{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2022,4,15]],"date-time":"2022-04-15T09:12:16Z","timestamp":1650013936253},"reference-count":41,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2014,8,23]],"date-time":"2014-08-23T00:00:00Z","timestamp":1408752000000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2015,8]]},"DOI":"10.1007\/s10207-014-0258-5","type":"journal-article","created":{"date-parts":[[2014,8,22]],"date-time":"2014-08-22T06:55:42Z","timestamp":1408690542000},"page":"319-334","update-policy":"http:\/\/dx.doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":8,"title":["Towards safer information sharing in the cloud"],"prefix":"10.1007","volume":"14","author":[{"given":"Marco","family":"Casassa-Mont","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ilaria","family":"Matteucci","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Marinella","family":"Petrocchi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Marco Luca","family":"Sbodio","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2014,8,23]]},"reference":[{"key":"258_CR1","unstructured":"EU PRIME Project: Privacy Identity Management for Europe. http:\/\/www.prime-project.eu\/ , last checked 14 Feb 2014"},{"key":"258_CR2","unstructured":"EU PrimeLife Project: Bringing sustainable privacy and identity management to future networks and services. http:\/\/primelife.ercim.eu\/ , last checked 14 Feb 2014"},{"key":"258_CR3","unstructured":"EU Consequence Project: Context-aware data-centric information sharing. http:\/\/www.consequence-project.eu\/ , last checked 14 Feb 2014"},{"key":"258_CR4","unstructured":"UK EnCoRe Project: The EnCoRe technical architecture D2.3. goo.gl\/uYHgJH, last checked 14 Feb 2014"},{"issue":"9","key":"258_CR5","doi-asserted-by":"crossref","first-page":"60","DOI":"10.1109\/MC.2011.225","volume":"44","author":"S Pearson","year":"2011","unstructured":"Pearson, S., Casassa-Mont, M.: Sticky policies: an approach for managing privacy across multiple parties. IEEE Comput. 44(9), 60\u201368 (2011)","journal-title":"IEEE Comput."},{"key":"258_CR6","doi-asserted-by":"crossref","unstructured":"Matteucci, I., Petrocchi, M., Sbodio, M.L.: CNL4DSA: a controlled natural language for data sharing agreements. In: Proceedings of SAC, ACM, pp. 616\u2013620 (2010)","DOI":"10.1145\/1774088.1774218"},{"key":"258_CR7","unstructured":"Clavel, M., et al. (eds.): All About Maude: A High-Performance Logical Framework, How to Specify, Program and Verify Systems in Rewriting Logic, LNCS, vol. 4350. Springer, Berlin (2007)"},{"key":"258_CR8","doi-asserted-by":"crossref","unstructured":"Larsen, K.G., Thomsen, B.: A modal process logic. In: Proceedings of LICS, pp. 203\u2013210 (1988)","DOI":"10.1109\/LICS.1988.5119"},{"key":"258_CR9","unstructured":"UK EnCoRe Project: Ensuring consent and revocation. http:\/\/www.encore-project.info , last checked 14 Feb 2014"},{"key":"258_CR10","unstructured":"OASIS: eXtensible Access Control Markup Language (XACML) Version 3.0 (2010)"},{"key":"258_CR11","unstructured":"EU A4Cloud Project: Accountability for the cloud. http:\/\/www.a4cloud.eu\/ , last checked 19 Feb 2014"},{"key":"258_CR12","unstructured":"EU CoCo-Cloud Project: Confidential and compliant cloud. http:\/\/www.coco-cloud.eu\/ , last checked 14 Feb 2014"},{"key":"258_CR13","doi-asserted-by":"crossref","unstructured":"Robinson, N., et al.: The cloud: understanding the security, privacy and trust challenges. In: Proceedings of Technical Report, TR-933-EC, RAND Corporation (2011)","DOI":"10.2139\/ssrn.2141970"},{"key":"258_CR14","unstructured":"Directive 95\/46\/EC. http:\/\/goo.gl\/lho6dh , last checked 14 Feb 2014"},{"issue":"4","key":"258_CR15","doi-asserted-by":"crossref","first-page":"211","DOI":"10.1093\/idpl\/ipr018","volume":"1","author":"WK Hon","year":"2011","unstructured":"Hon, W.K., Millard, C., Walden, I.: The problem of personal data in cloud computing: what information is regulated? The cloud of unknowing. Int. Data Privacy Law 1(4), 211\u2013228 (2011)","journal-title":"Int. Data Privacy Law"},{"issue":"3","key":"258_CR16","doi-asserted-by":"crossref","first-page":"187","DOI":"10.1093\/ijlit\/ear005","volume":"19","author":"S Bradshaw","year":"2011","unstructured":"Bradshaw, S., Millard, C., Walden, I.: Contracts for clouds: comparison and analysis of the terms and conditions of cloud computing services. Int. J. Law Inf. Technol. 