PCM Tool: Privacy Requirements Specification in Agile Software Development

Peixoto, Mariana Maia; Silva, Carla; Lima, R. J.; Araújo, João; Gorschek, Tony; Silva, Jean

doi:10.5753/cbsoft_estendido.2019.7666

Cited by 13 publications

(9 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…As ongoing research, we are analysing other data collected in the interviews to observe the behavioral and environmental factors of SCT, and how they interact with personal factors and affect developers' understanding of privacy. We are also working on defining and evaluating a requirements specification method designed to guide developers to consider privacy from the beginning of agile software development [8].…”

Section: Final Considerationsmentioning

confidence: 99%

On Understanding How Developers Perceive and Interpret Privacy Requirements Research Preview

Peixoto

Ferreira

Cavalcanti

et al. 2020

Requirements Engineering: Foundation for Software Quality

Self Cite

View full text Add to dashboard Cite

Context and motivation]Ensuring privacy of users' data has become a top concern in software development, either to satisfy users' needs or to comply with privacy laws. The problem may increase by the time a new law is in the vacancy period, and companies are working to understand how to comply with it. In addition, research has shown that many developers do not have sufficient knowledge about how to develop privacy-sensitive software. [Question/problem] Motivated by this scenario, this research investigates the personal factors affecting the developers' understanding of privacy requirements during the vacancy period of a data protection law. [Principal ideas/results] We conducted thirteen interviews in six different private companies. As a result, we found nine personal factors affecting how software developers perceive and interpret privacy requirements. [Contribution] The identification of the personal factors contributes to the elaboration of effective methods for promoting proper privacy-sensitive software development.

show abstract

Section: Final Considerationsmentioning

confidence: 99%

On Understanding How Developers Perceive and Interpret Privacy Requirements Research Preview

Peixoto

Ferreira

Cavalcanti

et al. 2020

Requirements Engineering: Foundation for Software Quality

Self Cite

View full text Add to dashboard Cite

show abstract

“…Sob essa perspectiva, os Requisitos Funcionais (RF) normalmente são descritos através das Estórias, enquanto os Cenários BDD, focam no comportamento das funcionalidades, descrevendo Requisitos Não-Funcionais (RNF) e de Domínio. É importante destacar que os RNF normalmente são mais complexos de compreender, elicitar, documentar e validar, uma vez que possuem uma natureza mais abstrata, são mais conflituosos entre si para atender e de difícil medição [19] [20]. Visando auxiliar o processo de Engenharia de Requisitos, este estudo busca mapear elementos do IDP com as cláusulas-padrão que determinam as estruturas de construção das Estórias de Usuário e Cenários BDD, mostrados anteriormente.…”

Section: Artefatos Da Engenharia De Software áGilunclassified

Ensino da Adequação à LGPD no Desenvolvimento de Software através da Aprendizagem Ativa e Centrada no Discente

Saraiva,

Araújo,

Soares

2024

Anais Do IV Simpósio Brasileiro De Educação Em Computação (EDUCOMP 2024)

View full text Add to dashboard Cite

As abordagens de ensino-aprendizagem nos cursos de Engenharia de Software precisam aproximar a teoria da prática e assim, metodologias ativas e centradas no discente vêm sendo propostas e avaliadas. Ademais, demandas legislativas impõem, multidisciplinarmente, teorias, métodos e técnicas que abordem o desenvolvimento de software seguro, conforme prevê a LGPD que exige que o desenvolvimento de produtos e soluções de software considerem a privacidade de dados pessoais desde a concepção e incorpore esta prática durante toda a vida do software: Princípios de Privacy by Design e Privacy by Default. Este trabalho realizou um experimento com 142 discentes de graduação que produziram 947 artefatos ágeis – Estórias de Usuário e Cenários BDD - a partir do Inventário de Dados LGPD. Foi possível concluir que a Aprendizagem Significativa, o Pensamento Computacional e a Aprendizagem baseada em Problemas demonstraram-se apropriadas no ensino de requisitos legais para a Engenharia de Software.

show abstract

“…PRIPARE also considered including privacy in a dedicated sprint. In contrast to PRIPARE, Peixoto [23] aims to provide tool support to agile teams by guiding them through the specification of privacy requirements. However, extensive knowledge of privacy is required to fill out the form provided by the tools.…”

Section: A Privacy Requirements Engineeringmentioning

confidence: 99%

“…Despite the comprehensive approach offered by ProPAN [22], it still requires a huge workload of careful planning and expertise to follow its plan-driven steps. LINDDUN needs a significant amount of time for modeling the system [6], also in-depth privacy expertise is needed to specify accurate privacy criteria [23]. The lightweight approaches offered by Threat Poker and LINDDUN GO may not provide a comprehensive view of the system, especially for complex systems.…”

Section: A Privacy Requirements Engineeringmentioning

confidence: 99%

“…The use of computerized tools has been suggested to assist agile teams in identifying NFRs [16], [20], [21]. In the domain of PRE, several tools have been proposed in literature [22], [23]. Despite the availability of tools, the manual work involved, such as identifying actors, personal data, and completing numerous forms, can hinder the utilization of these tools to their full potential.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Leveraging NLP Techniques for Privacy Requirements Engineering in User Stories

Herwanto,

Quirchmayr,

Tjoa

2024

IEEE Access

View full text Add to dashboard Cite

Privacy requirements engineering acts as a role to systematically elicit privacy requirements from system requirements and legal requirements such as the GDPR. Many methodologies have been proposed, but the majority of them are focused on the waterfall approach, making adopting privacy engineering in agile software development difficult. The other major issue is that the process currently is to a high degree manual. This paper focuses on closing these gaps through the development of a machine learning-based approach for identifying privacy requirements in an agile software development environment, employing natural language processing (NLP) techniques. Our method aims to allow agile teams to focus on functional requirements while NLP tools assist them in generating privacy requirements. The main input for our method is a collection of user stories, which are typically used to identify functional requirements in agile software development. The NLP approach is then used to automate some humanintensive tasks such as identifying personal data and creating data flow diagrams from user stories. The data flow diagram forms the basis for the automatic creation of privacy requirements. Our evaluation shows that our NLP method achieves a fairly good performance in terms of F-Measure. We are also demonstrate the feasibility of our NLP approach in CamperPlus project. Lastly, we are developing a tool to integrate our NLP approach into the privacy requirements engineering pipeline, allowing for manual editing of results so that agile teams can maintain control over the automated approach.INDEX TERMS privacy requirements engineering, natural language processing, agile software development, user stories

show abstract

PCM Tool: Privacy Requirements Specification in Agile Software Development

Cited by 13 publications

References 7 publications

On Understanding How Developers Perceive and Interpret Privacy Requirements Research Preview

On Understanding How Developers Perceive and Interpret Privacy Requirements Research Preview

Ensino da Adequação à LGPD no Desenvolvimento de Software através da Aprendizagem Ativa e Centrada no Discente

Leveraging NLP Techniques for Privacy Requirements Engineering in User Stories

Contact Info

Product

Resources

About