Abstract: . . .  requirements engineers and analysts to begin to build security and privacy into e-Commerce applications early on rather than having to add it in afterwards due to oversight or external pressures. The electronic commerce goal-mining study led to the development of the privacy goal taxonomy Page 23 23 introduced in Section III and enabled us to codify a comprehensive set of goal-mining heuristics tailored to the analysis of privacy policies, as discussed in this section. The goal-mining process is comprised of three . . .
. . .  of the five fair information practices? Whereas, vulnerability goals are classified by considering each goal and asking Does this goal potentially compromise the privacy and/or security of ones private information? and/or Does this goal conflict with any of the five fair information practices? Consider Privacy Policy #1, which yielded the goal G 54 : PREVENT use of coo . . .
. . .  : COLLECT browser type , G 33 : COLLECT domain name , G 35 : COLLECT operating system , G 25 : COLLECT date and time site was accessed , and G 28 : COLLECT address of preceding website . Goals are thus also identified using inquiry-driven [34] and traditional action word location techniques. Although not detailed in this paper, additional heuristics suggest synonymous words that may be expressed using one of the previously listed goal keywords. For example, . . .
. . .  identification and mapping of synonymous words to the list of acceptable keywords, we express the goal G 112 : CUSTOMIZE experience at our site using cookies . This goal, Page 25 25 although expressed differently on different sites, appeared in 10 of the 23 analyzed health care privacy policies. B. Heuristics for Classifying Goals Classification of goals involves differentiating goals according to goal class (e.g. protection vs. vulnerability) and subject matter. Protection goals are classified . . .
. . .  practices? Whereas, vulnerability goals are classified by considering each goal and asking Does this goal potentially compromise the privacy and/or security of ones private information? and/or Does this goal conflict with any of the five fair information practices? Consider Privacy Policy #1, which yielded the goal G 54 : PREVENT use of coo . . .
--3000,5,300,3000,64445