NDLI: Eddy, a formal language for specifying and analyzing data flow specifications for conflicting privacy requirements

Please wait, while we are loading the content...

Eddy, a formal language for specifying and analyzing data flow specifications for conflicting privacy requirements

Content Provider	Springer Nature Link
Author	Breaux, Travis D. Hibshi, Hanan Rao, Ashwini
Copyright Year	2013
Abstract	Increasingly, companies use multi-source data to operate new information systems, such as social networking, e-commerce, and location-based services. These systems leverage complex, multi-stakeholder data supply chains in which each stakeholder (e.g., users, developers, companies, and government) must manage privacy and security requirements that cover their practices. US regulator and European regulator expect companies to ensure consistency between their privacy policies and their data practices, including restrictions on what data may be collected, how it may be used, to whom it may be transferred, and for what purposes. To help developers check consistency, we identified a strict subset of commonly found privacy requirements and we developed a methodology to map these requirements from natural language text to a formal language in description logic, called Eddy. Using this language, developers can detect conflicting privacy requirements within a policy and enable the tracing of data flows within these policies. We derived our methodology from an exploratory case study of the Facebook platform policy and an extended case study using privacy policies from Zynga and AOL Advertising. In this paper, we report results from multiple analysts in a literal replication study, which includes a refined methodology and set of heuristics that we used to extract privacy requirements from policy texts. In addition to providing the method, we report results from performing automated conflict detection within the Facebook, Zynga, and AOL privacy specifications, and results from a computer simulation that demonstrates the scalability of our formal language toolset to specifications of reasonable size.
Starting Page	281
Ending Page	307
Page Count	27
File Format	PDF
ISSN	09473602
Journal	Requirements Engineering
Volume Number	19
Issue Number	3
e-ISSN	1432010X
Language	English
Publisher	Springer London
Publisher Date	2013-12-18
Publisher Place	London
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Privacy Requirements Standardization Description logic Formal analysis Software Engineering
Content Type	Text
Resource Type	Article
Subject	Information Systems Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Specifying and analyzing early requirements in Tropos

Analyzing Regulatory Rules for Privacy and Security Requirements

Specifying Software Requirements for Complex Systems: New Techniques and Their Application

On the use of a formal requirements engineering language: The Generalized Railroad Crossing Problem

A language for specifying program transformations

Methodologies to evolve formal specifications through refinement and retrenchment in an analysis–revision cycle

Towards Industrial Formal Specification of Programmable Safety Systems

Escort: an environment for specifying communication requirements

Specifying transaction-based information systems with regular expressions

Eddy, a formal language for specifying and analyzing data flow specifications for conflicting privacy requirements

Similar Documents

Specifying and analyzing early requirements in Tropos

Analyzing Regulatory Rules for Privacy and Security Requirements

Specifying Software Requirements for Complex Systems: New Techniques and Their Application

On the use of a formal requirements engineering language: The Generalized Railroad Crossing Problem

A language for specifying program transformations

Methodologies to evolve formal specifications through refinement and retrenchment in an analysis–revision cycle

Towards Industrial Formal Specification of Programmable Safety Systems

Escort: an environment for specifying communication requirements

Specifying transaction-based information systems with regular expressions

Eddy, a formal language for specifying and analyzing data flow specifications for conflicting privacy requirements