{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,19]],"date-time":"2026-03-19T11:56:37Z","timestamp":1773921397128,"version":"3.50.1"},"publisher-location":"Cham","reference-count":35,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030292379","type":"print"},{"value":"9783030292386","type":"electronic"}],"license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019]]},"DOI":"10.1007\/978-3-030-29238-6_2","type":"book-chapter","created":{"date-parts":[[2019,9,1]],"date-time":"2019-09-01T19:02:43Z","timestamp":1567364563000},"page":"18-32","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":18,"title":["Privacy Oriented Software Development"],"prefix":"10.1007","author":[{"given":"Maria Teresa","family":"Baldassarre","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vita Santa","family":"Barletta","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Danilo","family":"Caivano","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Michele","family":"Scalera","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2019,8,8]]},"reference":[{"issue":"3","key":"2_CR1","doi-asserted-by":"publisher","first-page":"129","DOI":"10.1109\/TDSC.2007.70240","volume":"5","author":"ST Halkidis","year":"2008","unstructured":"Halkidis, S.T., Tsantalis, N., Chatzigeorgiou, A., Stephanides, G.: Architectural risk analysis of software systems based on security patterns. IEEE Trans. Dependable Secure Comput. 5(3), 129\u2013142 (2008)","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"2_CR2","doi-asserted-by":"publisher","first-page":"143","DOI":"10.1016\/j.jss.2018.06.026","volume":"144","author":"D Caivano","year":"2018","unstructured":"Caivano, D., Fernandez-Ropero, M., P\u00e9rez-Castillo, R., Piattini, M., Scalera, M.: Artifact-based vs. human-perceived understandability and modifiability of refactored business processes: An experiment. J. Syst. Softw. 144, 143\u2013164 (2018)","journal-title":"J. Syst. Softw."},{"key":"2_CR3","unstructured":"Cavoukian, A.: Operationalizing Privacy by Design: A Guide to Implementing Strong Privacy Practices, pp. 1\u201372 (2012)"},{"key":"2_CR4","series-title":"IFIP Advances in Information and Communication Technology","doi-asserted-by":"publisher","first-page":"446","DOI":"10.1007\/978-3-642-55415-5_38","volume-title":"ICT Systems Security and Privacy Protection","author":"J-H Hoepman","year":"2014","unstructured":"Hoepman, J.-H.: Privacy design strategies. In: Cuppens-Boulahia, N., Cuppens, F., Jajodia, S., Abou El Kalam, A., Sans, T. (eds.) SEC 2014. IFIPAICT, vol. 428, pp. 446\u2013459. Springer, Heidelberg (2014). \n                    https:\/\/doi.org\/10.1007\/978-3-642-55415-5_38"},{"key":"2_CR5","unstructured":"Privacy Patterns. UC Berkeley, School of Information. \n                    https:\/\/privacypatterns.org"},{"key":"2_CR6","unstructured":"OWASP, OWASP Top 10 \u2013 2017. The Ten Most Critical Web Application Security Risks. \n                    https:\/\/owasp.org\n                    \n                  . Accessed 23 Apr 2019"},{"issue":"4","key":"2_CR7","doi-asserted-by":"publisher","first-page":"46","DOI":"10.1109\/MS.2016.61","volume":"33","author":"G Hatzivasilis","year":"2016","unstructured":"Hatzivasilis, G., Papaefstathiou, I., Manifavas, C.: Software security, privacy, and dependability: metrics and measurement. IEEE Softw. 33(4), 46\u201354 (2016)","journal-title":"IEEE Softw."},{"key":"2_CR8","doi-asserted-by":"publisher","unstructured":"Black, P.E., Badger, L., Guttman, B., Fong, E.: Dramatically Reducing Software Vulnerabilities (2016). \n                    https:\/\/doi.org\/10.6028\/NIST.IR.8151","DOI":"10.6028\/NIST.IR.8151"},{"key":"2_CR9","unstructured":"IBM: X-Force Threat Intelligence Index 2019. IBM Security. Accessed 24 Apr 2019"},{"key":"2_CR10","unstructured":"Baldassarre, M.T., Barletta, V.S., Caivano, D., Raguseo, D., Scalera, M.: Teaching cyber security: the hack-space integrated model. In: Proceedings of the Third Italian Conference on Cyber Security, vol-2315, CEUR Workshop Proceedings (2019)"},{"key":"2_CR11","unstructured":"Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC"},{"key":"2_CR12","doi-asserted-by":"crossref","unstructured":"Kissel, R.L., Stine, K.M., Scholl, M.A., Rossman, H., Fahlsing, J., Gulick, J.: Security Considerations in the System Development Life Cycle. Special Publication (NIST