What Websites Know About You
Lecture notes in computer sciencePublished 1 January 2013
Elisa Costante, J Hartog, Milan Petković
Citations29
SJR quartileQ2
SJR score0.35
SNIP0.55
Generate an AI Snapshot to get a quick, structured summary of this paper.
Study Snapshot
ObjectiveStudy objective
MethodsResearch methodology
PopulationPopulation studied
Sample sizeSample sizes
OutcomesStudy outcomes here
ResultsStudy results comes here
LimitationsResearch study limitations comes here
A concise AI-generated summary of the paper will appear here once you click Generate AI Snapshot.
TL;DR
This paper proposes a solution which automatically analyzes privacy policy text and shows what personal information is collected, based on the use of Information Extraction techniques and represents a step towards the more ambitious aim of automated grading of privacy policies.
Abstract
The need for privacy protection on the Internet is well recognized. Everyday users are asked to release personal information in order to use online services and applications. Service providers do not always need all the data they gather to be able to offer a service. Thus users should be aware of what data is collected by a provider to judge whether this is too much for the services offered. Providers are obliged to describe how they treat personal data in privacy policies. By reading the policy users could discover, amongst others, what personal data they agree to give away when choosing to use a service. Unfortunately, privacy policies are long legal documents that users notoriously refuse to read. In this paper we propose a solution which automatically analyzes privacy policy text and shows what personal information is collected. Our solution is based on the use of Information Extraction techniques and represents a step towards the more ambitious aim of automated grading of privacy policies.
Keywords
Social SciencesComputer Science
Choice Reviews OnlineThe Encyclopedia of language and linguistics
1,265 Citations1994Robert D. Levine
SSRN Electronic JournalBroken Promises of Privacy: Responding to the Surprising Failure of Anonymization
1,015 Citations2009Paul Ohm
It is necessary to respond to the surprising failure of anonymization, and this Article provides the tools to do so.
Information Systems ResearchThe Effect of Online Privacy Information on Purchasing Behavior: An Experimental Study
872 Citations2010Janice Tsai, Serge Egelman +2 more
This study indicates that when privacy information is made more salient and accessible, some consumers are willing to pay a premium to purchase from privacy protective websites, which suggests that businesses may be able to leverage privacy protection as a selling point.
Communications of the ACMThe platform for privacy preferences
711 Citations1999Joseph Reagle, Lorrie Faith Cranor
It is believed users' confidence in online transactions will increase when they are presented with meaningful information and choices about Web site privacy practices, and P3P is not a silver bullet; it is complemented by other technologies as well as regulatory and self-regulatory approaches to privacy.
Computers and the HumanitiesGATE, a General Architecture for Text Engineering
644 Citations2002Hamish Cunningham
GATE lies at the intersection of human language computation and software engineering, and constitutes aninfrastructural system supporting research and development of languageprocessing software.
How to Declare Access Control Policies for XML Structured Information Objects using OASIS' eXtensible Access Control Markup Language (XACML)
582 Citations2005Andreas Matheus
This paper introduces a novel approach for declaring information object related access restrictions, based on a valid XML encoding, and shows, how the access restrictions can be declared using XACML and Xpath.
Medical Entomology and ZoologyThe platform for privacy preferences 1.0 (p3p1.0) specification
514 Citations2002Lorrie Faith Cranor, Marc Langheinrich +2 more
IEEE Transactions on Software EngineeringEngineering Privacy
406 Citations2008Sarah Spiekermann, Lorrie Faith Cranor
The paper uses a three-layer model of user privacy concerns to relate them to system operations and examine their effects on user behavior, and develops guidelines for building privacy-friendly systems.
Computational LinguisticsOn Coreferring: Coreference in MUC and Related Annotation Schemes
207 Citations2000Kees van Deemter, Rodger Kibble
It is suggested a division of labor whereby annotation of the coreference relation proper is separated from other tasks such as annotation of bound anaphora and of the relation between a subject and a predicative NP.
ACM Computing SurveysAdaptive information extraction
190 Citations2006Jordi Turmo, Alicia Ageno +1 more
This survey describes and compares the main approaches to IE and the different ML techniques used to achieve Adaptive IE technology.
IEEE Security & PrivacyFinancial privacy policies and the need for standardization
168 Citations2004Annie I. Antón, Julia B. Earp +4 more
The authors analyze 40 online privacy policy documents from nine financial institutions to examine their clarity and readability and show that compliance with the existing legislation and standards is, at best, questionable.
Elsevier eBooksInformation Extraction, Automatic
148 Citations2006Hamish Cunningham
The article covers the origins of IE and the factors relevant to its deployment in applications contexts, presents scenarios in which the technology has been applied, and breaks down the task into five subtasks and defines them.
