Please use this identifier to cite or link to this item:
https://dair.nps.edu/handle/123456789/2588
Title: | Formal Analysis of Privacy Requirements Specifications for Multi-Tier Applications |
Authors: | Travis D. Breaux Ashwini Rao |
Keywords: | Privacy Requirements Standardization Description Logic Formal Analysis |
Issue Date: | 30-Jul-2013 |
Publisher: | Acquisition Research Program |
Citation: | Published--Unlimited Distribution |
Series/Report no.: | Privacy CMU-AM-13-083 |
Abstract: | Companies require data from multiple sources to develop new information systems, such as social networking, e-commerce, and location-based services. Systems rely on complex, multi-stakeholder data supply-chains to deliver value. These data supply-chains have complex privacy requirements: Privacy policies affecting multiple stakeholders (e.g., user, developer, company, government) regulate the collection, use, and sharing of data over multiple jurisdictions (e.g. California, United States, Europe). Increasingly, regulators expect companies to ensure consistency between company privacy policies and company data practices. To address this problem, we propose a methodology to map policy requirements in natural language to a formal representation in Description Logic. Using the formal representation, we reason about conflicting requirements within a single policy and among multiple policies in a data supply chain. Further, we enable tracing data flows within the supply-chain. We derive our methodology from an exploratory case study of the Facebook platform policy. We demonstrate the feasibility of our approach in an evaluation involving Facebook, Zynga and AOL-Advertising policies. Our results identify three conflicts that exist between Facebook and Zynga policies, and one conflict within the AOL Advertising policy |
Description: | Acquisition Management / Defense Acquisition Community Contributor |
URI: | https://dair.nps.edu/handle/123456789/2588 |
Appears in Collections: | Sponsored Acquisition Research & Technical Reports |
Files in This Item:
File | Size | Format | |
---|---|---|---|
CMU-AM-13-083.pdf | 2.68 MB | Adobe PDF | View/Open |
Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.