{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,26]],"date-time":"2025-11-26T16:37:35Z","timestamp":1764175055069,"version":"3.40.5"},"reference-count":32,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2021,7,21]],"date-time":"2021-07-21T00:00:00Z","timestamp":1626825600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,7,21]],"date-time":"2021-07-21T00:00:00Z","timestamp":1626825600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int J Softw Tools Technol Transfer"],"published-print":{"date-parts":[[2022,4]]},"DOI":"10.1007\/s10009-021-00636-w","type":"journal-article","created":{"date-parts":[[2021,7,21]],"date-time":"2021-07-21T12:03:35Z","timestamp":1626869015000},"page":"183-203","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["Multi-level privacy analysis of business processes: the Pleak toolset"],"prefix":"10.1007","volume":"24","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9247-7476","authenticated-orcid":false,"given":"Marlon","family":"Dumas","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Luciano","family":"Garc\u00eda-Ba\u00f1uelos","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Joosep","family":"J\u00e4\u00e4ger","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9030-8142","authenticated-orcid":false,"given":"Peeter","family":"Laud","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1829-4794","authenticated-orcid":false,"given":"Raimundas","family":"Matulevi\u010dius","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alisa","family":"Pankova","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Martin","family":"Pettai","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pille","family":"Pullonen-Raudvere","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Aivo","family":"Toots","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Reedik","family":"Tuuling","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Maksym","family":"Yerokhin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2021,7,21]]},"reference":[{"key":"636_CR1","doi-asserted-by":"crossref","unstructured":"Accorsi, R., Lehmann, A.: Automatic information flow analysis of business process models. In: 10th International Conference on Business Process Management (BPM), pp. 172\u2013187. Springer (2012)","DOI":"10.1007\/978-3-642-32885-5_13"},{"key":"636_CR2","doi-asserted-by":"publisher","first-page":"244","DOI":"10.1016\/j.is.2013.12.006","volume":"47","author":"R Accorsi","year":"2015","unstructured":"Accorsi, R., Lehmann, A., Lohmann, N.: Information leak detection in business process models: theory, application, and tool support. Inf. Syst. 47, 244\u2013257 (2015)","journal-title":"Inf. Syst."},{"key":"636_CR3","doi-asserted-by":"crossref","unstructured":"Alvim, M.S., Chatzikokolakis, K., Palamidessi, C., Smith, G.: Measuring information leakage using generalized gain functions. In: Chong, S. (ed.) 25th IEEE Computer Security Foundations Symposium, CSF 2012, Cambridge, MA, USA, 25\u201327 June 2012, pp. 265\u2013279. IEEE Computer Society (2012). https:\/\/doi.org\/10.1109\/CSF.2012.26","DOI":"10.1109\/CSF.2012.26"},{"key":"636_CR4","doi-asserted-by":"publisher","first-page":"304","DOI":"10.1016\/j.is.2015.09.009","volume":"56","author":"A Armas-Cervantes","year":"2016","unstructured":"Armas-Cervantes, A., Baldan, P., Dumas, M., Garc\u00eda-Ba\u00f1uelos, L.: Diagnosing behavioral differences between business process models: an approach based on event structures. Inf. Syst. 56, 304\u2013325 (2016). https:\/\/doi.org\/10.1016\/j.is.2015.09.009","journal-title":"Inf. Syst."