A privacy threat analysis framework: supporting the elicitation and fulfillment of privacy requirements

No abstract is available for this paper.

• Publication year

  2011

• Venue

  Requirements Engineering

• Publication date

  2011-03-01

• Fields of study

  Computer Science, Engineering

• Identifiers
  DOI 10.1007/s00766-010-0115-7
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Handbook of Applied Cryptography

  2018cited by this paper
• Software Security - Building Security In

  2012cited by this paper
• Exploiting cryptography for privacy-enhanced access control: A result of the PRIME Project

  2010cited by this paper
• A terminology for talking about privacy by data minimization: Anonymity, Unlinkability, Undetectability, Unobservability, Pseudonymity, and Identity Management

  2010cited by this paper
• Understanding Privacy

  2010cited by this paper
• SP 800-122. Guide to Protecting the Confidentiality of Personally Identifiable Information (PII)

  2010cited by this paper
• Handbook of Financial Cryptography and Security

  2010cited by this paper
• Security development lifecycle

  2010influential reference
• Systems for Anonymous Communication

  2010cited by this paper
• Privacy-enabling social networking over untrusted networks

  2009cited by this paper
• Privacy Weaknesses in Biometric Sketches

  2009cited by this paper
• Experimental comparison of attack trees and misuse cases for security threat identification

  2009cited by this paper
• An efficient buyer-seller watermarking protocol based on composite signal representation

  2009cited by this paper
• Linking Privacy Solutions to Developer Goals

  2009cited by this paper
• Requirements Engineering: From System Goals to UML Models to Software Specifications

  2009cited by this paper
• Enforcing Access Control in Social Networks

  2009cited by this paper
• Privacy Considerations in Awareness Systems: Designing with Privacy in Mind

  2009influential reference
• MANAJEMEN RISIKO KEAMANAN INFORMASI DENGAN MENGGUNAKAN METODE OCTAVE (OPERATIONALLY CRITICAL THREAT, ASSET, AND VULNERABILITY EVALUATION)

  2009cited by this paper
• Addressing privacy requirements in system design: the PriS method

  2008cited by this paper
• Privacy-Aware Collaborative Access Control in Web-Based Social Networks

  2008cited by this paper
• Legal Requirements, Compliance and Practice: An Industry Case Study in Accessibility

  2008cited by this paper
• Computer-Aided Privacy Requirements Elicitation Technique

  2008cited by this paper
• Collaboration and the Knowledge Economy : Issues , Applications , Case Studies

  2008cited by this paper
• Analyzing Regulatory Rules for Privacy and Security Requirements

  2008cited by this paper
• Understanding Privacy Settings in Facebook with an Audience View

  2008cited by this paper
• A Survey of Homomorphic Encryption for Nonspecialists

  2007cited by this paper
• Software Security: Building Security In

  2006cited by this paper
• L-diversity: privacy beyond k-anonymity

  2006cited by this paper
• Private Searching on Streaming Data

  2005cited by this paper
• Searchable Encryption Revisited: Consistency Properties, Relation to Anonymous IBE, and Extensions

  2005cited by this paper
• How To Exchange Secrets with Oblivious Transfer

  2005cited by this paper
• Tor: The Second-Generation Onion Router

  2004influential reference
• Signature Schemes and Anonymous Credentials from Bilinear Maps

  2004cited by this paper
• Privacy-enhancing identity management

  2004cited by this paper
• Just fast keying: Key agreement in a hostile internet

  2004cited by this paper
• State-of-the-art in privacy preserving data mining

  2004cited by this paper
• Off-the-record communication, or, why not to use PGP

  2004cited by this paper
• Personal privacy through understanding and action: five pitfalls for designers

  2004influential reference
• Security and privacy requirements analysis within a social setting

  2003cited by this paper
• Covert channels and anonymizing networks

  2003cited by this paper
• Misuse Cases: Use Cases with Hostile Intent

  2003cited by this paper
• From system goals to intruder anti-goals: attack generation and resolution for security requirements engineering

  2003influential reference
• Secrets and Lies: Digital Security in a Networked World

  2003cited by this paper
• Private Authentication

  2002cited by this paper
• Designing for privacy and other competing requirements

  2002cited by this paper
• Achieving k-Anonymity Privacy Protection Using Generalization and Suppression

  2002cited by this paper
• k-Anonymity: A Model for Protecting Privacy

  2002cited by this paper
• Cryptographic techniques for privacy-preserving data mining

  2002cited by this paper
• Analyzing Website privacy requirements using a privacy goal taxonomy

