{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,11]],"date-time":"2026-04-11T13:05:45Z","timestamp":1775912745620,"version":"3.50.1"},"reference-count":91,"publisher":"IEEE","license":[{"start":{"date-parts":[[2023,5,1]],"date-time":"2023-05-01T00:00:00Z","timestamp":1682899200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2023,5,1]],"date-time":"2023-05-01T00:00:00Z","timestamp":1682899200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-001"}],"funder":[{"DOI":"10.13039\/501100001871","name":"Funda\u00e7\u00e3o para a Ci\u00eancia e a Tecnologia","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001871","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,5]]},"DOI":"10.1109\/sp46215.2023.10179395","type":"proceedings-article","created":{"date-parts":[[2023,7,21]],"date-time":"2023-07-21T17:18:15Z","timestamp":1689959895000},"page":"2817-2834","source":"Crossref","is-referenced-by-count":20,"title":["RuleKeeper: GDPR-Aware Personal Data Compliance for Web Frameworks"],"prefix":"10.1109","author":[{"given":"Mafalda","family":"Ferreira","sequence":"first","affiliation":[{"name":"Universidade de Lisboa,INESC-ID \/ Instituto Superior Técnico"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tiago","family":"Brito","sequence":"additional","affiliation":[{"name":"Universidade de Lisboa,INESC-ID \/ Instituto Superior Técnico"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jos\u00e9 Fragoso","family":"Santos","sequence":"additional","affiliation":[{"name":"Universidade de Lisboa,INESC-ID \/ Instituto Superior Técnico"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nuno","family":"Santos","sequence":"additional","affiliation":[{"name":"Universidade de Lisboa,INESC-ID \/ Instituto Superior Técnico"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation)","volume":"L 119","year":"2016","journal-title":"Official Journal of the European Union"},{"key":"ref2","article-title":"The cnil\u2019s restricted committee imposes a financial penalty of 50 million euros against google llc","year":"2022"},{"key":"ref3","article-title":"Norwegian dpa imposes fine against grindr llc","year":"2022"},{"key":"ref4","volume-title":"Form 10-q - for the quarterly period ended june 30, 2021","year":"2021"},{"key":"ref5","volume-title":"Administrative criminal proceedings of the austrian data protection authority against \u00d6sterreichische post ag","year":"2022"},{"key":"ref6","volume-title":"Mern stack explained","year":"2021"},{"key":"ref7","volume-title":"A javascript library for building user interfaces","year":"2022"},{"key":"ref8","volume-title":"Fast, unopinionated, minimalist web framework for node.js","year":"2021"},{"key":"ref9","volume-title":"Javascript runtime built on chrome\u2019s v8 javascript engine","year":"2022"},{"key":"ref10","volume-title":"Mongodb: the application data platform","year":"2021"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3320269.3384759"},{"key":"ref12","article-title":"Qapla: Policy compliance for database-backed systems","volume-title":"Proc. of USENIX Security","author":"Mehta"},{"key":"ref13","article-title":"Riverbed: Enforcing user-defined privacy constraints in distributed web services","volume-title":"Proc. of NSDI","author":"Wang"},{"key":"ref14","article-title":"PrivGuard: Privacy regulation compliance made easier","volume-title":"Proc. of USENIX Security","author":"Wang"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2019.00016"},{"key":"ref16","article-title":"Storm: Refinement types for secure web applications","volume-title":"Proc. of OSDI","author":"Lehmann"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24100"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00076"},{"key":"ref19","article-title":"PriSEC: A privacy settings enforcement controller","volume-title":"Proc. of USENIX Security","author":"Khandelwal"},{"key":"ref20","article-title":"Automating cookie consent and GDPR violation detection","volume-title":"Proc. of USENIX Security","author":"Bollinger"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376321"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354212"},{"key":"ref23","article-title":"Share first, ask later (or never?) studying violations of GDPR\u2019s explicit consent in android apps","volume-title":"Proc. of USENIX Security","author":"Nguyen"},{"key":"ref24","volume-title":"Cookie consent notice banner to comply with gdpr and eprivacy directive","author":"Consent","year":"2022"},{"key":"ref25","volume-title":"A small, simple and customizable cookie consent bar for use in react applications","year":"2022"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.44"},{"key":"ref27","article-title":"JAW: Studying client-side CSRF with hybrid property graphs and declarative traversals","volume-title":"Proc. of USENIX Security","author":"Khodayari"},{"key":"ref28","article-title":"Mining node.js vulnerabilities via object dependence graph and query","volume-title":"Proc. of USENIX Security","author":"Li"},{"key":"ref29","volume-title":"RuleKeeper supplementary material","year":"2022"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359813"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3338504.3357339"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3493700.3493707"},{"key":"ref33","volume-title":"Elegant mongodb object modeling for node.js","year":"2022"},{"key":"ref34","volume-title":"Open Policy Agent (OPA)","year":"2022"},{"key":"ref35","volume-title":"Rego Policy Language","year":"2022"},{"key":"ref37","volume-title":"Bidirectional