{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,3]],"date-time":"2026-10-03T21:11:55Z","timestamp":1791061915101,"version":"4.1.0"},"reference-count":57,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2012,5,2]],"date-time":"2012-05-02T00:00:00Z","timestamp":1335916800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Empir Software Eng"],"published-print":{"date-parts":[[2013,4]]},"DOI":"10.1007\/s10664-012-9204-1","type":"journal-article","created":{"date-parts":[[2012,5,1]],"date-time":"2012-05-01T09:00:39Z","timestamp":1335862839000},"page":"310-374","source":"Crossref","is-referenced-by-count":13,"title":["Understanding privacy policies"],"prefix":"10.1007","volume":"18","author":[{"given":"Ralf","family":"L\u00e4mmel","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ekaterina","family":"Pek","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2012,5,2]]},"reference":[{"key":"9204_CR1","doi-asserted-by":"crossref","unstructured":"Agrawal R, Kiernan J, Srikant R, Xu Y (2003) An XPath-based preference language for P3P. In: Proceedings of WWW 2003. ACM, pp 629\u2013639","DOI":"10.1145\/775152.775241"},{"issue":"5","key":"9204_CR2","doi-asserted-by":"crossref","first-page":"809","DOI":"10.1016\/j.comnet.2005.01.004","volume":"48","author":"R Agrawal","year":"2005","unstructured":"Agrawal R, Kiernan J, Srikant R, Xu Y (2005a) XPref: a preference language for P3P. Comput Netw 48(5):809\u2013827","journal-title":"Comput Netw"},{"key":"9204_CR3","doi-asserted-by":"crossref","unstructured":"Agrawal R, Bird P, Grandison T, Kiernan J, Logan S, Rjaibi W (2005b) Extending relational database systems to automatically enforce privacy policies. In: ICDE \u201905: proceedings of the 21st international conference on data engineering. IEEE Computer Society, pp 1013\u20131022","DOI":"10.1109\/ICDE.2005.64"},{"key":"9204_CR4","first-page":"11","volume-title":"Proceedings of the 2nd Australian information security management conference, securing the future","author":"P Ashley","year":"2004","unstructured":"Ashley P (2004) Enforcement of a P3P privacy policy. In: Proceedings of the 2nd Australian information security management conference, securing the future. School of Computer and Information Science, Edith Cowan University, Western Australia, pp 11\u201326"},{"key":"9204_CR5","doi-asserted-by":"crossref","unstructured":"Balazinska M, Merlo E, Dagenais M, Lagu\u00eb B, Kontogiannis K (2000) Advanced clone-analysis to support object-oriented system refactoring. In: Proceedings of the seventh working conference on reverse engineering (WCRE\u201900). IEEE Computer Society, pp 98\u2013107","DOI":"10.1109\/WCRE.2000.891457"},{"key":"9204_CR6","doi-asserted-by":"crossref","unstructured":"Baxter ID, Yahin A, Moura L, Sant\u2019Anna M, Bier L (1998) Clone detection using abstract syntax trees. In: Proceedings of ICSM 1998. IEEE Computer Society, p 368","DOI":"10.1109\/ICSM.1998.738528"},{"key":"9204_CR7","doi-asserted-by":"crossref","unstructured":"Baxter G, Frean M, Noble J, Rickerby M, Smith H, Visser M, Melton H, Tempero E (2006) Understanding the shape of Java software. In: Proceedings of OOPSLA 2006. ACM, pp 397\u2013412","DOI":"10.1145\/1167473.1167507"},{"key":"9204_CR8","unstructured":"Bierman GM, Meijer E, Schulte W (2005) The essence of data access in Comega. In: ECOOP 2005\u2014object-oriented programming, 19th European conference, proceedings, ser. LNCS, vol 3586. Springer, pp 287\u2013311"},{"issue":"4","key":"9204_CR9","doi-asserted-by":"crossref","first-page":"44","DOI":"10.1145\/953411.953414","volume":"13","author":"RJ Chevance","year":"1978","unstructured":"Chevance RJ, Heidet T (1978) Static profile and dynamic behavior of COBOL programs. SIGPLAN Not 13(4):44\u201357","journal-title":"SIGPLAN Not"},{"issue":"6","key":"9204_CR10","doi-asserted-by":"crossref","first-page":"581","DOI":"10.1002\/spe.776","volume":"37","author":"CS Collberg","year":"2007","unstructured":"Collberg CS, Myles G, Stepp M (2007) An empirical study of Java bytecode programs. Softw Pract Exp 37(6):581\u2013641","journal-title":"Softw Pract Exp"},{"issue":"2","key":"9204_CR11","doi-asserted-by":"crossref","first-page":"195","DOI":"10.1002\/spe.4380120209","volume":"12","author":"RP Cook","year":"1982","unstructured":"Cook RP, Lee I (1982) A contextual analysis of Pascal programs. Softw Pract Exp 12(2):195\u2013203","journal-title":"Softw Pract Exp"},{"key":"9204_CR12","unstructured":"Cranor LF (2002) Web privacy with P3P. O\u2019Reilly & Associates"},{"key":"9204_CR13","unstructured":"Cranor LF (2011) Re: comments on federal trade commission preliminary staff report. Protecting consumer privacy in an era of rapid change: a proposed framework for businesses and policymakers. Available online at http:\/\/www.ftc.gov\/os\/comments\/privacyreportframework\/00453-58003.pdf"},{"issue":"3","key":"9204_CR14","doi-asserted-by":"crossref","first-page":"274","DOI":"10.1016\/j.elerap.2008.04.003","volume":"7","author":"LF Cranor","year":"2008","unstructured":"Cranor LF, Egelman S, Sheng S, McDonald AM, Chowdhury A (2008) P3P deployment on websites. Electron. Commer. Rec. Appl. 7(3):274\u2013293","journal-title":"Electron. Commer. Rec. Appl."},{"key":"9204_CR15","doi-asserted-by":"crossref","unstructured":"Egelman S, Cranor LF, Chowdhury A (2006) An analysis of P3P-enabled Web sites among top-20 search results. In: Fox MS, Spencer B (eds) ICEC, ser. ACM international conference proceeding series, vol\u00a0156. ACM, pp 197\u2013207","DOI":"10.1145\/1151454.1151492"},{"key":"9204_CR16","doi-asserted-by":"crossref","first-page":"601","DOI":"10.1007\/s10664-008-9073-9","volume":"13","author":"R Falke","year":"2008","unstructured":"Falke R, Frenzel P, Koschke R (2008) Empirical evaluation of clone detection using syntax suffix trees. Empir Software Eng 13:601\u2013643","journal-title":"Empir Software Eng"},{"key":"9204_CR17","unstructured":"Favre J-M, Gasevic D, L\u00e4mmel R, Pek E (2011) Empirical language analysis in software linguistics. In: Software language engineering\u2014third international conference, SLE 2010, Eindhoven, revised selected papers, ser. LNCS, vol\u00a06563. Springer, pp 316\u2013326"},{"key":"9204_CR18","unstructured":"Fenton NE, Pfleeger SL (1996) Software metrics: a rigorous and practical approach, 2nd\u00a0edn. PWS Publishing Co"},{"key":"9204_CR19","doi-asserted-by":"crossref","unstructured":"Fisler K, Krishnamurthi S (2009) Escape from the matrix: lessons from a case-study in access-control requirements. In: Proceedings of the 5th symposium on usable privacy and security, SOUPS 2009, Mountain View, CA, USA, 15\u201317 July 2009. ACM, extended text available as TR\u00a0(Fisler\u00a0K, Krishnamurthi S (2009b) Escape from the matrix: lessons from a case-study in access-control requirements. Brown University, Tech. Rep. CS-09-05)","DOI":"10.1145\/1572532.1572567"},{"key":"9204_CR20","doi-asserted-by":"crossref","unstructured":"Fisler K, Krishnamurthi S, Dougherty DJ (2010) Embracing policy engineering. In: Proceedings of the FSE\/SDP workshop on future of software engineering research, ser. FoSER \u201910. ACM, pp 