{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T17:24:35Z","timestamp":1782926675227,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":53,"publisher":"ACM","license":[{"start":{"date-parts":[[2013,6,12]],"date-time":"2013-06-12T00:00:00Z","timestamp":1370995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2013,6,12]]},"DOI":"10.1145\/2462410.2462423","type":"proceedings-article","created":{"date-parts":[[2013,6,5]],"date-time":"2013-06-05T12:10:07Z","timestamp":1370434207000},"page":"3-14","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":19,"title":["Privacy promises that can be kept"],"prefix":"10.1145","author":[{"given":"Omar","family":"Chowdhury","sequence":"first","affiliation":[{"name":"The University of Texas at San Antonio, San Antonio, TX, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andreas","family":"Gampe","sequence":"additional","affiliation":[{"name":"The University of Texas at San Antonio, San Antonio, TX, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jianwei","family":"Niu","sequence":"additional","affiliation":[{"name":"The University of Texas at San Antonio, San Antonio, TX, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jeffery","family":"von Ronne","sequence":"additional","affiliation":[{"name":"The University of Texas at San Antonio, San Antonio, TX, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jared","family":"Bennatt","sequence":"additional","affiliation":[{"name":"The University of Texas at San Antonio, San Antonio, TX, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Anupam","family":"Datta","sequence":"additional","affiliation":[{"name":"Carnegie Mellon University, Pittsburgh, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Limin","family":"Jia","sequence":"additional","affiliation":[{"name":"Carnegie Mellon University, Pittsburgh, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"William H.","family":"Winsborough","sequence":"additional","affiliation":[{"name":"The University of Texas at San Antonio, San Antonio, TX, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2013,6,12]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"HIPAA ENCODING. http:\/\/galadriel.cs.utsa.edu\/~ochowdhu\/HIPAA-POLICY\/.  HIPAA ENCODING. http:\/\/galadriel.cs.utsa.edu\/~ochowdhu\/HIPAA-POLICY\/."},{"key":"e_1_3_2_1_3_1","first-page":"106","author":"Senate","year":"1999","unstructured":"Senate banking committee , Gramm-Leach-Bliley Act , 1999 . Public Law 106 -- 102 . Senate banking committee, Gramm-Leach-Bliley Act, 1999. Public Law 106--102.","journal-title":"Gramm-Leach-Bliley Act"},{"key":"e_1_3_2_1_4_1","unstructured":"Enterprise privacy authorization language (EPAL) version 1.2 Nov. 2003. http:\/\/www.zurich.ibm.com\/pri\/projects\/epal.html.  Enterprise privacy authorization language (EPAL) version 1.2 Nov. 2003. http:\/\/www.zurich.ibm.com\/pri\/projects\/epal.html."},{"key":"e_1_3_2_1_5_1","volume-title":"Distributed Systems: Methods and Tools for Specification '85","author":"Alford M. W.","unstructured":"M. W. Alford and \u03b7l, editors. Distributed Systems: Methods and Tools for Specification '85 , LNCS. M. W. Alford and \u03b7l, editors. Distributed Systems: Methods and Tools for Specification '85, LNCS."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1016\/0020-0190(85)90056-0"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1007\/BF01782772"},{"key":"e_1_3_2_1_9_1","series-title":"Lecture Notes in Computer Science.","volume-title":"Real-Time: Theory in Practice","author":"Alur R.","year":"1992","unstructured":"R. Alur and T. Henzinger . Logics and models of real time: A survey . In Real-Time: Theory in Practice , Lecture Notes in Computer Science. 1992 . R. Alur and T. Henzinger. Logics and models of real time: A survey. In Real-Time: Theory in Practice, Lecture Notes in Computer Science. 1992."},{"key":"e_1_3_2_1_10_1","volume-title":"Clinics fined$4.3 million for hipaa violations","year":"2011","unstructured":"amednews.com. Clinics fined$4.3 million for hipaa violations , 2011 . Available attextithttp:\/\/www.ama-assn.org\/amednews\/2011\/03\/07\/bisb0307.htm. amednews.com. Clinics fined$4.3 million for hipaa violations, 2011. Available attextithttp:\/\/www.ama-assn.org\/amednews\/2011\/03\/07\/bisb0307.htm."