{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,2]],"date-time":"2025-12-02T15:09:10Z","timestamp":1764688150031,"version":"3.44.0"},"publisher-location":"Cham","reference-count":30,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783031954962"},{"type":"electronic","value":"9783031954979"}],"license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-3-031-95497-9_4","type":"book-chapter","created":{"date-parts":[[2025,6,14]],"date-time":"2025-06-14T13:15:34Z","timestamp":1749906934000},"page":"55-74","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Scaling Information Flow Control By-Construction to\u00a0Component-Based Software Architectures"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0009-0006-1057-4405","authenticated-orcid":false,"given":"Rasmus C.","family":"R\u00f8nneberg","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-2886-0862","authenticated-orcid":false,"given":"Tabea","family":"Bordis","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5531-9607","authenticated-orcid":false,"given":"Christopher","family":"Gerking","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9464-6341","authenticated-orcid":false,"given":"Asmae Heydari","family":"Tabar","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7153-761X","authenticated-orcid":false,"given":"Ina","family":"Schaefer","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,6,11]]},"reference":[{"key":"4_CR1","unstructured":"Facebook Trust. https:\/\/www.nbcnews.com\/business\/consumer\/trust-facebook-has-dropped-51-percent-cambridge-analytica-scandal-n867011. Accessed 09 Sep 2024"},{"key":"4_CR2","unstructured":"Linkedin law suit. https:\/\/www.zdnet.com\/article\/linkedin-will-pay-1-25-million-to-settle-suit-over-password-breach\/. Accessed 09 Sep 2024"},{"key":"4_CR3","unstructured":"Travel planner. https:\/\/kiv.isse.de\/projects\/iflow\/TravelPlannerSite\/index.html. Accessed 22 Jan 2025"},{"key":"4_CR4","doi-asserted-by":"publisher","unstructured":"Abadi, M., Banerjee, A., Heintze, N., Riecke, J.G.: A core calculus of dependency. In: Proceedings of the 26th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, pp. 147\u2013160. POPL \u201999, Association for Computing Machinery, New York, NY, USA (1999). https:\/\/doi.org\/10.1145\/292540.292555, https:\/\/doi.org\/10.1145\/292540.292555","DOI":"10.1145\/292540.292555"},{"key":"4_CR5","doi-asserted-by":"publisher","unstructured":"Alam, M., Breu, R., Breu, M.: Model driven security for web services (MDS4WS). In: 8th International Multitopic Conference, 2004. Proceedings of INMIC 2004, pp. 498\u2013505 (2004). https:\/\/doi.org\/10.1109\/INMIC.2004.1492930","DOI":"10.1109\/INMIC.2004.1492930"},{"key":"4_CR6","volume-title":"OSGI Service Platform, Release 3","author":"O Alliance","year":"2003","unstructured":"Alliance, O.: OSGI Service Platform, Release 3. IOS Press, NLD (2003)"},{"key":"4_CR7","doi-asserted-by":"crossref","unstructured":"Alvim, M., Chatzikokolakis, K., McIver, A., Morgan, C., Palamidessi, C., Smith, G.: The Science of Quantitative Information Flow. Springer (2020)","DOI":"10.1007\/978-3-319-96131-6"},{"key":"4_CR8","unstructured":"Assal, H., Chiasson, S.: Security in the software development lifecycle, pp. 281\u2013296. SOUPS \u201918, USENIX Association, USA (2018)"},{"key":"4_CR9","doi-asserted-by":"publisher","first-page":"19","DOI":"10.1007\/978-3-319-14125-1_2","volume-title":"Logic-Based Program Synthesis and Transformation","author":"B Beckert","year":"2014","unstructured":"Beckert, B., Bruns, D., Klebanov, V., Scheben, C., Schmitt, P.H., Ulbrich, M.: Information flow in object-oriented software. In: Gupta, G., Pe\u00f1a, R. (eds.) Logic-Based Program Synthesis and Transformation, pp. 19\u201337. Springer International Publishing, Cham (2014)"},{"key":"4_CR10","doi-asserted-by":"publisher","unstructured":"Bergeretti, J.F., Carr\u00e9, B.A.: Information-flow and data-flow analysis of while-programs 7(1), 37\u201361 (1985). https:\/\/doi.org\/10.1145\/2363.2366, https:\/\/doi.org\/10.1145\/2363.2366","DOI":"10.1145\/2363.2366"},{"key":"4_CR11","doi-asserted-by":"publisher","first-page":"165","DOI":"10.1007\/978-3-540-24721-0_12","volume-title":"Fundamental Approaches to Software Engineering","author":"R Breu","year":"2004","unstructured":"Breu, R., Popp, G.: Actor-centric modeling of user rights. In: Wermelinger, M., Margaria-Steffen, T. (eds.) Fundamental Approaches to Software Engineering, pp. 165\u2013179. Springer, Berlin Heidelberg, Berlin, Heidelberg (2004)"},{"key":"4_CR12","doi-asserted-by":"publisher","unstructured":"Denning, D.E.: A lattice model of secure information flow. Commun. ACM 19(5), 236\u2013243 (1976). https:\/\/doi.org\/10.1145\/360051.360056, https:\/\/doi.org\/10.1145\/360051.360056","DOI":"10.1145\/360051.360056"},{"key":"4_CR13","doi-asserted-by":"publisher","unstructured":"Dijkstra, E.W.: Guarded commands, non determinacy and formal derivation of programs. Commun. ACM 18(8), 453\u2013457 (1975). https:\/\/doi.org\/10.1145\/360933.360975","DOI":"10.1145\/360933.360975"},{"key":"4_CR14","doi-asserted-by":"publisher","unstructured":"Gerking, C., Schubert, D.: Component-based refinement and verification of information-flow security policies for cyber-physical microservice architectures. In: 2019 IEEE International Conference on Software Architecture (ICSA), pp. 61\u201370 (2019). https:\/\/doi.org\/10.1109\/ICSA.2019.00015","DOI":"10.1109\/ICSA.2019.00015"},{"key":"4_CR15","doi-asserted-by":"crossref","unstructured":"Goguen, J.A., Meseguer, J.: Security policies and security models. In: 1982 IEEE Symposium on Security and Privacy, pp. 11\u201311 (1982)","DOI":"10.1109\/SP.1982.10014"},{"key":"4_CR16","unstructured":"Haber, A., Ringert, J.O., Rumpe, B.: Montiarc - architectural modeling of interactive distributed and cyber-physical systems. CoRR (2014). http:\/\/arxiv.org\/abs\/1409.6578v1"},{"key":"4_CR17","doi-asserted-by":"publisher","unstructured":"Hahner, S., Bitschi, T., Walter, M., Bure\u0161, T., Hn\u011btynka, P., Heinrich, R.: Model-based confidentiality analysis under uncertainty. In: 2023 IEEE 20th International Conference on Software Architecture Companion (ICSA-C), pp. 256\u2013263 (2023). https:\/\/doi.org\/10.1109\/ICSA-C57050.2023.00062","DOI":"10.1109\/ICSA-C57050.2023.00062"},{"issue":"6","key":"4_CR18","doi-asserted-by":"publisher","first-page":"399","DOI":"10.1007\/s10207-009-0086-1","volume":"8","author":"C Hammer","year":"2009","unstructured":"Hammer, C., Snelting, G.: Flow-sensitive, context-sensitive, and object-sensitive information flow control based on program dependence graphs. Int. J. Inf. Secur. 8(6), 399\u2013422 (2009). https:\/\/doi.org\/10.1007\/s10207-009-0086-1","journal-title":"Int. J. Inf. Secur."},{"key":"4_CR19","doi-asserted-by":"publisher","unstructured":"Johnsen, E.B., H\u00e4hnle, R., Sch\u00e4fer, J., Schlatte, R., Steffen, M.: ABS: a core language for abstract behavioral specification, pp. 142\u2013164. Lecture Notes in Computer Science, Springer Berlin Heidelberg (2011). https:\/\/doi.org\/10.1007\/978-3-642-25271-6_8, http:\/\/dx.doi.org\/10.1007\/978-3-642-25271-6_8","DOI":"10.1007\/978-3-642-25271-6_8"},{"key":"4_CR20","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"412","DOI":"10.1007\/3-540-45800-X_32","volume-title":"UML 2002 \u2014 The Unified Modeling Language","author":"J J\u00fcrjens","year":"2002","unstructured":"J\u00fcrjens, J.: UMLsec: extending UML for secure systems development. In: J\u00e9z\u00e9quel, J.-M., Hussmann, H., Cook, S. (eds.) UML 2002. LNCS, vol. 2460, pp. 412\u2013425. Springer, Heidelberg (2002). https:\/\/doi.org\/10.1007\/3-540-45800-X_32"},{"key":"4_CR21","first-page":"187","volume-title":"Leveraging Applications of Formal Methods, Verification and Validation: Verification Principles","author":"A Kn\u00fcppel","year":"2020","unstructured":"Kn\u00fcppel, A., Runge, T., Schaefer, I.: Scaling correctness-by-construction. In: Margaria, T., Steffen, B. (eds.) Leveraging Applications of Formal Methods, Verification and Validation: Verification Principles, pp. 187\u2013207. Springer International Publishing, Cham (2020)"},{"key":"4_CR22","doi-asserted-by":"publisher","unstructured":"Kourie, D.G., Watson, B.W.: The Correctness-by-Construction Approach to Programming. Springer, Berlin, Heidelberg (2012). https:\/\/doi.org\/10.1007\/978-3-642-27919-5, http:\/\/link.springer.com\/10.1007\/978-3-642-27919-5","DOI":"10.1007\/978-3-642-27919-5"},{"key":"4_CR23","doi-asserted-by":"publisher","unstructured":"Lau, K.K., Tran, C.M.: X-man: An MDE tool for component-based system development. In: 2012 38th Euromicro Conference on Software Engineering and Advanced Applications, pp. 158\u2013165 (2012). https:\/\/doi.org\/10.1109\/SEAA.2012.32","DOI":"10.1109\/SEAA.2012.32"},{"key":"4_CR24","doi-asserted-by":"publisher","unstructured":"Moebius, N., Stenzel, K., Grandy, H., Reif, W.: SecureMDD: a model-driven development method for secure smart card applications. In: 2009 International Conference on Availability, Reliability and Security, pp. 841\u2013846 (2009). https:\/\/doi.org\/10.1109\/ARES.2009.22","DOI":"10.1109\/ARES.2009.22"},{"key":"4_CR25","unstructured":"Parr, T.: The Definitive ANTLR 4 Reference. Pragmatic Bookshelf, 2nd edn. (2013)"},{"key":"4_CR26","doi-asserted-by":"crossref","unstructured":"Runge, T., Kn\u00fcppel, A., Th\u00fcm, T., Schaefer, I.: Lattice-based information flow control-by-construction for security-by-design. In: Proceedings of the 8th International Conference on Formal Methods in Software Engineering, pp. 44\u201354. ACM (2020)","DOI":"10.1145\/3372020.3391565"},{"key":"4_CR27","doi-asserted-by":"crossref","unstructured":"Runge, T., Servetto, M., Potanin, A., Schaefer, I.: Immutability and encapsulation for sound OO information flow control. ACM Trans. Prog. Lang. Syst. 45(1), 3573270 (2022)","DOI":"10.1145\/3573270"},{"key":"4_CR28","doi-asserted-by":"publisher","unstructured":"Sinha, R., Rajamani, S., Seshia, S., Vaswani, K.: Moat: verifying confidentiality of enclave programs. In: Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, pp. 1169\u20131184. CCS \u201915, Association for Computing Machinery, New York, NY, USA (2015). https:\/\/doi.org\/10.1145\/2810103.2813608","DOI":"10.1145\/2810103.2813608"},{"key":"4_CR29","volume-title":"Component Software: Beyond Object-Oriented Programming","author":"C Szyperski","year":"2002","unstructured":"Szyperski, C.: Component Software: Beyond Object-Oriented Programming, 2nd edn. Addison-Wesley Longman Publishing Co., Inc, USA (2002)","edition":"2"},{"issue":"2\u20133","key":"4_CR30","doi-asserted-by":"publisher","first-page":"167","DOI":"10.3233\/JCS-1996-42-304","volume":"4","author":"D Volpano","year":"1996","unstructured":"Volpano, D., Irvine, C., Smith, G.: A sound type system for secure flow analysis. J. Comput. Secur. 4(2\u20133), 167\u2013187 (1996)","journal-title":"J. Comput. Secur."}],"container-title":["Lecture Notes in Computer Science","Formal Techniques for Distributed Objects, Components, and Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-95497-9_4","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,9]],"date-time":"2025-09-09T21:43:43Z","timestamp":1757454223000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-95497-9_4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"ISBN":["9783031954962","9783031954979"],"references-count":30,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-95497-9_4","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2025]]},"assertion":[{"value":"11 June 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"FORTE","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Formal Techniques for Distributed Objects, Components, and Systems","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Lille","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"France","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"16 June 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20 June 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"45","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"forte2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.discotec.org\/2025\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}