  2002cited by this paper
• Deniable Ring Authentication

  2002cited by this paper
• Robust Covert Communication over a Public Audio Channel Using Spread Spectrum

  2001cited by this paper
• Flexible team-based access control using contexts

  2001cited by this paper
• Templates for Misuse Case Description

  2001cited by this paper
• P3P — platform for privacy preferences project

  2001cited by this paper
• Communication Complexity and Secure Function Evaluation

  2001cited by this paper
• 情報技術 : 情報セキュリティ管理実施基準 : 国際規格 : ISO/IEC 17799 = Information technology : code of practice for infromation security management : international standard : ISO/IEC 17799

  2000cited by this paper
• Web MIXes: A System for Anonymous and Unobservable Internet Access

  2000cited by this paper
• Verifiable Encryption, Group Encryption, and Their Applications to Separable Group Signatures and Signature Sharing Schemes

  2000cited by this paper
• Verifiable Encryption and Applications to Group Signatures and Signature Sharing

  1998cited by this paper
• Crowds: anonymity for Web transactions

  1998cited by this paper
• On the limits of steganography

  1998cited by this paper
• On the Foundations of Oblivious Transfer

  1998cited by this paper
• Cryptography and evidence

  1997cited by this paper
• Hiding Routing Information

  1996cited by this paper
• Some Preliminary Comments on the DIRECTIVE 95/46/EC OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

  1996cited by this paper
• Private information retrieval

  1995cited by this paper
• Distance-Bounding Protocols (Extended Abstract)

  1994cited by this paper
• Representing and Using Nonfunctional Requirements: A Process-Oriented Approach

  1992cited by this paper
• ISDN-MIXes: Untraceable Communication with Small Bandwidth Overhead

  1991cited by this paper
• The Dining Cryptographers in the Disco - Underconditional Sender and Recipient Untraceability with Computationally Secure Serviceability (Abstract)

  1990cited by this paper
• The dining cryptographers problem: Unconditional sender and recipient untraceability

  1988cited by this paper
• Security without identification: transaction systems to make big brother obsolete

  1985cited by this paper
• Networks Without User Observability: Design Options

  1985cited by this paper
• Protocols for secure computations

  1982cited by this paper
• The protection of privacy and transborder flows of personal data: the work of the Council of Europe, the Organization for Economic Co-operation and Development and the European Economic Community

  1982cited by this paper
• Untraceable electronic mail, return addresses, and digital pseudonyms

  1981cited by this paper
• A Taxonomy for Privacy

  1981cited by this paper

• "Create an environment that protects women, rather than selling anxiety!": Participatory Threat Modeling with Chinese Young Women Living Alone

  2026cites this paper
• A Passwordless Authentication Mechanism for the Web Using Self-Sovereign Identity

  2026cites this paper
• From Measurement to Monitoring: Evaluating Privacy Risks in Carbon Footprint Tools

  2026influential citation
• PeTARA : A privacy-enhanced threat analysis and risk assessment method for intelligent connected vehicles

  2026cites this paper
• PriMod4AI: Lifecycle-Aware Privacy Threat Modeling for AI Systems using LLM

  2026cites this paper
• QoeSiGN: Towards Qualified Collaborative eSignatures

  2025cites this paper
• strideSEA: A STRIDE-centric Security Evaluation Approach

  2025cites this paper
• Information security and confidentiality in health chatbots: A scoping review and development of a conceptual model

  2025cites this paper
• Modeling interdependent privacy threats

  2025cites this paper
• A Comprehensive Review of Techniques, Methods, Processes, Frameworks, and Tools for Privacy Requirements

  2025influential citation
• PrivGuide: A Planning Tool for Proactive Privacy Integration in the DevPrivOps Lifecycle

  2025cites this paper
• linddun maestro: an architecture framework for privacy threat modeling

  2025cites this paper
• Examining the impact of trust on customer intention to use metaverse payments: A next-gen transactions strategic outlook

  2025cites this paper
• Initial Requirements for the Prototyping of an App for a Psychosocial Rehabilitation Project: An Integrative Review

  2025cites this paper
• A Study on the Prevalence of Privacy in Software Engineering

  2025cites this paper
• Human-Artificial Intelligent Threat Modelling in the Automotive Domain

  2025cites this paper
• The Looming Privacy Challenges Posed by Commercial Satellite Imaging: Remedies and Research Directions

  2025cites this paper
• Electric vehicle charging network security: A survey

  2025cites this paper
• A Survey on Data Plane Security in Software-Defined Networks: Toward Adaptive Security of Data Planes

