Privacy Impact Assessment of Third-Party Dependencies

Shaji, Kevin (2024) Privacy Impact Assessment of Third-Party Dependencies. Masters thesis, Dublin, National College of Ireland.

Preview	PDF (Master of Science) Download (962kB) | Preview
Preview	PDF (Configuration Manual) Download (1MB) | Preview

Abstract

This research focuses on developing a novel framework for Privacy Impact Assessment (PIA) within the context of third-party dependencies in software development. The increasing reliance on third-party libraries and services has escalated data privacy and security concerns among users. However, existing research does not systematically or standardize the assessment of these dependencies privacy implications.

Recognizing the critical need for data protection and the absence of a specific evaluation framework for third-party dependencies, this study aims to fill the gaps in the current literature by developing a robust PIA methodology. The methodology involved examining privacy policies and data access behaviours of third-party dependencies using Natural Language Processing (NLP) techniques to identify potential privacy risks.

The research made valuable contributions, such as creating a detailed framework for Privacy Impact Assessments (PIA) and establishing a risk rating score. This score offers valuable insights for safely integrating third-party dependencies. Ultimately, this research aims to enhance data protection and user privacy within the software development lifecycle. The findings of the completed research contributed significantly to enhancing privacy and security practices concerning third-party dependencies in software development.

Item Type:	Thesis (Masters)
Supervisors:	Name Email Sahni, Vikas UNSPECIFIED
Uncontrolled Keywords:	PIA: Privacy impact assessments; TPL: Third party libraries; Privacy Compliance
Subjects:	Q Science > QA Mathematics > Electronic computers. Computer science T Technology > T Technology (General) > Information Technology > Electronic computers. Computer science Q Science > QA Mathematics > Computer software T Technology > T Technology (General) > Information Technology > Computer software P Language and Literature > P Philology. Linguistics > Computational linguistics. Natural language processing Q Science > QA Mathematics > Computer software > Computer Security T Technology > T Technology (General) > Information Technology > Computer software > Computer Security
Divisions:	School of Computing > Master of Science in Cyber Security
Depositing User:	Ciara O'Brien
Date Deposited:	03 Jun 2025 16:33
Last Modified:	03 Jun 2025 16:33
URI:	https://norma.ncirl.ie/id/eprint/7737

Actions (login required)

View Item