A systematic mapping study on software quality control techniques for assessing privacy in information systems

Resumen

Software Quality Control (SQC) techniques are widely used throughout the software development process with the objective of assessing and detecting anomalies that affect the quality of an information system. Privacy is one quality attribute of software systems for which several SQC techniques have been proposed in recent years. However, research has been carried out from different perspectives and, consequently, it has led to a growing body of knowledge scattered across different domains.To bridge this gap, we have carried out asystematic mappingstudy to provide practitioners and researchers with an overview of the state-of-the-art techniquestocarry out software quality control of information systems focusing on aspects of privacy. Our results show a steady growth in the research effortsin this field. The European General Data Protection Regulationseems to have a significantinfluence on this growth, since 37% of techniques that focus on assessing compliance derive their assessment criteriafrom this legal framework. The maturity of the techniques variesbetween the type of technique: Formal verification techniques exhibit the lowest level of maturity while the combination of techniques has demonstrated its successful application in real-world scenarios.The latter seems a promising avenue of research as it provides better results in terms of coverage, precision and effectiveness than the application of individual, isolated techniques. In this paper, we describe the existing SQC techniques focusing on privacy and provide a suitable basis for identifying future research directions.