| Title | Designing a Serious Game: Teaching Developers to Embed Privacy into Software Systems |
| Publication Type | Conference Paper |
| Year of Publication | 2020 |
| Authors | Gamagedara Arachchilage, Nalin Asanka, Hameed, Mumtaz Abdul |
| Conference Name | 2020 35th IEEE/ACM International Conference on Automated Software Engineering Workshops (ASEW) |
| Keywords | Automated Secure Software Engineering, composability, data privacy, devsecops, encoding, Games, Minimization, privacy, Privacy-preserving Systems, pubcrawl, resilience, Resiliency, Secure Coding, Software, Software systems, Usable Security and Privacy |
| Abstract | Software applications continue to challenge user privacy when users interact with them. Privacy practices (e.g. Data Minimisation (DM), Privacy by Design (PbD) or General Data Protection Regulation (GDPR)) and related "privacy engineering" methodologies exist and provide clear instructions for developers to implement privacy into software systems they develop that preserve user privacy. However, those practices and methodologies are not yet a common practice in the software development community. There has been no previous research focused on developing "educational" interventions such as serious games to enhance software developers' coding behaviour. Therefore, this research proposes a game design framework as an educational tool for software developers to improve (secure) coding behaviour, so they can develop privacy-preserving software applications that people can use. The elements of the proposed framework were incorporated into a gaming application scenario that enhances the software developers' coding behaviour through their motivation. The proposed work not only enables the development of privacy-preserving software systems but also helping the software development community to put privacy guidelines and engineering methodologies into practice. |
| DOI | 10.1145/3417113.3422149 |
| Citation Key | gamagedara_arachchilage_designing_2020 |
Designing a Serious Game: Teaching Developers to Embed Privacy into Software Systems