19(3), 187\u2013223 (2011)","journal-title":"Int. J. Law Inf. Technol."},{"key":"258_CR17","unstructured":"Balboni, P.: Data protection and data security issues related to cloud computing in the EU. In: Proceedings of Information Security Solutions Europe Conference (2010)"},{"key":"258_CR18","first-page":"815","volume":"28","author":"F Gilbert","year":"2012","unstructured":"Gilbert, F.: European Data Protection 2.0: New compliance requirements in sight, what the proposed EU data protection regulation means for US companies. Comput. High Technol. Law J. 28, 815 (2012)","journal-title":"Comput. High Technol. Law J."},{"key":"258_CR19","doi-asserted-by":"crossref","unstructured":"Karat, J., et al.: Designing natural language and structured entry methods for privacy policy authoring. In: Proceedings of INTERACT, pp. 671\u2013684 (2005)","DOI":"10.1007\/11555261_54"},{"key":"258_CR20","doi-asserted-by":"crossref","unstructured":"Brodie, C., et al.: An empirical study of natural language parsing of privacy policy rules using the SPARCLE policy workbench. In: Proceedings of SOUPS, ACM, pp. 8\u201319 (2006)","DOI":"10.1145\/1143120.1143123"},{"key":"258_CR21","doi-asserted-by":"crossref","unstructured":"Reeder, R.W., Karat, C.M., Karat, J., Brodie, C.: Usability challenges in security and privacy policy-authoring interfaces. In: Proceedings of INTERACT, Springer, Berlin, pp. 141\u2013155 (2007)","DOI":"10.1007\/978-3-540-74800-7_11"},{"key":"258_CR22","doi-asserted-by":"crossref","unstructured":"Brodie, C., George, D., Karat, C.-M., Karat, J., Lobo, J., Beigi, M., Wang, X., Calo, S., Verma, D., Schaeffer-Filho, A., Lupu, E., Sloman, M.: The coalition policy management portal for policy authoring, verification, and deployment. Policies for distributed systems and networks, POLICY, IEEE Workshop. pp. 247\u2013249 (2008). doi: 10.1109\/POLICY.2008.25","DOI":"10.1109\/POLICY.2008.25"},{"key":"258_CR23","doi-asserted-by":"crossref","unstructured":"Johnson, M., Karat, J., Karat, C.M., Grueneberg, K.: Optimizing a policy authoring framework for security and privacy policies. In: Proceedings of SOUPS, ACM, pp. 8:1\u20138:9 (2010)","DOI":"10.1145\/1837110.1837121"},{"key":"258_CR24","unstructured":"Axiomatics.com: Policy administrator point. In: Proceedings of http:\/\/goo.gl\/A5OEHW , last checked 17 Jan 2014"},{"key":"258_CR25","doi-asserted-by":"crossref","unstructured":"Wishart, R., et al.: Collaborative privacy policy authoring in a social networking context. In: Proceedings of POLICY, IEEE, pp. 1\u20138 (2010)","DOI":"10.1109\/POLICY.2010.13"},{"key":"258_CR26","doi-asserted-by":"crossref","unstructured":"Conti, R., Matteucci, I., Mori, P., Petrocchi, M.: An expertise-driven authoring tool of privacy policies for e-Health. In: Proceedings of Computer-Based Medical Systems, IEEE (2014, to appear)","DOI":"10.1109\/CBMS.2014.86"},{"key":"258_CR27","doi-asserted-by":"crossref","unstructured":"Matteucci, I., Petrocchi, M., Sbodio, M.L., Wiegand, L.: A design phase for data sharing agreements. In: Proceedings of DPM\/SETOP, Springer, Berlin, pp. 25\u201341 (2011)","DOI":"10.1007\/978-3-642-28879-1_3"},{"key":"258_CR28","doi-asserted-by":"crossref","unstructured":"Matteucci, I., Mori, P., Petrocchi, M., Wiegand, L.: Controlled data sharing in e-health. In: Proceedings of STAST, pp. 17\u201323 (2011)","DOI":"10.1109\/STAST.2011.6059251"},{"key":"258_CR29","doi-asserted-by":"crossref","unstructured":"Martinelli, F., Matteucci, I., Petrocchi, M., Wiegand, L.: A formal support for collaborative data sharing. In: Proceedings of CD-ARES, pp. 547\u2013561 (2012)","DOI":"10.1007\/978-3-642-32498-7_42"},{"key":"258_CR30","doi-asserted-by":"crossref","unstructured":"Bicarregui, J., et al.: Towards modelling obligations in event-B. In: Proceedings of ABZ, pp. 181\u2013194 (2008)","DOI":"10.1007\/978-3-540-87603-8_15"},{"key":"258_CR31","doi-asserted-by":"crossref","unstructured":"Arenas, A., et al.: An event-B approach to data sharing agreements. In: Proceedings of Integrated Formal Methods, Springer, Berlin, pp. 28\u201342 (2010)","DOI":"10.1007\/978-3-642-16265-7_4"},{"key":"258_CR32","doi-asserted-by":"crossref","unstructured":"Ni, Q., et al.: Privacy-aware role-based access control. In: Proceedings of ACM Transactions on Information and System Security, vol. 13 (2010). doi: 10.1145\/1805974.1805980","DOI":"10.1145\/1805974.1805980"},{"key":"258_CR33","unstructured":"IBM: Policy Design Tool. goo.gl\/5zJXJH, last checked 14 Feb 2014"},{"key":"258_CR34","doi-asserted-by":"crossref","unstructured":"De Nicola, R., Ferrari, G.L., Pugliese, R.: Programming access control: the KLAIM experience. In: Proceedings of CONCUR, pp. 48\u201365 (2000)","DOI":"10.1007\/3-540-44618-4_5"},{"key":"258_CR35","doi-asserted-by":"crossref","unstructured":"Hansen, R.R., Nielson, F., Nielson, H.R., Probst, C.W.: Static validation of licence conformance policies. In: Proceedings of ARES, pp. 1104\u20131111 (2008)","DOI":"10.1109\/ARES.2008.162"},{"key":"258_CR36","doi-asserted-by":"crossref","unstructured":"Al-Shaer, E.S., Hamed, H.H.: Firewall policy advisor for anomaly discovery and rule editing. In: Proceedings of IFIP\/IEEE Integrated Network Management, pp. 17\u201330 (2003)","DOI":"10.1007\/978-0-387-35674-7_2"},{"key":"258_CR37","unstructured":"Hall-May, M., Kelly, T.P.: Towards Conflict Detection and Resolution of Safety Policies. In: Proceedings of 24th International System Safety Conference. System Safety Society, Albuquerque (2006)"},{"issue":"2\u20133","key":"258_CR38","doi-asserted-by":"crossref","first-page":"116","DOI":"10.1016\/j.cose.2010.09.001","volume":"30","author":"J Jin","year":"2011","unstructured":"Jin, J., Ahn, G.J., Hu, H., Covington, M.J., Zhang, X.: Patient-centric authorization framework for electronic healthcare services. Comput. Secur. 30(2\u20133), 116\u2013127 (2011)","journal-title":"Comput. Secur."},{"key":"258_CR39","doi-asserted-by":"crossref","unstructured":"Mori, P., Matteucci, I., Petrocchi, M.: Prioritised execution of privacy policies. In: Proceedings of DPM, Springer, Berlin (2012)","DOI":"10.1007\/978-3-642-35890-6_10"},{"key":"258_CR40","doi-asserted-by":"crossref","unstructured":"Lunardelli, A., Matteucci, I., Mori, P., Petrocchi, M.: A prototype for solving conflicts in XACML-based e-Health policies. In: Proceedings of Computer-Based Medical Systems, IEEE (2013)","DOI":"10.1109\/CBMS.2013.6627838"},{"key":"258_CR41","unstructured":"The Consequence Team: D2.2: Infrastructure for data sharing agreements. http:\/\/www.consequence-project.eu\/Deliverables_Y3\/D2.2 (2011)"}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-014-0258-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10207-014-0258-5\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-014-0258-5","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,15]],"date-time":"2022-04-15T08:39:33Z","timestamp":1650011973000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10207-014-0258-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,8,23]]},"references-count":41,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2015,8]]}},"alternative-id":["258"],"URL":"https:\/\/doi.org\/10.1007\/s10207-014-0258-5","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2014,8,23]]}}}