada, 2002.
21. ISO/IEC 29100. International Standard - Information technology - Security Techniques - Privacy framework. First Edition (2011).
22. ISO/IEC 29101. International Standard - Information technology - Security Techniques - Privacy architecture framework. First Edition (2013).
23. OASIS. "Privacy Management Reference Model and Methodology (PMRM) Version 1.0", 2012. [Online]. Available: http://docs.oasisopen.org/pmrm/PMRM/v1.0/csd01/PMRM-v1.0-csd01.pdf. [Accessed:23-mar-2015].
24. th ACM/SIGAPP Symposium on Applied Computing, Salamanca, Spain, 2015. In press.
25. M. F. Dennedy, J. Fox, T. R. Finneran. "The Privacy Engineer's Manifesto: Getting from Policy to Code to QA to Value". Apress; 1st Edition, January, 2014.
26. I. Oliver. "Privacy Engineering: A Dataflow and Ontological Approach". CreateSpace Independent Publishing Platform, 1st Edition, July, 2014.
27. D. Solove. "A Taxonomy of Privacy", University of Pennsylvania Law Review, Vol. 154, No. 3, pp. 477-560, 2006.
28. A. I. Antón and J. B. Earp. A requirements taxonomy for reducing web site privacy vulnerabilities. Requirements Engineering, 9 (3) pp. 169-185, 2004.
29. Google Privacy & Terms. "Privacy Policy", 2014. [Online]. Available: http://www.google.com/policies/privacy/[Accessed: 26-aug-2014].
30. BBC News. "Google agrees privacy policy changes with data watchdog", 2015. [Online] Available: http://www.bbc.com/news/technology-31059874. [Accessed: 23-mar-2015].
31. Information Comissioner's Office. "Google to change privacy policy after ICO investigation", 2015. [Online] Available: https://ico.org.uk/about-the-ico/news-and-events/news-andblogs/2015/01/google-to-change-privacy-policy-after-ico-investigation/. [Accessed: 23-mar-2015].