{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,2]],"date-time":"2026-08-02T10:38:58Z","timestamp":1785667138993,"version":"3.56.0"},"reference-count":68,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2019,9,24]],"date-time":"2019-09-24T00:00:00Z","timestamp":1569283200000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2019,9,24]],"date-time":"2019-09-24T00:00:00Z","timestamp":1569283200000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"funder":[{"DOI":"10.13039\/100010663","name":"H2020 European Research Council","doi-asserted-by":"publisher","award":["825328"],"award-info":[{"award-number":["825328"]}],"id":[{"id":"10.13039\/100010663","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2020,8]]},"DOI":"10.1007\/s10207-019-00468-5","type":"journal-article","created":{"date-parts":[[2019,9,24]],"date-time":"2019-09-24T08:03:08Z","timestamp":1569312188000},"page":"479-498","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["PDGuard: an architecture for the control and secure processing of personal data"],"prefix":"10.1007","volume":"19","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5061-9018","authenticated-orcid":false,"given":"Dimitris","family":"Mitropoulos","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Thodoris","family":"Sotiropoulos","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nikos","family":"Koutsovasilis","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Diomidis","family":"Spinellis","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2019,9,24]]},"reference":[{"key":"468_CR1","unstructured":"ABC4Trust EU project: Official website. \nhttps:\/\/www.abc4trust.eu\/index.php\n\n. Accessed 9 July 2019"},{"key":"468_CR2","volume-title":"Security Engineering: A Guide to Building Dependable Distributed Systems","author":"RJ Anderson","year":"2001","unstructured":"Anderson, R.J.: Security Engineering: A Guide to Building Dependable Distributed Systems, 1st edn. Wiley, New York, NY (2001)","edition":"1"},{"issue":"1","key":"468_CR3","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/1127345.1127346","volume":"9","author":"G Ateniese","year":"2006","unstructured":"Ateniese, G., Kevin, F., Green, M., Hohenberger, S.: Improved proxy re-encryption schemes with applications to secure distributed storage. ACM Trans. Inf. Syst. Secur. 9(1), 1\u201330 (2006)","journal-title":"ACM Trans. Inf. Syst. Secur."},{"key":"468_CR4","doi-asserted-by":"crossref","unstructured":"Barford, P., Canadi, I., Krushevskaja, D., Ma, Q., Muthukrishnan, S.: Adscape: harvesting and analyzing online display ads. In: Proceedings of the 23rd International Conference on World Wide Web, pp. 597\u2013608. ACM, New York, NY, USA (2014)","DOI":"10.1145\/2566486.2567992"},{"key":"468_CR5","unstructured":"Barnum, S., Gegick, M.: Design principles. \nhttps:\/\/buildsecurityin.us-cert.gov\/articles\/knowledge\/principles\/design-principles\n\n 19 Sept (2005)"},{"key":"468_CR6","doi-asserted-by":"crossref","unstructured":"Bell, J., Kaiser, G.: Phosphor: illuminating dynamic data flow in commodity JVMS. In: Proceedings of the 2014 ACM International Conference on Object Oriented Programming Systems Languages and Applications, OOPSLA \u201914, pp. 83\u2013101. ACM, New York, NY, USA (2014)","DOI":"10.1145\/2660193.2660212"},{"key":"468_CR7","volume-title":"Thinking Security: Stopping Next Year\u2019s Hackers","author":"SM Bellovin","year":"2016","unstructured":"Bellovin, S.M.: Thinking Security: Stopping Next Year\u2019s Hackers. Addison-Wesley, Boston (2016)"},{"key":"468_CR8","unstructured":"Berger, S., C\u00e1ceres, R., Goldman, K.A., Perez, R., Sailer, R., van Doorn, L.: VTPM: virtualizing the trusted platform module. In: Proceedings of the 15th Conference on USENIX Security Symposium\u2014Volume 