一句话：提出通过部分软件披露在保护开发者知识产权的同时支持对数据使用的透明审计与信任。
论文关注处理个人或私有数据的软件组件中的数据保护与信任建立问题。作者指出，用户希望敏感数据安全，开发者希望保护软件知识产权，平台提供者希望被信任且能依赖开发者诚信，三者之间存在尚未充分解决的张力。为此，作者提出一种部分软件披露思路：以适当粒度透明地表示软件组件，使外部能够获得必要洞察并对数据使用进行无偏审计，同时避免暴露全部实现细节。摘要未报告实现或实验评估，属于概念性/展望性工作。
Whenever software components process personal or private data, appropriate data protection mechanisms are mandatory. An essential factor in achieving trust and transparency is not to give preference to a single party but to make it possible to audit the data usage in an unbiased way. The scenario in mind for this contribution contains (i) users bringing in sensitive data they want to be safe, (ii) developers building software-based services whose Intellectual Properties (IPs) they desire to protect, and (iii) platform providers wanting to be trusted and to be able to rely on the developers integrity. The authors see these interests as an insufficiently solved field of tension that can be relaxed by a suitable level of transparently represented software components to give insights without exposing every detail.
DOI 原文 ·
@inproceedings{paperbot5918,
title = {Towards transparency-encouraging partial software disclosure to enable trust in data usage},
author = {Christian Schindler},
booktitle = {ASE},
year = {2020},
doi = {10.1145/3324884.3415282}
}