{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,7]],"date-time":"2026-05-07T09:21:12Z","timestamp":1778145672393,"version":"3.51.4"},"reference-count":31,"publisher":"Sociedade Brasileira de Computacao - SB","issue":"1","license":[{"start":{"date-parts":[[2019,1,8]],"date-time":"2019-01-08T00:00:00Z","timestamp":1546905600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/100010683","name":"H2020 Security","doi-asserted-by":"publisher","award":["653704"],"award-info":[{"award-number":["653704"]}],"id":[{"id":"10.13039\/100010683","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Internet Serv Appl"],"published-print":{"date-parts":[[2019,12]]},"DOI":"10.1186\/s13174-018-0098-z","type":"journal-article","created":{"date-parts":[[2019,1,8]],"date-time":"2019-01-08T06:56:55Z","timestamp":1546930615000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":21,"title":["Pseudonymization risk analysis in distributed systems"],"prefix":"10.5753","volume":"10","author":[{"given":"Geoffrey K.","family":"Neumann","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2363-0630","authenticated-orcid":false,"given":"Paul","family":"Grace","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Daniel","family":"Burns","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mike","family":"Surridge","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"3742","published-online":{"date-parts":[[2019,1,8]]},"reference":[{"key":"98_CR1","unstructured":"Kumaraguru P, Cranor LF. Privacy indexes: a survey of westin\u2019s studies. 2005."},{"issue":"6221","key":"98_CR2","doi-asserted-by":"publisher","first-page":"509","DOI":"10.1126\/science.aaa1465","volume":"347","author":"A Acquisti","year":"2015","unstructured":"Acquisti A, Brandimarte L, Loewenstein G. Privacy and human behavior in the age of information. Science. 2015; 347(6221):509\u201314.","journal-title":"Science"},{"key":"98_CR3","unstructured":"Hildebrandt M. Profile transparency by design? re-enabling double contingency; 2013."},{"issue":"05","key":"98_CR4","doi-asserted-by":"publisher","first-page":"557","DOI":"10.1142\/S0218488502001648","volume":"10","author":"L Sweeney","year":"2002","unstructured":"Sweeney L. k-anonymity: A model for protecting privacy. Int J Uncertain Fuzziness Knowl-Based Syst. 2002; 10(05):557\u201370.","journal-title":"Int J Uncertain Fuzziness Knowl-Based Syst"},{"key":"98_CR5","doi-asserted-by":"crossref","unstructured":"Machanavajjhala A, Gehrke J, Kifer D, Venkitasubramaniam M. L-diversity: privacy beyond k-anonymity. In: 22nd International Conference on Data Engineering (ICDE\u201906): 2006. p. 24.","DOI":"10.1109\/ICDE.2006.1"},{"key":"98_CR6","doi-asserted-by":"crossref","unstructured":"Li YH, Paik H-Y, Benatallah B. Formal consistency verification between bpel process and privacy policy. In: Proceedings of the 2006 International Conference on Privacy, Security and Trust. ACM: 2006. p. 26.","DOI":"10.1145\/1501434.1501466"},{"issue":"1","key":"98_CR7","doi-asserted-by":"publisher","first-page":"259","DOI":"10.1007\/s10664-017-9517-1","volume":"23","author":"I Hadar","year":"2018","unstructured":"Hadar I, Hasson T, Ayalon O, Toch E, Birnhack M, Sherman S, Balissa A. Privacy by designers: software developers\u2019 privacy mindset. Empir Softw Eng. 2018; 23(1):259\u201389.","journal-title":"Empir Softw Eng"},{"key":"98_CR8","unstructured":"Cavoukian A. Privacy by design. Take the challenge. Information and privacy commissioner of Ontario, Canada. 2009."},{"key":"98_CR9","doi-asserted-by":"crossref","unstructured":"Grace P, Burns D, Neumann G, Pickering B, Melas P, Surridge M. Identifying privacy risks in distributed data services: A model-driven approach. In: Proceedings of the 2018 IEEE International Conference on Distributed Computing Systems. ICDCS \u201918: 2018.","DOI":"10.1109\/ICDCS.2018.00157"},{"key":"98_CR10","unstructured":"Kosa TA. Towards measuring privacy. PhD thesis, University of Ontario Institute of Technology. 2015."},{"key":"98_CR11","unstructured":"Fischer-H\u00fcbner S, Ott A. From a formal privacy model to its implementation. In: Proceedings of the 21st National Information Systems: 1998."