{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,27]],"date-time":"2025-03-27T16:57:53Z","timestamp":1743094673119,"version":"3.40.3"},"publisher-location":"Cham","reference-count":45,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783031368394"},{"type":"electronic","value":"9783031368400"}],"license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023]]},"DOI":"10.1007\/978-3-031-36840-0_8","type":"book-chapter","created":{"date-parts":[[2023,7,21]],"date-time":"2023-07-21T07:06:27Z","timestamp":1689923187000},"page":"139-160","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["A Classification of\u00a0Software-Architectural Uncertainty Regarding Confidentiality"],"prefix":"10.1007","author":[{"given":"Sebastian","family":"Hahner","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Stephan","family":"Seifermann","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Robert","family":"Heinrich","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ralf","family":"Reussner","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,7,22]]},"reference":[{"key":"8_CR1","doi-asserted-by":"crossref","unstructured":"Armour, P.G.: The five orders of ignorance. Commun. ACM 43(10) (2000)","DOI":"10.1145\/352183.352194"},{"key":"8_CR2","doi-asserted-by":"publisher","unstructured":"Basili, V.R., Weiss, D.M.: A Methodology for Collecting Valid Software Engineering Data. TSE, pp. 728\u2013738 (1984). https:\/\/doi.org\/10.1109\/TSE.1984.5010301","DOI":"10.1109\/TSE.1984.5010301"},{"key":"8_CR3","unstructured":"Benkler, N.: Architecture-based Uncertainty Impact Analysis for Confidentiality. Master\u2019s thesis, Karlsruhe Institute of Technology (KIT) (2022)"},{"issue":"1","key":"8_CR4","doi-asserted-by":"publisher","first-page":"135","DOI":"10.1109\/2.962984","volume":"34","author":"B Boehm","year":"2001","unstructured":"Boehm, B., Basili, V.: Defect reduction top 10 list. Computer 34(1), 135\u2013137 (2001)","journal-title":"Computer"},{"key":"8_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"295","DOI":"10.1007\/978-3-030-61470-6_18","volume-title":"Leveraging Applications of Formal Methods, Verification and Validation: Engineering Principles","author":"T Bures","year":"2020","unstructured":"Bures, T., Hnetynka, P., Heinrich, R., Seifermann, S., Walter, M.: Capturing dynamicity and uncertainty in security and trust via situational patterns. In: Margaria, T., Steffen, B. (eds.) ISoLA 2020. LNCS, vol. 12477, pp. 295\u2013310. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-61470-6_18"},{"key":"8_CR6","unstructured":"Council of European Union: REGULATION (EU) 2016\/679 (General Data Protection Regulation) (2016). https:\/\/eur-lex.europa.eu\/eli\/reg\/2016\/679\/2016-05-04. Accessed 05\/11\/2022"},{"key":"8_CR7","doi-asserted-by":"publisher","unstructured":"Esfahani, N., et al.: GuideArch. In: ICSE, pp. 43\u201352 (2013). https:\/\/doi.org\/10.1109\/ICSE.2013.6606550","DOI":"10.1109\/ICSE.2013.6606550"},{"key":"8_CR8","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"214","DOI":"10.1007\/978-3-642-35813-5_9","volume-title":"Software Engineering for Self-Adaptive Systems II","author":"N Esfahani","year":"2013","unstructured":"Esfahani, N., Malek, S.: Uncertainty in self-adaptive software systems. In: de Lemos, R., Giese, H., M\u00fcller, H.A., Shaw, M. (eds.) Software Engineering for Self-Adaptive Systems II. LNCS, vol. 7475, pp. 214\u2013238. Springer, Heidelberg (2013). https:\/\/doi.org\/10.1007\/978-3-642-35813-5_9"},{"key":"8_CR9","unstructured":"FIRST: CVSS v3.1 specification document. https:\/\/www.first.org\/cvss\/v3.1\/specification-document#2-3-Impact-Metrics. Accessed 