  2025cites this paper
• A Large Language Model-Supported Threat Modeling Framework for Transportation Cyber-Physical Systems

  2025cites this paper
• Real-time privacy vulnerability detection techniques in software development: A Systematic Literature Review

  2025cites this paper
• A Typology of Explanations for Explainability-by-Design

  2025cites this paper
• A systematic mapping study on privacy in IoT-based systems

  2025cites this paper
• CASSE: Targeted Threat Modeling for Data Management Libraries

  2025cites this paper
• Cyber Threat Modeling of an LLM-Based Healthcare System

  2025cites this paper
• Segmentation and Filtering Are Still the Gold Standard for Privacy in IoT - An In-Depth STRIDE and LINDDUN Analysis of Smart Homes

  2025cites this paper
• Robust and reusable LINDDUN privacy threat knowledge

  2025cites this paper
• A Survey of Data Security Sharing

  2025cites this paper
• A limited technical background is sufficient for attack-defense tree acceptability

  2025cites this paper
• Generating Privacy Stories From Software Documentation

  2025cites this paper
• Holistic Cyber Threat Modeling for Machine Learning-Based Systems: A Case Study in Healthcare

  2025cites this paper
• Energy Consumption of TLS, Searchable Encryption and Fully Homomorphic Encryption

  2025cites this paper
• ContinuumConductor : Decentralized Process Mining on the Edge-Cloud Continuum

  2025cites this paper
• From Cluttered to Clustered: Addressing Privacy Threat Explosion through Automated Clustering

  2025cites this paper
• Understanding practitioner perspectives on using privacy harm categories for privacy risk assessment

  2025cites this paper
• A Comprehensive User Study on Medical Device Threat Modeling Methodologies and CyberLlama2 - MEDICALHARM Threat Modeling Assistant.

  2025cites this paper
• Using LLMs to Identify Personal Data Processing in Source Code

  2025cites this paper
• Privacy-preserving distributed clustering: A fully homomorphic encrypted approach for time series

  2025cites this paper
• Automatic Rule Checking for Microservices: Supporting Security Analysis with Explainability

  2025cites this paper
• Enhancing Anonymity for Electric Vehicles in the ISO 15118 Plug-and-Charge

  2025cites this paper
• Privacy Perspectives and Practices of Chinese Smart Home Product Teams

  2025cites this paper
• Too Many Issues: Automatically Prioritizing Analyzer Findings by Tracing Security Importance

  2025cites this paper
• Privy: Envisioning and Mitigating Privacy Risks for Consumer-facing AI Product Concepts

  2025cites this paper
• Network Hexagons Under Attack: Secure Crowdsourcing of Georeferenced Data

  2025cites this paper
• Cross-Layer Integrated Sensing and Communication: A Joint Industrial and Academic Perspective

  2025cites this paper
• Privacy evaluation of the European Digital Identity Wallet's Architecture and Reference Framework

  2025cites this paper
• Security and Privacy for VR in non-entertainment sectors: a practice-based study of the challenges, strategies and gaps

  2025cites this paper
• Auspex: Building Threat Modeling Tradecraft into an Artificial Intelligence-Based Copilot

  2025cites this paper
• Evaluating the Efficacy of LINDDUN GO for Privacy Threat Modeling for Local Renewable Energy Communities

  2025cites this paper
• Utilization of Large Language Models for conformity assessment: Chances, Threats, and Mitigations

  2025cites this paper
• Supporting the Integration of Privacy-Enhancing Technologies into the Software Development Life Cycle

  2025cites this paper
• The SPADA methodology for threat modelling

  2025cites this paper
• Learning from the Dark Side About How (not) to Engineer Privacy: Analysis of Dark Patterns Taxonomies from an ISO 29100 Perspective

  2024cites this paper
• Policy-Driven XACML-Based Architecture for Dynamic Enforcement of Multiparty Computation

  2024cites this paper
• Leveraging NLP Techniques for Privacy Requirements Engineering in User Stories

  2024influential citation
• The Impact of ChatGPT on Tourists' Trust and Travel Planning Intention: International Researches and Current Situation in Vietnam

  2024cites this paper
• An Improved PUF-Based Privacy-Preserving IoT Protocol for Cloud Storage

  2024cites this paper
• Designing Privacy-Aware IoT Applications for Unregulated Domains

  2024cites this paper
• Künstliche Intelligenz und sichere Gesundheitsdatennutzung im Projekt KI-FDZ: Anonymisierung, Synthetisierung und sichere Verarbeitung für Real-World-Daten

  2024cites this paper
• Bringing privacy, security and performance to the Internet of Things using IOTA and usage control

