Evaluating a privacy requirements specification method by using a mixed-method approach: results and lessons learned

↓ Direkt till sidans innehåll
↓ Direkt till sidans sekundära innehåll (sidomenyn)

Sökning: WFRF:(Araújo João) > Evaluating a privac...

Peixoto, MarianaUniversidade Federal de Pernambuco (UFPE), BRA (författare)

Evaluating a privacy requirements specification method by using a mixed-method approach : results and lessons learned

Artikel/kapitelEngelska2023

Förlag, utgivningsår, omfång ...

2022-09-18
Springer Science+Business Media B.V.2023
printrdacarrier

Nummerbeteckningar

LIBRIS-ID:oai:DiVA.org:bth-23724
https://urn.kb.se/resolve?urn=urn:nbn:se:bth-23724URI
https://doi.org/10.1007/s00766-022-00388-2DOI

Kompletterande språkuppgifter

Språk:engelska
Sammanfattning på:engelska

Ingår i deldatabas

SwePubSwePub

Klassifikation

Ämneskategori:ref swepub-contenttype
Ämneskategori:art swepub-publicationtype

Anmärkningar

Although agile software development (ASD) has been adopted in the industry, requirements approaches for ASD still neglect non-functional requirements. Privacy has become a concern due to new user demands and data protection laws. Hence, privacy needs to be properly specified, but agile requirements engineering techniques do not explicitly represent privacy requirements and, therefore, are not able to proper analyze such requirements. In this context, Privacy Criteria Method (PCM), an approach to specify privacy in requirements activities, was proposed to produce more complete and detailed privacy requirements. By considering PCM a promising approach to be used in ASD and the importance of empirical evaluation of new methods, we have as objectives: 1 evaluate the ability of PCM to support systems analysts in specifying privacy requirements when used in conjunction with some agile specification methods; and 2 show our lessons learned in conducting empirical research based on an mix-method approach defined to empirically evaluate the suitability of a requirements specification in specifying privacy requirements. Mixed-method approach is a controlled experiment as a quantitative evaluation and a feasibility study (questionnaire and task analysis based) study as a qualitative and quantitative evaluation. The requirements specifications following PCM allow to represent privacy aspects, such as user’s personal data and the privacy mechanism that can be used to mitigate a privacy risk scenario. We also observed that some extra time is necessary to specify privacy requirements with PCM, but it does not imply a greater perceived effort. Specifications produced with PCM are of good quality and more privacy detailed. Additionally, we attest to the importance of conducting empirical research to evaluate new methods. PCM assists in specifying more complete and detailed in relation to traditional techniques used in ASD, which facilitates communication between the requirements analysts and developers. © 2022, The Author(s), under exclusive licence to Springer-Verlag London Ltd., part of Springer Nature.

Ämnesord och genrebeteckningar

NATURVETENSKAP Data- och informationsvetenskap Programvaruteknik hsv//swe
NATURAL SCIENCES Computer and Information Sciences Software Engineering hsv//eng
Agile software development
Empirical study
Privacy criteria method
Privacy requirements specification
Job analysis
Requirements engineering
Risk perception
Software design
Specifications
Empirical research
Empirical studies
Industry requirements
Mixed method
Privacy requirement specification
Privacy requirements
Quantitative evaluation
Requirements specifications
Data privacy

Biuppslag (personer, institutioner, konferenser, titlar ...)

Silva, CarlaUniversidade Federal de Pernambuco (UFPE), BRA (författare)
Araújo, JoãoUniversidade Nova de Lisboa (UNL), PRT (författare)
Gorschek, Tony,1972-Blekinge Tekniska Högskola,Institutionen för programvaruteknik(Swepub:bth)tgo (författare)
Vasconcelos, AlexandreUniversidade Federal de Pernambuco (UFPE), BRA (författare)
Vilela, JéssykaUniversidade Federal de Pernambuco (UFPE), BRA (författare)
Universidade Federal de Pernambuco (UFPE), BRAUniversidade Nova de Lisboa (UNL), PRT (creator_code:org_t)

Sammanhörande titlar

Ingår i:Requirements Engineering: Springer Science+Business Media B.V.28:2, s. 229-2550947-36021432-010X

Internetlänk

Hitta via bibliotek

Requirements Engineering (Sök värdpublikationen i LIBRIS)

Till lärosätets databas

Hitta mer i SwePub

Av författaren/redakt...: Peixoto, Mariana; Silva, Carla; Araújo, João; Gorschek, Tony, ...; Vasconcelos, Ale ...; Vilela, Jéssyka

Om ämnet

NATURVETENSKAP: NATURVETENSKAP; och Data och informa ...; och Programvarutekni ...

Artiklar i publikationen: Requirements Eng ...

Av lärosätet: Blekinge Tekniska Högskola

Sök utanför SwePub

Sök vidare i:: Google; Google Book Search; Google Scholar

Kungliga biblioteket hanterar dina personuppgifter i enlighet med EU:s dataskyddsförordning (2018), GDPR. Läs mer om hur det funkar här.
Så här hanterar KB dina uppgifter vid användning av denna tjänst.

LIBRIS.kb.se