{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,25]],"date-time":"2026-10-25T19:54:25Z","timestamp":1792958065196,"version":"4.5.0"},"publisher-location":"Berlin, Heidelberg","reference-count":31,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783540229421","type":"print"},{"value":"9783540301011","type":"electronic"}],"license":[{"start":{"date-parts":[[2004,1,1]],"date-time":"2004-01-01T00:00:00Z","timestamp":1072915200000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2004]]},"DOI":"10.1007\/978-3-540-30101-1_9","type":"book-chapter","created":{"date-parts":[[2010,2,25]],"date-time":"2010-02-25T19:05:42Z","timestamp":1267124742000},"page":"197-222","source":"Crossref","is-referenced-by-count":37,"title":["TulaFale: A Security Tool for Web Services"],"prefix":"10.1007","author":[{"given":"Karthikeyan","family":"Bhargavan","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"C\u00e9dric","family":"Fournet","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andrew D.","family":"Gordon","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Riccardo","family":"Pucella","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","reference":[{"key":"9_CR1","doi-asserted-by":"crossref","unstructured":"[AF01] Abadi, M., Fournet, C.: Mobile values, new names, and secure communication. In: 28th ACM Symposium on Principles of Programming Languages (POPL 2001), pp. 104\u2013115 (2001)","DOI":"10.1145\/360204.360213"},{"key":"9_CR2","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1006\/inco.1998.2740","volume":"148","author":"M. Abadi","year":"1999","unstructured":"[AG99] Abadi, M., Gordon, A.D.: A calculus for cryptographic protocols: The spi calculus. Information and Computation\u00a0148, 1\u201370 (1999)","journal-title":"Information and Computation"},{"key":"9_CR3","unstructured":"[BEK+00] Box, D., Ehnebuske, D., Kakivaya, G., Layman, A., Mendelsohn, N., Nielsen, H., Thatte, S., Winer, D.: Simple Object Access Protocol (SOAP) 1.1, W3C Note NOTE-SOAP-20000508\/ (2000), at http:\/\/www.w3.org\/TR\/2000\/"},{"key":"9_CR4","doi-asserted-by":"crossref","unstructured":"[BFG04a] Bhargavan, K., Fournet, C., Gordon, A.D.: A semantics for web services authentication. In: 31st ACM Symposium on Principles of Programming Languages (POPL 2004), pp. 198\u2013209 (2004)","DOI":"10.1145\/964001.964018"},{"key":"9_CR5","doi-asserted-by":"crossref","unstructured":"[BFG04b] Bhargavan, K., Fournet, C., Gordon, A.D.: Verifying policy-based security for web services (Submitted 2004)","DOI":"10.1145\/1030083.1030120"},{"key":"9_CR6","first-page":"82","volume-title":"14th IEEE Computer Security Foundations Workshop (CSFW-14)","author":"B. Blanchet","year":"2001","unstructured":"[Bla01] Blanchet, B.: An Efficient Cryptographic Protocol Verifier Based on Prolog Rules. In: 14th IEEE Computer Security Foundations Workshop (CSFW-14), pp. 82\u201396. IEEE Computer Society, Los Alamitos (2001)"},{"key":"9_CR7","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"342","DOI":"10.1007\/3-540-45789-5_25","volume-title":"Static Analysis","author":"B. Blanchet","year":"2002","unstructured":"[Bla02] Blanchet, B.: From Secrecy to Authenticity in Security Protocols. In: Hermenegildo, M.V., Puebla, G. (eds.) SAS 2002. LNCS, vol.