The absence of data protection measures in software applications leads to data breaches, threatening end-user privacy and causing instabilities in organisations that developed those software. Privacy Enhancing Technologies (PETs) emerge as promising safeguards against data breaches. PETs minimise threats to personal data while enabling software to extract valuable insights from them. However, software developers often lack the adequate knowledge and awareness to develop PETs integrated software. This issue is exacerbated by insufficient PETs related learning approaches customised for software developers. Therefore, we propose "PETs-101", a novel game-based learning framework that motivates developers to integrate PETs into software. By doing so, it aims to improve developers' privacy-preserving software development behaviour rather than simply delivering the learning content on PETs. In future, the proposed framework will be empirically investigated and used as a foundation for developing an educational gaming intervention that trains developers to put PETs into practice.
翻译:软件应用中数据保护措施的缺失导致数据泄露,威胁终端用户隐私,并引发开发该软件的机构内部不稳定。隐私增强技术(PETs)作为应对数据泄露的有前景的防护手段应运而生。PETs在最小化个人数据威胁的同时,使软件能够从中提取有价值的洞察。然而,软件开发人员通常缺乏开发集成PETs的软件所需的充分知识与意识。这一问题因缺乏为软件开发人员定制的PETs相关学习方法而进一步加剧。因此,我们提出“PETs-101”——一种新颖的基于游戏的学习框架,旨在激励开发者将PETs集成到软件中。通过这种方式,该框架致力于改善开发者的隐私保护软件开发行为,而非仅仅传授PETs相关知识内容。未来,所提出的框架将通过实证研究进行验证,并作为开发教育游戏干预措施的基础,以训练开发者将PETs付诸实践。