ConfIs: A Tool for Privacy and Security Analysis and Conflict Resolution for Supporting GDPR Compliance through Privacy-by-Design

Alkubaisy, Duaa; Piras, Luca; Al-Obeidallah, Mohammed Ghazi; Cox, Karl; Mouratidis, Haralambos

doi:10.5220/0010406100800091

Cited by 5 publications

(3 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This research is an extension of the study conducted by Alkubaisy et al[1] -which itself is a continuation of earlier studies[2,3] and aims to aid the reader in comprehensively grasping the concepts laid out.…”

mentioning

confidence: 84%

See 1 more Smart Citation

A Framework for Privacy and Security Requirements Analysis and Conflict Resolution for Supporting GDPR Compliance Through Privacy-by-Design

Alkubaisy

Piras

Al-Obeidallah

et al. 2022

Communications in Computer and Information Science

View full text Add to dashboard Cite

Requirements elicitation, analysis, and, above all, early detection of conflicts and resolution, are among the most important, strategic, complex and crucial activities for preventing software system failures, and reducing costs related to reengineering/fixing actions. This is especially important when critical Requirements Classes are involved, such as Privacy and Security Requirements. Recently, organisations have been heavily fined for lack of compliance with data protection regulations, such as the EU General Data Protection Regulation (GDPR). GDPR requires organisations to enforce privacy-by-design activities from the early stages and for the entire software engineering cycle. Accordingly, requirements engineers need methods and tools for systematically identifying privacy and security requirements, detecting and solving related conflicts. Existing techniques support requirements identification without detecting or mitigating conflicts. The framework and tool we propose in this paper, called ConfIs, fills this gap by supporting engineers and organisations in these complex activities, with its systematic and interactive process. We applied ConfIs to a realistic GDPR example from the DEFeND EU Project, and evaluated its supportiveness, with positive results, by involving privacy and security requirements experts 1 .

show abstract

mentioning

confidence: 84%

“…The SecTro tool has been used to aid in the modelling of conflicts resolution [1]. It implements the Secure Tropos Methodology which consists of an engineering approach for security and privacy requirements, starting from earlystage requirements of the (IS) Information System development process.…”

Section: Confis Integration and Sectromentioning

confidence: 99%

A Framework for Privacy and Security Requirements Analysis and Conflict Resolution for Supporting GDPR Compliance Through Privacy-by-Design

Alkubaisy

Piras

Al-Obeidallah

et al. 2022

Communications in Computer and Information Science

View full text Add to dashboard Cite

show abstract

“…In the last decade, mishandling of personal data has caused numerous breaches [Cheng et al 2017]. Developers must prioritize data protection in the initial stages of a project to reduce conflicts between security, reliability, and performance [Alkubaisy et al 2021]. The Brazilian General Data Protection Law (LGPD) sanctions personal data protection measures [Brasil 2018], but many developers and organizations lack knowledge and initiatives to ensure privacy protection implementation [Alkubaisy et al 2021].…”

Section: Introductionmentioning

confidence: 99%

Privacy Compliance in Software Development: A Guide to Implementing the LGPD Principles

Rocha

Canedo

2023

Anais Estendidos Do XIX Simpósio Brasileiro De Sistemas De Informação (SBSI 2023)

View full text Add to dashboard Cite

This study examines the need for compliance with Brazil’s General Data Protection Law (LGPD) as data breaches become more common with the widespread use of digital applications. The study identified obstacles to implementing LGPD principles and proposes a reference guide to assist ICT professionals. Surveying professionals from various software development fields, the study found that participants struggled with at least one LGPD principle, often due to a lack of knowledge about implementation techniques. Therefore, the proposed guide aims to improve developers’ understanding of techniques to ensure compliance with the LGPD.

show abstract

Privacy-Compliant Software Reuse in Early Development Phases: A Systematic Literature Review

Guber,

Reinhartz-Berger

2024

Information and Software Technology

View full text Add to dashboard Cite

ConfIs: A Tool for Privacy and Security Analysis and Conflict Resolution for Supporting GDPR Compliance through Privacy-by-Design

Cited by 5 publications

References 0 publications

A Framework for Privacy and Security Requirements Analysis and Conflict Resolution for Supporting GDPR Compliance Through Privacy-by-Design

A Framework for Privacy and Security Requirements Analysis and Conflict Resolution for Supporting GDPR Compliance Through Privacy-by-Design

Privacy Compliance in Software Development: A Guide to Implementing the LGPD Principles

Privacy-Compliant Software Reuse in Early Development Phases: A Systematic Literature Review

Contact Info

Product

Resources

About