{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,17]],"date-time":"2026-10-17T16:21:35Z","timestamp":1792254095380,"version":"4.4.0"},"publisher-location":"New York, NY, USA","reference-count":34,"publisher":"ACM","license":[{"start":{"date-parts":[[2018,4,9]],"date-time":"2018-04-09T00:00:00Z","timestamp":1523232000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Research Fund KU Leuven"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2018,4,9]]},"DOI":"10.1145\/3167132.3167285","type":"proceedings-article","created":{"date-parts":[[2018,7,3]],"date-time":"2018-07-03T13:54:10Z","timestamp":1530626050000},"page":"1425-1432","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":50,"title":["Solution-aware data flow diagrams for security threat modeling"],"prefix":"10.1145","author":[{"given":"Laurens","family":"Sion","sequence":"first","affiliation":[{"name":"imec-DistriNet, KU Leuven, Heverlee, Belgium"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Koen","family":"Yskout","sequence":"additional","affiliation":[{"name":"imec-DistriNet, KU Leuven, Heverlee, Belgium"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dimitri","family":"Van Landuyt","sequence":"additional","affiliation":[{"name":"imec-DistriNet, KU Leuven, Heverlee, Belgium"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wouter","family":"Joosen","sequence":"additional","affiliation":[{"name":"imec-DistriNet, KU Leuven, Heverlee, Belgium"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2018,4,9]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Towards a Principled Approach for Engineering Privacy by Design","author":"Alshammari M.","year":"2016","unstructured":"M. Alshammari and A. Simpson . Towards a Principled Approach for Engineering Privacy by Design . 2016 . M. Alshammari and A. Simpson. Towards a Principled Approach for Engineering Privacy by Design. 2016."},{"key":"e_1_3_2_1_2_1","first-page":"942","volume-title":"A Privacy-Aware Conceptual Model for Handling Personal Data","author":"Antignac T.","year":"2016","unstructured":"T. Antignac , R. Scandariato , and G. Schneider . A Privacy-Aware Conceptual Model for Handling Personal Data , pages 942 -- 957 . Springer , 2016 . T. Antignac, R. Scandariato, and G. Schneider. A Privacy-Aware Conceptual Model for Handling Personal Data, pages 942--957. Springer, 2016."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.5555\/1618560"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.5555\/2392670"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-30806-7_4"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.5555\/1102012"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00766-010-0115-7"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2011.47"},{"key":"e_1_3_2_1_9_1","unstructured":"European Union. Regulation (EU) 2016\/679. Official Journal of the European Union 59(L 119):1--88 may2016.  European Union. Regulation (EU) 2016\/679. Official Journal of the European Union 59(L 119):1--88 may2016."},{"key":"e_1_3_2_1_10_1","volume-title":"Security patterns in practice: designing secure architectures using software patterns","author":"Fernandez-Buglioni E.","year":"2013","unstructured":"E. Fernandez-Buglioni . Security patterns in practice: designing secure architectures using software patterns . John Wiley & Sons , 2013 . E. Fernandez-Buglioni. Security patterns in practice: designing secure architectures using software patterns. John Wiley & Sons, 2013."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/32.129221"},{"key":"e_1_3_2_1_12_1","volume-title":"Structured Systems Analysis: Tools and Techniques","author":"Gane C.","year":"1979","unstructured":"C. Gane and T. Sarson . Structured Systems Analysis: Tools and Techniques . Prentice Hall Ptr , 1979 . C. Gane and T. Sarson. Structured Systems Analysis: Tools and Techniques. Prentice Hall Ptr, 1979."