{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,1]],"date-time":"2025-06-01T04:14:31Z","timestamp":1748751271186,"version":"3.41.0"},"publisher-location":"Cham","reference-count":41,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319254135"},{"type":"electronic","value":"9783319254142"}],"license":[{"start":{"date-parts":[[2015,1,1]],"date-time":"2015-01-01T00:00:00Z","timestamp":1420070400000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2015,1,1]],"date-time":"2015-01-01T00:00:00Z","timestamp":1420070400000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015]]},"DOI":"10.1007\/978-3-319-25414-2_9","type":"book-chapter","created":{"date-parts":[[2016,1,4]],"date-time":"2016-01-04T13:29:05Z","timestamp":1451914145000},"page":"134-150","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["From Regulatory Obligations to Enforceable Accountability Policies in the Cloud"],"prefix":"10.1007","author":[{"given":"Walid","family":"Benghabrit","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Herv\u00e9","family":"Grall","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jean-Claude","family":"Royer","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mohamed","family":"Sellami","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Monir","family":"Azraoui","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kaoutar","family":"Elkhiyaoui","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Melek","family":"\u00d6nen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Anderson Santana","family":"De Oliveira","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Karin","family":"Bernsmed","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2015,12,30]]},"reference":[{"doi-asserted-by":"crossref","unstructured":"Pearson, S., Tountopoulos, V., Catteddu, D., S\u00fcdholt, M., Molva, R., Reich, C., Fischer-H\u00fcbner, S., Millard, C., Lotz, V., Jaatun, M.G., Leenes, R., Rong, C., Lopez, J.: Accountability for cloud and other future internet services. In: CloudCom, pp. 629\u2013632. IEEE (2012)","key":"9_CR1","DOI":"10.1109\/CloudCom.2012.6427512"},{"unstructured":"Directive, E.U.: Directive 95\/46\/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (1995). http:\/\/ec.europa.eu\/justice\/policies\/privacy\/docs\/95--46-ce\/dir1995-46_part1_en.pdf","key":"9_CR2"},{"unstructured":"Ardagna, C.A., Bussard, L., De Capitani Di Vimercati, S., Neven, G., Paraboschi, S., Pedrini, E., Preiss, S., Raggett, D., Samarati, P., Trabelsi, S., Verdicchio, M.: Primelife policy language (2009). http:\/\/www.w3.org\/2009\/policy-ws\/papers\/Trabelisi.pdf","key":"9_CR3"},{"key":"9_CR4","doi-asserted-by":"publisher","first-page":"82","DOI":"10.1145\/1349026.1349043","volume":"51","author":"DJ Weitzner","year":"2008","unstructured":"Weitzner, D.J., Abelson, H., Berners-Lee, T., Feigenbaum, J., Hendler, J., Sussman, G.J.: Information accountability. Commun. ACM 51, 82\u201387 (2008)","journal-title":"Commun. ACM"},{"key":"9_CR5","doi-asserted-by":"crossref","first-page":"1083","DOI":"10.1002\/sec.348","volume":"5","author":"Z Xiao","year":"2012","unstructured":"Xiao, Z., Kathiresshan, N., Xiao, Y.: A survey of accountability in computer networks and distributed systems. Secur. Commun. Netw. 5, 1083\u20131085 (2012)","journal-title":"Secur. Commun. Netw."},{"key":"9_CR6","doi-asserted-by":"publisher","first-page":"52","DOI":"10.1504\/IJTMCC.2013.052524","volume":"1","author":"S Pearson","year":"2013","unstructured":"Pearson, S., Wainwright, N.: An interdisciplinary approach to accountability for future internet service provision. Int. J. Trust Manag. Comput. Commun. 1, 52\u201372 (2013)","journal-title":"Int. J. Trust Manag. Comput. Commun."