{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,8]],"date-time":"2024-09-08T11:45:59Z","timestamp":1725795959382},"publisher-location":"Berlin, Heidelberg","reference-count":23,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783662438121"},{"type":"electronic","value":"9783662438138"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2014]]},"DOI":"10.1007\/978-3-662-43813-8_8","type":"book-chapter","created":{"date-parts":[[2014,6,23]],"date-time":"2014-06-23T12:45:13Z","timestamp":1403527513000},"page":"109-124","source":"Crossref","is-referenced-by-count":1,"title":["Improving the Exchange of Lessons Learned in Security Incident Reports: Case Studies in the Privacy of Electronic Patient Records"],"prefix":"10.1007","author":[{"given":"Ying","family":"He","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chris","family":"Johnson","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yu","family":"Lyu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Arniyati","family":"Ahmad","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"8_CR1","doi-asserted-by":"crossref","unstructured":"Symantec: Internal security threat report 2011 trends, vol.\u00a017 (2012)","DOI":"10.1016\/S1361-3723(12)70021-0"},{"key":"8_CR2","unstructured":"Symantec: Internet security threat report 2013, vol. 18. (2013)"},{"key":"8_CR3","doi-asserted-by":"crossref","unstructured":"He, Y., Johnson, C.: Generic security cases for information system security in healthcare systems. In: Proceedings of the 7th IET International Conference on System Safety, Incorporating the Cyber Security Conference, pp. 1\u20136. IET (2012)","DOI":"10.1049\/cp.2012.1507"},{"key":"8_CR4","doi-asserted-by":"crossref","unstructured":"Hadgkiss, J.: Computer security incident response teams: Exploring the incident learning capability (2004)","DOI":"10.1016\/S1361-3723(04)00133-2"},{"key":"8_CR5","unstructured":"Hadgkiss, J.: Computer security incident handling, step-by-step (1997)"},{"key":"8_CR6","unstructured":"Administration, U.V.A.: Administrative investigation loss of va information va medical center birmingham, al. Volume Report No. 07-01083-157 (2007)"},{"key":"8_CR7","doi-asserted-by":"crossref","unstructured":"He, Y., Johnson, C., Renaud, K., Lu, Y., Jebriel, S.: An empirical study on the use of the generic security template for structuring the lessons from information security incidents. In: Proceedings of the 6th International Conference on Computer Science and Information Technology, pp. 178\u2013188. IEEE Press (2014)","DOI":"10.1109\/CSIT.2014.6805998"},{"key":"8_CR8","doi-asserted-by":"crossref","unstructured":"Kelly, T.P.: Arguing safety-a systematic approach to safety case management (1998)","DOI":"10.1007\/3-540-48249-0_2"},{"key":"8_CR9","unstructured":"Dacey, R.F.: Federal Information System Controls Audit Manual (FISCAM). DIANE Publishing (2010)"},{"key":"8_CR10","doi-asserted-by":"crossref","unstructured":"He, Y., Johnson, C., Lu, Y., Lin, Y.: Improving the information security management: An industrial study in the privacy of electronic patient records. In: Proceedings of the 27th IEEE International Symposium on Computer-Based Medical Systems (CBMS 2014). IEEE Press (2014)","DOI":"10.1109\/CBMS.2014.121"},{"key":"8_CR11","unstructured":"Commissioner, E.: Directive 2009\/140\/ec of the european parliament and of the council of 25 november 2009 (2009)"},{"key":"8_CR12","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"328","DOI":"10.1007\/3-540-60218-6_24","volume-title":"CONCUR \u201995 Concurrency Theory","author":"D. Craigen","year":"1995","unstructured":"Craigen, D.: Formal methods technology transfer: Impediments and innovation. In: Lee, I., Smolka, S.A. (eds.) CONCUR 1995. LNCS, vol.