The objective of this master’s thesis was to describe current capabilities of anonymous browsing over the Internet. The theoretical part focuses on three main methods of anonymization with main focus on Tor network. The master‘s thesis describes advantages and disadvantages of different solutions and possible attacks on them. In the next part is demonstrated Tor network, implementation of Hidden service and secured access to the server for clients and possible attacks against this proposal. The work also includes the results of measurements of all three anonymizers and the effects on their speed.

The exponential rise in the generation of data has introduced many new areas of research including data science, data engineering, machine learning, artificial in- telligence to name a few. It has become important for any industry or organization to precisely understand and analyze the data in order to extract value out of the data. The value of the data can only be realized when it is put into practice in the real world and the most common approach to do this in the technology industry is through software engineering. This brings into picture the area of privacy oriented software engineering and thus there is a rise of data protection regulation acts such as GDPR (General Data Protection Regulation), PDPA (Personal Data Protection Act), etc. Many organizations, governments and companies who have accumulated huge amounts of data over time may conveniently use the data for increasing business value but at the same time the privacy aspects associated with the sensitivity of data especially in terms of personal information of the people can easily be circumvented while designing a software engineering model for these types of applications. Even before the software engineering phase for any data processing application, often times there can be one or many data sharing agreements or privacy policies in place. Every organization may have their own way of maintaining data privacy practices for data driven development. There is a need to generalize or categorize their approaches into tactics which could be referred by other practitioners who are trying to integrate data privacy practices into their development. This qualitative study provides an understanding of various approaches and tactics that are being practised within the industry for privacy preserving data science in software engineering, and discusses a tool for data usage monitoring to identify unethical data access. Finally, we studied strategies for secure data publishing and conducted experiments using sample data to demonstrate how these techniques can be helpful for securing private data before publishing. / Graduate

Les évolutions sociétales - émancipation de la femme, maîtrise de la fécondité, acceptation del’homosexualité, multiplication des formes de conjugalité, nouveaux modèles familiaux, médicalisation de laprocréation - ont bouleversé le rapport entre maternité de fait et maternité juridique.La femme qui revendique le statut de mère n’est plus nécessairement celle qui a porté et mis au mondel’enfant. Les techniques d’assistance médicale à la procréation ont ouvert le champ des possibles enpermettant à la femme de réaliser son désir d’enfant, indépendamment des contraintes temporelles oubiologiques. Pourtant, la mère gestationnelle apparaît, aujourd’hui encore, comme la figure certaine de lamaternité. Elle a vu ses droits accrus par un mouvement d’harmonisation du droit de la filiation, jusqu’àdevenir l’égale de l’homme. Elle a cessé d’être identifiée par son statut conjugal, et est désormais définie parréférence au fait biologique maternel de l’accouchement. L’enfantement marque alors la singularité de lamaternité en tant que figure de rattachement, car elle est le seul vecteur d’identification spatio-temporelle del’enfant. Un ordre public fort en la matière est donc de rigueur : l’accouchement, qui détermine l’état civil del’enfant, ne devrait pas pouvoir être dissimulé. En revanche, la fonction maternelle de parenté devraitdavantage être soumise à la volonté de la femme qui se revendique mère. La mère gestationnelle, qui devraittoujours pouvoir établir un lien de filiation, devrait également pouvoir refuser l’établissement d’un tel lien,au profit d’une autre figure maternelle plus incertaine car reposant sur la volonté d’être mère, volontééventuellement corroborée par un lien génétique. Autrement dit, la filiation maternelle de l’enfant devraitpouvoir être transférée afin d’être en concordance avec la réalité sociologique.La multiplication des figures de la maternité conduit ainsi à une rénovation de la conception traditionnelle dela maternité, par un rééquilibrage du rôle joué par les éléments objectifs et subjectifs / A number of developments in society - the emancipation of women, birth control, the acceptanceof homosexuality, the diversification of couple arrangements, new family models, the increasingly medicalapproach to procreation - have shaken up the link between motherhood in fact and motherhood in law.The woman claiming the title of mother is no longer necessarily the one who bore the child and brought itinto the world. Assisted reproductive technology has opened up possibilities by allowing women who want achild to have one, regardless of restrictions related to time or biology. However, the “gestation mother”remains to this day the definite mother figure. Her rights have increased through the harmonisation of thelaws of filiation, eventually making her the man’s equal. She is no longer identified by her marital status andis now defined in relation to the biological process of giving birth. Giving birth hence highlights thespecificity of motherhood as an attachment figure, being the only means of identification in space and timefor the child. A strong public policy is therefore required in this area: giving birth should not be concealable,since it determines the child’s status in law. On the other hand, the maternal parenting role should dependmore on the will of the woman who claims the title of mother. The gestation mother, who should always beable to ascertain the filiation, should also be able to refuse such filiation, in favour of another mother figurenot as firmly ascertained, since her status is dependent on the will to be the mother, a will possiblycorroborated by filiation. The child’s maternal filiation should be transferrable in order to reflect the socialreality.The multiplication of mother figures has thus led to an overhaul of the traditional conception of motherhood,by rebalancing the role played by objective and subjective elements.