15, USENIX-SS\u201906, Berkeley, CA, USA. USENIX Association (2006)"},{"key":"468_CR9","doi-asserted-by":"publisher","first-page":"12","DOI":"10.1109\/69.895801","volume":"12","author":"A Brodsky","year":"2000","unstructured":"Brodsky, A., Farkas, C., Jajodia, S.: Secure databases: constraints, inference channels, and monitoring disclosures. IEEE Trans. Knowl. Data Eng. 12, 12 (2000)","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"468_CR10","doi-asserted-by":"crossref","unstructured":"Camenisch, J., Lehmann, A., Neven, G., Rial, A.: Privacy-preserving auditing for attribute-based credentials. In: 19th European Symposium on Research in Computer Security\u2014Volume 8713, ESORICS 2014, pp. 109\u2013127. Springer, New York, NY, USA (2014)","DOI":"10.1007\/978-3-319-11212-1_7"},{"key":"468_CR11","doi-asserted-by":"crossref","unstructured":"Chen, E.Y., Pei, Y., Chen, S., Tian, Y., Kotcher, R., Tague, P.: OAuth demystified for mobile application developers. In: Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, pp. 892\u2013903. ACM, New York, NY, USA (2014)","DOI":"10.1145\/2660267.2660323"},{"issue":"6","key":"468_CR12","doi-asserted-by":"publisher","first-page":"563","DOI":"10.1016\/0167-4048(92)90192-T","volume":"11","author":"FB Cohen","year":"1992","unstructured":"Cohen, F.B.: Defense-in-depth against computer viruses. Comput. Secur. 11(6), 563\u2013579 (1992)","journal-title":"Comput. Secur."},{"key":"468_CR13","unstructured":"CREDENTIAL: Secure cloud identity wallet. \nhttps:\/\/credential.eu\/\n\n. Accessed 09 July 2019"},{"issue":"2","key":"468_CR14","doi-asserted-by":"publisher","first-page":"222","DOI":"10.1109\/TSE.1987.232894","volume":"13","author":"DER Denning","year":"1987","unstructured":"Denning, D.E.R.: An intrusion detection model. IEEE Trans. Softw. Eng. 13(2), 222\u2013232 (1987)","journal-title":"IEEE Trans. Softw. Eng."},{"key":"468_CR15","volume-title":"Computers Under Attack: Intruders, Worms, and Viruses","author":"PJ Denning","year":"1990","unstructured":"Denning, P.J.: Computers Under Attack: Intruders, Worms, and Viruses. Addison-Wesley, Boston (1990)"},{"key":"468_CR16","unstructured":"Derler, D., Krenn, S., Lornser, T., Ramacher, S., Slamanig, D., Striecks, C.: Revisiting proxy re-encryption: forward secrecy, improved security, and applications. Cryptology ePrint Archive, Report 2018\/321 (2018). \nhttps:\/\/eprint.iacr.org\/2018\/321"},{"key":"468_CR17","doi-asserted-by":"publisher","unstructured":"Ding, W., Yan, Z., Deng, R.: Privacy-preserving data processing with flexible access control. IEEE Trans. Dependable Secure Comput. (2017). \nhttps:\/\/doi.org\/10.1109\/TDSC.2017.2786247","DOI":"10.1109\/TDSC.2017.2786247"},{"key":"468_CR18","unstructured":"Doshi, N.: Facebook applications accidentally leaking access to third parties. Technical report, Symantec Corporation (2011) Accessed 10 Feb 2017"},{"key":"468_CR19","doi-asserted-by":"crossref","unstructured":"Fredrikson, M., Jha, S., Ristenpart, T.: Model inversion attacks that exploit confidence information and basic countermeasures. In: Proceedings of the 22Nd ACM SIGSAC Conference on Computer and Communications Security, CCS \u201915, pp. 1322\u20131333. ACM, New York, NY, USA (2015)","DOI":"10.1145\/2810103.2813677"},{"key":"468_CR20","unstructured":"Geambasu, R., Kohno, T., Levy, A.A., Levy, H.M.: Vanish: increasing data privacy with self-destructing data. In: Proceedings of the 18th Conference on USENIX Security Symposium, pp. 299\u2013316. USENIX Association, Berkeley, CA, USA (2009)"},{"key":"468_CR21","doi-asserted-by":"crossref","unstructured":"Goyal, V., Pandey, O., Sahai, A., Waters, B.: Attribute-based encryption for fine-grained access control of encrypted data. In: Proceedings of the 13th ACM Conference on Computer and Communications