},{"key":"636_CR5","doi-asserted-by":"crossref","unstructured":"Ayed, G., Ghernaouti-Helie, S.: Processes view modeling of identity-related privacy business interoperability: considering user-supremacy federated identity technical model and identity contract negotiation. In: Proceedings of the ASONAM (2012)","DOI":"10.1109\/ASONAM.2012.162"},{"key":"636_CR6","doi-asserted-by":"crossref","unstructured":"Belluccini, S., Nicola, R.D., Dumas, M., Pullonen, P., Re, B., , Tiezzi, F.: Verification of privacy-enhanced collaborations. In: FormaliSE@ICSE 2020: 8th International Conference on Formal Methods in Software Engineering, Seoul, Republic of Korea, 13 July 2020, pp. 141\u2013152 (2020)","DOI":"10.1145\/3372020.3391553"},{"key":"636_CR7","unstructured":"Bhowmick, A., Duchi, J., Freudiger, J., Kapoor, G., Rogers, R.: Protection against reconstruction and its applications in private federated learning (2019). arXiv:1812.00984"},{"key":"636_CR8","unstructured":"Cachin, C.: Entropy measures and unconditional security in cryptography. Ph.D. thesis, ETH Zurich (1997). http:\/\/www.d-nb.info\/950686247"},{"key":"636_CR9","doi-asserted-by":"crossref","unstructured":"Colesky, M., Hoepman, J., Hillen, C.: A critical analysis of privacy design strategies. In: IEEE Security and Privacy Workshops (SP), pp. 33\u201340. IEEE (2016)","DOI":"10.1109\/SPW.2016.23"},{"issue":"12","key":"636_CR10","doi-asserted-by":"publisher","first-page":"1281","DOI":"10.1016\/j.infsof.2008.02.006","volume":"50","author":"RM Dijkman","year":"2008","unstructured":"Dijkman, R.M., Dumas, M., Ouyang, C.: Semantics and analysis of business process models in BPMN. Inf. Softw. Technol. 50(12), 1281\u20131294 (2008). https:\/\/doi.org\/10.1016\/j.infsof.2008.02.006","journal-title":"Inf. Softw. Technol."},{"key":"636_CR11","doi-asserted-by":"crossref","unstructured":"Dumas, M., Garc\u00eda-Ba\u00f1uelos, L., Laud, P.: Differential privacy analysis of data processing workflows. In: Proceedings of the Third International Workshop GraMSec 2016, pp. 62\u201379 (2016)","DOI":"10.1007\/978-3-319-46263-9_4"},{"key":"636_CR12","doi-asserted-by":"publisher","unstructured":"Dumas, M., Garc\u00eda-Ba\u00f1uelos, L., Laud, P.: Disclosure analysis of SQL workflows. In: Cybenko, G., Pym, D.J.,\u00a0Fila, B. (eds.) 5th International Workshop on Graphical Models for Security, held in conjunction with the Federated Logic Conference (FLoC) 2018, GraMSec@FLoC 2018, Oxford, UK, July 8, 2018, Revised Selected Papers, Lecture Notes in Computer Science, vol. 11086, pp. 51\u201370. Springer (2018). https:\/\/doi.org\/10.1007\/978-3-030-15465-3_4","DOI":"10.1007\/978-3-030-15465-3_4"},{"key":"636_CR13","doi-asserted-by":"crossref","unstructured":"Dwork, C.: Differential privacy. In:\u00a0Bugliesi, M.,\u00a0Preneel, B.,\u00a0Sassone, V.,\u00a0Wegener, I. (eds.) Automata, Languages and Programming, 33rd International Colloquium, ICALP 2006, Venice, Italy, 10\u201314 July 2006, Proceedings, Part II, Lecture Notes in Computer Science, vol. 4052, pp. 1\u201312. Springer (2006). https:\/\/doi.org\/10.1007\/11787006_1","DOI":"10.1007\/11787006_1"},{"key":"636_CR14","doi-asserted-by":"crossref","unstructured":"Dwork, C., McSherry, F., Nissim, K., Smith, A.D.: Calibrating noise to sensitivity in private data analysis. In:\u00a0Halevi, S.,\u00a0Rabin, T. (eds.) Theory of Cryptography, Third Theory of Cryptography Conference, TCC 2006, New York, NY, USA, 4\u20137 March 2006, Proceedings, Lecture Notes in Computer Science, vol. 3876, pp. 265\u2013284. Springer (2006). https:\/\/doi.org\/10.1007\/11681878","DOI":"10.1007\/11681878_14"},{"issue":"3\u20134","key":"636_CR15","doi-asserted-by":"publisher","first-page":"211","DOI":"10.1561\/0400000042","volume":"9","author":"C Dwork","year":"2014","unstructured":"Dwork, C., Roth, A.: The algorithmic foundations of differential privacy. Found. Trends Theor. Comput. Sci. 9(3\u20134), 211\u2013407 (2014). https:\/\/doi.org\/10.1561\/0400000042","journal-title":"Found. Trends Theor. Comput. Sci."