Skip to main content
Contribution to Book
Modeling of Personalized Privacy Disclosure Behavior: A Formal Method Approach
ARES '21: Proceedings of the 16th International Conference on Availability, Reliability and Security
  • A. K. M. Nuhil Mehdy, Boise State University
  • Hoda Mehrpouyan, Boise State University
Document Type
Conference Proceeding
Publication Date
1-1-2021
Disciplines
Abstract

In order to create user-centric and personalized privacy management tools, the underlying models must account for individual users’ privacy expectations, preferences, and their ability to control their information sharing activities. Existing studies of users’ privacy behavior modeling attempt to frame the problem from a request’s perspective, which lack the crucial involvement of the information owner, resulting in limited or no control of policy management. Moreover, very few of them take into the consideration the aspect of correctness, explainability, usability, and acceptance of the methodologies for each user of the system. In this paper, we present a methodology to formally model, validate, and verify personalized privacy disclosure behavior based on the analysis of the user’s situational decision-making process. We use a model checking tool named UPPAAL to represent users’ self-reported privacy disclosure behavior by an extended form of finite state automata (FSA), and perform reachability analysis for the verification of privacy properties through computation tree logic (CTL) formulas. We also describe the practical use cases of the methodology depicting the potential of formal technique towards the design and development of user-centric behavioral modeling. This paper, through extensive amounts of experimental outcomes, contributes several insights to the area of formal methods and user-tailored privacy behavior modeling.

Citation Information
Nuhil Mehdy, A. K. M. and Mehrpouyan, Hoda. (2021). "Modeling of Personalized Privacy Disclosure Behavior: A Formal Method Approach". In ARES '21: Proceedings of the 16th International Conference on Availability, Reliability and Security (Article 116). Association for Computing Machinery. https://doi.org/10.1145/3465481.3470102