Security, CCS \u201906, pp. 89\u201398. ACM, New York, NY, USA (2006)","DOI":"10.1145\/1180405.1180418"},{"key":"468_CR22","doi-asserted-by":"crossref","unstructured":"Grogan, S., McDonald, A.M.: Access denied! contrasting data access in the United States and Ireland. In: Proceedings on Privacy Enhancing Technologies, pp. 191\u2013211. De Gruyter (2016)","DOI":"10.1515\/popets-2016-0023"},{"key":"468_CR23","doi-asserted-by":"crossref","unstructured":"Hannak, A., Soeller, G., Lazer, D., Mislove, A., Wilson, C.: Measuring price discrimination and steering on e-commerce web sites. In: Proceedings of the 2014 Internet Measurement Conference, pp. 305\u2013318. ACM, New York, NY, USA (2014)","DOI":"10.1145\/2663716.2663744"},{"key":"468_CR24","volume-title":"Writing Secure Code","author":"M Howard","year":"2003","unstructured":"Howard, M., LeBlanc, D.: Writing Secure Code, 2nd edn. Microsoft Press, Redmond, WA (2003)","edition":"2"},{"key":"468_CR25","unstructured":"International Organization for Standardization. Information technology\u2014Security techniques\u2014Encryption algorithms\u2014Part 3: Block ciphers. ISO, Geneva, Switzerland. ISO\/IEC 18033-3:2010 (2010)"},{"issue":"6","key":"468_CR26","doi-asserted-by":"publisher","first-page":"20:20","DOI":"10.1145\/2246036.2254400","volume":"10","author":"P-H Kamp","year":"2012","unstructured":"Kamp, P.-H.: Linkedin password leak: salt their hide. Queue 10(6), 20:20\u201320:22 (2012)","journal-title":"Queue"},{"key":"468_CR27","unstructured":"Karegar, F., Lindegren, D., Pettersson, J.S., Fischer-H\u00fcbner, S.: Assessments of a cloud-based data wallet for personal identity management. In: Information Systems Development: Advances in Methods, Tools and Management\u2014Proceedings of the 26th International Conference on Information Systems Development, ISD 2017, Larnaca, Cyprus, University of Central Lancashire Cyprus, September 6\u20138 2017 (2017)"},{"key":"468_CR28","doi-asserted-by":"crossref","unstructured":"Kc, G.S., Keromytis, A.D., Prevelakis, V.: Countering code-injection attacks with instruction-set randomization. In: Proceedings of the 10th ACM Conference on Computer and Communications Security, CCS \u201903, pp. 272\u2013280. ACM, New York, NY, USA (2003)","DOI":"10.1145\/948109.948146"},{"issue":"5","key":"468_CR29","doi-asserted-by":"publisher","first-page":"12","DOI":"10.1109\/MSP.2012.137","volume":"11","author":"T Kirkham","year":"2013","unstructured":"Kirkham, T., Winfield, S., Ravet, S., Kellomaki, S.: The personal data store approach to personal data security. IEEE Secur. Priv. 11(5), 12\u201319 (2013)","journal-title":"IEEE Secur. Priv."},{"key":"468_CR30","unstructured":"Klein, T.: All your private keys are belong to us. \nhttp:\/\/trapkit.de\/research\/sslkeyfinder\/keyfinder_v1.0_20060205.pdf\n\n 5 Feb (2006)"},{"key":"468_CR31","doi-asserted-by":"crossref","unstructured":"Krawczyk, H., Bellare, M., Canetti, R.: HMAC: Keyed-hashing for message authentication. \nhttp:\/\/www.ietf.org\/rfc\/rfc2104.txt\n\n Accessed 9 Nov 2015, February 1997. RFC 2104 (Informational)","DOI":"10.17487\/rfc2104"},{"key":"468_CR32","unstructured":"L\u00e9cuyer, M., Spahn, R., Spiliopolous, Y., Chaintreau, A., Geambasu, R., Hsu, D.: Sunlight: fine-grained targeting detection at scale with statistical confidence. In: Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, pp. 554\u2013566. Denver, CO, USA, October 12\u20136, 2015 (2015)"},{"key":"468_CR33","doi-asserted-by":"crossref","unstructured":"Mazurek, M.L., Komanduri, S., Vidas, T., Bauer, L., Christin, N., Cranor, L.F., Kelley, P.G., Shay, R., Ur, B.: Measuring password guessability for an entire university. In: Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security, CCS \u201913, pp. 173\u2013186. ACM, New York, NY, USA (2013)","DOI":"10.1145\/2508859.2516726"},{"key":"468_CR34","volume-title":"Software Security: Building Security","author":"G McGraw","year":"2006","unstructured":"McGraw, G.: Software Security: Building Security. Addison-Wesley Professional, Boston (2006)"},{"issue":"1","key":"468_CR35","doi-asserted-by":"publisher","first-page":"12:1","DOI":"10.1145\/2808691","volume":"48","author":"A Milenkoski","year":"2015","unstructured":"Milenkoski, A., Vieira, M., Kounev, S., Avritzer, A., Payne, B.D.: Evaluating computer intrusion detection systems: a survey of common practices. ACM Comput. Surv. 48(1), 12:1\u201312:41 (2015)","journal-title":"ACM Comput. Surv."},{"key":"468_CR36","unstructured":"Mundada, Y., Ramachandran, A., Feamster, N.: Silverline: data and network isolation for cloud services. In: Proceedings of the 3rd USENIX Conference on Hot Topics in Cloud Computing, HotCloud\u201911, p. 13. USENIX Association, Berkeley, CA, USA (2011)"},{"key":"468_CR37","doi-asserted-by":"crossref","unstructured":"Nair, S.K., Dashti, M.T., Crispo, B., Tanenbaum, A.S.: A hybrid PKI-IBC based ephemerizer system. In: Proceedings of the IFIP TC-11 22nd International Information Security Conference, 14\u201316 May 2007, Sandton, South Africa, pp. 241\u2013252 (2007)","DOI":"10.1007\/978-0-387-72367-9_21"},{"issue":"6","key":"468_CR38","doi-asserted-by":"publisher","first-page":"24","DOI":"10.1145\/1743546.1743558","volume":"53","author":"A Narayanan","year":"2010","unstructured":"Narayanan, A., Shmatikov, V.: Myths and fallacies of \u201cpersonally identifiable information\u201d. Commun. ACM 53(6), 24\u201326 (2010)","journal-title":"Commun. ACM"},{"key":"468_CR39","unstructured":"OAuth: An open protocol to allow secure authorization in a simple and standard method from web, mobile and desktop applications. \nhttp:\/\/oauth.net\/\n\n. Accessed 09 July 2019"},{"key":"468_CR40","unstructured":"OpenID connect main website. \nhttps:\/\/openid.net\/connect\/\n\n. Accessed 09 July 2019"},{"key":"468_CR41","unstructured":"Pappas, V., Kemerlis, V.P., Zavou, A., Polychronakis, M., Keromytis, A.D.: Cloudfence: data flow tracking as a cloud service. In: Research in Attacks, Intrusions, and Defenses\u201416th International Symposium, Rodney Bay, St. Lucia, October 23\u201325, 2013. Proceedings, pp. 411\u2013431 (2013)"},{"key":"468_CR42","first-page":"51","volume":"1","author":"R Perlman","year":"2005","unstructured":"Perlman, R., Perlman, R.: The Ephemerizer: making data disappear. J. Inf. Syst. Secur. 1, 51\u201368 (2005)","journal-title":"J. Inf. Syst. Secur."},{"key":"468_CR43","doi-asserted-by":"crossref","unstructured":"Popa, R.A., Redfield, C., Zeldovich, N., Balakrishnan, H.: CryptDB: protecting confidentiality with encrypted query processing. In: Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles, pp. 85\u2013100. ACM, New York, NY, USA (2011)","DOI":"10.1145\/2043556.2043566"},{"key":"468_CR44","unstructured":"Popa, R.A., Stark, E., Helfer, J., Valdez, S., Zeldovich, N., Kaashoek, M.F., Balakrishnan, H.: Building web applications on top of encrypted data using mylar. In: Proceedings of the 11th USENIX Conference on Networked Systems Design and Implementation, pp. 157\u2013172. USENIX Association, Berkeley, CA, USA (2014)"},{"key":"468_CR45","doi-asserted-by":"crossref","unstructured":"Ray, D., Ligatti, J.: Defining code-injection attacks. In: Proceedings of the 39th Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, pp. 179\u2013190. ACM, New York, NY, USA (2012)","DOI":"10.1145\/2103621.2103678"},{"key":"468_CR46","unstructured":"Ryutov, T., Neuman, C., Kim, D., Zhou, L.: Integrated access control and intrusion detection for web servers. In: Proceedings of the 23rd International Conference on Distributed Computing Systems, p. 394. IEEE, Washington, DC, USA (2003)Computer Society"},{"key":"468_CR47","unstructured":"Ryutov, T., Neuman, C., Kim, D.: Dynamic authorization and intrusion response in distributed systems. In: DARPA Information Survivability Conference and Exposition, 2003. Proceedings, Vol.