short-paper

A Visual Tool for Supporting Decision-Making in Privacy Oriented Software Development

Authors:

Maria Teresa Baldassarre,

Vita Santa Barletta,

Danilo Caivano,

Antonio PiccinnoAuthors Info & Claims

AVI '20: Proceedings of the 2020 International Conference on Advanced Visual Interfaces

Article No.: 45, Pages 1 - 5

https://doi.org/10.1145/3399715.3399818

Published: 02 October 2020 Publication History

Abstract

Nowadays, the dimension and complexity of software development projects increase the possibility of cyber-attacks, information exfiltration and data breaches. In this context, developers play a primary role in addressing privacy requirements and, consequently security, in software applications. Currently, only general guidelines exist that are difficult to put in operation due to the lack of the required security skills and knowledge, and to the use of legacy software development processes that do not deal with privacy and security aspects. This paper presents a knowledge base, the Privacy Knowledge Base (PKB), and the VIS-PRISE prototype (Visually Inspection to Support Privacy and Security) a visual tool that support developers' decisions to integrate privacy and security requirements in all software development phases. An initial experimental study with junior developers is also presented.

References

[1]

IBM (2019), X-Force Threat Intelligence Index 2019, IBM Security.

[2]

Jang-Jaccard, J., Nepal, S. (2014). A survey of emerging threats in cybersecurity. Volume 80, Issue 5, August 2014, pp. 973--993

[3]

The Open Web Application Security Project, 2019. OWASP Top 10--2017. The Ten Most Critical Web Application Security Risks. https://www.owasp.org/index.php/Category:OWASP_Top_Ten_2017_Project. Accessed 28 January 2020.

[4]

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

[5]

Cavoukian, A. (2010). Privacy by Design: The 7 Foundational Principles.

[6]

Baldassarre, M. T., Barletta, V. S., Caivano, D., Raguseo, D., Scalera, M. (2019). Teaching Cyber Security: The Hack-Space Integrated Model. Proceedings of the Third Italian Conference on Cyber Security, Vol-2315, CEUR Workshop Proceedings.

[7]

Baldassarre, M.T., Barletta, V.S., Caivano, D. et al. Integrating security and privacy in software development. Software Qual J (2020). https://doi.org/10.1007/s11219-020-09501-6

Digital Library

[8]

Baldassarre M.T., Barletta V.S., Caivano D., Scalera M., (2019). Privacy Oriented Software Development. Communications in Computer and Information Science, 1010, pp. 18--32, https://doi.org/10.1007/978-3-030-29238-6_2

[9]

A. Cavoukian (2012). Operationalizing Privacy by Design: A Guide to Implementing Strong Privacy Practices. pp. 1--72.

[10]

M. Hansen, M. Jensen and M. Rost (2015). Protection Goals for Privacy Engineering, IEEE Security and Privacy Workshops, San Jose, CA, 2015, pp. 159--166.

Digital Library

[11]

Theeraporn Suphakul, Twittie Senivongse (2017). Development of Privacy Design Patterns Based on Privacy Principles and UML, 18th IEEE /ACIS International Conference on Software Engineering, Artificial Intelligence, Networking and Parallel/Distributed Computing (SNPD).

[12]

G.W. van Blarkom, J.J. Borking, and J.G.E. Olk: Handbook of Privacy and Privacy- Enhancing Technologies. The Case of Intelligent Software Agents., College bescherming persoonsgegevens, ISBN 90-74087-33-7 (2003).

[13]

Desolda, G., Matera, M., & Lanzilotti, R. (2020). Metamorphic data sources: A user-centric paradigm to consume linked data in interactive workspaces. Future Generation Computer Systems, 102, 992--1015.

Digital Library

[14]

M. Hansen, M. Jensen and M. Rost: Protection Goals for Privacy Engineering. 2015 IEEE Security and Privacy Workshops, San Jose, CA, pp. 159--166 (2015).

Digital Library

[15]

Costabile, M.F., Fogli, D., Marcante, A., Mussio, P., Parasiliti Provenza, L., and Piccinno, A., 2008. Designing Customized and Tailorable Visual Interactive Systems. International Journal of Software Engineering and Knowledge Engineering 18, 3, 305--325. http://dx.doi.org/10.1142/S0218194008003702.

[16]

Balducci, F., Buono, P., Desolda, G., Impedovo, D., & Piccinno, A. (2020). Improving smart interactive experiences in cultural heritage through pattern recognition techniques. Pattern Recognition Letters, 131, 142--149.

