{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,9]],"date-time":"2026-05-09T07:16:35Z","timestamp":1778310995769,"version":"3.51.4"},"publisher-location":"Berlin, Heidelberg","reference-count":27,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783540698609","type":"print"},{"value":"9783540698616","type":"electronic"}],"license":[{"start":{"date-parts":[[2007,1,1]],"date-time":"2007-01-01T00:00:00Z","timestamp":1167609600000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2007]]},"DOI":"10.1007\/978-3-540-69861-6_6","type":"book-chapter","created":{"date-parts":[[2007,6,11]],"date-time":"2007-06-11T12:17:51Z","timestamp":1181564271000},"page":"71-86","source":"Crossref","is-referenced-by-count":14,"title":["XML Security"],"prefix":"10.1007","author":[{"given":"Claudio A.","family":"Ardagna","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ernesto","family":"Damiani","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sabrina","family":"De Capitani di Vimercati","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pierangela","family":"Samarati","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"6_CR1","unstructured":"Apache XML Project. http:\/\/xml.apache.org\/."},{"key":"6_CR2","unstructured":"N. Bradley (2002). The XML Companion. Addison Wesley, 3rd edition."},{"key":"6_CR3","unstructured":"OASIS Security Services TC. http:\/\/www.oasis-open.org\/committees\/tc_home.php?wg_abbrev=security."},{"key":"6_CR4","unstructured":"E. Newcomer (2002). Understanding Web Services: XML, WSDL, SOAP, and UDDI. Addison Wesley."},{"key":"6_CR5","doi-asserted-by":"crossref","unstructured":"P. Samarati, S. De Capitani di Vimercati (2001). Access control: Policies, models, and mechanisms. In Focardi R, Gorrieri R, editors, Foundations of Security Analysis and Design, LNCS 2171. Springer-Verlag.","DOI":"10.1007\/3-540-45608-2_3"},{"key":"6_CR6","unstructured":"XML Encryption Syntax and Processing, W3C Recommendation (2002). http:\/\/www.w3.org\/TR\/xmlenc-core\/."},{"key":"6_CR7","unstructured":"XML-Signature Syntax and Processing, W3C Recommendation (2002). http:\/\/www.w3.org\/TR\/xmldsig-core\/."},{"key":"6_CR8","unstructured":"D. Box et al. (2000). Simple Object Access Protocol (SOAP) version 1.1. http:\/\/www.w3.org\/TR\/SOAP."},{"issue":"2","key":"6_CR9","doi-asserted-by":"publisher","first-page":"100","DOI":"10.1007\/s102070100009","volume":"1","author":"E. Damiani","year":"2002","unstructured":"E. Damiani, S. De Capitani di Vimercati, S. Paraboschi, P. Samarati (2002). Securing SOAP E-services. International Journal of Information Security (IJIS), 1(2):100\u2013115.","journal-title":"International Journal of Information Security (IJIS)"},{"key":"6_CR10","doi-asserted-by":"crossref","unstructured":"E. Damiani, S. De Capitani di Vimercati, P. Samarati (2002). Towards securing XML web services. In Proc. of the 2002 ACM Workshop on XML Security, Washington, DC, USA.","DOI":"10.1145\/764792.764806"},{"key":"6_CR11","unstructured":"OASIS eXtensible Access Control Markup Language TC. http:\/\/www.oasisopen.org\/committees\/tc_home.php?wg_abbrev=xacml."},{"key":"6_CR12","unstructured":"T. Moses (2005). eXtensible Access Control Markup Language (XACML) version 2.0. http:\/\/docs.oasis-open.org\/xacml\/2.0\/access_control-xacml-2.0-corespec-os.pdf."},{"key":"6_CR13","unstructured":"B. Galbraith, W. Hankinson, A. Hiotis, M. Janakiraman, D.V. Prasad, R. Trivedi, D. Whitney (2002). Professional Web Services Security. Wrox Press."},{"key":"6_CR14","unstructured":"A. Arsenault, S. Turner (2002). Internet X.509 Public Key Infrastructure: Roadmap. Internet Draft, Internet Engineering Task Force."