Saved in:
Bibliographic Details
Main Authors: Wuyts, Kim, Douglen, Avi
Format: Preprint
Published: 2024
Subjects:
Online Access:https://arxiv.org/abs/2408.03578
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866914903681400832
author Wuyts, Kim
Douglen, Avi
author_facet Wuyts, Kim
Douglen, Avi
contents Analyzing privacy threats in software products is an essential part of software development to ensure systems are privacy-respecting; yet it is still a far from trivial activity. While there have been many advancements in the past decade, they tend to focus on describing 'what' the threats are. What isn't entirely clear yet is 'how' to actually find these threats. Privacy is a complex domain. We propose to use four conceptual layers (feature, ecosystem, business context, and environment) to capture this privacy complexity. These layers can be used as a frame to structure and specify the privacy analysis support in a more tangible and actionable way, thereby improving applicability of the analysis process.
format Preprint
id arxiv_https___arxiv_org_abs_2408_03578
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Unraveling Privacy Threat Modeling Complexity: Conceptual Privacy Analysis Layers
Wuyts, Kim
Douglen, Avi
Cryptography and Security
Analyzing privacy threats in software products is an essential part of software development to ensure systems are privacy-respecting; yet it is still a far from trivial activity. While there have been many advancements in the past decade, they tend to focus on describing 'what' the threats are. What isn't entirely clear yet is 'how' to actually find these threats. Privacy is a complex domain. We propose to use four conceptual layers (feature, ecosystem, business context, and environment) to capture this privacy complexity. These layers can be used as a frame to structure and specify the privacy analysis support in a more tangible and actionable way, thereby improving applicability of the analysis process.
title Unraveling Privacy Threat Modeling Complexity: Conceptual Privacy Analysis Layers
topic Cryptography and Security
url https://arxiv.org/abs/2408.03578