Identification of Privacy Threats in a Requirements Model [more]
bachelor/master
DESCRIPTION:
Problem: Privacy is a software quality that gains more and more attention in the development of software nowadays. One of the hardest tasks is to select appropriate mechanisms to address privacy requirements in an appropriate way and to prove that the selected mechanisms really
contribute to the achievement of the privacy requirements. A practical way to deal with this problem is the identification and documentation of concrete privacy threats that negatively affect the privacy requirements and possibly occur in the system under consideration. Based on these concrete threats, methods to mitigate
these can be selected. It is obvious that an as complete identification of relevant privacy threats as possible is crucial to ensure that all privacy requirements will properly be addressed. Prerequisites: Softwaretechnik lecture. Goals & Procedure:
Elicitation of a catalog of privacy threats that especially documents in which situations the privacy threats occur and which kinds of privacy requirements they affect.
Development of a systematic method to identify privacy threats that have to be considered based on a given requirements model with already identified privacy requirements.
Integration of the documentation of the identified privacy threats into the requirements model.
Literature:
Rene Meis, Maritta Heisel: Systematic Identification of Information Flows from Requirements to Support Privacy Impact Assessments. ICSOFT-PT 2015: 43-52
Tool Support for the Problem-based Requirements Interaction Analysis [more]
bachelor/master
DESCRIPTION:
Problem: The Problem-based Requirements Interaction Analysis (PRIA) aims at the identification of requirements that potentially negatively interact with each other. The steps of the PRIA method are already formally specified and this specification will serve as foundation for the implementation of the tool-support. An open issue is, how the needed inputs that have to be provided manually by the person who applies the method can effectively be elicited. Prerequisites: - Softwaretechnik lecture- optionally master project "Computer-aided generation and validation of software models" Goals & Procedure:
Development of methods to effectively elicit needed inputs in a usable way.
Implementation of the formal specification in the Eclipse environment based on Papyrus UML and the epsilon framework.
Evaluation of the tool support based on a case study.
Problem: The aspect-oriented requirements engineering for problem frames method (AORE4PF) integrates the concept of aspect-orientation into the problem frame approach. Several tasks of the method involve manual modeling effort that also could be automatically performed or at least to some extend computer-aided. Especially, the weaving of sequence, problem and aspect diagrams shall be supported. Prerequisites: - Softwaretechnik lecture- optionally master project "Computer-aided generation and validation of software models" Goals & Procedure:
Identification of steps of the AORE4PF method that can be tool supported.
Extension of the UML4PF UML-profile with stereotypes to support the representation of needed artifacts in a UML model.
Development of the tool support in the Eclipse environment based on Papyrus UML and the epsilon framework.
Evaluation of the tool support based on a case study.
Literature:
Stephan Faßbender, Maritta Heisel, Rene Meis: A Problem-, Quality-,
and Aspect-Oriented Requirements Engineering Method. ICSOFT
(Selected Papers) 2014: 291-310
Integration of Privacy Enhancing Technologies (PETs) into Problem Frames [more]
bachelor/master
DESCRIPTION:
Problem: Several different technologies exist that shall enhance the privacy of a software system, called privacy enhancing technologies (PETs). In order to provide a reasoning that a PET really improves the privacy of a software, we have to consider these right from the beginning in the software development process. Prerequisites: Softwaretechnik lecture Goals & Procedure:
it shall be investigated how a selection of PETs can be integrated/combined with the problem classes defined by Jackson's problem frames.
PETs and their specific concerns have to be expressed in the problem frames notation.
it has to be investigated which further domain knowledge is needed for the integration of a PET.
A (informal) reason technique shall be developed that allows to reason under which circumstances (domain knowledge) a PET helps to mitigate a privacy requirement.
Teaching
Winter Semester 2015/16
- Softwaretechnik
Summer Semester 2015
- Project Computer-aided Generation and Validation of Software Models
- Pattern- and Component-Based Software Development
Winter Semester 2014/15
- Formal Specification of Software Systems
- Softwaretechnik
Summer Semester 2014
- Data Structures and Algorithms
- Pattern- and Component-Based Software Development
Winter Semester 2013/14
- Formal Specification of Software Systems
- Softwaretechnik
- Seminar eSociety
Summer Semester 2013
- Data Structures and Algorithms
Winter Semester 2012/13
- Formal Specification of Software Systems
- Seminar Online Privacy in Social Networks, Clouds and Smart Grids
Summer Semester 2012
- Data Structures and Algorithms