},{"key":"636_CR16","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-77426-6","volume-title":"Unfoldings: A Partial-Order Approach to Model Checking. Monographs in Theoretical Computer Science. An EATCS Series","author":"J Esparza","year":"2008","unstructured":"Esparza, J., Heljanko, K.: Unfoldings: A Partial-Order Approach to Model Checking. Monographs in Theoretical Computer Science. An EATCS Series. Springer, Berlin (2008). https:\/\/doi.org\/10.1007\/978-3-540-77426-6"},{"issue":"3","key":"636_CR17","doi-asserted-by":"publisher","first-page":"285","DOI":"10.1023\/A:1014746130920","volume":"20","author":"J Esparza","year":"2002","unstructured":"Esparza, J., R\u00f6mer, S., Vogler, W.: An improvement of Macmillan\u2019s unfolding algorithm. Form. Methods Syst. Des. 20(3), 285\u2013310 (2002). https:\/\/doi.org\/10.1023\/A:1014746130920","journal-title":"Form. Methods Syst. Des."},{"key":"636_CR18","doi-asserted-by":"crossref","unstructured":"Groote, J.F., Keiren, J.J.A., Luttik, B., de\u00a0Vink, E.P., Willemse, T.A.C.: Modelling and analysing software in mcrl2. In:\u00a0Arbab, F.,\u00a0Jongmans, S. (eds.) Formal Aspects of Component Software: 16th International Conference, FACS 2019, Amsterdam, The Netherlands, 23\u201325 October 2019, Proceedings, Lecture Notes in Computer Science, vol. 12018, pp. 25\u201348. Springer (2019). https:\/\/doi.org\/10.1007\/978-3-030-40914-2_2","DOI":"10.1007\/978-3-030-40914-2_2"},{"key":"636_CR19","doi-asserted-by":"publisher","DOI":"10.1002\/9781118348239","volume-title":"Statistical Disclosure Control","author":"A Hundepool","year":"2012","unstructured":"Hundepool, A., Domingo-Ferrer, J., Franconi, L., Giessing, S., Nordholt, E.S., Spicer, K., de Wolf, P.: Statistical Disclosure Control. Wiley, Hoboken (2012)"},{"issue":"1","key":"636_CR20","doi-asserted-by":"publisher","first-page":"3:1","DOI":"10.1145\/2514689","volume":"39","author":"D Kifer","year":"2014","unstructured":"Kifer, D., Machanavajjhala, A.: Pufferfish: a framework for mathematical privacy definitions. ACM Trans. Database Syst. 39(1), 3:1\u20133:36 (2014). https:\/\/doi.org\/10.1145\/2514689","journal-title":"ACM Trans. Database Syst."},{"key":"636_CR21","doi-asserted-by":"crossref","unstructured":"Ladha, W., Mehandjiev, N., Sampaio, P.: Modelling of privacy-aware business processes in bpmn to protect personal data. In: Proceedings of the 29th Annual ACM Symposium on Applied Computing, pp. 1399\u20131405 (2014)","DOI":"10.1145\/2554850.2555014"},{"key":"636_CR22","doi-asserted-by":"crossref","unstructured":"Laud, P., Pankova, A.: Interpreting epsilon of differential privacy in terms of advantage in guessing or approximating sensitive attributes. CoRR arXiv:1911.12777 (2020)","DOI":"10.2478\/popets-2020-0023"},{"key":"636_CR23","doi-asserted-by":"crossref","unstructured":"Laud, P., Pankova, A., Pettai, M.: A framework of metrics for differential privacy from local sensitivity. In: Proceedings on Privacy Enhancing Technologies (PoPETs) (2020). To appear","DOI":"10.2478\/popets-2020-0023"},{"key":"636_CR24","doi-asserted-by":"crossref","unstructured":"Lee, J., Clifton, C.: How much is enough? Choosing $$\\epsilon $$ for differential privacy. In: International Conference on Information Security (ISC), pp. 325\u2013340. Springer (2011)","DOI":"10.1007\/978-3-642-24861-0_22"},{"key":"636_CR25","doi-asserted-by":"crossref","unstructured":"Pullonen, P., Matulevi\u010dius, R., Bogdanov, D.: PE-BPMN: privacy-enhanced business process model and notation. In: Proceedings of the 15th International Conference on Business Process Management (BPM), pp. 40\u201356. Springer (2017)","DOI":"10.1007\/978-3-319-65000-5_3"},{"issue":"6","key":"636_CR26","doi-asserted-by":"publisher","first-page":"3235","DOI":"10.1007\/s10270-019-00718-z","volume":"18","author":"P Pullonen","year":"2019","unstructured":"Pullonen, P., Tom, J., Matulevicius, R., Toots, A.: Privacy-enhanced BPMN: enabling data privacy analysis in business processes models. Softw. Syst. Model. 