A privacy threat analysis framework: supporting the elicitation and fulfillment of privacy requirements

575 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Ethical and privacy principles for learning analytics (2014, background): “For example, as pointed out by Elgesem (1999), the European Union directives state that data must be collected for specific, explicit and legitimate purposes.”
Privacy and Data Protection by Design - from policy to engineering (2014, methodology): “The only few existing privacy risk analysis methods are actually adaptations or transpositions of security risk analyses to privacy, for example the EBIOS method in [66] or STRIDE in [75].”
Automating the early detection of security design flaws (2020, background): “Rather than hard-coding the set of solutions that can impact the detection of a flaw, the detection criteria of flaws 2, 13 and 15 are expressed using a threat type (e.g., ‘information disclosure’).”