Exportar Publicação
A publicação pode ser exportada nos seguintes formatos: referência da APA (American Psychological Association), referência do IEEE (Institute of Electrical and Electronics Engineers), BibTeX e RIS.
Antunes, P. & Guimarães, N. (2024). Guiding the implementation of data privacy with microservices. International Journal of Information Security. 23 (6), 3591-3608
P. Antunes and N. M. Guimarães, "Guiding the implementation of data privacy with microservices", in Int. Journal of Information Security, vol. 23, no. 6, pp. 3591-3608, 2024
@article{antunes2024_1732205277068, author = "Antunes, P. and Guimarães, N.", title = "Guiding the implementation of data privacy with microservices", journal = "International Journal of Information Security", year = "2024", volume = "23", number = "6", doi = "10.1007/s10207-024-00907-y", pages = "3591-3608", url = "https://link.springer.com/journal/10207" }
TY - JOUR TI - Guiding the implementation of data privacy with microservices T2 - International Journal of Information Security VL - 23 IS - 6 AU - Antunes, P. AU - Guimarães, N. PY - 2024 SP - 3591-3608 SN - 1615-5262 DO - 10.1007/s10207-024-00907-y UR - https://link.springer.com/journal/10207 AB - Privacy by design is nowadays recognized as essential in bringing data privacy into software systems. However, developers still face many challenges in reconciling privacy and software requirements and implementing privacy protections in software systems. One emerging trend is the adoption of microservices architectures—they bring in some qualities that can benefit privacy by design. The main goal of this study is to adapt privacy by design to the qualities brought by microservices. The main focus is at the architectural level, where the main structural decisions are made. A systematic literature review is adopted to identify a set of privacy models that underscore significant differences in software systems’ protection using microservices. From the literature review, a decision framework is developed. The decision framework provides guidance and supports design decisions in implementing data privacy using microservices. The framework helps select and integrate different privacy models. An illustration of using the framework, which considers the design of an electronic voting system, is provided. This study contributes to closing the gap between regulation and implementation through design, where decisions related to data privacy are integrated with decisions on architecting systems using microservices. ER -