\u00a0962, pp. 328\u2013332. Springer, Heidelberg (1995)"},{"key":"8_CR13","unstructured":"Hinchey, M.G.: Confessions of a formal methodist. In: SCS, 17\u201320 (2002)"},{"key":"8_CR14","unstructured":"Finney, K., Fedorec, A.: An empirical study of specification readability. In: Teaching and Learning Formal Methods. Academic Press, New York (1996)"},{"issue":"2","key":"8_CR15","doi-asserted-by":"publisher","first-page":"158","DOI":"10.1109\/32.485225","volume":"22","author":"K. Finney","year":"1996","unstructured":"Finney, K.: Mathematical notation in formal specification: Too difficult for the masses? IEEE Transactions on Software Engineering\u00a022(2), 158\u2013159 (1996)","journal-title":"IEEE Transactions on Software Engineering"},{"key":"8_CR16","unstructured":"Carew, D., Exton, C., Buckley, J.: An empirical investigation of the comprehensibility of requirements specifications. In: International Symposium on Empirical Software Engineering, p. 10. IEEE (2005)"},{"issue":"1","key":"8_CR17","doi-asserted-by":"publisher","first-page":"17","DOI":"10.1016\/S0957-4174(00)00046-4","volume":"20","author":"R. Weber","year":"2001","unstructured":"Weber, R., Aha, D.W., Becerra-Fernandez, I.: Intelligent lessons learned systems. Expert Systems with Applications\u00a020(1), 17\u201334 (2001)","journal-title":"Expert Systems with Applications"},{"issue":"1","key":"8_CR18","doi-asserted-by":"publisher","first-page":"61","DOI":"10.1016\/S0164-1212(02)00159-0","volume":"70","author":"E. Folmer","year":"2004","unstructured":"Folmer, E., Bosch, J.: Architecting for usability: a survey. Journal of Systems and Software\u00a070(1), 61\u201378 (2004)","journal-title":"Journal of Systems and Software"},{"issue":"3","key":"8_CR19","doi-asserted-by":"publisher","first-page":"139","DOI":"10.1016\/S0166-4115(08)62386-9","volume":"1","author":"S.G. Hart","year":"1988","unstructured":"Hart, S.G., Staveland, L.E.: Development of nasa-tlx (task load index): Results of empirical and theoretical research. Human Mental Workload\u00a01(3), 139\u2013183 (1988)","journal-title":"Human Mental Workload"},{"key":"8_CR20","doi-asserted-by":"crossref","unstructured":"Landis, J.R., Koch, G.G.: The measurement of observer agreement for categorical data. Biometrics, 159\u2013174 (1977)","DOI":"10.2307\/2529310"},{"key":"8_CR21","doi-asserted-by":"crossref","unstructured":"Shoval, P., Shiran, S.: Entity-relationship and object-oriented data modeling\u2014an experimental comparison of design quality, vol.\u00a021, pp. 297\u2013315. Elsevier (1997)","DOI":"10.1016\/S0169-023X(97)88935-5"},{"key":"8_CR22","doi-asserted-by":"crossref","unstructured":"Glezer, C., Last, M., Nachmany, E., Shoval, P.: Quality and comprehension of uml interaction diagrams-an experimental comparison, vol. 47, pp.675\u2013692 (2005)","DOI":"10.1016\/j.infsof.2005.01.003"},{"key":"8_CR23","unstructured":"Razali, R., Snook, C., Poppleton, M., Garratt, P., Walters, R.: Usability assessment of a uml-based formal modelling method. In: 19th Annual Psychology of Programming Workshop (PPIG 2007), pp. 56\u201371. Citeseer (2007)"}],"container-title":["IFIP Advances in Information and Communication Technology","Trust Management VIII"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-662-43813-8_8","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,7,14]],"date-time":"2023-07-14T14:01:33Z","timestamp":1689343293000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-662-43813-8_8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014]]},"ISBN":["9783662438121","9783662438138"],"references-count":23,"URL":"https:\/\/doi.org\/10.1007\/978-3-662-43813-8_8","relation":{},"ISSN":["1868-4238","1868-422X"],"issn-type":[{"type":"print","value":"1868-4238"},{"type":"electronic","value":"1868-422X"}],"subject":[],"published":{"date-parts":[[2014]]}}}