A New Generic Representation for Modeling Privacy

Clouet, Myriam; Antignac, Thibaud; Arnaud, Mathilde; Pedroza, Gabriel; Signoles, Julien

doi:10.1109/eurospw55150.2022.00027

Cited by 2 publications

(1 citation statement)

References 18 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Among all privacy properties, consent-related ones are of a particular kind as they relate to an agreement between interested parties concerning the processing of personal data [12]. However, these properties, even if disjointedly taken into account by legal departments, can be ignored at design time and are usually not checked at all at implementation and verification stages, which may lead to serious privacy issues regarding this legal basis.…”

Section: Introductionmentioning

confidence: 99%

Context Specification Language for Formally Verifying Consent Properties on Models and Code

Clouet

Antignac

Arnaud

et al. 2023

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

Recent privacy laws and regulations raise the stakes in verifying that software systems respect user consent. The current state of the art shows that privacy by design and formal methods can help. Still, ensuring the validity of privacy properties, in particular consent properties, at different stages of software development, is hard. This paper proposes a step towards solving this issue by introducing a new tool, named CASTT, that allows software engineers to verify consent properties at two different development stages: system modeling and code verification. To describe the system, this paper introduces a new formal context specification language named CSpeL, which allows to specify the key elements involved in consent and their relationships. The tool is evaluated on two use cases targeting different application domains: healthcare and website. We also evaluate the correctness and the efficiency of our tool.

show abstract

Section: Introductionmentioning

confidence: 99%