La tendance contemporaine vers plus de transparence dans la vie des affaires illustre une désaffection générale pour toute forme de confidentialité. Toutefois, cette dernière bénéficie de traductions juridiques dont les sources lui confèrent une indéniable légitimité. Cette observation doit amener à reconnaître l'existence d'un "principe de confidentialité". La rencontre des normes sur la prévention de la criminalité financière avec le principe de confidentialité est source d'insécurité juridique, non seulement pour les professionnels assujettis aux obligations de lutte anti-blanchiment et contre le financement du terrorisme, mais également pour tous les individus dont les données son traitées dans ce cadre. Ces deux blocs de normes aux logiques contradictoires tendant pourtant vers des objectifs communs : le respect des droits fondamentaux. Néanmoins, les excès liés à l'utilisation potentiellement illicite des outils juridiques offerts par l'un, et les défauts des dispositions constituant l'autre, font obstacle à l'application efficace et mesurée du droit. Cette étude se propose d'analyser ces principes antagonistes pour mieux envisager leur équilibre latent au moyen de solutions préservant leurs intérêts propres et concourant à l'amélioration de la sécurité juridique. Dans cette optique, l'exercice de droit comparé permet de parfaire l'interprétation des obligations de vigilance tout en plaidant la réhabilitation du principe de confidentialité. Il témoigne de l'émergence d'un véritable "droit du blanchiment", et en particulier de son volet préventif qui occupe désormais une place prépondérante dans le domaine de la régulation bancaire et financière. / The recent trend towards transaprency in business highlights a more global disenchantment with the concept of secrecy. The concept of secrecy benefits from various legal expressions whose origins give it as undisputable legitimacy. This observation leads us to recognise the existence of a "Principle of confidentiality". The clash betxeen the rules of Financial Crime prevention and this principle of confidentiality is causing legal uncertainty not only for professional subject to Anti-money laundering and counter-terrorism financing regulations but also gor persons whose data is being processed. These two sets of conflicting rules nevertheless share a common goal, namely to ensure respect for fundamental rights. Notwithstanding this, both the risk of abuse of legal instruments offered by one set for illegitimate purposes and the shortcomings attached to the other set potentially hinder the efficient and reasonable use of Law. This study aims at analysing antagonistic principles to reach a certain balance by applying solutions which preserve their respective interests and contribute to legal certainty. In this regard, the comparative law analysis helps better interpret customer due diligence measures whilst rehabilitating the arguments in favour of the principle of confidentiality. This shows the development of e genuine AML/CFT Law and in particular its preventive aspects that form a major part of the Banking and Financial Regulations.

À partir de la notion de projet parental, nous souhaitons déconstruire, en droit, l'assignation des femmes aux questions reproductives. En effet, le corpus juridique relatif à la reproduction participe à la perpétuation des stéréotypes de genre et en particulier, ceux liés à la division sexuée du travail. Le projet parental est une notion qui a émergé avec les techniques reproductives. Pour autant, l'analyse du cadre relatif aux techniques de PMA montre de quelle manière celui-ci renforce les stéréotypes de genre. Les conditions d'accès aux méthodes de PMA sont empreintes de naturalisme et une comparaison entre le droit français et le droit suisse montre le caractère construit de ces références constantes à la nature. L'établissement du lien de la filiation renforce le cadre naturaliste : d'un côté, la filiation est établie pour les projets parentaux réalisés dans le cadre légal selon les règles du droit commun et renforce la différenciation des fondements à la filiation selon le sexe du parent ; de l'autre, les projets parentaux qui s'écartent du cadre naturaliste sont relégués aux marges du droit de la filiation, même s'ils doivent aujourd'hui être reconnus sous la pression du législateur en matière de PMA et de la CEDH concernant la GPA. En dépit de l'état actuel du droit, la notion de projet parental pourrait promouvoir au sein du droit de la reproduction l'égalité entre les sexes et la liberté reproductive. En prenant appui sur le principe d'égalité entre les sexes et la liberté reproductive nous proposons de faire évoluer le droit de la reproduction, afin qu'il y ait davantage d'autonomie et d'égalité, tant en matière de filiation que d'accès aux actes médicaux non thérapeutiques en matière de reproduction que sont l'IVG, la contraception, la stérilisation et la PMA. Nous préconisons en particulier de modifier le droit commun de la filiation en y intégrant les techniques de PMA et en faisant de la volonté le fondement principal de l'établissement de la filiation. La promotion de l'autonomie reproductive lors de la mise en œuvre des droits reproductifs se traduit par un renforcement des droits des usagers du système de santé en matière de reproduction. À travers l'exemple du droit de la reproduction, nous montrons in fine de quelle manière le droit peut contribuer à favoriser au sein de la société l'autonomie des individus et l'égalité entre les sexes. / Starting from the concept of "parental project", we aim to deconstruct the traditional roles of women in reproductive matters from a legal standpoint. Gender stereotypes, especially those related to gendered division of labour, are indeed sustained by the current reproductive legal framework. The parental project is a concept introduced by law regulating the new reproductive technologies and yet, the analysis of legal aspects of medically assisted reproduction (MAR) stresses how gender stereotypes are in fact strengthened. The legal criteria to access MAR methods are defined based on Nature and comparing French and Swiss legal frameworks shows there are no fixed rules and thus, that references to Nature are not unbiased. Moreover, when it comes to rules of filiation, the naturalistic framework is further reinforced: on the one hand, when the parental project is carried out within the legal framework, filiation is established based on general law, corroborating the gendered legal basis of filiation; on the other hand, parental projects outside of the naturalistic framework are marginalized, and if nowadays filiation should also be recognized for children born in such conditions, it is only because of legal and jurisprudential developments. In spite of this, we think that the concept of "parental project" should promote, within the legal framework of reproduction, both gender equality and reproductive autonomy. Based on the principle of sex-equality and reproductive autonomy, our proposals aim to change dispositions regarding filiation and reproductive medical acts so that they could improve gender equality and reproductive autonomy. In particular, MAR should be addressed by the general law of filiation in order to make of will the main basis of parentage. Likewise, promoting autonomy in reproductive medical acts cannot proceed without rights of the health care users. Finally this research in reproductive law could be seen as a striking example of how law could foster gender equality and individual autonomy in society.