},{"key":"e_1_3_2_1_13_1","volume-title":"September","author":"Project RTC","year":"2017","unstructured":"Google. Web RTC Project . https:\/\/webrtc.org\/ , September 2017 . Google. WebRTC Project. https:\/\/webrtc.org\/, September 2017."},{"key":"e_1_3_2_1_14_1","volume-title":"Threat Modeling: Uncover Security Design Flaws Using The STRIDE Approach. MSDN Magazine, 6, nov","author":"Hernan S.","year":"2006","unstructured":"S. Hernan , S. Lambert , T. Ostwald , and A. Shostack . Threat Modeling: Uncover Security Design Flaws Using The STRIDE Approach. MSDN Magazine, 6, nov 2006 . S. Hernan, S. Lambert, T. Ostwald, and A. Shostack. Threat Modeling: Uncover Security Design Flaws Using The STRIDE Approach. MSDN Magazine, 6, nov 2006."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.5555\/1202957"},{"key":"e_1_3_2_1_16_1","first-page":"2011","article-title":"Systems and software engineering - Architecture description","volume":"42010","author":"IEEE.","year":"2011","unstructured":"ISO\/IEC\/ IEEE. ISO\/IEC\/IEEE Systems and software engineering - Architecture description . ISO\/IEC\/IEEE 42010 : 2011 (E), 1:1--46, 2011 . ISO\/IEC\/IEEE. ISO\/IEC\/IEEE Systems and software engineering - Architecture description. ISO\/IEC\/IEEE 42010:2011(E), 1:1--46, 2011.","journal-title":"ISO\/IEC\/IEEE"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/WICSA.2005.61"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2014.05.452"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/RCIS.2016.7549303"},{"key":"e_1_3_2_1_20_1","volume-title":"building security","author":"McGraw G.","year":"2006","unstructured":"G. McGraw . Software security : building security in. Addison-Wesley Professional , 2006 . G. McGraw. Software security: building security in. Addison-Wesley Professional, 2006."},{"key":"e_1_3_2_1_21_1","first-page":"t2016","author":"Microsoft Corporation","year":"2016","unstructured":"Microsoft Corporation . Microsoft Threat Modeling Tool 2016 . http:\/\/aka.ms\/tm t2016 , 2016. Microsoft Corporation. Microsoft Threat Modeling Tool 2016. http:\/\/aka.ms\/tmt2016, 2016.","journal-title":"Microsoft Threat Modeling Tool"},{"key":"e_1_3_2_1_22_1","volume-title":"OWASP","author":"OWASP.","year":"2017","unstructured":"OWASP. Software Assurance Maturity Model Version 1.5. Technical report , OWASP , 2017 . OWASP. Software Assurance Maturity Model Version 1.5. Technical report, OWASP, 2017."},{"key":"e_1_3_2_1_23_1","volume-title":"Asset-Centric Security Risk Assessment of Software Components. 2nd International Workshop on MILS: Architecture and Assurance for Secure Systems","author":"Rauter T.","year":"2016","unstructured":"T. Rauter , N. Kajtazovic , and C. Kreiner . Asset-Centric Security Risk Assessment of Software Components. 2nd International Workshop on MILS: Architecture and Assurance for Secure Systems , 2016 . T. Rauter, N. Kajtazovic, and C. Kreiner. Asset-Centric Security Risk Assessment of Software Components. 2nd International Workshop on MILS: Architecture and Assurance for Secure Systems, 2016."},{"key":"e_1_3_2_1_24_1","volume-title":"Attack trees","author":"Schneier B.","year":"1999","unstructured":"B. Schneier . Attack trees . 1999 . B. Schneier. Attack trees. 1999."},{"key":"e_1_3_2_1_25_1","volume-title":"Modeling Security Workshop. Dept. of Computing","author":"Shostack A.","year":"2008","unstructured":"A. Shostack . Experiences threat modeling at microsoft . In Modeling Security Workshop. Dept. of Computing , Lancaster University, UK , 2008 . A. Shostack. Experiences threat modeling at microsoft. In Modeling Security Workshop. Dept. of Computing, Lancaster University, UK, 2008."},{"key":"e_1_3_2_1_26_1","volume-title":"Designing for Security","author":"Shostack A.","year":"2014","unstructured":"A. Shostack . Threat Modeling : Designing for Security . John Wiley & Sons , Indianapolis, Indiana , 2014 . A. Shostack. Threat Modeling: Designing for Security. John Wiley & Sons, Indianapolis, Indiana, 2014."