},{"key":"9_CR7","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"162","DOI":"10.1007\/978-3-642-01465-9_11","volume-title":"Formal Aspects in Security and Trust","author":"D Le M\u00e9tayer","year":"2009","unstructured":"Le M\u00e9tayer, D.: A formal privacy management framework. In: Degano, P., Guttman, J., Martinelli, F. (eds.) FAST 2008. LNCS, vol. 5491, pp. 162\u2013176. Springer, Heidelberg (2009)"},{"doi-asserted-by":"crossref","unstructured":"DeYoung, H., Garg, D., Jia, L., Kaynar, D., Datta, A.: Experiences in the logical specification of the HIPAA and GLBA privacy laws. In: 9th Annual ACM Workshop on Privacy in the Electronic Society (WPES 2010), pp. 73\u201382 (2010)","key":"9_CR8","DOI":"10.1145\/1866919.1866930"},{"unstructured":"Feigenbaum, J., Jaggard, A.D., Wright, R.N., Xiao, H.: Systematizing \u201caccountability\u201d in computer science. Technical report YALEU\/DCS\/TR-1452, University of Yale (2012)","key":"9_CR9"},{"key":"9_CR10","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"152","DOI":"10.1007\/978-3-642-04444-1_10","volume-title":"Computer Security \u2013 ESORICS 2009","author":"R Jagadeesan","year":"2009","unstructured":"Jagadeesan, R., Jeffrey, A., Pitcher, C., Riely, J.: Towards a theory of accountability and audit. In: Backes, M., Ning, P. (eds.) ESORICS 2009. LNCS, vol. 5789, pp. 152\u2013167. Springer, Heidelberg (2009)"},{"key":"9_CR11","doi-asserted-by":"publisher","first-page":"556","DOI":"10.1109\/TDSC.2012.26","volume":"9","author":"S Sundareswaran","year":"2012","unstructured":"Sundareswaran, S., Squicciarini, A., Lin, D.: Ensuring distributed accountability for data sharing in the cloud. IEEE Trans. Dependable Secure Comput. 9, 556\u2013568 (2012)","journal-title":"IEEE Trans. Dependable Secure Comput."},{"unstructured":"Haeberlen, A., Aditya, P., Rodrigues, R., Druschel, P.: Accountable virtual machines. In: 9th USENIX Symposium on Operating Systems Design and Implementation, OSDI, pp. 119\u2013134 (2010)","key":"9_CR12"},{"doi-asserted-by":"crossref","unstructured":"Wei, W., Du, J., Yu, T., Gu, X.: Securemr: a service integrity assurance framework for mapreduce. In: Proceedings of the 2009 Annual Computer Security Applications Conference, pp. 73\u201382. IEEE Computer Society, Washington, DC (2009)","key":"9_CR13","DOI":"10.1109\/ACSAC.2009.17"},{"doi-asserted-by":"crossref","unstructured":"Zou, J., Wang, Y., Lin, K.J.: A formal service contract model for accountable SaaS and cloud services. In: International Conference on Services Computing, pp. 73\u201380. IEEE (2010)","key":"9_CR14","DOI":"10.1109\/SCC.2010.85"},{"unstructured":"US Congress: Health insurance portability and accountability act of 1996, privacy rule. 45 cfr 164 (2002). http:\/\/www.access.gpo.gov\/nara\/cfr\/waisidx_07\/45cfr164_07.html","key":"9_CR15"},{"unstructured":"Legislative Assembly of Ontario: Freedom of information and protection of privacy act (r.s.o. 1990, c. f.31) (1988)","key":"9_CR16"},{"doi-asserted-by":"crossref","unstructured":"Breaux, T.D., Anton, A.I.: Deriving semantic models from privacy policies. In: Sixth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY 2005), pp. 67\u201376 (2005)","key":"9_CR17","DOI":"10.1109\/POLICY.2005.12"},{"doi-asserted-by":"crossref","unstructured":"Kerrigan, S., Law, K.H.: Logic-based regulation compliance-assistance. In: International Conference on Artificial Intelligence and Law, pp. 126\u2013135 (2003)","key":"9_CR18","DOI":"10.1145\/1047788.1047820"},{"unstructured":"US Congress: Gramm-leach-bliley act, financial privacy rule. 15 usc 6801\u20136809 (1999). http:\/\/www.law.cornell.edu\/uscode\/usc_sup_01_15_10_94_20_I.html","key":"9_CR19"},{"unstructured":"Garaga, A., de Oliveira, A.S., Sendor, J., Azraoui, M., Elkhiyaoui, K., Molva, R., \u00d6nen, M., Cherrueau, R.A., Douence, R., Grall, H., Royer, J.C., Sellami, M., S\u00fcdholt, M., Bernsmed, K.: Policy Representation Framework. Technical report D:C-4.1, Accountability for Cloud and Future Internet Services - A4Cloud Project (2013). http:\/\/www.a4cloud.eu\/sites\/default\/files\/D34.1%20Policy%20representation%20Framework.pdf","key":"9_CR20"},{"unstructured":"OASIS Standard: eXtensible Access Control Markup Language (XACML) Version 3.0. 