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.32"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2007.26"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1809842.1809849"},{"key":"e_1_3_2_1_14_1","volume-title":"RV","author":"Basin D. A.","year":"2012","unstructured":"D. A. Basin , F. Klaedtke , S. Marinovic , and E. Zalinescu . Monitoring compliance policies over incomplete and disagreeing logs . In RV , 2012 . D. A. Basin, F. Klaedtke, S. Marinovic, and E. Zalinescu. Monitoring compliance policies over incomplete and disagreeing logs. In RV, 2012."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2007.70746"},{"key":"e_1_3_2_1_16_1","volume-title":"Proceedings of LMPS'60","author":"B\u00fcchi J. R.","year":"1962","unstructured":"J. R. B\u00fcchi . On a decision method in restricted second order arithmetic . In Proceedings of LMPS'60 , 1962 . J. R. B\u00fcchi. On a decision method in restricted second order arithmetic. In Proceedings of LMPS'60, 1962."},{"key":"e_1_3_2_1_17_1","unstructured":"O. Chowdhury H. Chen J. Niu N. Li and E. Bertino. On xacml's adequacy to specify and to enforce hipaa. In HealthSec'12.   O. Chowdhury H. Chen J. Niu N. Li and E. Bertino. On xacml's adequacy to specify and to enforce hipaa. In HealthSec'12."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/2295136.2295144"},{"key":"e_1_3_2_1_19_1","volume-title":"The Ponder Policy Specification Language. In IEEE POLICY '01","author":"Damianou D.","unstructured":"D. Damianou , N. Dulay , E. Lupu , and M. Sloman . The Ponder Policy Specification Language. In IEEE POLICY '01 . D. Damianou, N. Dulay, E. Lupu, and M. Sloman. The Ponder Policy Specification Language. In IEEE POLICY '01."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1016\/0020-0190(90)90181-V"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/1866919.1866930"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-89247-2_6"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.5555\/2393847.2393881"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"crossref","unstructured":"E. A. Emerson. Handbook of theoretical computer science. chapter Temporal and modal logic pages 995--1072. 1990.   E. A. Emerson. Handbook of theoretical computer science. chapter Temporal and modal logic pages 995--1072. 1990.","DOI":"10.1016\/B978-0-444-88074-1.50021-4"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/199448.199468"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/501978.501980"},{"key":"e_1_3_2_1_27_1","first-page":"35","volume-title":"The imperative future","author":"Gabbay D.","year":"1996","unstructured":"D. Gabbay . The imperative future . chapter : The declarative past and imperative future, pages 35 -- 67 . John Wiley & Sons, Inc. , New York, NY, USA , 1996 . D. Gabbay. The imperative future. chapter : The declarative past and imperative future, pages 35--67. John Wiley & Sons, Inc., New York, NY, USA, 1996."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046726"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"crossref","DOI":"10.21236\/ADA579934","volume-title":"A logical method for policy enforcement over evolving audit logs. CoRR, abs\/1102.2521","author":"Garg D.","year":"2011","unstructured":"D. Garg , L. Jia , and A. Datta . A logical method for policy enforcement over evolving audit logs. CoRR, abs\/1102.2521 , 2011 . D. Garg, L. Jia, and A. Datta. A logical method for policy enforcement over evolving audit logs. CoRR, abs\/1102.2521, 2011."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/360303.360333"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.5555\/2944225.2944368"},{"key":"e_1_3_2_1_32_1","unstructured":"K. Havelund and G. Rosu. Synthesizing monitors for safety properties. In TACAS' 02.   K. Havelund and G. Rosu. Synthesizing monitors for safety properties. In TACAS' 02."},{"key":"e_1_3_2_1_33_1","volume-title":"Health insurance portability and accountability act","author":"Health Resources and Services Administration","year":"1996","unstructured":"Health Resources and Services Administration . Health insurance portability and accountability act , 1996 . Public Law 104--191. Health Resources and Services Administration. Health insurance portability and accountability act, 1996. Public Law 104--191."