{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,25]],"date-time":"2026-07-25T16:25:00Z","timestamp":1784996700443,"version":"3.55.0"},"publisher-location":"Cham","reference-count":36,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031663253","type":"print"},{"value":"9783031663260","type":"electronic"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-3-031-66326-0_21","type":"book-chapter","created":{"date-parts":[[2024,7,29]],"date-time":"2024-07-29T12:59:46Z","timestamp":1722257986000},"page":"342-358","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":7,"title":["An Extensible Framework for\u00a0Architecture-Based Data Flow Analysis for\u00a0Information Security"],"prefix":"10.1007","author":[{"given":"Nicolas","family":"Boltz","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sebastian","family":"Hahner","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Christopher","family":"Gerking","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Robert","family":"Heinrich","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2024,7,30]]},"reference":[{"key":"21_CR1","doi-asserted-by":"publisher","unstructured":"Ahrendt, W., et al.: Deductive Software Verification-The Key Book. Springer, Cham (2016). https:\/\/doi.org\/10.1007\/978-3-319-49812-6","DOI":"10.1007\/978-3-319-49812-6"},{"key":"21_CR2","doi-asserted-by":"crossref","unstructured":"Alshareef, H., et al.: Precise analysis of purpose limitation in data flow diagrams. In: ARES, pp. 1\u201311 (2022)","DOI":"10.1145\/3538969.3539010"},{"key":"21_CR3","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2021.111090","volume":"183","author":"K Bernsmed","year":"2022","unstructured":"Bernsmed, K., et al.: Adopting threat modelling in agile software development projects. J. Syst. Softw. 183, 111090 (2022)","journal-title":"J. Syst. Softw."},{"key":"21_CR4","unstructured":"Beverley-Smith, H., Perowne, C.H., Kelleher, F.: British airways faces significantly reduced \u00a320M fine for GDPR breach. The National Law Review. www.natlawreview.com\/article\/british-airways-faces-significantly-reduced-20m-fine-gdpr-breach. Accessed 12 Nov 2023"},{"key":"21_CR5","unstructured":"Boltz, N., Walter, M., Gerking, C.: Designing Automotive Case Studies for Architectural Security Analyses (2023)"},{"key":"21_CR6","unstructured":"Boltz, N., et al.: A model-based framework for simplified collaboration of legal and software experts in data protection assessments. In: INFORMATIK 2022 (2022)"},{"key":"21_CR7","doi-asserted-by":"publisher","DOI":"10.5281\/zenodo.10794265","author":"N Boltz","year":"2024","unstructured":"Boltz, N., et al.: Dataset: an extensible framework for architecture-based data flow analysis for information security. Zenodo (2024). https:\/\/doi.org\/10.5281\/zenodo.10794265","journal-title":"Zenodo"},{"key":"21_CR8","doi-asserted-by":"crossref","unstructured":"Boltz, N., et al.: Handling environmental uncertainty in design time access control analysis. In: SEAA, pp. 382\u2013389 (2022)","DOI":"10.1109\/SEAA56994.2022.00067"},{"key":"21_CR9","doi-asserted-by":"crossref","unstructured":"De Moor, O., et al.: \u201c.QL: Object-Oriented Queries Made Easy\u201d. In: International Summer School on Generative and Transformational Techniques in Software Engineering, pp. 78\u2013133 (2008)","DOI":"10.1007\/978-3-540-88643-3_3"},{"key":"21_CR10","doi-asserted-by":"crossref","unstructured":"DeMarco, T.: Structure analysis and system specification. In: Pioneers and Their Contributions to Software Engineering, pp. 255\u2013288 (1979)","DOI":"10.1007\/978-3-642-48354-7_9"},{"key":"21_CR11","unstructured":"General Data Protection Regulation (GDPR) (2016). https:\/\/gdpr.eu\/tag\/gdpr\/"},{"key":"21_CR12","doi-asserted-by":"crossref","unstructured":"Hahner, S., Heinrich, R., Reussner, R.: Architecture-based uncertainty impact analysis to ensure confidentiality. In: SEAMS, pp. 126\u2013132 (2023)","DOI":"10.1109\/SEAMS59076.2023.00026"},{"key":"21_CR13","doi-asserted-by":"crossref","unstructured":"Hahner, S., et al.: A classification of software-architectural uncertainty regarding confidentiality. In: ICETE, pp. 139\u2013160 (2023)","DOI":"10.1007\/978-3-031-36840-0_8"},{"key":"21_CR14","doi-asserted-by":"crossref","unstructured":"Hahner, S., et al.: Model-based confidentiality analysis under uncertainty. In: ICSA-C, pp. 256\u2013263 (2023)","DOI":"10.1109\/ICSA-C57050.2023.00062"},{"key":"21_CR15","doi-asserted-by":"crossref","unstructured":"Hahner, S., et al.: Modeling data flow constraints for design-time confidentiality analyses. In: ICSA-C, pp. 15\u201321 (2021)","DOI":"10.1109\/ICSA-C52384.2021.00009"},{"key":"21_CR16","unstructured":"HmbBfDI: 35.3 Million Euro Fine for Data Protection Violations in H &M\u2019s Service Center. www.datenschutz-hamburg.de\/fileadmin\/user_upload\/HmbBfDI\/Pressemitteilungen\/2020\/2020-10-01-H_M.pdf. Accessed 12 Nov 2023"},{"key":"21_CR17","unstructured":"International Organization for Standardization: Information technology - Security techniques - Information security management systems - Overview and vocabulary. Standard ISO\/IEC 27000:2018"},{"key":"21_CR18","unstructured":"Katkalov, K.: Ein modellgetriebener Ansatz zur Entwicklung informationsflusssicherer Systeme. doctoralthesis, Universit\u00e4t Augsburg (2017)"},{"key":"21_CR19","doi-asserted-by":"crossref","unstructured":"Konersmann, M., et al.: Evaluation methods and replicability of software architecture research objects. In: ICSA, pp. 157\u2013168 (2022)","DOI":"10.1109\/ICSA53651.2022.00023"},{"key":"21_CR20","doi-asserted-by":"crossref","unstructured":"Koziolek, A., Koziolek, H., Reussner, R.: PerOpteryx: automated application of tactics in multi-objective software architecture optimization. In: QoSA-ISARCS, pp. 33\u201342 (2011)","DOI":"10.1145\/2000259.2000267"},{"key":"21_CR21","unstructured":"Reussner, R., et al.: Modeling and Simulating Software Architectures - The Palladio Approach. MIT Press, Cambridge (2016). isbn: 9780262034760"},{"key":"21_CR22","doi-asserted-by":"crossref","unstructured":"Runeson, P., et al.: Case Study Research in Software Engineering: Guidelines and Examples. John Wiley & Sons (2012)","DOI":"10.1002\/9781118181034"},{"key":"21_CR23","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2023.111722","volume":"202","author":"S Schneider","year":"2023","unstructured":"Schneider, S., Scandariato, R.: Automatic extraction of security-rich dataflow diagrams for microservice applications written in Java. J. Syst. Softw. 202, 111722 (2023)","journal-title":"J. Syst. Softw."},{"key":"21_CR24","doi-asserted-by":"crossref","unstructured":"Schneider, S., et al.: How dataflow diagrams impact software security analysis: an empirical experiment. In: SANER (2024)","DOI":"10.1109\/SANER60148.2024.00103"},{"key":"21_CR25","doi-asserted-by":"crossref","unstructured":"Schneider, S., et al.: microSecEnD: a dataset of security-enriched dataflow diagrams for microservice applications. In: MSR, pp. 125-129 (2023)","DOI":"10.1109\/MSR59073.2023.00030"},{"key":"21_CR26","unstructured":"Schulz, S., et al.: Continuous secure software development and analysis. In: SSP (2021)"},{"key":"21_CR27","doi-asserted-by":"publisher","unstructured":"Schwickerath, F., et al.: Tool-supported architecture-based data flow analysis for confidentiality. In: arXiv preprint (2023). https:\/\/doi.org\/10.48550\/arXiv.2308.01645","DOI":"10.48550\/arXiv.2308.01645"},{"key":"21_CR28","doi-asserted-by":"crossref","unstructured":"Seifermann, S., et al.: A unified model to detect information flow and access control violations in software architectures. In: SECRYPT, pp. 26\u201337 (2021)","DOI":"10.5220\/0010515300260037"},{"key":"21_CR29","doi-asserted-by":"crossref","unstructured":"Seifermann, S., Heinrich, R., Reussner, R.: Data-driven software architecture for analyzing confidentiality. In: ICSA, pp. 1\u201310 (2019)","DOI":"10.1109\/ICSA.2019.00009"},{"key":"21_CR30","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2021.111138","volume":"184","author":"S Seifermann","year":"2022","unstructured":"Seifermann, S., et al.: Detecting violations of access control and information flow policies in data flow diagrams. J. Syst. Softw. 184, 111138 (2022)","journal-title":"J. Syst. Softw."},{"key":"21_CR31","doi-asserted-by":"crossref","unstructured":"Shull, F., et al.: What we have learned about fighting defects. In: METRICS, pp. 249\u2013258 (2002)","DOI":"10.1109\/METRIC.2002.1011343"},{"key":"21_CR32","doi-asserted-by":"crossref","unstructured":"Sion, L., et al.: Solution-aware data flow diagrams for security threat modeling. In: SAC, pp. 1425\u20131432 (2018)","DOI":"10.1145\/3167132.3167285"},{"key":"21_CR33","doi-asserted-by":"crossref","unstructured":"Snelting, G., et al.: Checking probabilistic noninterference using JOANA. it - Information Technol. 56(6), 280\u2013287 (2014)","DOI":"10.1515\/itit-2014-1051"},{"key":"21_CR34","doi-asserted-by":"crossref","unstructured":"Tuma, K., Scandariato, R., and Balliu, M.: Flaws in flows: unveiling design flaws via information flow analysis. In: ICSA, pp. 191\u2013200 (2019)","DOI":"10.1109\/ICSA.2019.00028"},{"key":"21_CR35","doi-asserted-by":"crossref","unstructured":"Walter, M., et al.: Architectural optimization for confidentiality under structural uncertainty. In: ECSA, pp. 309\u2013332 (2021)","DOI":"10.1007\/978-3-031-15116-3_14"},{"issue":"4","key":"21_CR36","doi-asserted-by":"publisher","first-page":"20","DOI":"10.1145\/3617946.3617951","volume":"48","author":"D Weyns","year":"2023","unstructured":"Weyns, D., et al.: Towards a research agenda for understanding and managing uncertainty in self-adaptive systems. SIGSOFT Software Eng. Notes 48(4), 20\u201336 (2023)","journal-title":"SIGSOFT Software Eng. Notes"}],"container-title":["Lecture Notes in Computer Science","Software Architecture. ECSA 2023 Tracks, Workshops, and Doctoral Symposium"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-66326-0_21","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,7,29]],"date-time":"2024-07-29T13:03:15Z","timestamp":1722258195000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-66326-0_21"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9783031663253","9783031663260"],"references-count":36,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-66326-0_21","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"30 July 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ECSA","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Conference on Software Architecture","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Istanbul","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"T\u00fcrkiye","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18 September 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22 September 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"ecsa2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"71","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"16","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"9","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"23% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}