\u00a01, pp. 50\u201361. IEEE (2003)"},{"key":"468_CR48","unstructured":"Ryutov, T., Neuman, C.: The specification and enforcement of advanced security policies. In: Proceedings of the 3rd International Workshop on Policies for Distributed Systems and Networks, pp. 128. IEEE Computer Society, Washington, DC, USA (2002)"},{"key":"468_CR49","doi-asserted-by":"crossref","unstructured":"Ryutov, T., Zhou, L., Neuman, C., Leithead, T., Seamons, K.E.: Adaptive trust negotiation and access control. In: Proceedings of the Tenth ACM Symposium on Access Control Models and Technologies, pp. 139\u2013146. ACM, New York, NY, USA (2005)","DOI":"10.1145\/1063979.1064004"},{"key":"468_CR50","unstructured":"Sabouri, A., Rannenberg, K.: ABC4Trust: protecting privacy in identity management by bringing privacy-abcs into real-life. In: Privacy and Identity Management for the Future Internet in the Age of Globalisation\u20149th IFIP WG 9.2, 9.5, 9.6\/11.7, 11.4, 11.6\/SIG 9.2.2 International Summer School, Patras, Greece, September 7\u201312, 2014, Revised Selected Papers, pp. 3\u201316 (2014)"},{"key":"468_CR51","volume-title":"Secrets & Lies: Digital Security in a Networked World","author":"B Schneier","year":"2000","unstructured":"Schneier, B.: Secrets & Lies: Digital Security in a Networked World. Wiley, New York (2000)"},{"key":"468_CR52","doi-asserted-by":"crossref","unstructured":"Shokri, R., Stronati, M., Shmatikov, V.: Membership inference attacks against machine learning models. In: 2017 IEEE Symposium on Security and Privacy (SP), pp. 3\u201318 (2017)","DOI":"10.1109\/SP.2017.41"},{"key":"468_CR53","doi-asserted-by":"crossref","unstructured":"Slavin, R., Wang, X., Hosseini, M.B., Hester, J., Krishnan, R., Bhatia, J., Breaux, T.D., Niu, J.: Toward a framework for detecting privacy policy violations in Android application code. In: Proceedings of the 38th International Conference on Software Engineering, ICSE \u201916, pp. 25\u201336. ACM, New York, NY, USA (2016)","DOI":"10.1145\/2884781.2884855"},{"key":"468_CR54","unstructured":"Smith, N., Van Bruggen, D., Tomassetti. F.: Visited. Leanpub, JavaParser (2017)"},{"issue":"1","key":"468_CR55","doi-asserted-by":"publisher","first-page":"39","DOI":"10.1109\/MC.2012.1","volume":"45","author":"D Song","year":"2012","unstructured":"Song, D., Shi, E., Fischer, I., Shankar, U.: Cloud data protection for the masses. Computer 45(1), 39\u201345 (2012)","journal-title":"Computer"},{"issue":"7","key":"468_CR56","doi-asserted-by":"publisher","first-page":"38","DOI":"10.1145\/2209249.2209263","volume":"55","author":"S Spiekermann","year":"2012","unstructured":"Spiekermann, S.: The challenges of privacy by design. Commun. ACM 55(7), 38\u201340 (2012)","journal-title":"Commun. ACM"},{"issue":"1","key":"468_CR57","doi-asserted-by":"publisher","first-page":"51","DOI":"10.1145\/353323.353383","volume":"3","author":"D Spinellis","year":"2000","unstructured":"Spinellis, D.: Reflection as a mechanism for software integrity verification. ACM Trans. Inf. Syst. Secur. 3(1), 51\u201362 (2000)","journal-title":"ACM Trans. Inf. Syst. Secur."},{"key":"468_CR58","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-77322-3","volume-title":"Insider Attack and Cyber Security: Beyond the Hacker (Advances in Information Security)","author":"S Stolfo","year":"2008","unstructured":"Stolfo, S., Bellovin, S.M., Keromytis, A.D., Sinclair, S., Smith, S.W., Hershkop, S.: Insider Attack and Cyber Security: Beyond the Hacker (Advances in Information Security), 1st edn. Springer, Santa Clara, CA (2008)","edition":"1"},{"issue":"1","key":"468_CR59","doi-asserted-by":"publisher","first-page":"72","DOI":"10.1109\/MSECP.2004.1264860","volume":"2","author":"MR Stytz","year":"2004","unstructured":"Stytz, M.R.: Considering defense in depth for software applications. IEEE Secur. Priv. 2(1), 72\u201375 (2004)","journal-title":"IEEE Secur. Priv."