SP) (2008)","DOI":"10.6028\/NIST.SP.800-64r2"},{"key":"2_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"120","DOI":"10.1007\/978-3-319-23318-5_7","volume-title":"Information Security","author":"MG Jaatun","year":"2015","unstructured":"Jaatun, M.G., Cruzes, D.S., Bernsmed, K., T\u00f8ndel, I.A., R\u00f8stad, L.: Software security maturity in public organisations. In: Lopez, J., Mitchell, C.J. (eds.) ISC 2015. LNCS, vol. 9290, pp. 120\u2013138. Springer, Cham (2015). \n                    https:\/\/doi.org\/10.1007\/978-3-319-23318-5_7"},{"key":"2_CR14","doi-asserted-by":"crossref","unstructured":"Navarro-Machuca, J., Chen, L.: Embedding model-based security policies in software development. In: 2016 IEEE 2nd International Conference on Big Data Security on Cloud (BigDataSecurity), IEEE International Conference on High Performance and Smart Computing (HPSC), and IEEE International Conference on Intelligent Data and Security (IDS), New York, NY, pp. 116\u2013122 (2016)","DOI":"10.1109\/BigDataSecurity-HPSC-IDS.2016.46"},{"key":"2_CR15","doi-asserted-by":"crossref","unstructured":"Hilbrich, M., Frank, M.: Enforcing security and privacy via a cooperation of security experts and software engineers: a model-based vision. In: 2017 IEEE 7th International Symposium on Cloud and Service Computing (SC2), Kanazawa, pp. 237\u2013240 (2017)","DOI":"10.1109\/SC2.2017.43"},{"issue":"2","key":"2_CR16","doi-asserted-by":"publisher","first-page":"178","DOI":"10.1109\/CC.2016.7405735","volume":"13","author":"L Yanbing","year":"2016","unstructured":"Yanbing, L., Xingyu, L., Yi, J., Yunpeng, X.: SDSA: a framework of a software-defined security architecture. China Commun. 13(2), 178\u2013188 (2016)","journal-title":"China Commun."},{"key":"2_CR17","doi-asserted-by":"crossref","unstructured":"Tung, Y., Lo, S., Shih, J., Lin, H.: An integrated security testing framework for secure software development life cycle. In: 2016 18th Asia-Pacific Network Operations and Management Symposium (APNOMS), Kanazawa, pp. 1\u20134 (2016)","DOI":"10.1109\/APNOMS.2016.7737238"},{"key":"2_CR18","unstructured":"Farhan, A.R.S., Mostafa, G.M.M.: A methodology for enhancing software security during development processes. In: 2018 21st NCC, Riyadh, pp. 1\u20136 (2018)"},{"key":"2_CR19","doi-asserted-by":"crossref","unstructured":"Colesky, M., Hoepman, J., Hillen, C.: A critical analysis of privacy design strategies. In: 2016 IEEE Security and Privacy Workshops (SPW), San Jose, CA, pp. 33\u201340 (2016)","DOI":"10.1109\/SPW.2016.23"},{"key":"2_CR20","doi-asserted-by":"crossref","unstructured":"Thomborson, C.: Privacy patterns. In: 2016 14th Annual Conference on Privacy, Security and Trust (PST), Auckland, pp. 656\u2013663 (2016)","DOI":"10.1109\/PST.2016.7906953"},{"key":"2_CR21","doi-asserted-by":"crossref","unstructured":"Suphakul, T., Senivongse, T.: Development of privacy design patterns based on privacy principles and UML. In: 2017 18th IEEE\/ACIS International Conference on Software Engineering, Artificial Intelligence, Networking and Parallel\/Distributed Computing (SNPD), Kanazawa, pp. 369\u2013375 (2017)","DOI":"10.1109\/SNPD.2017.8022748"},{"key":"2_CR22","doi-asserted-by":"crossref","unstructured":"Diamantopoulou, V., Argyropoulos, N., Kalloniatis, C., Gritzalis, S.: Supporting the design of privacy-aware business processes via privacy process patterns. In: 11th International Conference on Research Challenges in Information Science, Brighton, pp. 187\u2013198 (2017)","DOI":"10.1109\/RCIS.2017.7956536"},{"key":"2_CR23","unstructured":"van Blarkom, G.W., Borking, J.J., Olk, J.G.E.: Handbook of Privacy and Privacy-Enhancing Technologies. The Case of Intelligent Software Agents. College bescherming persoonsgegevens (2003). ISBN 90-74087-33-7"},{"key":"2_CR24","doi-asserted-by":"crossref","unstructured":"Cavoukian, A.: International council on global privacy and security, by design. In: IEEE Potentials, September\u2013October 2016, vol. 35, no. 5, pp. 43\u201346 (2016)","DOI":"10.1109\/MPOT.2016.2569741"},{"key":"2_CR25","doi-asserted-by":"crossref","unstructured":"Hansen, M., Jensen, M., Rost, M.: Protection goals for privacy engineering. In: 2015 IEEE Security and Privacy Workshops, San Jose, CA, pp. 159\u2013166 (2015)","DOI":"10.1109\/SPW.2015.13"},{"key":"2_CR26","unstructured":"Garc\u00eda, A.C., et al.: PRIPARE, Privacy and Security by Design Methodology Handook v1.00 (2015). \n                    http:\/\/pripareproject.eu\n                    \n                  . Accessed 24 Apr 2019"},{"key":"2_CR27","doi-asserted-by":"crossref","unstructured":"Notario, N., et al.: PRIPARE: integrating privacy best practices into a privacy engineering methodology. In: IEEE Security and Privacy Workshops, San Jose, CA, pp. 151\u2013158 (2015)","DOI":"10.1109\/SPW.2015.22"},{"issue":"1","key":"2_CR28","doi-asserted-by":"publisher","first-page":"67","DOI":"10.1109\/TSE.2008.88","volume":"35","author":"S Spiekermann","year":"2009","unstructured":"Spiekermann, S., Cranor, L.F.: Engineering privacy. IEEE Trans. Softw. Eng. 35(1), 67\u201382 (2009)","journal-title":"IEEE Trans. Softw. Eng."},{"issue":"3","key":"2_CR29","doi-asserted-by":"publisher","first-page":"241","DOI":"10.1007\/s00766-008-0067-3","volume":"13","author":"C Kallpniatis","year":"2008","unstructured":"Kallpniatis, C., Kavakli, E., Gritzalis, S.: Addressing privacy requirements in system design: the PriS method. Requirements Eng. 13(3), 241\u2013255 (2008)","journal-title":"Requirements Eng."},{"key":"2_CR30","unstructured":"Morales-Trujillo, M.E., Matla-Cruz, E.O., Garc\u00eda-Mireles, G.A., Piattini, M.: Privacy by design in software engineering: a systematic mapping study. Paper presented at Avances en Ingenieria de Software a Nivel Iberoamericano, CIbSE, pp. 107\u2013120 (2018)"},{"key":"2_CR31","doi-asserted-by":"crossref","unstructured":"Colesky, M., Hoepman, J., Hillen, C.: A critical analysis of privacy design strategies. In: IWPE (2016)","DOI":"10.1109\/SPW.2016.23"},{"key":"2_CR32","unstructured":"Ortiz, R., Moral-Rubio, S., Garz\u00e1s, J., Fern\u00e1ndez-Medina, E.: Towards a pattern-based security methodologiy to build secure information systems. In: Proceedings of the 8th International Workshop on Security in Information Systems WOSIS 2011, pp. 59\u201369 (2011)"},{"key":"2_CR33","unstructured":"Moral-Garc\u00eda, S., Ortiz, R., Moral-Rubio, S., Vela, B., Garz\u00e1s, J., Fern\u00e1ndez-Medina, E.: A new pattern template to support the design of security architectures. In: PATTERNS 2010: The 2nd International Conferences on Pervasive Patterns and Applications, pp. 66\u201371 (2010)"},{"key":"2_CR34","unstructured":"Center for Internet Security, CIS Benchmarks. \n                    https:\/\/www.cisecurity.org\/cis-benchmarks\/\n                    \n                  . Accessed 26 Apr 2019"},{"key":"2_CR35","unstructured":"Micro Focus: Fortify Static Code Analyze (SCA) (2018). \n                    https:\/\/www.microfocus.com"}],"container-title":["Communications in Computer and Information Science","Quality of Information and Communications Technology"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-29238-6_2","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,9,1]],"date-time":"2019-09-01T19:03:05Z","timestamp":1567364585000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-29238-6_2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"ISBN":["9783030292379","9783030292386"],"references-count":35,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-29238-6_2","relation":{},"ISSN":["1865-0929","1865-0937"],"issn-type":[{"value":"1865-0929","type":"print"},{"value":"1865-0937","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019]]},"assertion":[{"value":"8 August 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"QUATIC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on the Quality of Information and Communications Technology","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Ciudad Real","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Spain","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2019","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"11 September 2019","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"13 September 2019","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"12","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"quatic2019","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/2019.quatic.org","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"66","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"19","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"6","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"29% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"1-2","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}