05\/11\/2022"},{"key":"8_CR10","doi-asserted-by":"publisher","unstructured":"Garlan, D.: Software engineering in an uncertain world. In: Proceedings of the FSE\/SDP Workshop on Future of Software Engineering Research - FoSER 2010, p. 125. ACM Press (2010). https:\/\/doi.org\/10.1145\/1882362.1882389","DOI":"10.1145\/1882362.1882389"},{"key":"8_CR11","doi-asserted-by":"publisher","unstructured":"Grassi, V., Mirandola, R.: The Tao way to anti-fragile software architectures: the case of mobile applications. In: ICSA-C, pp. 86\u201389. IEEE (2021). https:\/\/doi.org\/10.1109\/ICSA-C52384.2021.00021","DOI":"10.1109\/ICSA-C52384.2021.00021"},{"key":"8_CR12","unstructured":"Hahner, S.: Architectural access control policy refinement and verification under uncertainty. In: ECSA-C (2021)"},{"key":"8_CR13","unstructured":"Hahner, S.: Dealing with uncertainty in architectural confidentiality analysis. In: Proceedings of the Software Engineering 2021 Satellite Events, pp. 1\u20136. GI (2021)"},{"key":"8_CR14","doi-asserted-by":"publisher","unstructured":"Hahner, S., et al.: Companion data set. https:\/\/doi.org\/10.5281\/zenodo.6814107","DOI":"10.5281\/zenodo.6814107"},{"key":"8_CR15","doi-asserted-by":"publisher","unstructured":"Hahner, S., et al.: Modeling data flow constraints for design-time confidentiality analyses. In: ICSA-C, pp. 15\u201321. IEEE (2021). https:\/\/doi.org\/10.1109\/ICSA-C52384.2021.00009","DOI":"10.1109\/ICSA-C52384.2021.00009"},{"issue":"8","key":"8_CR16","doi-asserted-by":"publisher","first-page":"56","DOI":"10.1109\/MC.2018.3191268","volume":"51","author":"J Isaak","year":"2018","unstructured":"Isaak, J., Hanna, M.J.: User Data Privacy. Computer 51(8), 56\u201359 (2018). https:\/\/doi.org\/10.1109\/MC.2018.3191268","journal-title":"Computer"},{"key":"8_CR17","unstructured":"ISO: ISO\/IEC 27000:2018(E) Information technology \u2013 Security techniques \u2013 Information security management systems \u2013 Overview and vocabulary. Standard (2018)"},{"key":"8_CR18","doi-asserted-by":"publisher","unstructured":"Jansen, A., Bosch, J.: Software architecture as a set of architectural design decisions. In: WICSA, pp. 109\u2013120 (2005). https:\/\/doi.org\/10.1109\/WICSA.2005.61","DOI":"10.1109\/WICSA.2005.61"},{"key":"8_CR19","doi-asserted-by":"publisher","unstructured":"Kaplan, A., et al.: Introducing an evaluation method for taxonomies. In: EASE. ACM (2022). https:\/\/doi.org\/10.5445\/IR\/1000145968, accepted, to appear","DOI":"10.5445\/IR\/1000145968"},{"key":"8_CR20","doi-asserted-by":"publisher","first-page":"105","DOI":"10.1016\/j.strusafe.2008.06.020","volume":"31","author":"AD Kiureghian","year":"2009","unstructured":"Kiureghian, A.D., Ditlevsen, O.: Aleatory or epistemic? does it matter? Struct. Saf. 31, 105\u2013112 (2009). https:\/\/doi.org\/10.1016\/j.strusafe.2008.06.020","journal-title":"Struct. Saf."},{"key":"8_CR21","doi-asserted-by":"crossref","unstructured":"Konersmann, M., et al.: Evaluation methods and replicability of software architecture research objects. In: ICSA. IEEE (2022), accepted, to appear","DOI":"10.1109\/ICSA53651.2022.00023"},{"key":"8_CR22","doi-asserted-by":"publisher","unstructured":"Koziolek, A., et al.: PerOpteryx: automated application of tactics in multi-objective software architecture optimization. In: QoSA-ISARCS, pp. 33\u201342. ACM (2011). https:\/\/doi.org\/10.1145\/2000259.2000267","DOI":"10.1145\/2000259.2000267"},{"key":"8_CR23","unstructured":"Kruchten, P.: An Ontology of Architectural Design Decisions in Software-Intensive Systems. In: 2nd Groningen Workshop on Software Variability, pp. 54\u201361 (2004)"},{"issue":"7","key":"8_CR24","doi-asserted-by":"publisher","first-page":"577","DOI":"10.1080\/10447318.2018.1455307","volume":"34","author":"JR Lewis","year":"2018","unstructured":"Lewis, J.R.: The system usability scale: past, present, and future. Int. J. Hum.