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1016\/S0168-0072(00)00018-X"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/32.588521"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180423"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1007\/BF01995674"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.5555\/1370684.1370686"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jcss.2011.08.006"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/2110363.2110401"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-03748-1_8"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.1977.229904"},{"key":"e_1_3_2_1_43_1","volume-title":"REX Workshop '88","author":"Manna Z.","unstructured":"Z. Manna and A. Pnueli . The anchored version of the temporal framework . In REX Workshop '88 . Z. Manna and A. Pnueli. The anchored version of the temporal framework. In REX Workshop '88."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"crossref","DOI":"10.1007\/978-1-4612-4222-2","volume-title":"Temporal verification of reactive systems: safety","author":"Manna Z.","year":"1995","unstructured":"Z. Manna and A. Pnueli . Temporal verification of reactive systems: safety . Springer-Verlag New York, Inc. , New York, NY, USA , 1995 . Z. Manna and A. Pnueli. Temporal verification of reactive systems: safety. Springer-Verlag New York, Inc., New York, NY, USA, 1995."},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSFW.2006.24"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/1266840.1266848"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/357172.357178"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/SFCS.1977.32"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/1998441.1998473"},{"key":"e_1_3_2_1_50_1","volume-title":"Synthesizing dynamic programming algorithms from linear temporal logic formulae. Technical report","author":"Ro\u015fu G.","year":"2001","unstructured":"G. Ro\u015fu and K. Havelund . Synthesizing dynamic programming algorithms from linear temporal logic formulae. Technical report , 2001 . G. Ro\u015fu and K. Havelund. Synthesizing dynamic programming algorithms from linear temporal logic formulae. Technical report, 2001."},{"key":"e_1_3_2_1_51_1","volume-title":"Sarbanes-oxley act","author":"Securities and Exchange Commission","year":"2002","unstructured":"Securities and Exchange Commission . Sarbanes-oxley act , 2002 . Public Law 107--204. Securities and Exchange Commission. Sarbanes-oxley act, 2002. Public Law 107--204."},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1007\/BF01211865"},{"key":"e_1_3_2_1_53_1","volume-title":"TACAS '11","author":"Tsay Y.-K.","unstructured":"Y.-K. Tsay , M.-H. Tsai , J.-S. Chang , and Y.-W. Chang . B\u00fcchi store : An open repository of b\u00fcchi automata . In TACAS '11 . Y.-K. Tsay, M.-H. Tsai, J.-S. Chang, and Y.-W. Chang. B\u00fcchi store : An open repository of b\u00fcchi automata. In TACAS '11."},{"key":"e_1_3_2_1_54_1","volume-title":"ICSE '81","author":"Weiser M.","unstructured":"M. Weiser . Program slicing . In ICSE '81 . M. Weiser. Program slicing. In ICSE '81."},{"key":"e_1_3_2_1_55_1","unstructured":"XACML TC. Oasis extensible access control markup language (xacml).  XACML TC. Oasis extensible access control markup language (xacml)."}],"event":{"name":"SACMAT '13: 18th ACM Symposium on Access Control Models and Technologies","location":"Amsterdam The Netherlands","acronym":"SACMAT '13","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 18th ACM symposium on Access control models and technologies"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2462410.2462423","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2462410.2462423","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T08:18:30Z","timestamp":1750234710000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2462410.2462423"}},"subtitle":["a policy analysis method with application to the HIPAA privacy rule"],"short-title":[],"issued":{"date-parts":[[2013,6,12]]},"references-count":53,"alternative-id":["10.1145\/2462410.2462423","10.1145\/2462410"],"URL":"https:\/\/doi.org\/10.1145\/2462410.2462423","relation":{},"subject":[],"published":{"date-parts":[[2013,6,12]]},"assertion":[{"value":"2013-06-12","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}