From Privacy Policies to Privacy Threats: A Case Study in Policy-Based Threat Modeling-Reference-Cited by-同舟云学术

From Privacy Policies to Privacy Threats: A Case Study in Policy-Based Threat Modeling

Published:2023-11-26 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 22nd Workshop on Privacy in the Electronic Society
language:
Short-container-title:

Author:

Dimova Yana¹^ORCID,Kode Mrunmayee¹^ORCID,Kalantari Shirin¹^ORCID,Wuyts Kim¹^ORCID,Joosen Wouter¹^ORCID,Mühlberg Jan Tobias²^ORCID

Affiliation:

1. KU Leuven, Leuven, Belgium

2. Université libre de Bruxelles, Brussels, Belgium

Funder

Research Fund KU Leuven Belgium

Flemish Research Programme Cybersecurity Belgium

CyberExcellence programme of the Walloon Region Belgium

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3603216.3624962

Reference62 articles.

1. Abby. 2020. WhatsApp Pay: what is happening with WhatsApp not-so-new payment feature? https://www.sprintsandsneakers.com/ en/blog/whatsapp-pay-what-is-happening-with-whatsapp-not-sonew- payment-feature/. (2020). Abby. 2020. WhatsApp Pay: what is happening with WhatsApp not-so-new payment feature? https://www.sprintsandsneakers.com/ en/blog/whatsapp-pay-what-is-happening-with-whatsapp-not-sonew- payment-feature/. (2020).

2. Edward G Amoroso . 1994. Fundamentals of computer security technology . Prentice-Hall, Inc. , USA. Edward G Amoroso. 1994. Fundamentals of computer security technology. Prentice-Hall, Inc., USA.

3. Privacy Policies over Time: Curation and Analysis of a Million-Document Dataset

4. Benjamin Andow , Samin Yaseer Mahmud , Wenyu Wang , Justin Whitaker , William Enck , Bradley Reaves , Kapil Singh , and Tao Xie . 2019 . PolicyLint: Investigating Internal Privacy Policy Contradictions on Google Play. In 28th USENIX Security Symposium (USENIX Security 19) . USENIX Association, Santa Clara, CA, 585--602. https: //www.usenix.org/conference/usenixsecurity19/presentation/andow Benjamin Andow, Samin Yaseer Mahmud, Wenyu Wang, Justin Whitaker, William Enck, Bradley Reaves, Kapil Singh, and Tao Xie. 2019. PolicyLint: Investigating Internal Privacy Policy Contradictions on Google Play. In 28th USENIX Security Symposium (USENIX Security 19). USENIX Association, Santa Clara, CA, 585--602. https: //www.usenix.org/conference/usenixsecurity19/presentation/andow

5. Benjamin Andow , Samin Yaseer Mahmud , Justin Whitaker , William Enck , Bradley Reaves , Kapil Singh , and Serge Egelman . 2020 . Actions Speak Louder than Words: Entity-Sensitive Privacy Policy and Data Flow Analysis with PoliCheck . In 29th USENIX Security Symposium (USENIX Security 20) . USENIX Association, Online, 985--1002. https: //www.usenix.org/conference/usenixsecurity20/presentation/andow Benjamin Andow, Samin Yaseer Mahmud, Justin Whitaker, William Enck, Bradley Reaves, Kapil Singh, and Serge Egelman. 2020. Actions Speak Louder than Words: Entity-Sensitive Privacy Policy and Data Flow Analysis with PoliCheck. In 29th USENIX Security Symposium (USENIX Security 20). USENIX Association, Online, 985--1002. https: //www.usenix.org/conference/usenixsecurity20/presentation/andow