Scholarlink

Context <p>Recent laws to ensure the security and protection of personal data establish new software requirements. Consequently, new technologies are needed to guarantee software quality under the perception of privacy and protection of personal data. Therefore, we created a checklist-based inspection technique (LGPDCheck) to support the identification of defects in software systems based on the principles established by the Brazilian General Data Protection Law (LGPD).</p> Objective <p>To evaluate the effectiveness and efficiency of LGPDCheck for verifying privacy and data protection (PDP) in software artifacts and systems under execution compared to ad-hoc techniques.</p> Method <p>To assess LGPDCheck and ad-hoc techniques experimentally through two quasi-experiments (two factors, two treatments). The first, in vitro, inspected the vision and requirements specifications artifacts of an integrated accounting information management system. The second, in vivo, they&#xa0;inspected a public and available mobile application used to support legal services to citizens in Brazil.</p> Results <p>The studies indicate that LGPDCheck improves inspection consistency, detects more PDP defects compared to ad-hoc inspections, is more efficient than ad-hoc inspections when inspecting vision and requirements specifications artifacts, and is comparable in effectiveness to ad-hoc inspections. After initial use, LGPDCheck received positive feedback&#xa0;and&#xa0;was&#xa0;perceived as a useful and easy-to-use technique for detecting PDP defects. The professionals strongly recommended using LGPDCheck for this purpose.</p> Conclusion <p>LGPDCheck is a feasible checklist-based inspection technique for detecting PDP defects in software systems. However, further studies are necessary to strengthen confidence in LGPDCheck as a recommended technique for privacy and data protection in software artifacts and systems in Brazil.</p>

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Experimental Evaluation of a Checklist-Based Inspection Technique to Verify the Compliance of Software Systems with the Brazilian General Data Protection Law

  • 期刊论文

  • 发表日期：

    2025年6月7日

查看全文
  • Diego André Cerqueira,
  • Rafael Maiani de Mello,
  • Jéssica Soares da Costa,
  • Guilherme Horta Travassos

摘要

Context

Recent laws to ensure the security and protection of personal data establish new software requirements. Consequently, new technologies are needed to guarantee software quality under the perception of privacy and protection of personal data. Therefore, we created a checklist-based inspection technique (LGPDCheck) to support the identification of defects in software systems based on the principles established by the Brazilian General Data Protection Law (LGPD).

Objective

To evaluate the effectiveness and efficiency of LGPDCheck for verifying privacy and data protection (PDP) in software artifacts and systems under execution compared to ad-hoc techniques.

Method

To assess LGPDCheck and ad-hoc techniques experimentally through two quasi-experiments (two factors, two treatments). The first, in vitro, inspected the vision and requirements specifications artifacts of an integrated accounting information management system. The second, in vivo, they inspected a public and available mobile application used to support legal services to citizens in Brazil.

Results

The studies indicate that LGPDCheck improves inspection consistency, detects more PDP defects compared to ad-hoc inspections, is more efficient than ad-hoc inspections when inspecting vision and requirements specifications artifacts, and is comparable in effectiveness to ad-hoc inspections. After initial use, LGPDCheck received positive feedback and was perceived as a useful and easy-to-use technique for detecting PDP defects. The professionals strongly recommended using LGPDCheck for this purpose.

Conclusion

LGPDCheck is a feasible checklist-based inspection technique for detecting PDP defects in software systems. However, further studies are necessary to strengthen confidence in LGPDCheck as a recommended technique for privacy and data protection in software artifacts and systems in Brazil.