[17]

Notario, N., Crespo, A., Martìn, Y. S., Del Alamo, J. M., Le Métayer, D., Antignac, T., Kung, A., et al. (2015). PRIPARE: Integrating Privacy Best Practices into a Privacy Engineering Methodology. IEEE Security and Privacy Workshops, San Jose, CA, pp. 151--158. https://doi.org/10.1109/SPW.2015.22

Digital Library

[18]

Spiekermann, S., and Cranor, L. F. (2009). Engineering privacy. IEEE Transactions on Software Engineering, vol. 35, no. 1, pp. 67--82. https://doi.org/10.1109/TSE.2008.88

Digital Library

[19]

Kallpniatis, C., Kavakli, E., Gritzalis, S. (2008). Addressing privacy requirements in system design: the PriS method. Requirements Engineering, vol. 13, pp 241--255. Springer-Verlag. https://doi.org/10.1007/s00766-008-0067-3

Digital Library

[20]

Fischer, G., Piccinno, A., and Ye, Y., 2008. The Ecology of Participants in Co-evolving Socio-technical Environments. In Engineering Interactive Systems, P. Forbrig and F. Paternò Eds. Springer, Berlin / Heidelberg, 279--286. http://dx.doi.org/10.1007/978-3-540-85992-5_27

Digital Library

[21]

Hoepman, J.-H. (2014). Privacy Design Strategies. In IFIP, ICT Systems Security and Privacy Protection (pp 446--459). Springer Berlin Heidelberg.

[22]

Privacy Patterns, https://privacypatterns.org. Resource document. UC Berkeley, School of Information. Accessed 10 January 2020.

[23]

Basili, V.R., Caldiera, G., Rombach, H.D.: The goal question metric approach. In: Encyclopedia of Software Engineering. Wiley (1994)

[24]

Brooke, J. "SUS - A quick and dirty usability scale., in Usability evaluation in industry, CRC Press, 1996.

[25]

Borsci, S., Federici, S., & Lauriola, M. (2009). On the dimensionality of the System Usability Scale: a test of alternative measurement models. Cognitive Processing, 10(3), 193--197.

Cited By

Santa Barletta VCaivano DPal AScalera MSerrano Martin M(2025)Enabling Quantum Privacy and Security by Design: Imperatives for Contemporary State‐of‐the‐Art in Quantum Software EngineeringJournal of Software: Evolution and Process10.1002/smr.7000537:2Online publication date: 23-Feb-2025
https://doi.org/10.1002/smr.70005
Angelelli MArima SCatalano CCiavolino E(2024)A robust statistical framework for cyber-vulnerability prioritisation under partial information in threat intelligenceExpert Systems with Applications10.1016/j.eswa.2024.124572255(124572)Online publication date: Dec-2024
https://doi.org/10.1016/j.eswa.2024.124572
Saltarella MDesolda GEsposito AGreco FLanzilotti R(2024)Bridging the gap between GPDR and software development: the MATERIALIST frameworkMultimedia Tools and Applications10.1007/s11042-024-19923-0Online publication date: 10-Oct-2024
https://doi.org/10.1007/s11042-024-19923-0
Show More Cited By

Index Terms

A Visual Tool for Supporting Decision-Making in Privacy Oriented Software Development
1. Security and privacy
  1. Human and societal aspects of security and privacy
    1. Usability in security and privacy
  2. Software and application security
    1. Domain-specific security and privacy architectures
    2. Software security engineering

Recommendations

Privacy by Design and Software Engineering: a Systematic Literature Review
SBQS '22: Proceedings of the XXI Brazilian Symposium on Software Quality

Service providers increasingly collect, process, store, and share data from their users to understand their preferences to make better decisions and make accurate estimates for the delivery of advertisements, products, and services. However, the misuse ...
Integrating Security and Privacy in HCD-Scrum
CHItaly '21: Proceedings of the 14th Biannual Conference of the Italian SIGCHI Chapter

Nowadays, software development must face the challenge of integrating security and privacy elements from the earliest stages of any software development process. A correct and complete implementation starting from the requirements definition allows to ...
Privacy Knowledge Base for Supporting Decision-Making in Software Development
Sense, Feel, Design
Abstract
Integrating security and privacy requirements at every stage of the software development cycle is critical to guarantee the confidentiality, integrity and availability of the system and consequently of the data. Developers need to be supported in ...

Comments

Information & Contributors

Information

Published In

cover image ACM Other conferences

AVI '20: Proceedings of the 2020 International Conference on Advanced Visual Interfaces

September 2020

613 pages

ISBN:9781450375351

DOI:10.1145/3399715

Copyright © 2020 ACM.