  2024cites this paper
• On the Evaluation of Privacy Impact Assessment and Privacy Risk Assessment Methodologies: A Systematic Literature Review

  2024cites this paper
• Enhancing Privacy Risk Modeling in Practice: A Case Study of an e-Justice System

  2024cites this paper
• User-tailored privacy: unraveling the influences of psychological needs and message framing on app users’ privacy Disclosure intentions

  2024cites this paper
• Quantifying Privacy in Cooperative Awareness Services Through Trajectory Reconstruction

  2024cites this paper
• Not Sure Your Car Withstands Cyberwarfare

  2024cites this paper
• A typology of explanations to support Explainability-by-Design

  2024cites this paper
• ZK-DPPS: A Zero-Knowledge Decentralised Data Sharing and Processing Middleware

  2024cites this paper
• TrajectGuard: A Comprehensive Privacy-Risk Framework for Multiple-Aspects Trajectories

  2024cites this paper
• Enhancing Cybersecurity through Comprehensive Investigation of Data Flow-Based Attack Scenarios

  2024cites this paper
• 120 Domain-Specific Languages for Security

  2024cites this paper
• İnsan Kaynakları Yönetiminde Kolektif Adaptasyon: Karmaşık Uyarlanabilir Sistemler Bakış Açısı

  2024cites this paper
• Evolution of secure development lifecycles and maturity models in the context of hosted solutions

  2024cites this paper
• A Unified Framework for GDPR Compliance in Cloud Computing

  2024cites this paper
• AttackDefense Framework (ADF): Enhancing IoT Devices and Lifecycles Threat Modeling

  2024cites this paper
• Balancing Talent and Technology: Navigating Cybersecurity and Privacy in SMEs

  2024cites this paper
• A Systematic Review of Personal Information Sharing in Smart Cities: Risks, Impacts, and Controls

  2024cites this paper
• A decentralized model for usage and information flow control in distributed systems

  2024cites this paper
• Understanding the GDPR from a requirements engineering perspective—a systematic mapping study on regulatory data protection requirements

  2024cites this paper
• Can Language Models Identify Use of PII Data Types in Code

  2024cites this paper
• A natural language-based method to specify privacy requirements: an evaluation with practitioners

  2024cites this paper
• GDPR compliance via software evolution: Weaving security controls in software design

  2024cites this paper
• Data Processing Diagrams - A Modeling Technique for Privacy in Complex Data Processing Systems

  2024cites this paper
• Addressing Privacy Concerns in Joint Communication and Sensing for 6G Networks: Challenges and Prospects

  2024cites this paper
• On the Integration of Privacy-Enhancing Technologies in the Process of Software Engineering

  2024cites this paper
• MEDICALHARM: A threat modeling designed for modern medical devices and a comprehensive study on effectiveness, user satisfaction, and security perspectives

  2024cites this paper
• Navigating Privacy Patterns in the Era of Robotaxis

  2024cites this paper
• Accurate Architectural Threat Elicitation From Source Code Through Hybrid Information Flow Analysis

  2024cites this paper
• Information Inference Diagrams: Complementing Privacy and Security Analyses Beyond Data Flows

  2024cites this paper
• Assessing User Apprehensions About Mixed Reality Artifacts and Applications: The Mixed Reality Concerns (MRC) Questionnaire

  2024cites this paper
• PILLAR: LINDDUN Privacy Threat Modeling Using LLMs

  2024cites this paper
• Design and Implementation of the Advanced Cloud Privacy Threat Modeling

  2024cites this paper
• Privacy protection against user profiling through optimal data generalization

  2024cites this paper
• Threat models over space and time: A case study of end‐to‐end‐encrypted messaging applications

  2024cites this paper
• Used, Avoided, Restricted? Perceptions, Behavior, and Changes in Video Conferencing of German-speaking Users During and After the Pandemic

  2024cites this paper
• Toward a Holistic Privacy Requirements Engineering Process: Insights From a Systematic Literature Review

  2024influential citation
• "There are rabbit holes I want to go down that I'm not allowed to go down": An Investigation of Security Expert Threat Modeling Practices for Medical Devices

  2024cites this paper
• Contributing to Accessibility Datasets: Reflections on Sharing Study Data by Blind People

  2023cites this paper
• Privacy Property Graph: Towards Automated Privacy Threat Modeling via Static Graph-based Analysis

  2023cites this paper
• SoK: Data Privacy in Virtual Reality

  2023cites this paper
• Model of Threats to the Integrity and Availability of Information Processed in Cyberspace

  2023cites this paper