%0 Conference Paper %1 espre_17_stpapriv %A Mindermann, Kai %A Riedel, Frederik %A Abdulkhaleq, Asim %A Stach, Christoph %A Wagner, Stefan %B Proceedings of the 2017 IEEE 25ᵗʰ International Requirements Engineering Conference Workshops, 4ᵗʰ International Workshop on Evolving Security & Privacy Requirements Engineering %C Lisbon %D 2017 %E Moreira, Ana %E Araújo, João %E Hayes, Jane %E Paech, Barbara %I IEEE %K imported %P 90–96 %R 10.1109/REW.2017.30 %T Exploratory Study of the Privacy Extension for System Theoretic Process Analysis (STPA-Priv) to elicit Privacy Risks in eHealth %X Context: System Theoretic Process Analysis for Privacy (STPA-Priv) is a novel privacy risk elicitation method using a top down approach. It has not gotten very much attention but may offer a convenient structured approach and generation of additional artifacts compared to other methods. Aim: The aim of this exploratory study is to find out what benefits the privacy risk elicitation method STPA-Priv has and to explain how the method can be used. Method: Therefore we apply STPA-Priv to a real world electronic health scenario that involves a smart glucose measurement device used by children. Different kinds of data from the smart device including location data should be shared with the parents, physicians and urban planners. This makes it a sociotechnical system that offers enough and complex privacy risks to be found. Results: We find out that STPA-Priv is a structured method for privacy analysis and finds complex privacy risks. The method is supported by a tool called XSTAMPP which makes the analysis and its results more profound. Additionally, we learn that an iterative application of the steps might be necessary to find more privacy risks when more information about the system is available later. Conclusions: STPA-Priv helps to identify complex privacy risks that stem from sociotechnical interactions in a system. It also outputs privacy constraints that are to be enforced by the system to ensure privacy. %@ 978-1-5386-3489-9

@inproceedings{espre_17_stpapriv, abstract = {Context: System Theoretic Process Analysis for Privacy (STPA-Priv) is a novel privacy risk elicitation method using a top down approach. It has not gotten very much attention but may offer a convenient structured approach and generation of additional artifacts compared to other methods. Aim: The aim of this exploratory study is to find out what benefits the privacy risk elicitation method STPA-Priv has and to explain how the method can be used. Method: Therefore we apply STPA-Priv to a real world electronic health scenario that involves a smart glucose measurement device used by children. Different kinds of data from the smart device including location data should be shared with the parents, physicians and urban planners. This makes it a sociotechnical system that offers enough and complex privacy risks to be found. Results: We find out that STPA-Priv is a structured method for privacy analysis and finds complex privacy risks. The method is supported by a tool called XSTAMPP which makes the analysis and its results more profound. Additionally, we learn that an iterative application of the steps might be necessary to find more privacy risks when more information about the system is available later. Conclusions: STPA-Priv helps to identify complex privacy risks that stem from sociotechnical interactions in a system. It also outputs privacy constraints that are to be enforced by the system to ensure privacy.}, added-at = {2020-09-21T11:45:55.000+0200}, address = {Lisbon}, author = {Mindermann, Kai and Riedel, Frederik and Abdulkhaleq, Asim and Stach, Christoph and Wagner, Stefan}, biburl = {https://puma.ub.uni-stuttgart.de/bibtex/20f35b6c3d6a091f19e4a39edb72f9adb/christophstach}, booktitle = {Proceedings of the 2017 IEEE 25ᵗʰ International Requirements Engineering Conference Workshops, 4ᵗʰ International Workshop on Evolving Security & Privacy Requirements Engineering}, doi = {10.1109/REW.2017.30}, editor = {Moreira, Ana and Araújo, João and Hayes, Jane and Paech, Barbara}, interhash = {39acc094446c2bfd4d4be13ee46d5376}, intrahash = {0f35b6c3d6a091f19e4a39edb72f9adb}, isbn = {978-1-5386-3489-9}, keywords = {imported}, month = sep, pages = {90–96}, publisher = {IEEE}, series = {REW/ESPRE '17}, timestamp = {2020-09-21T09:45:55.000+0200}, title = {Exploratory Study of the Privacy Extension for System Theoretic Process Analysis (STPA-Priv) to elicit Privacy Risks in eHealth}, year = 2017 }