22, January 2013. http:\/\/docs.oasis-open.org\/xacml\/3.0\/xacml-3.0-core-spec-os-en.html","key":"9_CR21"},{"unstructured":"Marchiori, M.: The platform for privacy preferences 1.0 (P3P1.0) specification. W3C recommendation, W3C (2002). http:\/\/www.w3.org\/ TR\/ 2002\/ REC-P3P-20020416\/","key":"9_CR22"},{"unstructured":"Becker, M.Y., Malkis, A., Bussard, L.: S4p: A generic language for specifying privacy preferences and policies. Technical report MSR-TR-2010-32, Microsoft Research (2010)","key":"9_CR23"},{"key":"9_CR24","doi-asserted-by":"publisher","first-page":"45","DOI":"10.1016\/j.entcs.2007.10.013","volume":"197","author":"I Aktug","year":"2008","unstructured":"Aktug, I., Naliuka, K.: ConSpec - a formal language for policy specification. Electron. Notes Theor. Comput. Sci. 197, 45\u201358 (2008)","journal-title":"Electron. Notes Theor. Comput. Sci."},{"key":"9_CR25","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"18","DOI":"10.1007\/3-540-44569-2_2","volume-title":"Policies for Distributed Systems and Networks","author":"N Damianou","year":"2001","unstructured":"Damianou, N., Dulay, N., Lupu, E.C., Sloman, M.: The ponder policy specification language. In: Sloman, M., Lobo, J., Lupu, E.C. (eds.) POLICY 2001. LNCS, vol. 1995, pp. 18\u201338. Springer, Heidelberg (2001)"},{"key":"9_CR26","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4614-1864-1","volume-title":"Handbook of Service Description: USDL and Its Methods","author":"A Barros","year":"2012","unstructured":"Barros, A., Oberle, D.: Handbook of Service Description: USDL and Its Methods. Springer Publishing Company, Incorporated, New York (2012)"},{"doi-asserted-by":"crossref","unstructured":"Lamanna, D.D., Skene, J., Emmerich, W.: SLAng: a language for defining service level agreements. In: Proceedings of the The Ninth IEEE Workshop on Future Trends of Distributed Computing Systems, pp. 100\u2013106. IEEE Computer Society, Washington, DC (2003)","key":"9_CR27","DOI":"10.1109\/FTDCS.2003.1204317"},{"unstructured":"OASIS Web Service Security (WSS) TC: Web Services Security: SOAP Message Security 1.1 (2006). https:\/\/www.oasis-open.org\/committees\/download.php\/16790\/wss-v1.1-spec-os-SOAPMessageSecurity.pdf","key":"9_CR28"},{"unstructured":"OASIS Web Services Secure Exchange (WS-SX) TC: WS-Trust 1.4 (2012). http:\/\/docs.oasis-open.org\/ws-sx\/ws-trust\/v1.4\/errata01\/os\/ws-trust-1.4-errata01-os-complete.html","key":"9_CR29"},{"key":"9_CR30","first-page":"27","volume":"2","author":"T Bray","year":"1997","unstructured":"Bray, T., Paoli, J., Sperberg-McQueen, C.M., Maler, E., Yergeau, F.: Extensible markup language (XML). World Wide Web J. 2, 27\u201366 (1997)","journal-title":"World Wide Web J."},{"doi-asserted-by":"crossref","unstructured":"Butin, D., Chicote, M., Le M\u00e9tayer, D.: Log design for accountability. In: IEEE CS Security and Privacy Workshops (SPW), pp. 1\u20137 (2013)","key":"9_CR31","DOI":"10.1109\/SPW.2013.26"},{"doi-asserted-by":"crossref","unstructured":"Henze, M., Gro\u00dffengels, M., Koprowski, M., Wehrle, K.: Towards data handling requirements-aware cloud computing. In: 2013 IEEE International Conference on Cloud Computing Technology and Science (CloudCom) (2013)","key":"9_CR32","DOI":"10.1109\/CloudCom.2013.145"},{"doi-asserted-by":"crossref","unstructured":"Bradner, S.: IETF RFC 2119: Key words for use in RFCs to Indicate Requirement Levels. Technical report (1997)","key":"9_CR33","DOI":"10.17487\/rfc2119"},{"key":"9_CR34","doi-asserted-by":"publisher","first-page":"735","DOI":"10.1145\/355588.365140","volume":"7","author":"DE Knuth","year":"1964","unstructured":"Knuth, D.E.: Backus normal form vs. backus naur form. Commun. ACM 7, 735\u2013736 (1964)","journal-title":"Commun. ACM"},{"key":"9_CR35","doi-asserted-by":"publisher","first-page":"513","DOI":"10.1016\/S1574-6526(07)03012-X","volume-title":"Handbook of Knowledge Representation","author":"M Fisher","year":"2008","unstructured":"Fisher, M.: Temporal representation and reasoning. In: van Harmelen, F., Lifschitz, V., Porter, B. (eds.) Handbook of Knowledge Representation, pp. 513\u2013550. Elsevier, Amsterdam (2008)"},{"key":"9_CR36","series-title":"IFIP Advances in Information and Communication Technology","doi-asserted-by":"publisher","first-page":"229","DOI":"10.1007\/978-3-662-43813-8_17","volume-title":"Trust Management VIII","author":"W Benghabrit","year":"2014","unstructured":"Benghabrit, W., Grall, H., Royer, J.-C., Sellami, M., Bernsmed, K., De Oliveira, A.S.: Abstract accountability language. In: Zhou, J., Gal-Oz, N., Zhang, J., Gudes, E. (eds.) IFIPTM 2014. IFIP AICT, vol. 430, pp. 229\u2013236. Springer, Heidelberg (2014)"},{"doi-asserted-by":"crossref","unstructured":"Benghabrit, W., Grall, H., Royer, J.C., Sellami, M.: Accountability for abstract component design. In: 40th EUROMICRO Conference on Software Engineering and Advanced Applications, SEAA, Verona, Italia (2014)","key":"9_CR37","DOI":"10.1109\/SEAA.2014.68"},{"key":"9_CR38","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"199","DOI":"10.1007\/978-3-642-36742-7_15","volume-title":"Tools and Algorithms for the Construction and Analysis of Systems","author":"S Cranen","year":"2013","unstructured":"Cranen, S., Groote, J.F., Keiren, J.J.A., Stappers, F.P.M., de Vink, E.P., Wesselink, W., Willemse, T.A.C.: An overview of the mCRL2 toolset and its recent advances. In: Piterman, N., Smolka, S.A. (eds.) TACAS 2013 (ETAPS 2013). LNCS, vol. 7795, pp. 199\u2013213. Springer, Heidelberg (2013)"},{"key":"9_CR39","doi-asserted-by":"publisher","first-page":"30","DOI":"10.1145\/353323.353382","volume":"3","author":"FB Schneider","year":"2000","unstructured":"Schneider, F.B.: Enforceable security policies. ACM Trans. Inf. Syst. Secur. 3, 30\u201350 (2000)","journal-title":"ACM Trans. Inf. Syst. Secur."},{"unstructured":"Allam, D., Douence, R., Grall, H., Royer, J.C., S\u00fcdholt, M.: Well-Typed Services Cannot Go Wrong. Rapport de recherche RR-7899, INRIA (2012)","key":"9_CR40"},{"unstructured":"Bernsmed, K., Felici, M., Oliveira, A.S.D., Sendor, J., Moe, N.B., R\u00fcbsamen, T., Tountopoulos, V., Hasnain, B.: Use case descriptions. Deliverable, Cloud Accountability (A4Cloud) Project (2013)","key":"9_CR41"}],"container-title":["Communications in Computer and Information Science","Cloud Computing and Services Sciences"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-25414-2_9","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,1]],"date-time":"2025-06-01T00:57:47Z","timestamp":1748739467000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-25414-2_9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015]]},"ISBN":["9783319254135","9783319254142"],"references-count":41,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-25414-2_9","relation":{},"ISSN":["1865-0929","1865-0937"],"issn-type":[{"type":"print","value":"1865-0929"},{"type":"electronic","value":"1865-0937"}],"subject":[],"published":{"date-parts":[[2015]]},"assertion":[{"value":"30 December 2015","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"CLOSER","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Cloud Computing and Services Science","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Barcelona","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Spain","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2014","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"3 April 2014","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"5 April 2014","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"4","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"closer2014","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}