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected]

In-Cooperation

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 02 October 2020

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Author Tags

Qualifiers

Short-paper
Research
Refereed limited

Conference

AVI '20

AVI '20: International Conference on Advanced Visual Interfaces

September 28 - October 2, 2020

Salerno, Italy

Acceptance Rates

AVI '20 Paper Acceptance Rate 36 of 123 submissions, 29%;

Overall Acceptance Rate 128 of 490 submissions, 26%

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

12
Total Citations
View Citations
134
Total Downloads

Downloads (Last 12 months)20
Downloads (Last 6 weeks)3

Reflects downloads up to 03 Mar 2025

Other Metrics

View Author Metrics

Citations

Cited By

Santa Barletta VCaivano DPal AScalera MSerrano Martin M(2025)Enabling Quantum Privacy and Security by Design: Imperatives for Contemporary State‐of‐the‐Art in Quantum Software EngineeringJournal of Software: Evolution and Process10.1002/smr.7000537:2Online publication date: 23-Feb-2025
https://doi.org/10.1002/smr.70005
Angelelli MArima SCatalano CCiavolino E(2024)A robust statistical framework for cyber-vulnerability prioritisation under partial information in threat intelligenceExpert Systems with Applications10.1016/j.eswa.2024.124572255(124572)Online publication date: Dec-2024
https://doi.org/10.1016/j.eswa.2024.124572
Saltarella MDesolda GEsposito AGreco FLanzilotti R(2024)Bridging the gap between GPDR and software development: the MATERIALIST frameworkMultimedia Tools and Applications10.1007/s11042-024-19923-0Online publication date: 10-Oct-2024
https://doi.org/10.1007/s11042-024-19923-0
Barletta VCaivano DCatalano CDe Vincentiis MPal A(2024)Machine Learning for Automotive Security in Technology TransferInformation Systems and Technologies10.1007/978-3-031-45651-0_34(341-350)Online publication date: 15-Feb-2024
https://doi.org/10.1007/978-3-031-45651-0_34
Pagano AAngelelli MCalvano MCurci APiccinno ASanta Barletta VPecorelli FSerrano M(2023)Quantum Computing for Learning Analytics: An Overview of Challenges and Integration StrategiesProceedings of the 2nd International Workshop on Quantum Programming for Software Engineering10.1145/3617570.3617867(13-16)Online publication date: 4-Dec-2023
https://dl.acm.org/doi/10.1145/3617570.3617867
de Chaves SBarreto Vavassori Benitti FHong JLanperne MPark JCerny TShahriar H(2023)Privacy by Design in Software Engineering: An update of a Systematic Mapping StudyProceedings of the 38th ACM/SIGAPP Symposium on Applied Computing10.1145/3555776.3577626(1362-1369)Online publication date: 27-Mar-2023
https://dl.acm.org/doi/10.1145/3555776.3577626
Caivano DCatalano CDe Vincentiis MLako APagano A(2023)MaREA: Multi-class Random Forest for Automotive Intrusion DetectionProduct-Focused Software Process Improvement10.1007/978-3-031-49269-3_3(23-34)Online publication date: 11-Dec-2023
https://dl.acm.org/doi/10.1007/978-3-031-49269-3_3
De Vincentiis MCassano FPagano APiccinno APecorelli FSanta Barletta VSerrano M(2022)QAI4ASE: Quantum artificial intelligence for automotive software engineeringProceedings of the 1st International Workshop on Quantum Programming for Software Engineering10.1145/3549036.3562059(19-21)Online publication date: 7-Nov-2022
https://dl.acm.org/doi/10.1145/3549036.3562059
Baldassarre MBarletta VDimauro GGigante DPagano APiccinno ABottoni PPanizzi E(2022)Supporting Secure Agile Development: the VIS-PRISE ToolProceedings of the 2022 International Conference on Advanced Visual Interfaces10.1145/3531073.3534494(1-3)Online publication date: 6-Jun-2022
https://dl.acm.org/doi/10.1145/3531073.3534494
Barletta VCassano FPagano APiccinno A(2022)New perspectives for cyber security in software development: when End-User Development meets Artificial Intelligence2022 International Conference on Innovation and Intelligence for Informatics, Computing, and Technologies (3ICT)10.1109/3ICT56508.2022.9990622(531-534)Online publication date: 20-Nov-2022
https://doi.org/10.1109/3ICT56508.2022.9990622
Show More Cited By

View Options

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Full Access

Get this Publication

View options

PDF

View or Download as a PDF file.

eReader

View online with eReader.

Figures

Tables

Media

View Table of Conten