Using Case-based Reasoning for Privacy Decisions
SINTEF ICT has developed a prototype Privacy Enhancing Technology called
Privacy Advisor that uses Case-based Reasoning to give advice to users on if
they should accept or reject the privacy policies of a service provider in a given context.
The purpose of this PET is to learn the privacy preferences of a user and give
advice according to the previous decisions the user has made.
The goal of this thesis is to propose, implement and test new CBR logic for
Privacy Advisor so that the advice given to the user is more trustworthy. These
goals have been reached by studying the various technologies and methodologies
Privacy Advisor is based on, as well as the current implementation of Privacy
Advisor itself. The results of the thesis are three algorithms that improve upon
the existing CBR logic in Privacy Advisor to a certain degree, as well as a
fuzzy control system that uses fuzzy logic to determine the similarity between elements in a privacy
The results from the thesis have shown that even though the approach of using
fuzzy logic for similarity calculations is reasonable, several design flaws in
the implementation of Privacy Advisor limits the amount of testing possible,
and the degree the CBR logic can be improved. The results from testing the new
implementations did not reveal any definite proof that the new implementation is
Place, publisher, year, edition, pages
Institutt for telematikk , 2012. , 92 p.
ntnudaim:7605, MTKOM kommunikasjonsteknologi, Informasjonssikkerhet
IdentifiersURN: urn:nbn:no:ntnu:diva-18649Local ID: ntnudaim:7605OAI: oai:DiVA.org:ntnu-18649DiVA: diva2:566155
Knapskog, Svein Johan, Professor