SHF: Small: Collaborative Research: Preserving Test Coverage While Achieving Data Anonymity for Database-Centric Applications

SHF：小型：协作研究：保留测试覆盖率，同时实现以数据库为中心的应用程序的数据匿名性

• 批准号: 1017633
• 负责人: Mark Grechanik
• 金额: $ 25万
• 依托单位: University of Illinois at Chicago
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2010
• 资助国家: 美国
• 起止时间: 2010-08-15 至 2014-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1017633&HistoricalAwards=false
• 关键词: SHF; Small; Collaborative; Research; Preserving

Software engineers often do not get access to confidential data because of internal security rules that are put in place by organizations that own these data and because of several laws that regulate data protection and privacy. This situation complicates basic software engineering tasks such as testing. To give some access to required data, data owners typically use a commercial tool to anonymize or "sanitize" the data. Unfortunately, none of the existing tools takes into account basic software engineering tasks such as testing, which leads to situations where the anonymized data is of little to no value for software engineers. Currently, software engineers operate with little or no meaningful data, which is a great obstacle to creating high quality software. This research program addresses a fundamental question of software engineering: how can a data owner protect private information so that the data subjects (e.g., persons, equipment) cannot be re-identified while the data retains their efficacy for software engineering tasks? To preserve the usefulness of data for software engineering tasks, algorithms are needed that take into account the structures of the applications. This work will lay a foundation for a new direction of research on interactions between software engineering and data privacy, and the PIs will support it with a set of tools for low-cost software development and evolution.

软件工程师通常无法访问机密数据，因为拥有这些数据的组织制定了内部安全规则，并且由于几个规范数据保护和隐私的法律而制定了。这种情况使基本的软件工程任务（例如测试）复杂化。为了提供一些对所需数据的访问，数据所有者通常使用商业工具来匿名或“消毒”数据。不幸的是，现有工具都没有考虑到基本的软件工程任务，例如测试，这导致匿名数据对软件工程师几乎没有价值的情况。当前，软件工程师几乎没有有意义的数据，这是创建高质量软件的重要障碍。该研究计划解决了软件工程的基本问题：数据所有者如何保护私人信息，以便在数据保留其对软件工程任务的功效时无法重新确定数据主题（例如，人员，设备）？为了保留数据对软件工程任务的有用性，需要考虑应用程序结构的算法。这项工作将为软件工程与数据隐私之间的相互作用的新研究奠定基础，PIS将使用一套用于低成本软件开发和进化的工具来支持它。