109\u2013110","DOI":"10.1145\/1882362.1882385"},{"key":"9204_CR21","doi-asserted-by":"crossref","unstructured":"Ghazinour K, Barker K (2011) Capturing P3P semantics using an enforceable lattice-based structure. In: Proceedings of the 4th international workshop on privacy and anonymity in the information society, ser. PAIS \u201911. ACM, pp 4:1\u20134:6","DOI":"10.1145\/1971690.1971694"},{"key":"9204_CR22","unstructured":"Gil JY, Maman I (2005) Micro patterns in Java code. In: Proceedings of OOPSLA 2005. ACM, pp 97\u2013116"},{"key":"9204_CR23","doi-asserted-by":"crossref","unstructured":"Hayati K, Abadi M (2005) Language-based enforcement of privacy policies. In: Privacy enhancing technologies, 4th international workshop, PET 2004, revised selected papers, ser. LNCS, vol\u00a03424. Springer, pp 302\u2013313","DOI":"10.1007\/11423409_19"},{"key":"9204_CR24","doi-asserted-by":"crossref","unstructured":"Hogben G, Jackson T, Wilikens M (2002) A fully compliant research implementation of the P3P standard for privacy protection: experiences and recommendations. In: Proceedings of ESORICS 2002, ser. LNCS, vol 2502. Springer, pp 104\u2013125","DOI":"10.1007\/3-540-45853-0_7"},{"key":"9204_CR25","unstructured":"Kapser C, Godfrey MW (2003) Toward a taxonomy of clones in source code: a case study. In: Proceedings of evolution of large scale industrial software architectures, ELISA workshop, pp 67\u201378"},{"key":"9204_CR26","doi-asserted-by":"crossref","unstructured":"Karjoth G, Schunter M, Waidner M (2003) Platform for enterprise privacy practices: privacy-enabled management of customer data. In: PET \u201902: proceedings of the 2nd international conference on privacy enhancing technologies. Springer, pp 69\u201384","DOI":"10.1007\/3-540-36467-6_6"},{"key":"9204_CR27","first-page":"242","volume":"53","author":"J Kart","year":"2009","unstructured":"Kart J, Karat C-M, Bertino E, Li N, Ni Q, Brodie C, Lobo J, Calo SB, Cranor LF, Kumaraguru\u00a0P, Reeder RW (2009) Policy framework for security and privacy management. IBM J Res Dev 53:242\u2013255","journal-title":"IBM J Res Dev"},{"key":"9204_CR28","unstructured":"Kaser O, Lemire D (2007) Tag-cloud drawing: algorithms for cloud visualization. CoRR, vol\u00a0abs\/cs\/0703109"},{"key":"9204_CR29","doi-asserted-by":"crossref","unstructured":"Kelley PG, Bresee J, Cranor LF, Reeder RW (2009) A \u201cnutrition label\u201d for privacy. In: Proceedings of the 5th symposium on usable privacy and security, ser. SOUPS \u201909. ACM, pp 4:1\u20134:12","DOI":"10.1145\/1572532.1572538"},{"issue":"2","key":"9204_CR30","doi-asserted-by":"crossref","first-page":"105","DOI":"10.1002\/spe.4380010203","volume":"1","author":"DE Knuth","year":"1971","unstructured":"Knuth DE (1971) An empirical study of FORTRAN programs. Softw Pract Exp 1(2):105\u2013133","journal-title":"Softw Pract Exp"},{"key":"9204_CR31","doi-asserted-by":"crossref","unstructured":"Koschke R (2008) Identifying and removing software clones. In: Software evolution. Springer, pp 15\u201336","DOI":"10.1007\/978-3-540-76440-3_2"},{"key":"9204_CR32","doi-asserted-by":"crossref","first-page":"213","DOI":"10.1016\/j.dss.2010.08.002","volume":"50","author":"O Kwon","year":"2010","unstructured":"Kwon O (2010) A pervasive P3P-based negotiation mechanism for privacy-aware pervasive e-commerce. Decis Support Syst 50:213\u2013221","journal-title":"Decis Support Syst"},{"key":"9204_CR33","unstructured":"L\u00e4mmel R, Kitsis S, Remy D (2005) Analysis of XML schema usage. In: Conference proceedings XML 2005"},{"key":"9204_CR34","doi-asserted-by":"crossref","unstructured":"Malone P, McLaughlin M, Leenes R, Ferronato