{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,16]],"date-time":"2025-10-16T03:47:50Z","timestamp":1760586470906},"reference-count":21,"publisher":"Springer Science and Business Media LLC","issue":"5","license":[{"start":{"date-parts":[[2008,10,1]],"date-time":"2008-10-01T00:00:00Z","timestamp":1222819200000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Wirtsch. Inform."],"published-print":{"date-parts":[[2008,10]]},"DOI":"10.1007\/s11576-008-0086-1","type":"journal-article","created":{"date-parts":[[2008,12,8]],"date-time":"2008-12-08T09:35:10Z","timestamp":1228728910000},"page":"383-391","source":"Crossref","is-referenced-by-count":11,"title":["Towards Systematic Achievement of Compliance in Service-Oriented Architectures: The MASTER Approach","Der MASTER-Ansatz zur systematischen Umsetzung von Compliance-Anforderungen in dienstorientierten Architekturen"],"prefix":"10.1007","volume":"50","author":[{"given":"Volkmar","family":"Lotz","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Emmanuel","family":"Pigout","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Peter M.","family":"Fischer","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Donald","family":"Kossmann","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fabio","family":"Massacci","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alexander","family":"Pretschner","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2008,11,29]]},"reference":[{"key":"86_CR1","doi-asserted-by":"crossref","unstructured":"Alonso, Gustavo; Casati, Fabio; Kuno, Harumi; Machiraju, Vijay (2004): Web Services. Concepts, Architectures and Applications. Springer.","DOI":"10.1007\/978-3-662-10876-5"},{"key":"86_CR2","unstructured":"Boag, Scott; Chamberlin, Don; Fern\u00e1ndez, Mary F.; Florescu, Daniela; Robie, Jonathan; Sim\u00e9on, J\u00e9r\u00f4me (2007): XQuery 1.0: An XML Query Language. W3C Recommendation."},{"key":"86_CR3","doi-asserted-by":"crossref","unstructured":"Brewer, David F. C.; Nash, Michael J. (1989): The Chinese Wall Security Policy. In: Proceedings of the 1989 IEEE Symposium on Security and Privacy, IEEE Computer Society Press, pp. 206\u2013214.","DOI":"10.1109\/SECPRI.1989.36295"},{"key":"86_CR4","unstructured":"Butler, Shawn A. (2006): Security attribute evaluation method: a cost-benefit approach. In: Proceedings of ICSE-02, ACM press, pp.232\u2013240."},{"key":"86_CR5","unstructured":"Committee of Sponsoring Organizations of the Treadway Commission (n.\u00a0d.): The COSO framework. http:\/\/www.coso.org\/guidance.htm, retrieved 2008-06-30."},{"key":"86_CR6","unstructured":"Congress of the United States of America (2002): The Sarbanes-Oxley Act, (Pub. L. No. 107\u2013204, 116 Stat. 745). Available at http:\/\/frwebgate.access.gpo.gov\/cgi-bin\/getdoc.cgi?dbname=107_cong_bills&docid=f:h3763enr.tst.pdf, retrieved 2008-06-30."},{"key":"86_CR7","unstructured":"Gordon, L.; Loeb, M. (2003): The economics of information security investment. TISSEC, 5(4), pp.\u00a0438\u2013457."},{"key":"86_CR8","unstructured":"ISO (2005): ISO\/IEC 27001:2005 \u2013 Information technology \u2013 Security techniques \u2013 Information security management systems \u2013 Requirements."},{"key":"86_CR9","doi-asserted-by":"crossref","unstructured":"Karabulut, Yuecel; Kerschbaum, Florian; Massacci, Fabio; Robinson, Phillip; Yautsiukhin, Artsiom (2007): Security and Trust in IT Business Outsourcing: a Manifesto. Electronic Notes in Theoretical Computer Science, Vol. 179, Elsevier, pp. 47\u201358.","DOI":"10.1016\/j.entcs.2006.08.030"},{"key":"86_CR10","doi-asserted-by":"crossref","unstructured":"Massacci, Fabio; Yautsiukhin, Artsiom (2007): An Algorithm for the Appraisal of Assurance Indicators for Complex Business Processes. In: Proceedings of the 3rd ACM Workshop on Quality of Protection. ACM Press.","DOI":"10.1145\/1314257.1314265"},{"key":"86_CR11","doi-asserted-by":"crossref","unstructured":"Misra, Jayadev; Cook, William R. (2007): Computation Orchestration: A Basis for Wide-Area Computing. In: Journal of Software and Systems Modeling 6 (1), pp. 83\u2013110.","DOI":"10.1007\/s10270-006-0012-1"},{"key":"86_CR12","unstructured":"n.