18(6), 3235\u20133264 (2019)","journal-title":"Softw. Syst. Model."},{"key":"636_CR27","doi-asserted-by":"crossref","unstructured":"Ramadan, G., Str\u00fcber, D., Salnitri, M., J\u00fcrjens, J., Riediger, V.S.S.: A semi-automated BPMN-based framework for detecting conflicts between security, data-minimization, and fairness requirements. Software and Systems Modeling (2020)","DOI":"10.1007\/s10270-020-00781-x"},{"key":"636_CR28","doi-asserted-by":"crossref","unstructured":"Reisig, W., Rozenberg, G.: Informal introduction to petri nets. In:\u00a0Reisig, W.,\u00a0Rozenberg, G. (eds.) Lectures on Petri Nets I: Basic Models, Advances in Petri Nets, the volumes are based on the Advanced Course on Petri Nets, held in Dagstuhl, September 1996, Lecture Notes in Computer Science, vol. 1491, pp. 1\u201311. Springer (1996). https:\/\/doi.org\/10.1007\/3-540-65306-6_13","DOI":"10.1007\/3-540-65306-6_13"},{"key":"636_CR29","doi-asserted-by":"crossref","unstructured":"Toots, A., Tuuling, R., Yerokhin, M., Dumas, M., Garc\u00eda-Ba\u00f1uelos, L., Laud, P., Matulevicius, R., Pankova, A., Pettai, M., Pullonen, P., Tom, J.: Business process privacy analysis in pleak. In: Proceedings of the 22nd International Conference on Fundamental Approaches to Software Engineering (FASE). Prague, Czechia (2019)","DOI":"10.1007\/978-3-030-16722-6_18"},{"issue":"5","key":"636_CR30","doi-asserted-by":"publisher","first-page":"354","DOI":"10.1007\/s00287-019-01204-y","volume":"42","author":"A Toots","year":"2019","unstructured":"Toots, A., Tuuling, R., Yerokhin, M., Dumas, M., Garc\u00eda-Ba\u00f1uelos, L., Laud, P., Matulevicius, R., Pankova, A., Pettai, M., Pullonen, P., Tom, J.: Business process privacy analysis in pleak-(extended abstract). Informatik Spektrum 42(5), 354\u2013355 (2019)","journal-title":"Informatik Spektrum"},{"issue":"1","key":"636_CR31","doi-asserted-by":"publisher","first-page":"21","DOI":"10.1142\/S0218126698000043","volume":"8","author":"WMP van der Aalst","year":"1998","unstructured":"van der Aalst, W.M.P.: The application of petri nets to workflow management. J. Circuits Syst. Comput. 8(1), 21\u201366 (1998). https:\/\/doi.org\/10.1142\/S0218126698000043","journal-title":"J. Circuits Syst. Comput."},{"issue":"3","key":"636_CR32","doi-asserted-by":"publisher","first-page":"57:1","DOI":"10.1145\/3168389","volume":"51","author":"I Wagner","year":"2018","unstructured":"Wagner, I., Eckhoff, D.: Technical privacy metrics: a systematic survey. ACM Comput. Surv. 51(3), 57:1\u201357:38 (2018). https:\/\/doi.org\/10.1145\/3168389","journal-title":"ACM Comput. Surv."}],"container-title":["International Journal on Software Tools for Technology Transfer"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10009-021-00636-w.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10009-021-00636-w\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10009-021-00636-w.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,1]],"date-time":"2022-04-01T14:13:35Z","timestamp":1648822415000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10009-021-00636-w"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,7,21]]},"references-count":32,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2022,4]]}},"alternative-id":["636"],"URL":"https:\/\/doi.org\/10.1007\/s10009-021-00636-w","relation":{},"ISSN":["1433-2779","1433-2787"],"issn-type":[{"type":"print","value":"1433-2779"},{"type":"electronic","value":"1433-2787"}],"subject":[],"published":{"date-parts":[[2021,7,21]]},"assertion":[{"value":"28 June 2021","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"21 July 2021","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}