作者: Jaspreet Bhatia , Travis D. Breaux , Joel R. Reidenberg , Thomas B. Norton
DOI: 10.1109/RE.2016.20
关键词:
摘要: Ambiguity arises in requirements when astatement is unintentionally or otherwise incomplete, missing information, a word phrase has morethan one possible meaning. For web-based and mobileinformation systems, ambiguity, vagueness inparticular, undermines the ability of organizations to aligntheir privacy policies with their data practices, which canconfuse mislead users thus leading an increase inprivacy risk. In this paper, we introduce theory ofvagueness for policy statements based on ataxonomy vague terms derived from empiricalcontent analysis 15 policies. The taxonomy wasevaluated paired comparison experiment resultswere analyzed using Bradley-Terry model yield arank order both isolation andcomposition. predicts how modifiers toinformation actions information types can becomposed decrease overall vagueness. Wefurther provide empirical evidence factorialvignette surveys show increases willdecrease users' acceptance risk thusdecrease willingness share personal information.