{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,11,12]],"date-time":"2026-11-12T04:05:16Z","timestamp":1794456316845,"version":"4.9.1"},"publisher-location":"Berlin, Heidelberg","reference-count":34,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783642410291","type":"print"},{"value":"9783642410307","type":"electronic"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2013]]},"DOI":"10.1007\/978-3-642-41030-7_31","type":"book-chapter","created":{"date-parts":[[2013,9,20]],"date-time":"2013-09-20T06:32:41Z","timestamp":1379658761000},"page":"434-450","source":"Crossref","is-referenced-by-count":3,"title":["Machine-Readable Privacy Certificates for Services"],"prefix":"10.1007","author":[{"given":"Marco","family":"Anisetti","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Claudio A.","family":"Ardagna","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Michele","family":"Bezzi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ernesto","family":"Damiani","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Antonino","family":"Sabetta","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","reference":[{"issue":"1","key":"31_CR1","doi-asserted-by":"crossref","first-page":"123","DOI":"10.3233\/JCS-2010-0367","volume":"18","author":"C. Ardagna","year":"2010","unstructured":"Ardagna, C., Camenisch, J., Kohlweiss, M., Leenes, R., Neven, G., Priem, B., Samarati, P., Sommer, D., Verdicchio, M.: Exploiting cryptography for privacy-enhanced access control: A result of the prime project. Journal of Computer Security (JCS)\u00a018(1), 123\u2013160 (2010)","journal-title":"Journal of Computer Security (JCS)"},{"issue":"4","key":"31_CR2","doi-asserted-by":"crossref","first-page":"369","DOI":"10.3233\/JCS-2008-0328","volume":"16","author":"C. Ardagna","year":"2008","unstructured":"Ardagna, C., Cremonini, M., De Capitani di Vimercati, S., Samarati, P.: A privacy-aware access control system. Journal of Computer Security (JCS)\u00a016(4), 369\u2013392 (2008)","journal-title":"Journal of Computer Security (JCS)"},{"key":"31_CR3","doi-asserted-by":"crossref","unstructured":"Ardagna, C., De Capitani di Vimercati, S., Foresti, S., Paraboschi, S., Samarati, P.: Minimizing disclosure of private information in credential-based interactions: A graph-based approach. In: Proc. of the 2nd IEEE International Conference on Information Privacy, Security, Risk and Trust (PASSAT), Minneapolis, Minnesota, USA (August 2010)","DOI":"10.1109\/SocialCom.2010.115"},{"key":"31_CR4","doi-asserted-by":"crossref","unstructured":"Ashley, P., Hada, S., Karjoth, G., Schunter, M.: E-P3P privacy policies and privacy authorization. In: Proc. of the ACM workshop on Privacy in the Electronic Society (WPES), Washington, DC, USA (November 2002)","DOI":"10.1145\/644527.644538"},{"key":"31_CR5","unstructured":"Moses, T.: eXtensible Access Control Markup Language (XACML) Version 2.0 (February 2005), http:\/\/docs.oasis-open.org\/xacml\/2.0\/access_control-xacml-2.0-core-spec-os.pdf"},{"key":"31_CR6","unstructured":"W3C: Platform for privacy preferences (P3P) project (April 2002), http:\/\/www.w3c.org\/TR\/P3P\/"},{"issue":"9","key":"31_CR7","doi-asserted-by":"publisher","first-page":"610","DOI":"10.1007\/s11623-008-0145-1","volume":"32","author":"K. Bock","year":"2008","unstructured":"Bock, K.: Europrise trust certification. Datenschutz und Datensicherheit - DuD\u00a032(9), 610\u2013614 (2008)","journal-title":"Datenschutz und Datensicherheit - DuD"},{"key":"31_CR8","unstructured":"Trust-E: website, http:\/\/www.truste.com"},{"key":"31_CR9","doi-asserted-by":"crossref","unstructured":"Ali, M., Sabetta, A., Bezzi, M.: A marketplace for business software with certified security properties. In: Proc. of Cyber Security and Privacy EU Forum (2013)","DOI":"10.1007\/978-3-642-41205-9_9"},{"key":"31_CR10","unstructured":"Assert4Soa consortium: Assert4Soa project website, http:\/\/www.assert4soa.eu"},{"key":"31_CR11","doi-asserted-by":"crossref","unstructured":"Herrmann, D.: Using the Common Criteria for IT security evaluation. Auerbach Publications (2002)","DOI":"10.1201\/9781420031423"},{"key":"31_CR12","doi-asserted-by":"crossref","unstructured":"Bezzi, M., Sabetta, A., Spanoudakis, G.: An architecture for certification-aware service discovery. In: Proc. of the 1st International Workshop on Securing Services on the Cloud (IWSSC), pp. 