Abstract

Privacy engineering encompasses various method-ologies and tools, including privacy strategies and privacy patterns, aimed at achieving systems that inherently respect privacy. Despite the collection of numerous privacy patterns, their practical application remains under-explored. This paper investigates the applicability of privacy patterns in the context of robotaxis, a use case in the broader Mobility-as-a-Service (MaaS) ecosystem. Using the LINDDUN framework for privacy threat elicitation, we analyze existing privacy patterns to address identified privacy threats. Our findings reveal challenges in applying these patterns due to inconsis-tencies and a lack of guidance, as well as a lack of suitable privacy patterns for addressing several privacy threats. To fill the gaps, we propose ideas for new privacy patterns.

Date

July 8, 2024

Authors

Ala'a Al-Momani, David Balenson, Zoltán Adám Mann, Sebastian Pape, Jonathan Petit, Christoph Bösch

Conference

2024 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW)

Pages

32-39

Publisher

IEEE