{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,5,5]],"date-time":"2025-05-05T04:03:19Z","timestamp":1746417799333,"version":"3.40.4"},"publisher-location":"Berlin, Heidelberg","reference-count":14,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783662449653"},{"type":"electronic","value":"9783662449660"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2014]]},"DOI":"10.1007\/978-3-662-44966-0_12","type":"book-chapter","created":{"date-parts":[[2014,8,27]],"date-time":"2014-08-27T11:41:36Z","timestamp":1409139696000},"page":"120-135","source":"Crossref","is-referenced-by-count":1,"title":["Security Enhancement in Web Services by Detecting and Correcting Anomalies in XACML Policies at Design Level"],"prefix":"10.1007","author":[{"given":"M.","family":"Priyadharshini","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"J.","family":"Yowan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"R.","family":"Baskaran","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"12_CR1","unstructured":"Godik, S., Moses, T.: Extensible Access Control Markup Language (XACML). version 2.0, OASIS Standard (2005)"},{"key":"12_CR2","doi-asserted-by":"crossref","unstructured":"Hu, H., Ahn, G., Kulkarni, K.: Discovery and Resolution of Anomalies in Web Access Control Policies, p. 11 (2013)","DOI":"10.1109\/TDSC.2013.18"},{"key":"12_CR3","unstructured":"XACML. OASIS XACML committee website (2011), http:\/\/www.oasisopen.org\/committees\/xacml\/"},{"key":"12_CR4","doi-asserted-by":"crossref","unstructured":"Jajodia, S., Samarati, P., Subrahmanian, V.S.: A logical language for expressing authorizations. In: IEEE Symposium on Security and Privacy, Oakland, CA, pp. 31\u201342 (May 1997)","DOI":"10.1109\/SECPRI.1997.601312"},{"key":"12_CR5","doi-asserted-by":"publisher","first-page":"125","DOI":"10.1145\/1542207.1542228","volume-title":"Proceedings of the 14th ACM Symposium on Access Control Models and Technologies","author":"J. Jin","year":"2009","unstructured":"Jin, J., Ahn, G., Hu, H., Covington, M., Zhang, X.: Patient-centric authorization framework for sharing electronic health records. In: Proceedings of the 14th ACM Symposium on Access Control Models and Technologies, pp. 125\u2013134. ACM, New York (2009)"},{"key":"12_CR6","doi-asserted-by":"crossref","unstructured":"Li, N., Wang, Q., Qardaji, W., Bertino, E., Rao, P., Lobo, J., Lin, D.: Access control policy combining: theory meets practice. In: Proceedings of the 14th ACM Symposium on Access Control Models and Technologies, pp. 135\u2013144. ACM (2009)","DOI":"10.1145\/1542207.1542229"},{"key":"12_CR7","doi-asserted-by":"crossref","unstructured":"Lin, D., Rao, P., Bertino, E., Lobo, J.: An approach to evaluate policy similarity. In: Proceedings of the 12th ACM Symposium on Access Control Models and Technologies, pp. 1\u201310. ACM (2007)","DOI":"10.1145\/1266840.1266842"},{"issue":"4","key":"12_CR8","doi-asserted-by":"publisher","first-page":"253","DOI":"10.1007\/s10207-010-0106-1","volume":"9","author":"D. Lin","year":"2010","unstructured":"Lin, D., Rao, P., Bertino, E., Li, N., Lobo, J.: Exam: A Comprehensive Environment for the Analysis of Access Control Policies. International Journal of Information Security\u00a09(4), 253\u2013273 (2010)","journal-title":"International Journal of Information Security"},{"key":"12_CR9","doi-asserted-by":"crossref","unstructured":"Hu, H., Ahn, E.: Enabling Verification And Conformance Testing For Access Control Model. In: Proceedings of the 13th ACM Symposium on Access Control Models and Technologies, pp. 195\u2013204. ACM (2008)","DOI":"10.1145\/1377836.1377867"},{"key":"12_CR10","unstructured":"http:\/\/sunxacml.sourceforge.net"},{"key":"12_CR11","unstructured":"Liu, A., Chen, F., Hwang, J., Xie, T.: XEngine: A Fast and Scalable XACML Policy Evaluation Engine. ACM SIGMETRICS Performance Evaluation"},{"key":"12_CR12","first-page":"2","volume":"1","author":"L. Bauer","year":"2011","unstructured":"Bauer, L., Garriss, S., Reiter, M.: Detecting and Resolving Policy Misconfigurations In Access-Control Systems. ACM Transactions on Information and System Security (TISSEC)\u00a01, 2\u20135 (2011)","journal-title":"ACM Transactions on Information and System Security (TISSEC)"},{"key":"12_CR13","doi-asserted-by":"crossref","unstructured":"Bryans, J.: Reasoning about XACML policies using CSP. In: Proceedings of the 2005 workshop on Secure Web Services, p. 35. ACM (2005)","DOI":"10.1145\/1103022.1103028"},{"key":"12_CR14","doi-asserted-by":"crossref","unstructured":"Ahn, G., Hu, H., Lee, J., Meng, Y.: Representing and Reasoning about Web Access Control Policies. In: 34th Annual IEEE Computer Software and Applications Conference, pp. 137\u2013146. IEEE (2010)","DOI":"10.1109\/COMPSAC.2010.20"}],"container-title":["Communications in Computer and Information Science","Security in Computing and Communications"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-662-44966-0_12","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,5,4]],"date-time":"2025-05-04T10:50:47Z","timestamp":1746355847000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-662-44966-0_12"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014]]},"ISBN":["9783662449653","9783662449660"],"references-count":14,"URL":"https:\/\/doi.org\/10.1007\/978-3-662-44966-0_12","relation":{},"ISSN":["1865-0929","1865-0937"],"issn-type":[{"type":"print","value":"1865-0929"},{"type":"electronic","value":"1865-0937"}],"subject":[],"published":{"date-parts":[[2014]]}}}