},{"issue":"4","key":"6_CR15","doi-asserted-by":"publisher","first-page":"566","DOI":"10.1145\/950191.950196","volume":"6","author":"A. Essiari","year":"2003","unstructured":"A. Essiari, S. Mudumbai, M.R. Thompson (2003). Certificate-Based Authorization Policy in a PKI Environment. ACM Transactions on Information and System Security, 6(4):566\u2013588.","journal-title":"ACM Transactions on Information and System Security"},{"key":"6_CR16","unstructured":"W. Ford et al (2001). XML Key Management Specification (XKMS), W3C Note. http:\/\/www.w3.org\/TR\/xkms\/."},{"key":"6_CR17","doi-asserted-by":"crossref","unstructured":"E. Damiani, S. De Capitani di Vimercati, S. Paraboschi, P. Samarati (2000). Securing XML documents. In Proc. of the 2000 International Conference on Extending Database Technology (EDBT2000), Konstanz, Germany.","DOI":"10.1007\/3-540-46439-5_8"},{"issue":"2","key":"6_CR18","doi-asserted-by":"publisher","first-page":"169","DOI":"10.1145\/505586.505590","volume":"5","author":"E. Damiani","year":"2002","unstructured":"E. Damiani, S. De Capitani di Vimercati, S. Paraboschi, P. Samarati (2002). A fine-grained access control system for XML documents. ACM Transactions on Information and System Security (TISSEC), 5(2):169\u2013202.","journal-title":"ACM Transactions on Information and System Security (TISSEC)"},{"key":"6_CR19","volume-title":"Proc. of the ACM Workshop Secure Web Services","author":"A. Gabillon","year":"2004","unstructured":"A. Gabillon (2004). An authorization model for XML databases. In Proc. of the ACM Workshop Secure Web Services, George Mason University, Fairfax, VA, USA."},{"key":"6_CR20","unstructured":"A. Gabillon, E. Bruno (2001). Regulating access to XML documents. In Proc. of the Fifteenth Annual IFIP WG 11.3 Working Conference on Database Security, Niagara on the Lake, Ontario, Canada."},{"key":"6_CR21","doi-asserted-by":"crossref","unstructured":"C.A. Ardagna, E. Damiani, S. De Capitani di Vimercati, P. Samarati (2004). XML-based access control languages. Information Security Technical Report.","DOI":"10.1016\/S1363-4127(04)00030-5"},{"key":"6_CR22","unstructured":"S. Bajaj et al (2004). Web Services Policy Framework (WS-Policy). http:\/\/msdn.microsoft.com\/library\/default.asp?url=\/library\/en-us\/dnglobspec\/html\/ws-policy.asp."},{"key":"6_CR23","unstructured":"B. Atkinson, G. Della-Libera et all (2002). Web services security (WS-Security). http:\/\/msdn.microsoft.com\/library\/en-us\/dnglobspec\/html\/ws-security.asp."},{"key":"6_CR24","unstructured":"Object Management Group. The CORBA Security Service Specification. ftp:\/\/ftp.omg.org\/pub\/docs\/ptc."},{"key":"6_CR25","unstructured":"D. Box et al. (2003). Web Services Policy Assertions Language (WSPolicyAssertions) version 1.1. http:\/\/msdn.microsoft.com\/library\/en-us\/dnglobspec\/html\/ws-policyassertions.asp."},{"key":"6_CR26","unstructured":"G. Della-Libera et al (2005). Web Services Security Policy Language (WS-SecurityPolicy). http:\/\/msdn.microsoft.com\/library\/en-us\/dnglobspec\/html\/ws-securitypolicy.pdf."},{"key":"6_CR27","unstructured":"S. Bajaj et al. (2006). Web Services Policy Attachment (WS-PolicyAttachment) version 1.2. http:\/\/msdn.microsoft.com\/library\/en-us\/dnglobspec\/html\/wspolicyattachment.asp."}],"container-title":["Security, Privacy, and Trust in Modern Data Management"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-540-69861-6_6","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,5,18]],"date-time":"2019-05-18T18:17:50Z","timestamp":1558203470000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-540-69861-6_6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2007]]},"ISBN":["9783540698609","9783540698616"],"references-count":27,"URL":"https:\/\/doi.org\/10.1007\/978-3-540-69861-6_6","relation":{},"subject":[],"published":{"date-parts":[[2007]]}}}