14\u201321. IEEE (2011)","DOI":"10.1109\/IWSSCloud.2011.6049020"},{"key":"31_CR13","doi-asserted-by":"crossref","unstructured":"Kaluvuri, S.P., Koshutanski, H., Di Cerbo, F., Ma\u00f1a, A.: Security assurance of services through digital security certificates. In: Proc. of the 20th IEEE International Conference on Web Services (ICWS), pp. 539\u2013546. IEEE (2013)","DOI":"10.1109\/ICWS.2013.78"},{"key":"31_CR14","doi-asserted-by":"crossref","unstructured":"Rost, M., Bock, K.: Privacy by Design and the Protection Goals - English translation of Privacy By Design und die Neuen Schutzziele - Grunds\u00e4tze, Ziele und Anforderungen. DuD 35(1), 30\u201335 (2011), https:\/\/www.european-privacy-seal.eu\/results\/articles\/BockRost-PbD-DPG-en.pdf (2010)","DOI":"10.1007\/s11623-011-0009-y"},{"key":"31_CR15","series-title":"IFIP AICT","doi-asserted-by":"publisher","first-page":"14","DOI":"10.1007\/978-3-642-31668-5_2","volume-title":"Privacy and Identity Management for Life","author":"M. Hansen","year":"2012","unstructured":"Hansen, M.: Top 10 mistakes in system design from a privacy perspective and privacy protection goals. In: Camenisch, J., Crispo, B., Fischer-H\u00fcbner, S., Leenes, R., Russello, G. (eds.) Privacy and Identity Management for Life. IFIP AICT, vol.\u00a0375, pp. 14\u201331. Springer, Heidelberg (2012)"},{"issue":"4","key":"31_CR16","doi-asserted-by":"publisher","first-page":"18","DOI":"10.1109\/MTS.2012.2225459","volume":"31","author":"A. Cavoukian","year":"2012","unstructured":"Cavoukian, A.: Privacy by design. IEEE Technology and Society Magazine\u00a031(4), 18\u201319 (2012)","journal-title":"IEEE Technology and Society Magazine"},{"issue":"2","key":"31_CR17","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/2460383.2460384","volume":"7","author":"M. Anisetti","year":"2013","unstructured":"Anisetti, M., Ardagna, C.A., Damiani, E., Saonara, F.: A test-based security certification scheme for web services. ACM Trans. Web 7(2), 5:1\u20135:41 (2013)","journal-title":"ACM Trans. Web"},{"key":"31_CR18","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-77324-7","volume-title":"Open source systems security certification","author":"E. Damiani","year":"2009","unstructured":"Damiani, E., Ardagna, C., Ioini, N.E.: Open source systems security certification. Springer, New York (2009)"},{"key":"31_CR19","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"40","DOI":"10.1007\/11940197_3","volume-title":"Formal Approaches to Software Testing and Runtime Verification","author":"L. Frantzen","year":"2006","unstructured":"Frantzen, L., Tretmans, J., Willemse, T.A.C.: A symbolic framework for model-based testing. In: Havelund, K., N\u00fa\u00f1ez, M., Ro\u015fu, G., Wolff, B. (eds.) FATES 2006 and RV 2006. LNCS, vol.\u00a04262, pp. 40\u201354. Springer, Heidelberg (2006)"},{"key":"31_CR20","unstructured":"Microsoft: Understanding Retention Tags and Retention Policies (December 2012), http:\/\/technet.microsoft.com\/en-us\/library\/dd297955%28v=exchg.141%29.aspx"},{"key":"31_CR21","unstructured":"IBM: IBM, Enterprise Privacy Authorization Language (EPAL (1.2) (November 2003), http:\/\/www.w3.org\/Submission\/2003\/SUBM-EPAL-20031110"},{"key":"31_CR22","unstructured":"Ardagna, C., Bussard, L., di Vimercati, S.D.C., Neven, G., Pedrini, E., Paraboschi, S., Preiss, F., Samarati, P., Trabelsi, S., Verdicchio, M.: Primelife policy language. In: Proc. of the W3C Workshop on Access Control Application Scenarios, W3C (2009)"},{"key":"31_CR23","doi-asserted-by":"crossref","unstructured":"Chandramouli, R., Blackburn, M.: Automated testing of security functions using a combined model and interface-driven approach. In: Proc. of the 37th Annual Hawaii International Conference on System Sciences (HICSS), Big Island, HI, USA (January 2004)","DOI":"10.1109\/HICSS.2004.1265703"},{"issue":"1","key":"31_CR24","doi-asserted-by":"publisher","first-page":"93","DOI":"10.1016\/j.entcs.2008.11.008","volume":"220","author":"J. J\u00fcrjens","year":"2008","unstructured":"J\u00fcrjens, J.: Model-based security testing using UMLsec: A case study. Electronic Notes in Theoretical Computer Science\u00a0220(1), 93\u2013104 (2008)","journal-title":"Electronic Notes in Theoretical Computer Science"},{"key":"31_CR25","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"229","DOI":"10.1007\/978-3-642-04468-7_19","volume-title":"Computer Safety, Reliability, and Security","author":"M. Zulkernine","year":"2009","unstructured":"Zulkernine, M., Raihan, M.F., Uddin, M.G.: Towards model-based automatic testing of attack scenarios. In: Buth, B., Rabe, G., Seyfarth, T. (eds.) SAFECOMP 2009. LNCS, vol.