and low-latency communication for every platform","year":"2022"},{"key":"ref38","volume-title":"Ecmascript parsing infrastructure for multipurpose analysis","year":"2021"},{"key":"ref39","volume-title":"Neo4j graph data platform","year":"2022"},{"key":"ref40","volume-title":"Stack overflow developer survey results 2021","year":"2022"},{"key":"ref41","volume-title":"The 2021 state of the octoverse top languages","year":"2021"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133959"},{"key":"ref43","article-title":"NAVEX: Precise and scalable exploit generation for dynamic web applications","volume-title":"Proc. of USENIX Security","author":"Alhuzali"},{"key":"ref44","volume-title":"An\u00e1lises Cl\u00ednicas LEB - Laborat\u00f3rios Elisabeth Barreto","year":"2022"},{"key":"ref45","volume-title":"APAC - Associa\u00e7\u00e3o Portuguesa de Analistas Cl\u00ednicos","year":"2022"},{"key":"ref46","volume-title":"habitica - release v4.189.0","year":"2021"},{"key":"ref47","volume-title":"Habitica: Gamify your tasks, by habitrpg, inc","year":"2021"},{"key":"ref48","article-title":"Amazona - build ecommerce website like amazon","year":"2020"},{"key":"ref49","article-title":"Blog - realworld example app"},{"key":"ref50","volume-title":"npm - passport","year":"2021"},{"key":"ref51","volume-title":"wrk - a http benchmarking tool","year":"2021"},{"key":"ref52","article-title":"dstat(1) - linux man page","year":"2022"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/2858036.2858498"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/1735223.1735255"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2022-0034"},{"key":"ref56","article-title":"Security developer studies with GitHub users: Exploring a convenience sample","volume-title":"Proc. of SOUPS","author":"Acar"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.82"},{"key":"ref58","article-title":"Actions speak louder than words: Entity-Sensitive privacy policy and data flow analysis with PoliCheck","volume-title":"Proc. of USENIX Security","author":"Andow"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.14778\/3450980.3450986"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-33752-0_3"},{"key":"ref61","volume-title":"Object.defineproperties() - javascript \u2014 mdn","year":"2021"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.49"},{"key":"ref63","volume-title":"Using http cookies - http \u2014 mdn","year":"2022"},{"key":"ref64","volume-title":"Session fixation software attack \u2014 owasp foundation","year":"2022"},{"key":"ref65","first-page":"197","article-title":"whether it\u2019s moral is a whole other story\u201d: Consumer perspectives on privacy regulations and corporate data practices","volume-title":"Proc. of SOUPS","author":"Zhang-Kennedy"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376768"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.14722\/usec.2014.23006"},{"key":"ref68","article-title":"The seven sins of personal-data processing systems under gdpr","volume-title":"Proc. of HotCloud","author":"Shastri"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-33752-0_6"},{"key":"ref70","article-title":"Analyzing the impact of gdpr on storage systems","volume-title":"Proc. Of HotStorage","author":"Shah"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23378"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3450056"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329806"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.28"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/CSF54842.2022.9919687"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1145\/3338498.3358642"},{"key":"ref77","article-title":"Sif: Enforcing confidentiality and integrity in web applications","volume-title":"Proc. of USENIX Security","author":"Chong"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629606"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629604"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.3233\/jcs-15801"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1145\/2857705.2857717"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1145\/1559845.1559875"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1145\/2692915.2628151"},{"key":"ref84","article-title":"Static checking of dynamically-varying security policies in database-backed applications","volume-title":"Proc. of OSDI","author":"Chlipala"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1145\/1007568.1007631"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.23"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568276"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660287"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1145\/3086677"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484536"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.14778\/3384345.3384354"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-29959-0_33"}],"event":{"name":"2023 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2023,5,21]]},"end":{"date-parts":[[2023,5,25]]}},"container-title":["2023 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10179215\/10179280\/10179395.pdf?arnumber=10179395","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,7,20]],"date-time":"2024-07-20T05:16:42Z","timestamp":1721452602000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10179395\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,5]]},"references-count":91,"URL":"https:\/\/doi.org\/10.1109\/sp46215.2023.10179395","relation":{},"subject":[],"published":{"date-parts":[[2023,5]]}}}