\u00a02477, pp. 342\u2013359. Springer, Heidelberg (2002)"},{"key":"9_CR8","unstructured":"[Box01] Box, D.: A brief history of SOAP (2001), At http:\/\/webservices.xml.com\/pub\/a\/ws\/2001\/04\/04\/soap.html"},{"key":"9_CR9","unstructured":"[BS03] Bierman, G., Sewell, P.: Iota: a concurrent XML scripting language with application to Home Area Networks. Technical Report 557, University of Cambridge Computer Laboratory (2003)"},{"key":"9_CR10","unstructured":"[DHK+04] Davis, M., Hartman, B., Kaler, C., Nadalin, A., Schwarz, J.: WS\u2013I Security Scenarios, Working Group Draft Version 0.15 (February 2004), at http:\/\/www.ws-i.org\/Profiles\/BasicSecurity\/2004-02\/SecurityScenarios-0.15-WGD.pdf"},{"issue":"2","key":"9_CR11","doi-asserted-by":"publisher","first-page":"198","DOI":"10.1109\/TIT.1983.1056650","volume":"29","author":"D. Dolev","year":"1983","unstructured":"[DY83] Dolev, D., Yao, A.C.: On the security of public key protocols. IEEE Transactions on Information Theory\u00a0IT\u201329(2), 198\u2013208 (1983)","journal-title":"IEEE Transactions on Information Theory"},{"issue":"4","key":"9_CR12","doi-asserted-by":"publisher","first-page":"451","DOI":"10.3233\/JCS-2003-11402","volume":"11","author":"A.D. Gordon","year":"2003","unstructured":"[GJ03] Gordon, A.D., Jeffrey, A.: Authenticity by typing for security protocols. Journal of Computer Security\u00a011(4), 451\u2013521 (2003)","journal-title":"Journal of Computer Security"},{"key":"9_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"130","DOI":"10.1007\/978-3-540-24607-7_9","volume-title":"Database Programming Languages","author":"P. Gardner","year":"2003","unstructured":"[GM03] Gardner, P., Maffeis, S.: Modelling dynamic web data. In: Lausen, G., Suciu, D. (eds.) DBPL 2003. LNCS, vol.\u00a02921, pp. 130\u2013146. Springer, Heidelberg (2003)"},{"key":"9_CR14","doi-asserted-by":"crossref","unstructured":"[GP03] Gordon, A.D., Pucella, R.: Validating a web service security abstraction by typing. In: ACM Workshop on XML Security 2002, pp. 18\u201329 (2003)","DOI":"10.1145\/764796.764797"},{"key":"9_CR15","volume-title":"Writing secure code","author":"M. Howard","year":"2003","unstructured":"[HL03] Howard, M., LeBlanc, D.: Writing secure code, 2nd edn. Microsoft Press, Redmond (2003)","edition":"2"},{"key":"9_CR16","doi-asserted-by":"crossref","unstructured":"[IM02] IBM Corporation and Microsoft Corporation. Security in a web services world: A proposed architecture and roadmap (April 2002), At http:\/\/msdn.microsoft.com\/library\/en-us\/dnwssecur\/html\/securitywhitepaper.asp","DOI":"10.1016\/j.entcs.2004.02.022"},{"key":"9_CR17","doi-asserted-by":"crossref","unstructured":"[JLLV04] Johnson, J.E., Langworthy, D.E., Lamport, L., Vogt, F.H.: Formal specification of a web services protocol. In: 1st International Workshop on Web Services and Formal Methods (WS-FM 2004), University of Pisa (2004)","DOI":"10.1016\/j.entcs.2004.02.022"},{"key":"9_CR18","unstructured":"[KN+04] Kaler, C., Nadalin, A., et al.: Web Services Secure Conversation Language (WS-SecureConversation) (May 2004), Version 1.1., At http:\/\/msdn.microsoft.com\/ws\/2004\/04\/ws-secure-conversation\/"},{"key":"9_CR19","doi-asserted-by":"crossref","first-page":"31","DOI":"10.1109\/CSFW.1997.596782","volume-title":"Proceedings of 10th IEEE Computer Security Foundations Workshop","author":"G. Lowe","year":"1997","unstructured":"[Low97] Lowe, G.: A hierarchy of authentication specifications. In: Proceedings of 10th IEEE Computer Security Foundations Workshop, pp. 31\u201344. IEEE Computer Society Press, Los Alamitos (1997)"},{"key":"9_CR20","unstructured":"[Mic02] Microsoft