An empirical study of natural language parsing of privacy policy rules using the SPARCLE policy workbench
143 Citations2006Carolyn Brodie, Clare-Marie Karat +1 more
The successful implementation of the parsing capabilities that are part of the functional version of the SPARCLE authoring utility are presented, including a set of grammars which execute on a shallow parser that are designed to identify the rule elements in privacy policy rules.
ACM SIGMOD RecordSystemT
138 Citations2009Rajasekar Krishnamurthy, Yunyao Li +4 more
The extraction algebra is described and the effectiveness of the optimization techniques in providing orders of magnitude reduction in the running time of complex extraction tasks are demonstrated.
Use of a P3P user agent by early adopters
125 Citations2002Lorrie Faith Cranor, Manjula Arjula +1 more
It is found that a large proportion of AT&T Privacy Bird users began reading privacy policies more often and being more proactive about protecting their privacy as a result of using this software.
Privacy and Identity Management for Life
111 Citations2011Jan Camenisch
The generic information extraction system
101 Citations1993Jerry R. Hobbs
An information extraction system is a cascade of transducers or modules that at each step add structure and often lose information, hopefully irrelevant, by applying rules that are acquired manually and/or automatically.
Usable security and privacy
92 Citations2005Carolyn Brodie, Clare-Marie Karat +2 more
The research reported here describes the efforts to design a privacy management workbench which facilitates privacy policy authoring, implementation, and compliance monitoring, and iteratively designing and validating a prototype with target users for flexible privacy technologies.
A machine learning solution to assess privacy policy completeness
87 Citations2012Elisa Costante, Yuanhao Sun +2 more
The results show the feasibility of the approach; an automatic classifier, able to associate the right category to paragraphs of a policy with an accuracy approximating that obtainable by a human judge, can be effectively created.
English as a formal specification language
82 Citations2004Rolf Schwitter
This work reformulated Schubert's steamroller puzzle in PENG, translated the resulting specification via discourse representation structures into first-order predicate logic with equality, and proved the steamroller's conclusion with OTTER, a standard theorem prover.
arXiv (Cornell University)Automating Coreference: The Role of Annotated Training Data
69 Citations1998Lynette Hirschman, Patricia Robinson +2 more
A study of interannotator agreement in the coreference task as defined by the Message Understanding Conference (MUC-6 and MUC-7) clarified and simplified the annotation specification, and an analysis of disagreement among several annotators concluded that only 16% of disagreements represented genuine disagreement about coreference.
IFIP International Federation for Information Processing/IFIPTowards Displaying Privacy Information with Icons
48 Citations2011Leif-Erik Holtz, Katharina Nocun +1 more
To enhance the user’s awareness on who is collecting and handling their personal data for what purpose and to depict core information of the policy, privacy icons could be used in addition to written policies.
UPP: User Privacy Policy for Social Networking Sites
41 Citations2009Esma Aı̈meur, Sébastien Gambs +1 more
A User Privacy Policy (UPP) is presented which provides users with an easy and flexible way to specify and communicate their privacy concerns to other users, third parties and to the SNS provider.
IEEE Internet ComputingP3P Adoption on E-Commerce Web sites: A Survey and Analysis
41 Citations2007Patricia Beatty, Ian Reay +2 more
The current rate of P3P deployment within the e-commerce industry is surveyed, and P2P's usefulness as a PET is examined, using Everett Rogers' drivers of innovation adoption.
ScholarlyCommons (University of Pennsylvania)The Federal Trade Commission and Consumer Privacy in the Coming Decade
34 Citations2007Joseph Turow, Chris Jay Hoofnagle +3 more
HAL (Le Centre pour la Communication Scientifique Directe)Ontologies and Information Extraction
25 Citations2005Nédellec, Claire, Nazarenko, Adeline
XAR: An Integrated Framework for Information Extraction
10 Citations2009Naveen Ashish, Sharad Mehrotra +1 more
The XAR system, available open-source to the community, abstracts an extraction application developer from low level text processing details, permitting developing applications with high-level extraction rules, and incorporates semantic information in the form of integrity constraints to improve the quality of the extraction.
A Privacy Assessment Approach for Serviced Oriented Architecture Application
6 Citations2006Weider D. Yu, Sharanya Doddapaneni +1 more
An approach is designed and implemented for a privacy policy checker engine that automatically verifies and certifies a Web service application based on the levels of overall privacy principle compliance and privacy statement compliance.
Proceedings - IEEE Symposium on Computers and Communications/IEEE Symposium on Computers and CommunicationsPPMLP: A Special Modeling Language Processor for Privacy Policies
4 Citations2007Weider D. Yu, Savitha Murthy
Results are presented on a special privacy policy modeling language processor (PPMLP) based on service oriented architecture (SOA) for an organization to model the structure and contents of private policy they want through a meta type of privacy policy specifications.