Leveraging NLP Techniques for Privacy Requirements Engineering in User Stories
Privacy requirements engineering acts as a role to systematically elicit privacy requirements from system requirements and legal requirements such as the GDPR. Many methodologies have been proposed, but the majority of them are focused on the waterfall approach, making adopting privacy engineering i...
| Main Authors: | , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
IEEE
2024-01-01
|
| Series: | IEEE Access |
| Subjects: | |
| Online Access: | https://ieeexplore.ieee.org/document/10430095/ |
| _version_ | 1827131594520920064 |
|---|---|
| author | Guntur Budi Herwanto Gerald Quirchmayr A. Min Tjoa |
| author_facet | Guntur Budi Herwanto Gerald Quirchmayr A. Min Tjoa |
| author_sort | Guntur Budi Herwanto |
| collection | DOAJ |
| description | Privacy requirements engineering acts as a role to systematically elicit privacy requirements from system requirements and legal requirements such as the GDPR. Many methodologies have been proposed, but the majority of them are focused on the waterfall approach, making adopting privacy engineering in agile software development difficult. The other major issue is that the process currently is to a high degree manual. This paper focuses on closing these gaps through the development of a machine learning-based approach for identifying privacy requirements in an agile software development environment, employing natural language processing (NLP) techniques. Our method aims to allow agile teams to focus on functional requirements while NLP tools assist them in generating privacy requirements. The main input for our method is a collection of user stories, which are typically used to identify functional requirements in agile software development. The NLP approach is then used to automate some human-intensive tasks such as identifying personal data and creating data flow diagrams from user stories. The data flow diagram forms the basis for the automatic creation of privacy requirements. Our evaluation shows that our NLP method achieves a fairly good performance in terms of F-Measure. We are also demonstrate the feasibility of our NLP approach in CamperPlus project. Lastly, we are developing a tool to integrate our NLP approach into the privacy requirements engineering pipeline, allowing for manual editing of results so that agile teams can maintain control over the automated approach. |
| first_indexed | 2024-03-07T14:32:29Z |
| format | Article |
| id | doaj.art-e9df0e165d59480e9b51a1e3f07a4450 |
| institution | Directory Open Access Journal |
| issn | 2169-3536 |
| language | English |
| last_indexed | 2025-03-20T16:34:34Z |
| publishDate | 2024-01-01 |
| publisher | IEEE |
| record_format | Article |
| series | IEEE Access |
| spelling | doaj.art-e9df0e165d59480e9b51a1e3f07a44502024-08-29T23:00:39ZengIEEEIEEE Access2169-35362024-01-0112221672218910.1109/ACCESS.2024.336453310430095Leveraging NLP Techniques for Privacy Requirements Engineering in User StoriesGuntur Budi Herwanto0https://orcid.org/0000-0003-0250-6884Gerald Quirchmayr1A. Min Tjoa2https://orcid.org/0000-0002-8295-9252Faculty of Computer Science, University of Vienna, Vienna, AustriaFaculty of Computer Science, University of Vienna, Vienna, AustriaFaculty of Computer Science, University of Vienna, Vienna, AustriaPrivacy requirements engineering acts as a role to systematically elicit privacy requirements from system requirements and legal requirements such as the GDPR. Many methodologies have been proposed, but the majority of them are focused on the waterfall approach, making adopting privacy engineering in agile software development difficult. The other major issue is that the process currently is to a high degree manual. This paper focuses on closing these gaps through the development of a machine learning-based approach for identifying privacy requirements in an agile software development environment, employing natural language processing (NLP) techniques. Our method aims to allow agile teams to focus on functional requirements while NLP tools assist them in generating privacy requirements. The main input for our method is a collection of user stories, which are typically used to identify functional requirements in agile software development. The NLP approach is then used to automate some human-intensive tasks such as identifying personal data and creating data flow diagrams from user stories. The data flow diagram forms the basis for the automatic creation of privacy requirements. Our evaluation shows that our NLP method achieves a fairly good performance in terms of F-Measure. We are also demonstrate the feasibility of our NLP approach in CamperPlus project. Lastly, we are developing a tool to integrate our NLP approach into the privacy requirements engineering pipeline, allowing for manual editing of results so that agile teams can maintain control over the automated approach.https://ieeexplore.ieee.org/document/10430095/Privacy requirements engineeringnatural language processingagile software developmentuser stories |
| spellingShingle | Guntur Budi Herwanto Gerald Quirchmayr A. Min Tjoa Leveraging NLP Techniques for Privacy Requirements Engineering in User Stories IEEE Access Privacy requirements engineering natural language processing agile software development user stories |
| title | Leveraging NLP Techniques for Privacy Requirements Engineering in User Stories |
| title_full | Leveraging NLP Techniques for Privacy Requirements Engineering in User Stories |
| title_fullStr | Leveraging NLP Techniques for Privacy Requirements Engineering in User Stories |
| title_full_unstemmed | Leveraging NLP Techniques for Privacy Requirements Engineering in User Stories |
| title_short | Leveraging NLP Techniques for Privacy Requirements Engineering in User Stories |
| title_sort | leveraging nlp techniques for privacy requirements engineering in user stories |
| topic | Privacy requirements engineering natural language processing agile software development user stories |
| url | https://ieeexplore.ieee.org/document/10430095/ |
| work_keys_str_mv | AT gunturbudiherwanto leveragingnlptechniquesforprivacyrequirementsengineeringinuserstories AT geraldquirchmayr leveragingnlptechniquesforprivacyrequirementsengineeringinuserstories AT amintjoa leveragingnlptechniquesforprivacyrequirementsengineeringinuserstories |