\u00a05775, pp. 229\u2013242. Springer, Heidelberg (2009)"},{"key":"31_CR26","unstructured":"Bozkurt, M., Harman, M., Hassoun, Y.: Testing web services: A survey. Technical Report TR-10-01. Department of Computer Science, King\u2019s College London (January 2010)"},{"key":"31_CR27","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"78","DOI":"10.1007\/978-3-540-95888-8_4","volume-title":"Software Engineering","author":"G. Canfora","year":"2009","unstructured":"Canfora, G., di Penta, M.: Service-oriented architectures testing: A survey. In: De Lucia, A., Ferrucci, F. (eds.) ISSSE 2006-2008. LNCS, vol.\u00a05413, pp. 78\u2013105. Springer, Heidelberg (2009)"},{"key":"31_CR28","doi-asserted-by":"crossref","unstructured":"Heckel, R., Lohmann, M.: Towards contract-based testing of web services. In: Proc. of the International Workshop on Test and Analysis of Component Based Systems (TACoS), Barcelona, Spain (March 2004)","DOI":"10.1016\/j.entcs.2004.02.073"},{"key":"31_CR29","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"33","DOI":"10.1007\/978-3-642-21768-5_4","volume-title":"Tests and Proofs","author":"L. Bentakouk","year":"2011","unstructured":"Bentakouk, L., Poizat, P., Za\u00efdi, F.: Checking the behavioral conformance of web services with symbolic testing and an SMT solver. In: Gogolla, M., Wolff, B. (eds.) TAP 2011. LNCS, vol.\u00a06706, pp. 33\u201350. Springer, Heidelberg (2011)"},{"key":"31_CR30","doi-asserted-by":"crossref","unstructured":"Endo, A., Simao, A.: Model-based testing of service-oriented applications via state models. In: Proc. of the 8th IEEE International Conference of Service Computing (SCC), Washington, DC, USA (July 2011)","DOI":"10.1109\/SCC.2011.77"},{"key":"31_CR31","doi-asserted-by":"publisher","first-page":"494","DOI":"10.1109\/ICSEA.2010.84","volume-title":"Proc. of the 2010 Fifth International Conference on Software Engineering Advances, ICSEA 2010","author":"S. Salva","year":"2010","unstructured":"Salva, S., Laurencot, P., Rabhi, I.: An approach dedicated for web service security testing. In: Proc. of the 2010 Fifth International Conference on Software Engineering Advances, ICSEA 2010, pp. 494\u2013500. IEEE Computer Society, Washington, DC (2010)"},{"key":"31_CR32","doi-asserted-by":"crossref","unstructured":"Le Traon, Y., Mouelhi, T., Baudry, B.: Testing security policies: going beyond functional testing. In: Proc. of the International Symposium on Software Reliability Engineering, ISSRE, Sweden (2007)","DOI":"10.1109\/ISSRE.2007.27"},{"key":"31_CR33","doi-asserted-by":"crossref","unstructured":"Martin, E.: Automated test generation for access control policies. In: Companion to the 21st ACM SIGPLAN Symposium on Object-Oriented Programming Systems, Languages, and Applications, OOPSLA 2006, pp. 752\u2013753 (2006)","DOI":"10.1145\/1176617.1176708"},{"key":"31_CR34","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"537","DOI":"10.1007\/978-3-540-87875-9_38","volume-title":"Model Driven Engineering Languages and Systems","author":"T. Mouelhi","year":"2008","unstructured":"Mouelhi, T., Fleurey, F., Baudry, B., Le Traon, Y.: A model-based framework for security policy specification, deployment and testing. In: Czarnecki, K., Ober, I., Bruel, J.-M., Uhl, A., V\u00f6lter, M. (eds.) MoDELS 2008. LNCS, vol.\u00a05301, pp. 537\u2013552. Springer, Heidelberg (2008)"}],"container-title":["Lecture Notes in Computer Science","On the Move to Meaningful Internet Systems: OTM 2013 Conferences"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-41030-7_31","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,3,6]],"date-time":"2022-03-06T09:54:09Z","timestamp":1646560449000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-41030-7_31"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013]]},"ISBN":["9783642410291","9783642410307"],"references-count":34,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-41030-7_31","relation":{"is-part-of":[{"id-type":"doi","id":"https:\/\/doi.org\/10.1007\/978-3-642-41030-7","asserted-by":"object"}]},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2013]]}}}