{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,27]],"date-time":"2025-03-27T01:06:47Z","timestamp":1743037607928,"version":"3.40.3"},"publisher-location":"Berlin, Heidelberg","reference-count":36,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642353611"},{"type":"electronic","value":"9783642353628"}],"license":[{"start":{"date-parts":[[2012,1,1]],"date-time":"2012-01-01T00:00:00Z","timestamp":1325376000000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2012]]},"DOI":"10.1007\/978-3-642-35362-8_29","type":"book-chapter","created":{"date-parts":[[2012,11,29]],"date-time":"2012-11-29T22:55:47Z","timestamp":1354229747000},"page":"377-399","source":"Crossref","is-referenced-by-count":0,"title":["Policy-Based Vulnerability Assessment for Virtual Organisations"],"prefix":"10.1007","author":[{"given":"Jan","family":"Muhammad","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Thomas","family":"Doherty","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sardar","family":"Hussain","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Richard","family":"Sinnott","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"unstructured":"JISC Virtual Research Environments programme, http:\/\/www.jisc.ac.uk\/whatwedo\/programmes\/vre1.aspx","key":"29_CR1"},{"issue":"2","key":"29_CR2","doi-asserted-by":"publisher","first-page":"277","DOI":"10.1016\/S0167-739X(02)00153-X","volume":"19","author":"D.W. Chadwick","year":"2003","unstructured":"Chadwick, D.W., Otenko, A.: The PERMIS X. 509 role based privilege management infrastructure. Future Generation Computer Systems\u00a019(2), 277\u2013289 (2003)","journal-title":"Future Generation Computer Systems"},{"key":"29_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"33","DOI":"10.1007\/978-3-540-24689-3_5","volume-title":"Grid Computing","author":"R. Alfieri","year":"2004","unstructured":"Alfieri, R., Cecchini, R.L., Ciaschini, V., dell\u2019Agnello, L., Frohner, A., Gianoli, A., L\u00f5rentey, K., Spataro, F.: VOMS, an Authorization System for Virtual Organizations. In: Fern\u00e1ndez Rivera, F., Bubak, M., G\u00f3mez Tato, A., Doallo, R. (eds.) Across Grids 2003. LNCS, vol.\u00a02970, pp. 33\u201340. Springer, Heidelberg (2004)"},{"key":"29_CR4","doi-asserted-by":"publisher","first-page":"25","DOI":"10.1145\/968559.968563","volume-title":"Proceedings of the 2003 ACM Workshop on XML Security","author":"M. Lorch","year":"2003","unstructured":"Lorch, M., et al.: First experiences using XACML for access control in distributed systems. In: Proceedings of the 2003 ACM Workshop on XML Security, pp. 25\u201337. ACM, Fairfax (2003)"},{"unstructured":"Anderson, A.: SAML 2.0 profile of XACML (2004)","key":"29_CR5"},{"unstructured":"Internet2. Internet Shibboleth Technology (2009), http:\/\/shibboleth.internet2.edu\/","key":"29_CR6"},{"doi-asserted-by":"crossref","unstructured":"Sinnott, R.O., et al.: Advanced security for virtual organizations: The pros and cons of centralized vs decentralized security models, pp. 106\u2013113 (2008)","key":"29_CR7","DOI":"10.1109\/CCGRID.2008.67"},{"unstructured":"Power, R.: 2001 CSI\/FBI Computer Crime and Security Survey. Computer Security Institute (2001)","key":"29_CR8"},{"unstructured":"Grid Site Monitoring (2005)","key":"29_CR9"},{"unstructured":"Grid Security Monitoring (2008)","key":"29_CR10"},{"unstructured":"Muncaster, P.: Google hack-attack code hits the web (2010), http:\/\/www.securecomputing.net.au\/News\/164937,google-hack-attack-code-hits-the-web.aspx (June 2012)","key":"29_CR11"},{"unstructured":"Kurtz, G.: Aurora Exploit in Google Attack Now Public (2010), http:\/\/blogs.mcafee.com\/corporate\/cto\/dealing-with-operation-aurora-related-attacks (June 2012)","key":"29_CR12"},{"unstructured":"Prince, K.: Malicious Software Defense: Have We Moved Beyond Anti-Virus and Spyware Protection Software? Perimeter eSecurity (2007)","key":"29_CR13"},{"unstructured":"Shostack, A.: Quantifying Patch Management. Secure Business Quarterly III(2) (2003)","key":"29_CR14"},{"unstructured":"Stirparo, P., Shibli, M.A., Muftic, S.: Vulnerability analysis and patches management using secure mobile agents. In: 11th International Conference on Advanced Communication Technology, ICACT 2009 (2009)","key":"29_CR15"},{"unstructured":"Microsoft SMS, http:\/\/www.microsoft.com\/smserver\/default.mspx","key":"29_CR16"},{"unstructured":"An Overview of Vulnerability Scanners (2008), http:\/\/www.infosec.gov.hk\/english\/technical\/articles.html","key":"29_CR17"},{"unstructured":"Microsoft software update services, http:\/\/technet.microsoft.com\/enus\/wsus\/bb466190","key":"29_CR18"},{"key":"29_CR19","volume-title":"Proceedings of the 18th USENIX Conference on System Administration","author":"Sufatrio","year":"2004","unstructured":"Sufatrio, Yap, R.H.C., Zhong, L.: A Machine-Oriented Vulnerability Database for Automated Vulnerability Detection and Processing. In: Proceedings of the 18th USENIX Conference on System Administration. USENIX Association, Berkeley (2004)"},{"unstructured":"Keizer, G.: Trojan horse poses as windows xp update (2004), http:\/\/www.informationweek.com\/trojan-horse-poses-as-windows-xp-update\/17300290?queryText=Trojan%20horse%20poses%20as%20windows%20xp%20update","key":"29_CR20"},{"unstructured":"Berlind, D.: Why Windows Update desperately needs an update (2003), http:\/\/www.zdnet.com\/news\/why-windows-update-desperately-needs-an-update\/299080","key":"29_CR21"},{"unstructured":"Sinnott, R.O.: Grid Security: Practices, Middleware and Outlook. National e-Science Centre (2005)","key":"29_CR22"},{"unstructured":"Pakiti: A Patching Status Monitoring Tool, http:\/\/pakiti.sourceforge.net\/","key":"29_CR23"},{"unstructured":"EGEE Operational Security Coordination Team (OSCT), http:\/\/osct.web.cern.ch\/osct\/","key":"29_CR24"},{"unstructured":"Yum-Package Manager, http:\/\/yum.baseurl.org\/","key":"29_CR25"},{"unstructured":"apt-get, http:\/\/www.apt-get.org\/","key":"29_CR26"},{"unstructured":"Roberge, M.W., Bergeron, T.: Robert, Introduction to OVAL: A new language to determine the presence of software vulnerabilities (2003)","key":"29_CR27"},{"unstructured":"Common vulnerabilities and exposures list, CVE (2011), http:\/\/cve.mitre.org\/cve\/","key":"29_CR28"},{"unstructured":"Curl, http:\/\/curl.haxx.se","key":"29_CR29"},{"unstructured":"CFengine Web site, http:\/\/www.cfengine.org","key":"29_CR30"},{"unstructured":"Matsushita, M.: Telecommunication Management Network. In: NTT Review, Geneva (1991)","key":"29_CR31"},{"unstructured":"Problem Informant\/Killer Tool (PIKT), pikt.org\/pikt\/software.html (cited March 2012)","key":"29_CR32"},{"key":"29_CR33","volume-title":"Proceedings of the 14th Conference on USENIX Security Symposium","author":"X. Ou","year":"2005","unstructured":"Ou, X., Govindavajhala, S., Appel, A.W.: MulVAL: a logic-based network security analyzer. In: Proceedings of the 14th Conference on USENIX Security Symposium, vol.\u00a014. USENIX Association, Baltimore (2005)"},{"key":"29_CR34","first-page":"1","volume-title":"Proceedings of the 15th ACM Mardi Gras Conference: From Lightweight Mash-Ups to Lambda Grids: Understanding the Spectrum of Distributed Computing Requirements, Applications, Tools, Infrastructures, Interoperability, and the Incremental Adoption of Key Capa","author":"O. Ajayi","year":"2008","unstructured":"Ajayi, O., Sinnott, R., Stell, A.: Dynamic trust negotiation for flexible e-health collaborations. In: Proceedings of the 15th ACM Mardi Gras Conference: From Lightweight Mash-Ups to Lambda Grids: Understanding the Spectrum of Distributed Computing Requirements, Applications, Tools, Infrastructures, Interoperability, and the Incremental Adoption of Key Capabilities, pp. 1\u20137. ACM, Baton Rouge (2008)"},{"unstructured":"Ajayi, O.: Dynamic Trust Negotiation for Decentralised e-Health Collaborations, University of Glasgow (2009)","key":"29_CR35"},{"key":"29_CR36","volume-title":"Proceedings of the 4th International Symposium on Information, Computer, and Communications Security","author":"S. Fenz","year":"2009","unstructured":"Fenz, S., Ekelhart, A.: Formalizing information security knowledge. In: Proceedings of the 4th International Symposium on Information, Computer, and Communications Security. ACM, New York (2009)"}],"container-title":["Lecture Notes in Computer Science","Cyberspace Safety and Security"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-35362-8_29","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,12,12]],"date-time":"2019-12-12T20:05:07Z","timestamp":1576181107000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-35362-8_29"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012]]},"ISBN":["9783642353611","9783642353628"],"references-count":36,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-35362-8_29","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2012]]}}}