基于注释的个人数据保护静态分析
Annotation-Based Static Analysis for Personal Data Protection
摘要:
本文阐述了静态源代码分析在数据保护环境中的使用。该主题对于软件工程非常重要,以便软件开发人员在软件开发过程中改善对个人数据的保护。为此,本文提出了一种注释类和函数的设计,处理个人数据。该设计有两个主要目的:一方面,它为软件开发人员提供了记录其意图的方法;另一方面,它提供了自动检测潜在违规行为的工具。这种双重理由有助于遵守《通用数据保护条例》(GDPR)和其他新兴的数据保护和隐私法规。除了简要回顾数据保护背景下的静态分析的最新技术和所提出的分析方法的设计外,还介绍了一种具体的工具来演示Java程序设计语言的实际实现。
英文摘要:
This paper elaborates the use of static source code analysis in the context of data protection. The topic is important for software engineering in order for software developers to improve the protection of personal data during software development. To this end, the paper proposes a design of annotating classes and functions that process personal data. The design serves two primary purposes: on one hand, it provides means for software developers to document their intent; on the other hand, it furnishes tools for automatic detection of potential violations. This dual rationale facilitates compliance with the General Data Protection Regulation (GDPR) and other emerging data protection and privacy regulations. In addition to a brief review of the state-of-the-art of static analysis in the data protection context and the design of the proposed analysis method, a concrete tool is presented to demonstrate a practical implementation for the Java programming language.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。