Affiliation:
1. School of Computer Science and Engineering, Beihang University, Beijing 100191, China
2. North China Institute of Computing Technology, Beijing 100083, China
Abstract
Privacy policies are critical for helping individuals make decisions on the usage of information systems. However, as a common language phenomenon, ambiguity occurs pervasively in privacy policies and largely impedes their usefulness. The existing research focuses on the identification of individual vague words or sentences, without considering the context of documents, which may cause a significant amount of false vagueness. Our goal is to automatically detect the potential false vagueness and the related supporting evidence, which illustrates or explains the vagueness, and therefore probably assist in alleviating the vagueness. We firstly analyze the public manual annotations and define four common patterns of false vagueness and three types of supporting evidence. Then we propose the approach of the F·vague-Detector to automatically detect the supporting evidence and then locate the corresponding potential false vagueness. According to our analysis, about 29–39% of individual vague sentences have at least one clarifying sentence in the documents, and experiments show good performance of our approach, with recall of 66.98–67.95%, precision of 70.59–94.85%, and F1 of 69.24–78.51% on the potential false vagueness detection. Detecting the vagueness of isolated sentences without considering their context within the whole document would bring about one-third potential false vagueness, and our approach can detect this potential false vagueness and the alleviating evidence effectively.
Funder
National Science Foundation of China
Innovation Fund of Beijing Huaxing Tai Chi Information Technology Co., Ltd.
Subject
General Mathematics,Engineering (miscellaneous),Computer Science (miscellaneous)
Reference41 articles.
1. Breaux, T.D., Zisman, A., Fricker, S., and Glinz, M. (September, January 31). An AI-assisted Approach for Checking the Completeness of Privacy Policies Against GDPR. Proceedings of the 28th IEEE International Requirements Engineering Conference, RE 2020, Zurich, Switzerland.
2. Analyzing privacy policies through syntax-driven semantic analysis of information types;Hosseini;Inf. Softw. Technol.,2021
3. RSL-IL4Privacy: A domain-specific language for the rigorous specification of privacy policies;Caramujo;Requir. Eng.,2019
4. Eddy, a formal language for specifying and analyzing data flow specifications for conflicting privacy requirements;Breaux;Requir. Eng.,2014
5. Identifying incompleteness in privacy policy goals using semantic frames;Bhatia;Requir. Eng.,2019
Cited by
2 articles.
订阅此论文施引文献
订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献