A Methodology to Develop Privacy-Friendly Software Applications
This site is under construction.
We propose Privacy by Evidence (PbE): a novel methodology that guides the implementation of privacy concepts in applications. This methodology includes risk assessment, mitigations and tests as crucial activities of the development cycle. Given the general impossibility in providing total privacy (i.e., free of vulnerabilities), we propose to document the mitigations in form of evidences, aiming to increase the confidence. To document the argumentation and evidences, we use the Goal Structuring Notation (GSN). The effectiveness of PbE was validated through the development of four case studies.
Questions about Privacy by Evidence? Contact the authors mailto.