{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,27]],"date-time":"2025-03-27T15:11:22Z","timestamp":1743088282457,"version":"3.40.3"},"publisher-location":"Berlin, Heidelberg","reference-count":22,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783540367963"},{"type":"electronic","value":"9783540367994"}],"license":[{"start":{"date-parts":[[2006,1,1]],"date-time":"2006-01-01T00:00:00Z","timestamp":1136073600000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2006]]},"DOI":"10.1007\/11805588_20","type":"book-chapter","created":{"date-parts":[[2006,7,18]],"date-time":"2006-07-18T06:53:12Z","timestamp":1153205592000},"page":"282-296","source":"Crossref","is-referenced-by-count":2,"title":["Aspect-Oriented Risk Driven Development of Secure Applications"],"prefix":"10.1007","author":[{"given":"Geri","family":"Georg","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Siv Hilde","family":"Houmb","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Indrakshi","family":"Ray","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"unstructured":"Australian\/New Zealand Standards. AS\/NZS 4360:2004 Risk Management (2004)","key":"20_CR1"},{"unstructured":"Australian\/New Zealand Standards. HB 436:2004 Risk Management Guidelines \u2013 Companion to AS\/NZS 4360:2004 (2004)","key":"20_CR2"},{"key":"20_CR3","first-page":"1589","volume-title":"Proceedings of MEDINFO 1992","author":"B. Barber","year":"1992","unstructured":"Barber, B., Davey, J.: The Use of the CCTA Risk Analysis and Management Methodology CRAMM in Health Information Systems. In: Lun, K.C., Degoulet, P., Piemme, T.E., Rienhoff, O. (eds.) Proceedings of MEDINFO 1992, pp. 1589\u20131593. North Holland Publishing Co., Amsterdam (1992)"},{"issue":"1","key":"20_CR4","doi-asserted-by":"publisher","first-page":"71","DOI":"10.1016\/S0167-6423(02)00030-8","volume":"44","author":"S. Clarke","year":"2002","unstructured":"Clarke, S.: Extending standard UML with model composition semantics. Science of Computer Programming\u00a044(1), 71\u2013100 (2002)","journal-title":"Science of Computer Programming"},{"key":"20_CR5","volume-title":"Aspect-oriented analysis and design","author":"S. Clarke","year":"2005","unstructured":"Clarke, S., Banaissad, E.: Aspect-oriented analysis and design. Addison-Wesley Professional, Boston (2005)"},{"unstructured":"ISO 15408:1999 Common Criteria for Information Technology Security Evaluation. Version 2.1, CCIMB\u201399\u2013031, CCIMB-99-032, CCIMB-99-033 (August 1999)","key":"20_CR6"},{"unstructured":"CORAS. IST-2000-25031 CORAS: A Platform for risk analysis of security critical systems. (2000-2003) (accessed February 18, 2006), http:\/\/sourceforge.net\/projects\/coras","key":"20_CR7"},{"issue":"30","key":"20_CR8","doi-asserted-by":"publisher","first-page":"193","DOI":"10.1109\/TSE.2004.1271174","volume":"3","author":"R. France","year":"2004","unstructured":"France, R., Dim, D.-K., Ghosh, S., Song, E.: A UML-based pattern specification technique. IEEE Transactions on Software Engineering\u00a03(30), 193\u2013206 (2004)","journal-title":"IEEE Transactions on Software Engineering"},{"issue":"151","key":"20_CR9","doi-asserted-by":"publisher","first-page":"173","DOI":"10.1049\/ip-sen:20040920","volume":"4","author":"R. France","year":"2004","unstructured":"France, R., Ray, I., Georg, G., Ghosh, S.: Aspect\u2013oriented approach to design modeling. IEE Proceedings on Software\u00a04(151), 173\u2013185 (2004)","journal-title":"IEE Proceedings on Software"},{"unstructured":"TLS: Network\u00a0Working Group. The TLS Protocol Version 1.0, RFC 2246 (January 1999)","key":"20_CR10"},{"doi-asserted-by":"crossref","unstructured":"Houmb, S.H., Georg, G., France, R., Bieman, J., J\u00fcrjens, J.: Cost-benefit trade-off analysis using bbn for aspect-oriented risk-driven development. In: Proceedings of Tenth IEEE International