{"id":"https://openalex.org/W7225824100","doi":"https://doi.org/10.1108/ics-05-2026-0254","title":"The data-labeling interface as a security boundary: task-level privacy and security risks in human-in-the-loop ML pipelines","display_name":"The data-labeling interface as a security boundary: task-level privacy and security risks in human-in-the-loop ML pipelines","publication_year":2026,"publication_date":"2026-11-11","ids":{"openalex":"https://openalex.org/W7225824100","doi":"https://doi.org/10.1108/ics-05-2026-0254"},"language":"en","primary_location":{"id":"doi:10.1108/ics-05-2026-0254","doi":"https://doi.org/10.1108/ics-05-2026-0254","is_oa":false,"landing_page_url":"https://doi.org/10.1108/ics-05-2026-0254","pdf_url":null,"source":{"id":"https://openalex.org/S4210195545","display_name":"Information and Computer Security","issn_l":"2056-4961","issn":["2056-4961","2056-497X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["abdc-b","anvur-scientific","ccf-c","cwts-core","dongbi-c","fnege-4","jufo-1","norway-1","poland-40","russia-white-list-2"],"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information & Computer Security","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5098188638","display_name":"Chinelo Patience Umeanozie","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I276309446","display_name":"University of the Cumberlands","ror":"https://ror.org/05jz3sn81","country_code":"US","type":"education","lineage":["https://openalex.org/I276309446"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chinelo Patience Umeanozie","raw_affiliation_strings":["University of the Cumberlands Doctor of Business Administration Program, , Williamsburg, ,"],"raw_orcid":"https://orcid.org/0009-0003-0073-459X","affiliations":[{"raw_affiliation_string":"University of the Cumberlands Doctor of Business Administration Program, , Williamsburg, ,","institution_ids":["https://openalex.org/I276309446"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056735066","display_name":"Federico Del Giorgio Solfa","orcid":"https://orcid.org/0000-0002-0962-531X","observed_orcids":["https://orcid.org/0000-0002-0962-531X"]},"institutions":[{"id":"https://openalex.org/I4210122970","display_name":"Comisi\u00f3n de Investigaciones Cient\u00edficas","ror":"https://ror.org/02s7sax82","country_code":"AR","type":"government","lineage":["https://openalex.org/I4210122970"]},{"id":"https://openalex.org/I874386039","display_name":"Universidad Nacional de La Plata","ror":"https://ror.org/01tjs6929","country_code":"AR","type":"education","lineage":["https://openalex.org/I874386039"]}],"countries":["AR"],"is_corresponding":true,"raw_author_name":"Federico Del Giorgio Solfa","raw_affiliation_strings":["National University of La Plata Industrial Design Research and Development Laboratory (LIDDI), , La Plata, , and Comisi\u00f3n de Investigaciones Cient\u00edficas de la Provincia de Buenos Aires (CIC-PBA), La Plata, Argentina"],"raw_orcid":"https://orcid.org/0000-0002-0962-531X","affiliations":[{"raw_affiliation_string":"National University of La Plata Industrial Design Research and Development Laboratory (LIDDI), , La Plata, , and Comisi\u00f3n de Investigaciones Cient\u00edficas de la Provincia de Buenos Aires (CIC-PBA), La Plata, Argentina","institution_ids":["https://openalex.org/I4210122970","https://openalex.org/I874386039"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5056735066"],"corresponding_institution_ids":["https://openalex.org/I4210122970","https://openalex.org/I874386039"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"17"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.4745999872684479,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.4745999872684479,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.27950000762939453,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.14169999957084656,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[],"concepts":[{"id":"https://openalex.org/C56666940","wikidata":"https://www.wikidata.org/wiki/Q788790","display_name":"Documentation","level":2,"score":0.6305999755859375},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5623000264167786},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.5587000250816345},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.5582000017166138},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5393000245094299},{"id":"https://openalex.org/C74196892","wikidata":"https://www.wikidata.org/wiki/Q7781188","display_name":"Thematic analysis","level":3,"score":0.48170000314712524},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.47450000047683716},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.4462999999523163},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.44190001487731934},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.42309999465942383},{"id":"https://openalex.org/C80958533","wikidata":"https://www.wikidata.org/wiki/Q1047174","display_name":"Audit trail","level":3,"score":0.40149998664855957},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.37940001487731934},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.33809998631477356},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.3303999900817871},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.3296000063419342},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.3264999985694885},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.32170000672340393},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.32030001282691956},{"id":"https://openalex.org/C2778137410","wikidata":"https://www.wikidata.org/wiki/Q2732820","display_name":"Government (linguistics)","level":2,"score":0.3197999894618988},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.3154999911785126},{"id":"https://openalex.org/C2779356329","wikidata":"https://www.wikidata.org/wiki/Q922625","display_name":"Checklist","level":2,"score":0.3091000020503998},{"id":"https://openalex.org/C76178495","wikidata":"https://www.wikidata.org/wiki/Q4808784","display_name":"Asset (computer security)","level":2,"score":0.3075999915599823},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.30230000615119934},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.3019999861717224},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.29760000109672546},{"id":"https://openalex.org/C89505385","wikidata":"https://www.wikidata.org/wiki/Q47146","display_name":"User interface","level":2,"score":0.2922999858856201},{"id":"https://openalex.org/C184356942","wikidata":"https://www.wikidata.org/wiki/Q830382","display_name":"Best practice","level":2,"score":0.2840999960899353},{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.26809999346733093},{"id":"https://openalex.org/C27415008","wikidata":"https://www.wikidata.org/wiki/Q7256382","display_name":"Psychological intervention","level":2,"score":0.2540999948978424},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.2533999979496002}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1108/ics-05-2026-0254","doi":"https://doi.org/10.1108/ics-05-2026-0254","is_oa":false,"landing_page_url":"https://doi.org/10.1108/ics-05-2026-0254","pdf_url":null,"source":{"id":"https://openalex.org/S4210195545","display_name":"Information and Computer Security","issn_l":"2056-4961","issn":["2056-4961","2056-497X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["abdc-b","anvur-scientific","ccf-c","cwts-core","dongbi-c","fnege-4","jufo-1","norway-1","poland-40","russia-white-list-2"],"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information & Computer Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W2037202491","https://openalex.org/W2095881341","https://openalex.org/W2135930857","https://openalex.org/W2146286563","https://openalex.org/W2159024459","https://openalex.org/W2170989440","https://openalex.org/W2473418344","https://openalex.org/W2535690855","https://openalex.org/W2617872846","https://openalex.org/W2795038878","https://openalex.org/W2892759841","https://openalex.org/W2897042519","https://openalex.org/W2911978475","https://openalex.org/W3157915803","https://openalex.org/W4281704435","https://openalex.org/W4283168936","https://openalex.org/W4389190993","https://openalex.org/W4392932113","https://openalex.org/W4410828685"],"related_works":[],"abstract_inverted_index":{"Purpose":[0],"This":[1],"paper":[2],"aims":[3],"to":[4,198,212,261],"investigate":[5],"privacy":[6,203,265],"and":[7,20,32,40,60,81,105,121,129,148,177,180,191,200,204,250,257,263,266],"security":[8,34,205,240,267],"vulnerabilities":[9],"arising":[10],"from":[11,37,64],"human-in-the-loop":[12],"(HITL)":[13],"interactions":[14],"during":[15],"machine":[16],"learning":[17],"data":[18],"labeling":[19,207],"quality":[21],"assurance/review.":[22],"It":[23,242],"argues":[24],"that":[25,112,122],"the":[26,136,220,223,229,234],"data-labeling":[27,235],"interface":[28,183,236],"constitutes":[29],"a":[30,48,69,77,82,149,238,244,247],"distinct":[31],"underexamined":[33],"boundary,":[35],"separate":[36],"infrastructure":[38,214],"controls":[39,115],"organizational":[41],"compliance":[42,216],"frameworks.":[43,217],"Design/methodology/approach":[44],"The":[45,109,141,188],"study":[46,142,227],"adopts":[47],"qualitative,":[49],"practice-oriented":[50],"research":[51],"design":[52],"combining":[53],"thematic":[54],"analysis":[55],"of":[56,153,222,233],"publicly":[57,145],"available":[58,146],"documentation":[59,147],"workflows":[61],"with":[62],"responses":[63],"six":[65,154],"practitioners":[66,195,256],"gathered":[67],"via":[68],"structured":[70,259],"online":[71],"instrument.":[72],"Findings":[73,85,160],"are":[74,90,116,132],"organized":[75],"through":[76],"task-level":[78,202,239],"vulnerability":[79,88,245],"taxonomy":[80],"design\u2013exposure\u2013control":[83,192,248],"matrix.":[84],"Six":[86],"recurring":[87],"families":[89],"identified:":[91],"excess":[92],"contextual":[93],"visibility,":[94],"metadata":[95],"exposure,":[96],"privilege":[97,128],"expansion":[98],"in":[99,206,268],"QA/review,":[100],"instruction-level":[101],"disclosure,":[102],"inference-based":[103],"exposure":[104],"weak":[106],"anti-exfiltration":[107],"controls.":[108],"matrix":[110,193,249],"shows":[111],"many":[113],"existing":[114],"partial":[117],"rather":[118],"than":[119],"absent,":[120],"governance":[123],"principles":[124],"such":[125,174],"as":[126,175,237],"least":[127],"purpose":[130],"limitation":[131],"frequently":[133],"undermined":[134],"at":[135],"task-interface":[137],"level.":[138],"Research":[139],"limitations/implications":[140],"relies":[143],"on":[144],"small":[150],"purposive":[151],"sample":[152],"practitioners,":[155],"which":[156],"limits":[157],"statistical":[158],"generalizability.":[159],"may":[161],"not":[162],"fully":[163],"capture":[164],"proprietary":[165],"workflows.":[166],"Future":[167],"work":[168],"should":[169],"compare":[170],"findings":[171],"across":[172],"sectors":[173],"healthcare":[176],"financial":[178],"services":[179],"test":[181],"specific":[182],"interventions":[184],"empirically.":[185],"Practical":[186],"implications":[187],"safeguards":[189,253],"checklist":[190],"offer":[194],"concrete":[196],"tools":[197,260],"audit":[199],"improve":[201],"environments":[208],"without":[209],"requiring":[210],"changes":[211],"underlying":[213],"or":[215],"Originality/value":[218],"To":[219],"best":[221],"authors\u2019":[224],"knowledge,":[225],"this":[226],"offers":[228],"first":[230],"systematic":[231],"treatment":[232],"boundary.":[241],"provides":[243],"taxonomy,":[246],"an":[251],"actionable":[252],"checklist,":[254],"offering":[255],"researchers":[258],"evaluate":[262],"strengthen":[264],"HITL":[269],"data-preparation":[270],"environments.":[271]},"counts_by_year":[],"updated_date":"2026-11-12T12:28:57.059296","created_date":"2026-11-12T00:00:00"}