P, Lockett N, Guillen PB, Heistracher T, Russello\u00a0G (2010) ENDORSE: a legal technical framework for privacy preserving data management. In: Proceedings of the 2010 workshop on governance of technology, information and policies, ser. GTIP \u201910. ACM, pp 27\u201334","DOI":"10.1145\/1920320.1920325"},{"issue":"4","key":"9204_CR35","doi-asserted-by":"crossref","first-page":"308","DOI":"10.1109\/TSE.1976.233837","volume":"2","author":"TJ McCabe","year":"1976","unstructured":"McCabe TJ (1976) A complexity measure. IEEE Trans Softw Eng 2(4):308\u2013320","journal-title":"IEEE Trans Softw Eng"},{"issue":"4","key":"9204_CR36","doi-asserted-by":"crossref","first-page":"316","DOI":"10.1145\/1118890.1118892","volume":"37","author":"M Mernik","year":"2005","unstructured":"Mernik M, Heering J, Sloane AM (2005) When and how to develop domain-specific languages. ACM Comput Surv 37(4):316\u2013344","journal-title":"ACM Comput Surv"},{"key":"9204_CR37","unstructured":"Mont MC, Thyne R (2006) Privacy policy enforcement in enterprises with identity management solutions. In: Proceedings of the 2006 international conference on privacy, security and trust: bridge the gap between PST technologies and business services. ser. PST \u201906. ACM, pp 25:1\u201325:12"},{"key":"9204_CR38","unstructured":"Mozilla\u2019s Privacy Icons Project (2011) https:\/\/wiki.mozilla.org\/Drumbeat\/Challenges\/Privacy_Icons . Visited July 2011"},{"issue":"2","key":"9204_CR39","doi-asserted-by":"crossref","first-page":"151","DOI":"10.1109\/TDSC.2007.1004","volume":"4","author":"I Reay","year":"2007","unstructured":"Reay I, Beatty P, Dick S, Miller J (2007) A survey and analysis of the P3P protocol\u2019s agents, adoption, maintenance, and future. IEEE Trans. Dependable Secur. Comput. 4(2):151\u2013164","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"issue":"2","key":"9204_CR40","first-page":"6:1","volume":"3","author":"I Reay","year":"2009","unstructured":"Reay I, Dick S, Miller J (2009) A large-scale empirical study of P3P privacy policies: stated actions vs. legal obligations. ACM Trans Web (TWEB) 3(2):6:1\u20136:34","journal-title":"ACM Trans Web (TWEB)"},{"key":"9204_CR41","doi-asserted-by":"crossref","first-page":"49","DOI":"10.1109\/MIC.2010.128","volume":"15","author":"C Ringelstein","year":"2011","unstructured":"Ringelstein C, Staab S (2011) PAPEL: provenance-aware policy definition and execution. IEEE Internet Comput. 15:49\u201358","journal-title":"IEEE Internet Comput."},{"issue":"1","key":"9204_CR42","doi-asserted-by":"crossref","first-page":"56","DOI":"10.1093\/comjnl\/19.1.56","volume":"19","author":"SK Robinson","year":"1976","unstructured":"Robinson SK, Torsun IS (1976) An empirical analysis of FORTRAN programs. Comput J 19(1):56\u201362","journal-title":"Comput J"},{"issue":"7","key":"9204_CR43","doi-asserted-by":"crossref","first-page":"470","DOI":"10.1016\/j.scico.2009.02.007","volume":"74","author":"CK Roy","year":"2009","unstructured":"Roy CK, Cordy JR, Koschke R (2009) Comparison and evaluation of code clone detection techniques and tools: a qualitative approach. Sci Comput Program 74(7):470\u2013495","journal-title":"Sci Comput Program"},{"key":"9204_CR44","doi-asserted-by":"crossref","first-page":"47","DOI":"10.1016\/0096-0551(77)90007-8","volume":"2","author":"HJ Saal","year":"1977","unstructured":"Saal HJ, Weiss Z (1977) An empirical study of APL programs. Comput Lang 2:47\u201359","journal-title":"Comput Lang"},{"key":"9204_CR45","doi-asserted-by":"crossref","unstructured":"Salim F, Sheppard NP, Safavi-Naini R (2007) Enforcing P3P