Requirements for private communications over public spheres. (18th December 2019)

• Record Type: Journal Article
• Authors: Vemou, Konstantina; Karyda, Maria
• Is Part Of: Information and computer security. Volume 28:Number 1(2020)
• Page Start: 68
• Page End: 96
• Publication Date: 2019-12-18
• Subjects: Personal information -- Social networking services -- Communication models -- Privacy requirements -- Requirements elicitation; Computer security -- Management -- Periodicals; Computer networks -- Security measures -- Periodicals; Data protection -- Management -- Periodicals; 658.47
• DOI: 10.1108/ICS-01-2019-0002
• Languages: English
• ISSNs: 2056-4961

Abstract

Abstract : Purpose: In the Web 2.0 era, users massively communicate through social networking services (SNS), often under false expectations that their communications and personal data are private. This paper aims to analyze privacy requirements of personal communications over a public medium. Design/methodology/approach: This paper systematically analyzes SNS services as communication models and considers privacy as an attribute of users' communication. A privacy threat analysis for each communication model is performed, based on misuse scenarios, to elicit privacy requirements per communication type. Findings: This paper identifies all communication attributes and privacy threats and provides a comprehensive list of privacy requirements concerning all stakeholders: platform providers, users and third parties. Originality/value: Elicitation of privacy requirements focuses on the protection of both the communication's message and metadata and takes into account the public–private character of the medium (SNS platform). The paper proposes a model of SNS functionality as communication patterns, along with a method to analyze privacy threats. Moreover, a comprehensive set of privacy requirements for SNS designers, third parties and users involved in SNS is identified, including voluntary sharing of personal data, the role of the SNS platforms and the various types of communications instantiating in SNS.