-Comput. Interact. 34(7), 577\u2013590 (2018). https:\/\/doi.org\/10.1080\/10447318.2018.1455307","journal-title":"Int. J. Hum.-Comput. Interact."},{"key":"8_CR25","doi-asserted-by":"publisher","unstructured":"Lytra, I., Zdun, U.: Supporting architectural decision making for systems-of-systems design under uncertainty. In: SESoS, pp. 43\u201346. ACM (2013). https:\/\/doi.org\/10.1145\/2489850.2489859","DOI":"10.1145\/2489850.2489859"},{"key":"8_CR26","doi-asserted-by":"publisher","unstructured":"Mahdavi-Hezavehi, S., et al.: A Classification Framework of Uncertainty in Architecture-Based Self-Adaptive Systems with Multiple Quality Requirements. Managing Trade-Offs in Adaptable Software Architectures, p. 33 (2017). https:\/\/doi.org\/10.1016\/B978-0-12-802855-1.00003-4","DOI":"10.1016\/B978-0-12-802855-1.00003-4"},{"key":"8_CR27","unstructured":"Mahdavi-Hezavehi, S., et al.: Uncertainty in Self-Adaptive Systems: A Research Community Perspective. ACM TAAS (2021)"},{"key":"8_CR28","volume-title":"Software Project Survey Guide","author":"S McConnell","year":"1998","unstructured":"McConnell, S.: Software Project Survey Guide. Microsoft Press, Redmond, Wash (1998)"},{"key":"8_CR29","unstructured":"OWASP Foundation: Owasp top 10:2021 (2021). https:\/\/owasp.org\/Top10\/. Accessed 05\/11\/2022"},{"key":"8_CR30","doi-asserted-by":"publisher","unstructured":"Perez-Palacin, D., Mirandola, R.: Dealing with uncertainties in the performance modelling of software systems. In: QoSA, pp. 33\u201342. ACM (2014). https:\/\/doi.org\/10.1145\/2602576.2602582","DOI":"10.1145\/2602576.2602582"},{"key":"8_CR31","doi-asserted-by":"publisher","unstructured":"Perez-Palacin, D., Mirandola, R.: Uncertainties in the modeling of self-adaptive systems. In: ICPE, pp. 3\u201314. ACM (2014). https:\/\/doi.org\/10.1145\/2568088.2568095","DOI":"10.1145\/2568088.2568095"},{"key":"8_CR32","doi-asserted-by":"publisher","unstructured":"Ramirez, A.J., et al.: A taxonomy of uncertainty for dynamically adaptive systems. In: SEAMS, pp. 99\u2013108 (2012). https:\/\/doi.org\/10.1109\/SEAMS.2012.6224396","DOI":"10.1109\/SEAMS.2012.6224396"},{"key":"8_CR33","unstructured":"Reussner, R.H., et al.: Modeling and Simulating Software Architectures: The Palladio Approach. The MIT Press (2016)"},{"key":"8_CR34","unstructured":"Robert Koch Institute: Open-Source Project Corona-Warn-App (2020). https:\/\/www.coronawarn.app\/en\/. Accessed 05\/11\/2022"},{"key":"8_CR35","doi-asserted-by":"publisher","first-page":"131","DOI":"10.1007\/s10664-008-9102-8","volume":"14","author":"P Runeson","year":"2009","unstructured":"Runeson, P., H\u00f6st, M.: Guidelines for conducting and reporting case study research in software engineering. Empir. Softw. Eng. 14, 131 (2009). https:\/\/doi.org\/10.1007\/s10664-008-9102-8","journal-title":"Empir. Softw. Eng."},{"key":"8_CR36","unstructured":"Sasse, M.A., Flechais, I.: Usable security: Why do we need it? how do we get it? O\u2019Reilly (2005)"},{"key":"8_CR37","doi-asserted-by":"publisher","unstructured":"Seifermann, S., Heinrich, R., Reussner, R.: Data-driven software architecture for analyzing confidentiality. In: ICSA, p. 1\u201310. IEEE (2019). https:\/\/doi.org\/10.1109\/ICSA.2019.00009","DOI":"10.1109\/ICSA.2019.00009"},{"key":"8_CR38","doi-asserted-by":"publisher","unstructured":"Seifermann, S., Heinrich, R., Werle, D., Reussner, R.: A unified model to detect information flow and access control violations in software architectures. In: SECRYPT, pp. 26\u201337. SCITEPRESS (2021). https:\/\/doi.org\/10.5220\/0010515300260037","DOI":"10.5220\/0010515300260037"},{"key":"8_CR39","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2021.111138","author":"S Seifermann","year":"2022","unstructured":"Seifermann, S., et al.: Detecting violations of access control and information flow policies in data flow diagrams. JSS (2022). https:\/\/doi.org\/10.1016\/j.jss.2021.111138","journal-title":"JSS"},{"key":"8_CR40","unstructured":"Shostack, A.: Threat Modeling: Designing for Security. John Wiley & Sons (2014)"},{"issue":"4","key":"8_CR41","doi-asserted-by":"publisher","first-page":"1183","DOI":"10.1007\/s10270-020-00842-1","volume":"20","author":"J Troya","year":"2021","unstructured":"Troya, J., Moreno, N., Bertoa, M.F., Vallecillo, A.: Uncertainty representation in software models: a survey. Softw. Syst. Model. 20(4), 1183\u20131213 (2021). https:\/\/doi.org\/10.1007\/s10270-020-00842-1","journal-title":"Softw. Syst. Model."},{"key":"8_CR42","doi-asserted-by":"publisher","unstructured":"Tuma, K., et al.: Flaws in flows. In: ICSA, pp. 191\u2013200. IEEE (2019). https:\/\/doi.org\/10.1109\/ICSA.2019.00028","DOI":"10.1109\/ICSA.2019.00028"},{"issue":"1","key":"8_CR43","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1076\/iaij.4.1.5.16466","volume":"4","author":"WE Walker","year":"2003","unstructured":"Walker, W.E., et al.: Defining uncertainty: a conceptual basis for uncertainty management in model-based decision support. Integr. Assess. 4(1), 5\u201317 (2003). https:\/\/doi.org\/10.1076\/iaij.4.1.5.16466","journal-title":"Integr. Assess."},{"key":"8_CR44","doi-asserted-by":"crossref","unstructured":"Walter, M., et al.: Architectural optimization for confidentiality under structural uncertainty. In: ECSA\u201921 Post-Proceedings. Springer (2022), accepted, to appear","DOI":"10.1007\/978-3-031-15116-3_14"},{"key":"8_CR45","unstructured":"Weisbaum, H.: Trust in facebook has dropped by 66 percent since the cambridge analytica scandal (2018). https:\/\/www.nbcnews.com\/business\/consumer\/trust-facebook-has-dropped-51-percent-cambridge-analytica-scandal-n867011. Accessed 05\/11\/2022"}],"container-title":["Communications in Computer and Information Science","E-Business and Telecommunications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-36840-0_8","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,7,21]],"date-time":"2023-07-21T07:08:56Z","timestamp":1689923336000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-36840-0_8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"ISBN":["9783031368394","9783031368400"],"references-count":45,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-36840-0_8","relation":{},"ISSN":["1865-0929","1865-0937"],"issn-type":[{"type":"print","value":"1865-0929"},{"type":"electronic","value":"1865-0937"}],"subject":[],"published":{"date-parts":[[2023]]},"assertion":[{"value":"22 July 2023","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICETE","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on E-Business and Telecommunications","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2021","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"6 July 2021","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"9 July 2021","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"icete2021","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.ice-business.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"PRIMORIS","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"197","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"17","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"9% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}