Sandro Stucki

Transforming Data Flow Diagrams for Privacy Compliance

Hanaa Alshareef, Sandro Stucki, and Gerardo Schneider. In Proceedings of the 9th International Conference on Model-Driven Engineering and Software Development (MODELSWARD 2021), volume 1, pp. 207–215, SciTePress, 2021.

Abstract

Most software design tools, as for instance Data Flow Diagrams (DFDs), are focused on functional aspects and cannot thus model non-functional aspects like privacy. In this paper, we provide an explicit algorithm and a proof-of-concept implementation to transform DFDs into so-called Privacy-Aware Data Flow Diagrams (PA-DFDs). Our tool systematically inserts privacy checks to a DFD, generating a PA-DFD. We apply our approach to two realistic applications from the construction and online retail sectors.

Links