},{"key":"e_1_3_2_1_27_1","volume-title":"Companion site. https:\/\/people.cs.kuleuven.be\/laurens.sion\/sac2018\/","author":"Sion L.","year":"2017","unstructured":"L. Sion , K. Yskout , D. Van Landuyt , and W. Joosen . Companion site. https:\/\/people.cs.kuleuven.be\/laurens.sion\/sac2018\/ , 2017 . L. Sion, K. Yskout, D. Van Landuyt, and W. Joosen. Companion site. https:\/\/people.cs.kuleuven.be\/laurens.sion\/sac2018\/, 2017."},{"key":"e_1_3_2_1_28_1","first-page":"185","volume-title":"A Holistic Risk Analysis Method for Identifying Information Security Risks","author":"Spears J. L.","year":"2005","unstructured":"J. L. Spears . A Holistic Risk Analysis Method for Identifying Information Security Risks . pages 185 -- 202 , 2005 . J. L. Spears. A Holistic Risk Analysis Method for Identifying Information Security Risks. pages 185--202, 2005."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.5555\/983226"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1016\/0164-1212(91)90029-6"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2005.119"},{"key":"e_1_3_2_1_32_1","first-page":"1","volume-title":"3rd Workshop On The Security Of Industrial Control Systems & Of Cyber-Physical Systems (CyberICPS 2017","author":"Tuma K.","year":"2017","unstructured":"K. Tuma , R. Scandariato , M. Widman , and C. Sandberg . Towards security threats that matter . In 3rd Workshop On The Security Of Industrial Control Systems & Of Cyber-Physical Systems (CyberICPS 2017 ), pages 1 -- 16 . Springer , 2017 . K. Tuma, R. Scandariato, M. Widman, and C. Sandberg. Towards security threats that matter. In 3rd Workshop On The Security Of Industrial Control Systems & Of Cyber-Physical Systems (CyberICPS 2017), pages 1--16. Springer, 2017."},{"key":"e_1_3_2_1_33_1","first-page":"329","volume-title":"Rationale Management in Software Engineering","author":"Ven J. S.","year":"2006","unstructured":"J. S. Ven , A. G. J. Jansen , J. A. G. Nijhuis , and J. Bosch . Design Decisions: The Bridge between Rationale and Architecture . In A. Dutoit, R. McCall, I. Mistrik, and B. Paech, editors, Rationale Management in Software Engineering , pages 329 -- 348 . Springer Berlin Heidelberg , 2006 . J. S. Ven, A. G. J. Jansen, J. A. G. Nijhuis, and J. Bosch. Design Decisions: The Bridge between Rationale and Architecture. In A. Dutoit, R. McCall, I. Mistrik, and B. Paech, editors, Rationale Management in Software Engineering, pages 329--348. Springer Berlin Heidelberg, 2006."},{"key":"e_1_3_2_1_35_1","volume-title":"A system of security patterns","author":"Yskout K.","year":"2006","unstructured":"K. Yskout , T. Heyman , R. Scandariato , and W. Joosen . A system of security patterns . 2006 . K. Yskout, T. Heyman, R. Scandariato, and W. Joosen. A system of security patterns. 2006."}],"event":{"name":"SAC 2018: Symposium on Applied Computing","location":"Pau France","acronym":"SAC 2018","sponsor":["SIGAPP ACM Special Interest Group on Applied Computing"]},"container-title":["Proceedings of the 33rd Annual ACM Symposium on Applied Computing"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3167132.3167285","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3167132.3167285","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T02:26:06Z","timestamp":1750213566000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3167132.3167285"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,4,9]]},"references-count":34,"alternative-id":["10.1145\/3167132.3167285","10.1145\/3167132"],"URL":"https:\/\/doi.org\/10.1145\/3167132.3167285","relation":{},"subject":[],"published":{"date-parts":[[2018,4,9]]},"assertion":[{"value":"2018-04-09","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}