Conference on Engineering of Complex Computer Systems (ICECCS 2005), pp. 195\u2013204 (June 2005)","key":"20_CR11","DOI":"10.1109\/ICECCS.2005.30"},{"unstructured":"Houmb, S.H., Georg, G.: The Aspect-Oriented Risk-Driven Development (AORDD) Framework. In: Benediktsson, O., et al. (eds.) Proceedings of the International Conference on Software Development (SWDC\u2013REX), SWDC\u2013REX Conference Proceedings, Gutenberg, pp. 81\u201391 (2005)","key":"20_CR12"},{"unstructured":"International Organization for Standardization (ISO\/IEC). ISO\/IEC 17799:2000 Information technology \u2013 Code of Practice for information security management (2000)","key":"20_CR13"},{"unstructured":"International Organization for Standardization (ISO\/IEC). ISO\/IEC TR 13335:2001 Information technology \u2013 Guidelines for management of IT Security (2001)","key":"20_CR14"},{"unstructured":"Jacobson, I.: Case for aspects \u2013 Part I. Software Development Magazine, 32\u201337 (October 2003)","key":"20_CR15"},{"unstructured":"Jacobson, I.: Case for aspects \u2013 Part II. Software Development Magazine, 42\u201348 (November 2003)","key":"20_CR16"},{"key":"20_CR17","volume-title":"Secure Systems Development with UML","author":"J. J\u00fcrjens","year":"2005","unstructured":"J\u00fcrjens, J.: Secure Systems Development with UML. Springer, Heidelberg (2005)"},{"unstructured":"Kasman, R., Asundi, J., Klein, M.: Making architecture design decisions: an economic approachn. Technical report CMU\/SEI-2002-TR-035, CMU\/SEI (2002), http:\/\/www.sei.cmu.edu\/pub\/documents\/02.reorts\/pdf\/02tr03.pdf","key":"20_CR18"},{"doi-asserted-by":"crossref","unstructured":"Kazman, R., Klein, M., Clements, P.: Atam: method for architecture evaluation. Technical report CMU\/SEI-2000-TR-004, CMU\/SEI (2000), http:\/\/www.sei.cmu.edu\/pub\/document\/00.reports\/pdf\/00tr004.pdf","key":"20_CR19","DOI":"10.21236\/ADA382629"},{"issue":"44","key":"20_CR20","doi-asserted-by":"publisher","first-page":"59","DOI":"10.1145\/383845.383858","volume":"10","author":"G. Kiczales","year":"2001","unstructured":"Kiczales, G., Hilsdale, E., Hugunin, J., Kersten, M., Palm, J., Griswold, W.: Getting stared with aspectj. Communications of the ACM\u00a010(44), 59\u201365 (2001)","journal-title":"Communications of the ACM"},{"key":"20_CR21","first-page":"189","volume-title":"Business Component-Based Software Engineering","author":"K. St\u00f8len","year":"2002","unstructured":"St\u00f8len, K., den Braber, F., Dimitrakos, T., Fredriksen, R., Gran, B.A., Houmb, S.H., Stamatiou, Y.C., Aagedal, J.\u00d8.: Model\u2013based risk assessment in a component-based software engineering process: The CORAS approach to identify security risks. In: Barbier, F. (ed.) Business Component-Based Software Engineering, pp. 189\u2013207. Kluwer, Dordrecht (2002)"},{"key":"20_CR22","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"84","DOI":"10.1007\/978-3-540-30187-5_7","volume-title":"<<UML>> 2004 - The Unified Modeling Language","author":"G. Straw","year":"2004","unstructured":"Straw, G., Georg, G., Song, E., Ghosh, S., France, R., Bieman, J.: Model composition directives. In: Baar, T., Strohmeier, A., Moreira, A., Mellor, S.J. (eds.) UML 2004. LNCS, vol.\u00a03273, pp. 84\u201397. Springer, Heidelberg (2004)"}],"container-title":["Lecture Notes in Computer Science","Data and Applications Security XX"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/11805588_20","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,4,19]],"date-time":"2019-04-19T23:15:30Z","timestamp":1555715730000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/11805588_20"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2006]]},"ISBN":["9783540367963","9783540367994"],"references-count":22,"URL":"https:\/\/doi.org\/10.1007\/11805588_20","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2006]]}}}