Programming Principles and Abstractions for Privacy (B02)

限制应用程序，使它们遵守个人隐私要求，这大大得益于精心设计的代码。我们建议构建编程原则，允许开发人员通过设计来强制隐私，同时考虑部署过程中可能的隐私限制：用户的隐私策略越宽松，可以提供的功能就越多。我们设想一个系统，应用程序开发人员将其代码结构化为模块;静态和动态分析技术将确保模块上的策略得到执行，渐进式应用程序开发将一次解决一个模块的隐私合规性问题。我们将根据Web和Android应用程序的实际案例研究来评估我们的系统。

Constraining applications so that they adhere to individual privacy requirements strongly profits from carefully designed code. We propose to build programming principles that allow developers to enforce privacy by design, taking into account possible privacy constraints during deployment: the more permissive the user's privacy policies, the more functionality can be provided. We envision a system where app developers structure their code into modules; static and dynamic analysis techniques will ensure that the policy on a module is enforced, and gradual app development will tackle privacy compliance for one module at a time. We will evaluate our system based on realistic case studies for Web and Android applications.