Software applications should be secure, usable and privacy-friendly. However, recurring headlines about data leaks in applications show that it is not so easy to develop software that meets these three challenges. Studies show that it is better to think about these challenges during a software development process. Many ideas and approaches exist in the research community that define these challenges as goals within a software development process. In addition, major companies have published their own software development processes and methods addressing these goals in part. But major companies have very different work conditions compared to a work setting faced by an App-Developer (AD), a Small and Medium Company (SMC) and the Open Source Community (OSC) respectively. This leads us to the question: Are work settings of ADs, SMCs, or the OSCs considered sufficiently by research in order to make software development processes with special focus on security, usability and privacy goals work? Therefore we performed a literature review in order to investigate the current state of research. Using an appropriate query, publications relevant for our question were identified and categorised by two independent reviewers.

Privacy Preservation has been identified as an important factor to the success and acceptance of Ubiquitous Compu-ting systems. Traceability, i.e.~attributing events and actions to those who caused them, seems to be a directly contradicting goal. However, harnessing sensitive data collected by Ubiquitous Computing infrastructures for traceability applications in a privacy-respecting manner may clearly bring further benefits, for different concerned parties. Automated working hours recording and personalized insurances are first examples of such applications.To contribute to this matter, this paper presents an architecture that allows for balancing between privacy and traceability in Ubiquitous Computing environments. We describe its foundations and components and illustrate its benefits. Moreover, we discuss important existing research approaches on privacy protection and traceability applications in Ubiquitous Computing settings.

In a mobile information dissemination network mobile users, equipped with wireless devices, exchange information in a spontaneous manner whenever they come into communication range. Users have to specify what kind of information they are looking for and what kind of information they can offer. A priori there is no relation between users, literally spoken, they don’t know each other and confidence in newly collected information might be low. This work presents two reputation schemes, a simple and an extended version, for mobile information dissemination networks that, based on user ratings, increase a user’s confidence in some information source. As reputation systems collect sensitive personal information and monitor users’ behavior, privacy is an essential requirement — especially in a mobile scenario — that is neglected by many existing approaches. Using cryptographic group signatures and the concept of an observer, our extended reputation scheme guarantees high user privacy.