一句话：提出将隐私需求作为软件开发一等公民的社会技术环境，弥合用户与分析师的知识差距并改善组织隐私氛围。
论文关注隐私需求在软件产业中常被忽视的问题。作者指出两大原因：需求工程中的用户与分析人员缺乏隐私专业知识和理解；开发者即使具备知识、技能和工具，也常因不认为隐私是公司优先事项而不予落实。为此，论文提出融合软件工程与组织心理学，构建可迭代、可定制的社会技术环境：一方面提供用于隐私需求获取、建模与设计的技术工具，缩小数据主体与分析人员之间的知识鸿沟；另一方面引入社会机制，在企业内形成支持性且可持续的组织隐私氛围，从而重新引导组织对隐私需求的关注与投入。摘要未报告实证评估，主要论证该环境的潜力。
Privacy requirements have become increasingly important as information about us is continuously accumulated and digitally stored. However, despite the many proposed methodologies and tools to address these requirements, privacy engineering is often underperformed in most domains of the software industry. Two of the major reasons underlying this under-performance are (1) the low expertise and understanding of privacy by the two main actors in requirements engineering: users and analysts, and (2) the fact that software developers often do not perceive privacy requirements as a priority for their companies, thus neglecting to meet these requirements even when they do have the required knowledge, skills, and supporting tools to do so. To address these two problems, we propose to integrate knowledge from software engineering and organizational psychology in an iterative, customizable, socio-technical environment. Such environment has the potential to support the design of systems by providing technical tools for eliciting, modeling, and designing privacy aspects, thus addressing the knowledge gap of both data subjects and analysts, and social mechanisms for achieving a supportive and sustainable organizational privacy climate within a company, thus reorienting the organizational attention and engagement toward addressing privacy requirements.
DOI 原文 ·
@inproceedings{paperbot6474,
title = {Privacy as first-class requirements in software development: A socio-technical approach},
author = {Yizhaq Benbenisty and Irit Hadar and Gil Luria and Paola Spoletini},
booktitle = {ASE},
year = {2021},
doi = {10.1109/ase51524.2021.9678872}
}