Mitigating the Impact on Users’ Privacy Caused by over Specifications in the Design of IoT Applications

Abstract

Privacy has long been an important issue for IT systems that handle personal information, and is further aggravated as technology for collecting and analyzing massive amounts of data is becoming increasingly effective. There are methods to help practitioners analyze the privacy implications of a system during the design time. However, this is still a difficult task, especially when dealing with Internet of Things scenarios. The problem of privacy can become even more unmanageable with the introduction of overspecifications during the system development life cycle. In this paper, we carried out a controlled experiment with students performing an analysis of privacy implications using two different methods. One method aims at reducing the impact of overspecifications through the application of a goal-oriented analysis. The other method does not involve a goal-oriented analysis and is used as a control. Our initial findings show that conducting a goal-oriented analysis early during design time can have a positive impact over the privacy friendliness of the resulting system.

Requirements Engineering for Internet of Things (loT) Software Systems Development: A Systematic Mapping Study

“…A proposal in this context is a primary study that presents a new methodology, method, technique, etc. According to Table 5, for RE of IoT, there were a total of 12 proposals for IoT software systems development, and these were [30,32,[34][35][36][37][38][39][40][41][42][43].…”

“…The primary study introduced in [34] is focused on privacy. The authors point out that there are several approaches to helping professionals to analyze system privacy in the design phase.…”

“…An Effective Security Requirements Engineering Framework for Cyber-Physical Systems [47] Mitigating the Impact on Users' Privacy Caused by over Specifications in the Design of IoT Applications [34] Software Engineering for IoT-Driven Data Analytic Applications [35] An Application Development Framework for Internet-of-Things Service Orchestration [48] IoT-HarPSecA: A Framework and Road-map for Secure Design and Development of Devices and Applications in the IoT Space [49] Agent-Oriented Cooperative Smart Objects: From IoT System Design to Implementation [33] A Model-Driven Methodology for the Design of Autonomic and Cognitive IoT-Based Systems: Application to Healthcare [36] A Technology to Support the Building of Requirements Documents for IoT Software Systems [30] Functional Requirements Elicitation in IoT Systems: a follow-up study [44] A Requirements Engineering Process for IoT Systems [32] Elicitation Techniques for Internet of Things Applications Requirements: A Systematic Review [45] COMFIT: A Development Environment for the Internet of Things [50] Stakeholder Identification and Use Case Representation for Internet-of-Things Applications in Healthcare [51] Towards a General Software Engineering Methodology for the Internet of Things [53] REUBI: A Requirements Engineering method for ubiquitous systems [37] Modeling IoT Applications with SysML4IoT [38] Specifying Functional Requirements and QoS Parameters for IoT Systems [39] A Review of IoT Systems Engineering: Application to the Smart traffic lights system [46] Requirements engineering methods for an Internet of Things application: fall-detection for ambient assisted living [40] An Improved RE Framewrok for IoT-Oriented Smart Applications using Inetgrated Approach [31] TrUStAPIS: a trust requirements elicitation method for IoT [41] A UML-based Proposal for IoT System Requirements Specification [42] Methodology for the Model-Driven Development of Service Oriented IoT Applications [43] Papyrus for IoT -A Modeling Solution for IoT [52] Total 13 1 3 7 2 P: Proposal, F: Formalization, M: Meta-study, I: Implementation, E: Extension.…”

“…This classification scheme can be consulted in Table3from Section 3.3 of this article.A proposal in this context is a primary study that presents a new methodology, method, technique, etc. According to Table5, for RE of IoT, there were a total of 12 proposals for IoT software systems development, and these were[30,32,[34][35][36][37][38][39][40][41][42][43].The formalization category refers to an article that contains logical language or operators. Of these primary studies, only one fit in this category, and this was[39].The research on IoT software systems development considering the RE phases includes meta-studies (surveys, reviews).…”

Security, Privacy, and Trustworthiness of Sensor Networks and Internet of Things

“…In [ 6 ], entitled “Mitigating the Impact on Users’ Privacy Caused by over Specifications in the Design of IoT Applications”, by Pérez Fernández and Sindre, the authors address the problem of preserving user privacy in IoT applications in the presence of over-specifications during the system development life cycle. The authors carried out a controlled experiment with students performing an analysis of privacy implications using two different methods.…”