{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,25]],"date-time":"2025-03-25T14:42:10Z","timestamp":1742913730691,"version":"3.40.3"},"publisher-location":"Cham","reference-count":32,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319952758"},{"type":"electronic","value":"9783319952765"}],"license":[{"start":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T00:00:00Z","timestamp":1514764800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T00:00:00Z","timestamp":1514764800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2018]]},"DOI":"10.1007\/978-3-319-95276-5_1","type":"book-chapter","created":{"date-parts":[[2018,6,29]],"date-time":"2018-06-29T13:30:22Z","timestamp":1530279022000},"page":"1-14","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["How to Develop a Security Controls Oriented Reference Architecture for Cloud, IoT and SDN\/NFV Platforms"],"prefix":"10.1007","author":[{"given":"Theo","family":"Dimitrakos","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2018,6,30]]},"reference":[{"key":"1_CR1","doi-asserted-by":"publisher","DOI":"10.1145\/1595696.1595754","volume-title":"Software Architecture: Foundations","author":"RN Taylor","year":"2009","unstructured":"Taylor, R.N., Medvidovi\u0107, N.N., Dashofy, E.M.: Software Architecture: Foundations. Theory and Practice, Wiley, Hoboken (2009)"},{"key":"1_CR2","volume-title":"Software Architecture: Perspectives on an Emerging Discipline","author":"M Shaw","year":"1996","unstructured":"Shaw, M., Garlan, D.: Software Architecture: Perspectives on an Emerging Discipline. Prentice Hall, Upper Saddle River (1996)"},{"doi-asserted-by":"crossref","unstructured":"Kissel, R.: Glossary of Key Information Security Terms (NISTIR 7298 Revision 2). NIST (National Institute of Standards and Technology) (2013)","key":"1_CR3","DOI":"10.6028\/NIST.IR.7298r2"},{"unstructured":"CNSS: National Information Assurance (IA) Glossary. CNSS Instruction No. 4009. National Security Agency (NSA) (2003)","key":"1_CR4"},{"unstructured":"FIPS: Minimum Security Requirements for Federal Information and Information Systems (FIPS 200). Federal Information Processing Standards (2006)","key":"1_CR5"},{"unstructured":"NIST: Guide for Applying the Risk Management Framework (RMF) to Federal Information Systems: a Security Life Cycle Approach. National Institute of Standards and Technology (2010, updated)","key":"1_CR6"},{"unstructured":"NIST: Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy (Discussion Draft) (2017)","key":"1_CR7"},{"doi-asserted-by":"crossref","unstructured":"Dempsey, K., Chawla, N.S., Johnson, A., Johnston, R., Jones, A.C., Orebaugh, A., Scholl, M., Stine, K.: Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations. National Institute of Standards and Technology (2011)","key":"1_CR8","DOI":"10.6028\/NIST.SP.800-137"},{"unstructured":"Joint Task Force Transformation Initiative: Guide for Conducting Risk Assessments (NIST SP 800-30r1). National Institute of Standards and Technology (2012)","key":"1_CR9"},{"doi-asserted-by":"crossref","unstructured":"Stoneburner, G., Goguen, A., Feringa, A.: Risk Management Guide for Information Technology Systems. NIST - National Institute of Standards and Technology (2002)","key":"1_CR10","DOI":"10.6028\/NIST.SP.800-30"},{"unstructured":"Joint Task Force: Security and Privacy Controls for Federal Information Systems and Organizations. National Institute of Standards and Technology (2013)","key":"1_CR11"},{"unstructured":"ETSI: Network Functions Virtualisation (NFV); Architectural Framework. The European Telecommunications Standards Institute (2013)","key":"1_CR12"},{"unstructured":"Dimitrakos, T.: Security Challenges and Guidance for Protecting NFV on Cloud IaaS. ETSI NFV Security Week (2017). https:\/\/docbox.etsi.org\/workshop\/2017\/201706_SECURITYWEEK\/05_NFVSECURITY","key":"1_CR13"},{"unstructured":"Dimitrakos, T.: Towards a security reference architecture for Network Function Virtualisation: security challenges and security controls. In: NECS (2017)","key":"1_CR14"},{"unstructured":"ETSI: Network Functions Virtualisation (NFV), NFV Security, Security and Trust Guidance. The European Telecommunications Standards Institute (2014)","key":"1_CR15"},{"unstructured":"CSA: Network Function Virtualization. CSA (2016)","key":"1_CR16"},{"unstructured":"CSA: Best Practices for Mitigating Risks in Virtualized Environments. CSA (2015)","key":"1_CR17"},{"key":"1_CR18","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-04086-3","volume-title":"Service Oriented Infrastructures and Cloud Service Platforms for the Enterprise: A Selection of Common Capabilities Validated in Real-Life Business Trials","author":"T Dimitrakos","year":"2009","unstructured":"Dimitrakos, T.: Service Oriented Infrastructures and Cloud Service Platforms for the Enterprise: A Selection of Common Capabilities Validated in Real-Life Business Trials. Springer, Heidelberg (2009). https:\/\/doi.org\/10.1007\/978-3-642-04086-3. (Ed. by, T. Dimitrakos, J. Martrat, S. Wesner)"},{"key":"1_CR19","doi-asserted-by":"publisher","DOI":"10.1145\/1595696.1595754","volume-title":"Software Architecture: Foundations, Theory, and Practice","author":"RN Taylor","year":"2009","unstructured":"Taylor, R.N., Medvidovic, N., Dashofy, E.M.: Software Architecture: Foundations, Theory, and Practice. Wiley, Hoboken (2009)"},{"unstructured":"NIST: Risk Management Framework (RMF) Overview, 30 November 2016","key":"1_CR20"},{"unstructured":"ENISA: Cloud Computing Benefits, Risks and Recommendations for Information Security. European Network and Information Security Agency (2009)","key":"1_CR21"},{"unstructured":"ENISA: Cloud Computing: Information Assurance Framework. The European Network and Information Security Agency (2009)","key":"1_CR22"},{"doi-asserted-by":"crossref","unstructured":"Abi-Antoun, M., Barnes, J.M.: Analyzing security architectures. In: IEEE\/ACM International Conference on Automated Software Engineering (ASE 2010) (2010)","key":"1_CR23","DOI":"10.1145\/1858996.1859001"},{"doi-asserted-by":"crossref","unstructured":"Caralli, R.A., Stevens, J.F., Young, L.R., Wilson, W.R.: Introducing OCTAVE Allegro: improving the information security risk assessment process. Software Engineering Institute CMU\/SEI Report Number: CMU\/SEI-2007-TR-012 (2007)","key":"1_CR24","DOI":"10.21236\/ADA470450"},{"key":"1_CR25","doi-asserted-by":"crossref","DOI":"10.1201\/EBK1439839560","volume-title":"Information Security Risk Analysis","author":"TR Peltier","year":"2010","unstructured":"Peltier, T.R.: Information Security Risk Analysis, 3rd edn. CRC Press, Boca Raton (2010)","edition":"3"},{"key":"1_CR26","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"94","DOI":"10.1007\/3-540-45732-1_11","volume-title":"Computer Safety, Reliability and Security","author":"R Fredriksen","year":"2002","unstructured":"Fredriksen, R., et al.: The CORAS framework for a model-based risk management process. In: Anderson, S., Felici, M., Bologna, S. (eds.) SAFECOMP 2002. LNCS, vol. 2434, pp. 94\u2013105. Springer, Heidelberg (2002). https:\/\/doi.org\/10.1007\/3-540-45732-1_11"},{"key":"1_CR27","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-12323-8","volume-title":"Model-Driven Risk Analysis - The CORAS Approach","author":"MS Lund","year":"2011","unstructured":"Lund, M.S., Solhaug, B., Stolen, K.: Model-Driven Risk Analysis - The CORAS Approach. Springer, Heidelberg (2011). https:\/\/doi.org\/10.1007\/978-3-642-12323-8"},{"unstructured":"The European Parliament and the Council of the European Union, Regulation (EU) 2016\/679. Off. J. Eur. Union (2016)","key":"1_CR28"},{"unstructured":"The European Parliament and the Council of the European Union, \u201cDirective (EU) 2016\/1148. Off. J. Eur. Union (2016)","key":"1_CR29"},{"doi-asserted-by":"crossref","unstructured":"Stine, K., Kissel, R., Barker, W.C., Fahlsing, J., Gulick, J.: Volume I: Guide for Mapping Types of Information and Information Systems to Security Categories. National Institute of Standards and Technology (2008)","key":"1_CR30","DOI":"10.6028\/NIST.SP.800-60v1r1"},{"unstructured":"Cloud Security Alliance (CSA): Cloud Controls Matrix, 9 January 2017. https:\/\/cloudsecurityalliance.org\/group\/cloud-controls-matrix\/","key":"1_CR31"},{"unstructured":"Software Engineering Institute: Architecture Conformance. https:\/\/www.sei.cmu.edu\/architecture\/research\/previousresearch\/conformance.cfm","key":"1_CR32"}],"container-title":["IFIP Advances in Information and Communication Technology","Trust Management XII"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-95276-5_1","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,2]],"date-time":"2022-07-02T00:03:20Z","timestamp":1656720200000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-95276-5_1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018]]},"ISBN":["9783319952758","9783319952765"],"references-count":32,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-95276-5_1","relation":{},"ISSN":["1868-4238","1868-422X"],"issn-type":[{"type":"print","value":"1868-4238"},{"type":"electronic","value":"1868-422X"}],"subject":[],"published":{"date-parts":[[2018]]},"assertion":[{"value":"30 June 2018","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"IFIPTM","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"IFIP International Conference on Trust Management","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Toronto, ON","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Canada","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2018","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"9 July 2018","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"13 July 2018","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"12","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"ifiptm2018","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/sites.uoit.ca\/ifiptm2018\/index.php","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}