The role of policy and stakeholder privacy values in requirements engineering
The role of policy and stakeholder privacy values in requirements engineering
复制标题
政策和利益相关者隐私价值观在需求工程中的作用
DOI：
10.1109/isre.2001.948553
复制
发表时间：
2001
期刊：
影响因子：
--
通讯作者：
C. Potts
中科院分区：
文献类型：
--
作者：
A. Antón;J. Earp;T. Alspaugh;C. Potts
组织中信息技术 (IT) 的多种使用会影响隐私。电子商务、数据库管理、安全机制、电信和协作系统的开发人员应该意识到这些影响，并承认在需求定义活动期间进行早期隐私规划的必要性。公众对基于消费者的网站收集个人信息的担忧导致大多数运营此类网站的组织制定并发布隐私政策。然而，这些政策往往一方面不符合普遍的社会价值观，另一方面又不符合基于网络的应用程序的操作功能。假设这种不一致源于对后果的不完全理解，而不是欺骗的意图，我们讨论概念、工具和技术，以帮助需求工程师和 IT 政策制定者使政策和系统需求更好地保持一致。我们的目标是鼓励可再生能源研究人员和从业者对应用程序和系统规范采取更全面的看法，其中系统或应用程序被视为政策执行和价值实现的引擎。
Diverse uses of information technology (IT) in organizations affect privacy. Developers of electronic commerce, database management, security mechanisms, telecommunication and collaborative systems should be aware of these effects and acknowledge the need for early privacy planning during the requirements definition activity. Public concerns about the collection of personal information by consumer-based Web sites have led most organizations running such sites to establish and publish privacy policies. However, these policies often fail to align with prevalent societal values on one hand and the operational functioning of Web-based applications on the other. Assuming that such misalignments stem from imperfect appreciation of consequences and not an intent to deceive, we discuss concepts, tools and techniques to help requirements engineers and IT policy makers bring policies and system requirements into better alignment. Our objective is to encourage RE researchers and practitioners to adopt a more holistic view of application and system specification, in which a system or application is seen as an engine of policy enforcement and values attainment.