},{"key":"468_CR60","doi-asserted-by":"crossref","unstructured":"Su, Z., Wassermann, G.: The essence of command injection attacks in web applications. In: Conference Record of the 33rd ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, pp. 372\u2013382. ACM, New York, NY, USA (2006)","DOI":"10.1145\/1111320.1111070"},{"key":"468_CR61","unstructured":"The European Union General Data Protection Regulation (GDPR). \nhttp:\/\/data.consilium.europa.eu\/doc\/document\/ST-5419-2016-INIT\/en\/pdf\n\n (2016). Accessed 30 Sept 2018"},{"key":"468_CR62","unstructured":"The Guardian Media Group. \nhttp:\/\/www.theguardian.com\/gmg\n\n. Accessed 30 Sept 2018"},{"key":"468_CR63","unstructured":"The Guardian. The source code of the world\u2019s leading liberal voice. \nhttps:\/\/github.com\/guardian\n\n. Accessed 30 Sept 2018"},{"key":"468_CR64","unstructured":"United\u00a0States Department Of Veterans\u00a0Affairs. Management of data breaches involving sensitive personal information (SPI). \nhttp:\/\/www.va.gov\/vapubs\/viewPublication.asp?Pub_ID=608\n\n. 6 Jan (2012)"},{"key":"468_CR65","unstructured":"User managed access: Created by kantara initiative staff. \nhttps:\/\/kantarainitiative.org\/confluence\/display\/LC\/User+Managed+Access\n\n. Accessed 05 July 2019"},{"key":"468_CR66","volume-title":"Building Secure Software: How to Avoid Security Problems the Right Way","author":"J Viega","year":"2001","unstructured":"Viega, J., McGraw, G.: Building Secure Software: How to Avoid Security Problems the Right Way. Addison-Wesley, Boston, MA (2001)"},{"key":"468_CR67","unstructured":"Winslett, M., Lee, A., Olson, L., Rosulek, M.: TrustBuilder: negotiating trust in dynamic coalitions. In: DARPA Information Survivability Conference and Exposition, 2003. Proceedings, VOL.\u00a02, pp. 49\u201351. IEEE (2003)"},{"key":"468_CR68","doi-asserted-by":"crossref","unstructured":"Yu, S., Wang, C., Ren, K., Lou, W.: Achieving secure, scalable, and fine-grained data access control in cloud computing. In: Proceedings of the 29th Conference on Information Communications, INFOCOM\u201910, pp. 534\u2013542. IEEE Press, Piscataway, NJ, USA (2010)","DOI":"10.1109\/INFCOM.2010.5462174"}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-019-00468-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10207-019-00468-5\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-019-00468-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,9,22]],"date-time":"2020-09-22T23:16:23Z","timestamp":1600816583000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10207-019-00468-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,9,24]]},"references-count":68,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2020,8]]}},"alternative-id":["468"],"URL":"https:\/\/doi.org\/10.1007\/s10207-019-00468-5","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,9,24]]},"assertion":[{"value":"24 September 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Compliance with ethical standards"}},{"value":"The authors declare that they have no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}},{"value":"This article does not contain any studies with human participants or animals performed by any of the authors.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical approval"}},{"value":"The source code of our framework is available as open-source software at .","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Availability"}}]}}