A1 Vertaisarvioitu alkuperäisartikkeli tieteellisessä lehdessä
Extracting LPL privacy policy purposes from annotated web service source code
Tekijät: Hjerppe Kalle, Ruohonen Jukka, Leppänen Ville
Kustantaja: SPRINGER HEIDELBERG
Julkaisuvuosi: 2023
Journal: Software and Systems Modeling
Tietokannassa oleva lehden nimi: SOFTWARE AND SYSTEMS MODELING
Lehden akronyymi: SOFTW SYST MODEL
Sivujen määrä: 19
ISSN: 1619-1366
eISSN: 1619-1374
DOI: https://doi.org/10.1007/s10270-022-00998-y
Verkko-osoite: https://doi.org/10.1007/s10270-022-00998-y
Rinnakkaistallenteen osoite: https://research.utu.fi/converis/portal/detail/Publication/175170270
Privacy policies are a mechanism used to inform users of the World Wide Web about the processing of their personal data. Such processing has special requirements, since personal data are regulated by data protection legislation. For example, a consent or another legal basis is typically needed. Privacy policies are documents used, among other things, to inform the data subject about processing of their personal data. These are formally represented by privacy languages. In this paper, we present a technique for constructing Layered Privacy Language policy data from web service code bases. Theoretically, we model the purposes of processing within web services by extending the privacy language with composition. We also present a formal analysis method for generating privacy policy purposes from the source code of web services. Furthermore, as a practical contribution, we present a static analysis tool that implements the theoretical solution. Finally, we report a brief case study for validating the tool
Ladattava julkaisu This is an electronic reprint of the original article. |  |
