Unraveling Privacy Threat Modeling Complexity: Conceptual Privacy Analysis Layers
Fuente:
arXiv
Guardado en:
| Autores principales: | , |
|---|---|
| Formato: | Preprint |
| Publicado: |
2024
|
| Materias: | |
| Acceso en línea: | |
| Etiquetas: |
Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
|
| _version_ | 1866914903681400832 |
|---|---|
| author | Wuyts, Kim Douglen, Avi |
| author_facet | Wuyts, Kim Douglen, Avi |
| contents | Analyzing privacy threats in software products is an essential part of software development to ensure systems are privacy-respecting; yet it is still a far from trivial activity. While there have been many advancements in the past decade, they tend to focus on describing 'what' the threats are. What isn't entirely clear yet is 'how' to actually find these threats. Privacy is a complex domain. We propose to use four conceptual layers (feature, ecosystem, business context, and environment) to capture this privacy complexity. These layers can be used as a frame to structure and specify the privacy analysis support in a more tangible and actionable way, thereby improving applicability of the analysis process. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2408_03578 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | Unraveling Privacy Threat Modeling Complexity: Conceptual Privacy Analysis Layers Wuyts, Kim Douglen, Avi Cryptography and Security Analyzing privacy threats in software products is an essential part of software development to ensure systems are privacy-respecting; yet it is still a far from trivial activity. While there have been many advancements in the past decade, they tend to focus on describing 'what' the threats are. What isn't entirely clear yet is 'how' to actually find these threats. Privacy is a complex domain. We propose to use four conceptual layers (feature, ecosystem, business context, and environment) to capture this privacy complexity. These layers can be used as a frame to structure and specify the privacy analysis support in a more tangible and actionable way, thereby improving applicability of the analysis process. |
| title | Unraveling Privacy Threat Modeling Complexity: Conceptual Privacy Analysis Layers |
| topic | Cryptography and Security |
| url | https://arxiv.org/abs/2408.03578 |