policies using a digital rights management system. In: PET\u201907: proceedings of the 7th international conference on privacy enhancing technologies. Springer, pp 200\u2013217","DOI":"10.1007\/978-3-540-75551-7_13"},{"key":"9204_CR46","unstructured":"Schwartz A (2009) Looking back at P3P: lessons for the future. http:\/\/www.cdt.org\/files\/pdfs\/P3P_Retro_Final_0.pdf . Visited July 2011"},{"key":"9204_CR47","doi-asserted-by":"crossref","unstructured":"Sim\u00e9on J, Wadler P (2003) The essence of XML. In: POPL, pp 1\u201313","DOI":"10.1145\/604131.604132"},{"issue":"3","key":"9204_CR48","doi-asserted-by":"crossref","first-page":"221","DOI":"10.1023\/A:1010085415024","volume":"12","author":"GL Steele Jr","year":"1999","unstructured":"Steele GL Jr (1999) Growing a language. Higher-Order Symb Comput 12(3):221\u2013236","journal-title":"Higher-Order Symb Comput"},{"key":"9204_CR49","unstructured":"The Center for Information Policy Leadership (2004) Multi-layered notices explained. http:\/\/aimp.apec.org\/Documents\/2005\/ECSG\/DPM1\/05_ecsg_dpm1_003.pdf . Visited July 2011"},{"key":"9204_CR50","unstructured":"The Center for Information Policy Leadership (2005) Ten steps to develop a multilayered privacy notice. http:\/\/www.informationpolicycentre.com\/files\/Uploads\/Documents\/Centre\/Ten_Steps_whitepaper.pdf . Visited July 2011"},{"key":"9204_CR51","unstructured":"TRUSTe (2011) http:\/\/www.truste.com . Visited July 2011"},{"key":"9204_CR52","doi-asserted-by":"crossref","unstructured":"Uustalu T, Vene V (2005) The essence of dataflow programming. In: Programming languages and systems, APLAS 2005, proceedings, ser. LNCS, vol\u00a03780. Springer, pp 2\u201318","DOI":"10.1007\/11575467_2"},{"key":"9204_CR53","doi-asserted-by":"crossref","unstructured":"Wadler P (1992) The essence of functional programming. In: POPL, pp 1\u201314","DOI":"10.1145\/143165.143169"},{"issue":"3","key":"9204_CR54","doi-asserted-by":"crossref","first-page":"265","DOI":"10.1016\/j.scico.2003.12.006","volume":"51","author":"DS Wile","year":"2004","unstructured":"Wile DS (2004) Lessons learned from real DSL experiments. Sci Comput Program 51(3):265\u2013290","journal-title":"Sci Comput Program"},{"key":"9204_CR55","unstructured":"W3C (2002) A P3P preference exchange language 1.0 (APPEL1.0), W3C working draft. http:\/\/www.w3.org\/TR\/P3P-preferences\/"},{"key":"9204_CR56","unstructured":"W3C (2006) The platform for privacy preferences 1.1 (P3P1.1) specification. http:\/\/www.w3.org\/TR\/P3P11\/"},{"key":"9204_CR57","doi-asserted-by":"crossref","unstructured":"Yu T, Li N, Ant\u00f3n AI (2004) A formal semantics for P3P. In: Proceedings of SWS 2004. ACM, pp 1\u20138","DOI":"10.1145\/1111348.1111349"}],"container-title":["Empirical Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10664-012-9204-1.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10664-012-9204-1\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10664-012-9204-1","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T23:47:16Z","timestamp":1743032836000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10664-012-9204-1"}},"subtitle":["A study in empirical analysis of language usage"],"short-title":[],"issued":{"date-parts":[[2012,5,2]]},"references-count":57,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2013,4]]}},"alternative-id":["9204"],"URL":"https:\/\/doi.org\/10.1007\/s10664-012-9204-1","relation":{},"ISSN":["1382-3256","1573-7616"],"issn-type":[{"value":"1382-3256","type":"print"},{"value":"1573-7616","type":"electronic"}],"subject":[],"published":{"date-parts":[[2012,5,2]]}}}