Team for Research in
Ubiquitous Secure Technology

Citation
Weider D. Yu, Sharanya Doddapaneni, Savitha Murthy. "A Privacy Assessment Approach for Service Oriented Architecture Applications". Proceedings of The Second IEEE International Symposium on Service-Oriented System Engineering, 67-75, October, 2006.

Abstract
Web services are middle-tier technologies that are used to access backend applications to perform various operations. Their usage has significantly increased in e-commerce applications since their introduction. Because of their wide usage, security in web services has become an important point of interest for many. User data provided by users during their transactions with online web services can be stolen and illegally used. Thus web service providers have started to strengthen security. This can lead to lack of user privacy. Privacy has received relatively less attention during the growth of information technology. User privacy management needs to be both from the user side and from web application side. User awareness about information security is the factor for user side privacy management. On the application side, the web applications must be privacy policies compliant. But how will the user know that the web service application is compliant to privacy policies? In this paper, an approach is designed and implemented for a Privacy Policy Checker engine that automatically verifies and certifies a web service application based on the levels of overall privacy principle compliance and privacy statement compliance.

Electronic downloads

• HTML

  Weider D. Yu, Sharanya Doddapaneni, Savitha Murthy. <a
  href="http://www.truststc.org/pubs/196.html" >A
  Privacy Assessment Approach for Service Oriented
  Architecture Applications</a>, Proceedings of The
  Second IEEE International Symposium on Service-Oriented
  System Engineering, 67-75, October, 2006.

• Plain text

  Weider D. Yu, Sharanya Doddapaneni, Savitha Murthy. "A
  Privacy Assessment Approach for Service Oriented
  Architecture Applications". Proceedings of The Second
  IEEE International Symposium on Service-Oriented System
  Engineering, 67-75, October, 2006.

• BibTeX

  @inproceedings{YuDoddapaneniMurthy06_PrivacyAssessmentApproachForServiceOrientedArchitecture,
      author = {Weider D. Yu and Sharanya Doddapaneni and Savitha
                Murthy},
      title = {A Privacy Assessment Approach for Service Oriented
                Architecture Applications},
      booktitle = {Proceedings of The Second IEEE International
                Symposium on Service-Oriented System Engineering},
      pages = {67-75},
      month = {October},
      year = {2006},
      abstract = {Web services are middle-tier technologies that are
                used to access backend applications to perform
                various operations. Their usage has significantly
                increased in e-commerce applications since their
                introduction. Because of their wide usage,
                security in web services has become an important
                point of interest for many. User data provided by
                users during their transactions with online web
                services can be stolen and illegally used. Thus
                web service providers have started to strengthen
                security. This can lead to lack of user privacy.
                Privacy has received relatively less attention
                during the growth of information technology. User
                privacy management needs to be both from the user
                side and from web application side. User awareness
                about information security is the factor for user
                side privacy management. On the application side,
                the web applications must be privacy policies
                compliant. But how will the user know that the web
                service application is compliant to privacy
                policies? In this paper, an approach is designed
                and implemented for a Privacy Policy Checker
                engine that automatically verifies and certifies a
                web service application based on the levels of
                overall privacy principle compliance and privacy
                statement compliance. },
      URL = {http://www.truststc.org/pubs/196.html}
  }
  

Posted by Weider D. Yu on 11 Mar 2007.
For additional information, see the Publications FAQ or contact webmaster at www truststc org.