在網路世界中，人們以匿名表達意見遠比現實生活中更為容易，這件事已劇烈地改變了匿名言論的量與質。從好的面向看，匿名帶來自主，讓異議者可以透過網路匿名，表達可能永遠都不敢在眾人面前說出來的真正想法，讓觀念市場變得多元豐富；另一方面，匿名提高了追究責任的困難。相較於現實世界的言論，損害他人或構成犯罪的惡質網路匿名言論，將造成影響更深遠且永久的傷害。 　　目前，關於網路匿名言論的管制方式，世界各國政府都是仰賴「事後追懲模式」和「實名認證模式」的其中一種。前者是網路使用者原則上可以匿名地發表言論，但如果發表不當言論並造成傷害，受害者或國家可以揭露其身份以對其展開司法追訴；後者是網路使用者在張貼言論前，必須先向國家機關指定的網路業者交出個人真實身份資料以進行驗證後，才能匿名發言，或甚至完全禁止以匿名方式發言，讓網路使用者感受到被眾人監督的壓力，不敢發表不當內容。 　　本文主張，網路匿名言論是受到憲法所保障的權利，而「事後追懲模式」相較於「實名認證模式」，較能調和不同權利間的衝突。不過，儘管我國政府採取此模式，卻在設計民刑事訴訟制度時，漏未導入匿名言論權利的思考，導致網路匿名表意者一經策略性訴訟攻擊，真實身份就會立即暴露，使得匿名表意自由不過徒有虛幻表象。因此，本文建議，為落實對匿名言論自由的保護，立法者宜參考美國法，修改部分訴訟法來處理此問題。 / On the internet, people can express themselves anonymously far easier than in the physical world. This fact has dramatically changed both the quantities and qualities of anonymous speech. On the bright side, anonymity brings more autonomy. Dissenters can express their real opinions, which they might never have the courage to speak out in public. It, in turn will promote the diversity and integrity of the marketplace of ideas. Yet, anonymity also makes it more difficult to hold the speakers accountable. In addition, compared to speech in the real physical world, malicious online anonymous speech will cause more serious permanent harms. 　　Today, governments around the world are either relying on the “Ex Post Compensation and Punishment” approach or the “Real-Name Verification System” to regulate online anonymous speech. Under the former approach, internet users can express their opinions anonymously, but if the content of their speech is malicious and causes damages to other people, the victim can seek disclosure of the speaker’s identity in order to take legal actions against the speaker. In contrast, under the latter system, internet users have to provide their personal information (real identities) to the ISPs or ICPs appointed by governments and complete the verification process before they can post their words. Some real name systems go even further by banning anonymous speech completely. By making users feel like they are being supervised by the public, the real name system wishes to deter indecent contents 　　This thesis argues that online anonymous speech is protected by the Constitution, and the ‘Ex Post Compensation and Punishment’ is a preferred approach because it can better balance the conflicting rights. In Taiwan, although the government has chosen the ‘Ex Post Compensation and Punishment’ approach, current civil/criminal procedural laws and practices afford little protection to online anonymous speakers. The plaintiff, who is allegedly harmed by the anonymous speech, can easily bring a “Strategic Lawsuit,” with the sole purpose of obtaining the identity of the online anonymous speaker. Consequently, this thesis suggests that, in order to better protect the freedom of anonymous speech, the legislators of Taiwan should refer to U.S. laws and practices and revise several provisions of Taiwan’s Code of Civil Procedure and Code of Criminal Procedure.