Corporation. Web Services Enhancements for Microsoft.NET (December 2002), At http:\/\/msdn.microsoft.com\/webservices\/building\/wse\/default.aspx"},{"key":"9_CR21","volume-title":"Communicating and Mobile Systems: the \u03c0-Calculus","author":"R. Milner","year":"1999","unstructured":"[Mil99] Milner, R.: Communicating and Mobile Systems: the \u03c0-Calculus. Cambridge University Press, Cambridge (1999)"},{"key":"9_CR22","unstructured":"[NKHBM04] Nadalin, A., Kaler, C., Hallam-Baker, P., Monzillo, R.: OASIS Web Services Security: SOAP Message Security 1.0 (WS-Security (March 2004), At http:\/\/www.oasis-open.org\/committees\/download.php\/5941\/oasis-200401-wss-soap-message-security-1.0.pdf"},{"issue":"12","key":"9_CR23","doi-asserted-by":"publisher","first-page":"993","DOI":"10.1145\/359657.359659","volume":"21","author":"R.M. Needham","year":"1978","unstructured":"[NS78] Needham, R.M., Schroeder, M.D.: Using encryption for authentication in large networks of computers. Communications of the ACM\u00a021(12), 993\u2013999 (1978)","journal-title":"Communications of the ACM"},{"key":"9_CR24","unstructured":"[S+04] Schlimmer, J., et al.: A Proposal for UPnP 2.0 Device Architecture (May 2004), At http:\/\/msdn.microsoft.com\/library\/en-us\/dnglobspec\/html\/devprof.asp"},{"key":"9_CR25","unstructured":"[SMWC03] Shewchuk, J., Millet, S., Wilson, H., Cole, D.: Expanding the communications capabilities of web services with WSAddressing (2003), At http:\/\/msdn.microsoft.com\/library\/default.asp?url=\/library\/en-us\/dnwse\/html\/soapmail.asp"},{"key":"9_CR26","volume-title":"Hacking Web Applications Exposed","author":"J. Scambay","year":"2002","unstructured":"[SS02] Scambay, J., Shema, M.: Hacking Web Applications Exposed. McGraw-Hill\/Osborne, New York (2002)"},{"issue":"6","key":"9_CR27","doi-asserted-by":"publisher","first-page":"59","DOI":"10.1109\/MIC.2003.1250585","volume":"7","author":"W. Vogels","year":"2003","unstructured":"[Vog03] Vogels, W.: Web services are not distributed objects. IEEE Internet Computing\u00a07(6), 59\u201366 (2003)","journal-title":"IEEE Internet Computing"},{"key":"9_CR28","unstructured":"[W3C03] W3C. SOAP Version 1.2, W3C Recommendation (2003), at http:\/\/www.w3.org\/TR\/soap12"},{"key":"9_CR29","unstructured":"[Win98] Winer, D.: RPC over HTTP via XML (1998), At http:\/\/davenet.scripting.com\/1998\/02\/27\/rpcOverHttpViaXml"},{"key":"9_CR30","doi-asserted-by":"crossref","unstructured":"[Win99] Winer, D.: Dave\u2019s history of SOAP (1999), At http:\/\/www.xmlrpc.com\/discuss\/msgReader$555","DOI":"10.1109\/RISP.1993.287633"},{"key":"9_CR31","doi-asserted-by":"crossref","unstructured":"[WL93] Woo, T.Y.C., Lam, S.S.: A semantic model for authentication protocols. In: IEEE Computer Society Symposium on Research in Security and Privacy, pp. 178\u2013194 (1993)","DOI":"10.1109\/RISP.1993.287633"}],"container-title":["Lecture Notes in Computer Science","Formal Methods for Components and Objects"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-540-30101-1_9","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,2,18]],"date-time":"2025-02-18T21:57:59Z","timestamp":1739915879000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-540-30101-1_9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2004]]},"ISBN":["9783540229421","9783540301011"],"references-count":31,"URL":"https:\/\/doi.org\/10.1007\/978-3-540-30101-1_9","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2004]]}}}