\u00a0a. (2006): Common Criteria for Information Technology Security Evaluation, Version 3.1, http:\/\/www.commoncriteriaportal.org\/thecc.html, retrieved 2008-06-30."},{"key":"86_CR13","doi-asserted-by":"crossref","unstructured":"Povey, D. (1999): Optimistic Security: a New Access Control Paradigm. In: Proc. Workshop on New Security Paradigms.","DOI":"10.1145\/335169.335188"},{"key":"86_CR14","doi-asserted-by":"crossref","unstructured":"Pretschner, Alexander; Massacci, Fabio; Hilty, Manuel (2007): Usage Control in Service-Oriented Architectures. In: Proceedings of the 3rd International Conference on Trust, Privacy & Security in Digital Business, Springer, LNCS 4657.","DOI":"10.1007\/978-3-540-74409-2_11"},{"key":"86_CR15","doi-asserted-by":"crossref","unstructured":"Pretschner, A.; Hilty, M.; Basin, D., Schaefer, C.; Walter, T. (2008): Mechanisms for Usage Control. In: Proceedings of the ACM Symposium on Information, Computer and Communications Security (ASIACCS), Tokio, pp. 240\u2013245.","DOI":"10.1145\/1368310.1368344"},{"key":"86_CR16","unstructured":"Stoneburner, Gary; Goguen, Alice; Feringa, Alexis (2001): Risk Management Guide for Information Technology Systems. NIST report 800\u201330, http:\/\/csrc.nist.gov\/publications\/nistpubs\/800\u201330\/sp800\u201330.pdf, retrieved 2008-06-30."},{"key":"86_CR17","doi-asserted-by":"crossref","unstructured":"Swanson, Marianne; Bartol, Nadya; Sabato, John; Hash, Joan; Graffo, Laurie (2003): Security Metrics Guide for Information Technology Systems. NIST, Report 800\u201355 2003, http:\/\/csrc.nist.gov\/publications\/nistpubs\/800\u201355\/sp800\u201355.pdf, retrieved 2008-06-30.","DOI":"10.6028\/NIST.SP.800-55"},{"key":"86_CR18","unstructured":"The Basel Committee on Banking Supervision (2006): The Basel 2 Account. http:\/\/www.bis.org\/publ\/bcbs128.htm, retrieved 2008-06-30."},{"key":"86_CR19","unstructured":"The IT Governance Institute (2006): IT Control Objectives for Sarbanes-Oxley. http:\/\/www.isaca.org\/Template.cfm?Section=Home&Contentid=17003&Template=\/ContentManagement\/ContentDisplay.cfm, retrieved 2008-06-30."},{"key":"86_CR20","unstructured":"The IT Governance Institute (2007): Control Objectives for Information and related Technology (COBIT), Version 4.1. http:\/\/www.isaca.org\/Content\/NavigationMenu\/Members_and_Leaders\/COBIT6\/Obtain_COBIT\/Obtain_COBIT.htm, retrieved 2008-06-30."},{"key":"86_CR21","unstructured":"US Department of Defense (2007): DoD Information Assurance Certification and Accreditation Process (DIACAP). Instructions Num. 8510.01,. http:\/\/iase.disa.mil\/ditscap\/, retrieved 2008-06-30."}],"container-title":["WIRTSCHAFTSINFORMATIK"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11576-008-0086-1.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s11576-008-0086-1\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11576-008-0086-1","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,5,22]],"date-time":"2023-05-22T16:16:21Z","timestamp":1684772181000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s11576-008-0086-1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2008,10]]},"references-count":21,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2008,10]]}},"alternative-id":["86"],"URL":"https:\/\/doi.org\/10.1007\/s11576-008-0086-1","relation":{},"ISSN":["0937-6429","1861-8936"],"issn-type":[{"value":"0937-6429","type":"print"},{"value":"1861-8936","type":"electronic"}],"subject":[],"published":{"date-parts":[[2008,10]]}}}