},{"key":"98_CR12","volume-title":"Proceedings of the 12th International Conference on Availability, Reliability and Security. ARES \u201917","author":"P Grace","year":"2017","unstructured":"Grace P, Surridge M. Towards a model of user-centered privacy preservation. In: Proceedings of the 12th International Conference on Availability, Reliability and Security. ARES \u201917. New York: ACM: 2017. p. 91\u20131918."},{"key":"98_CR13","doi-asserted-by":"crossref","unstructured":"Norberg PA, Horne DR, Horne DA. The privacy paradox: Personal information disclosure intentions versus behaviors. J Consum Aff; 41(1):100\u2013126.","DOI":"10.1111\/j.1745-6606.2006.00070.x"},{"issue":"1","key":"98_CR14","doi-asserted-by":"publisher","first-page":"102","DOI":"10.14778\/1453856.1453873","volume":"1","author":"M Hay","year":"2008","unstructured":"Hay M, Miklau G, Jensen D, Towsley D, Weis P. Resisting structural re-identification in anonymized social networks. Proc VLDB Endowment. 2008; 1(1):102\u201314.","journal-title":"Proc VLDB Endowment"},{"key":"98_CR15","volume-title":"Theory and Applications of Models of Computation","author":"C Dwork","year":"2008","unstructured":"Dwork C. Differential privacy: A survey of results In: Agrawal M, Du D, Duan Z, Li A, editors. Theory and Applications of Models of Computation. Berlin: Springer: 2008. p. 1\u201319."},{"key":"98_CR16","unstructured":"Aggarwal CC. On k-anonymity and the curse of dimensionality. In: Proceedings of the 31st International Conference on Very Large Data Bases: 2005. p. 901\u20139. VLDB Endowment."},{"key":"98_CR17","first-page":"1","volume":"252","author":"CD Fryar","year":"2012","unstructured":"Fryar CD, Gu Q, Ogden CL. Anthropometric reference data for children and adults: United states, 2007-2010. Vital health statistics. Series 11, Data from the national health survey. 2012; 252:1\u201348.","journal-title":"Vital health statistics. Series 11, Data from the national health survey"},{"key":"98_CR18","volume-title":"Putting Statistical Disclosure Control into Practice: The ARX Data Anonymization Tool","author":"F Prasser","year":"2015","unstructured":"Prasser F, Kohlmayer F, Gkoulalas-Divanis A, Loukides G. Putting Statistical Disclosure Control into Practice: The ARX Data Anonymization Tool. Cham: Springer; 2015, pp. 111\u201348."},{"key":"98_CR19","doi-asserted-by":"crossref","unstructured":"Li N, Li T, Venkatasubramanian S. t-closeness: Privacy beyond k-anonymity and l-diversity. In: 2007 IEEE 23rd International Conference on Data Engineering: 2007. p. 106\u201315.","DOI":"10.1109\/ICDE.2007.367856"},{"key":"98_CR20","unstructured":"Samarati P, Sweeney L. Protecting privacy when disclosing information: k-anonymity and its enforcement through generalization and suppression. Technical report, Technical report, SRI International. 1998."},{"key":"98_CR21","doi-asserted-by":"crossref","unstructured":"Agrawal R, Srikant R. Privacy-preserving data mining. In: ACM Sigmod Record, vol. 29. ACM: 2000. p. 439\u201350.","DOI":"10.1145\/335191.335438"},{"key":"98_CR22","doi-asserted-by":"crossref","unstructured":"Aggarwal CC, Philip SY. A condensation approach to privacy preserving data mining. In: International Conference on Extending Database Technology. Springer: 2004. p. 183\u201399.","DOI":"10.1007\/978-3-540-24741-8_12"},{"key":"98_CR23","volume-title":"Proceedings of the 2006 ACM SIGMOD International Conference on Management of Data, SIGMOD \u201906","author":"X Xiao","year":"2006","unstructured":"Xiao X, Tao Y. Personalized privacy preservation. In: Proceedings of the 2006 ACM SIGMOD International Conference on Management of Data, SIGMOD \u201906. New York: ACM: 2006. p. 229\u201340."},{"key":"98_CR24","doi-asserted-by":"crossref","unstructured":"Aggarwal CC, Yu PS. On variable constraints in privacy preserving data mining. In: Proceedings of the 2005 SIAM International Conference on Data Mining. SIAM: 2005. p. 115\u201325.","DOI":"10.1137\/1.9781611972757.11"},{"key":"98_CR25","volume-title":"Proceedings of the 2009 ACM SIGMOD International Conference on Management of Data. SIGMOD \u201909","author":"X Xiao","year":"2009","unstructured":"Xiao X, Wang G, Gehrke J. Interactive anonymization of sensitive data. In: Proceedings of the 2009 ACM SIGMOD International Conference on Management of Data. SIGMOD \u201909. New York: ACM: 2009. p. 1051\u20134."},{"key":"98_CR26","unstructured":"Murtagh J, Taylor K, Kellaris G, Vadhan S. Usable Differential Privacy: A Case Study with PSI. ArXiv e-prints. 2018."},{"issue":"ICFP","key":"98_CR27","doi-asserted-by":"publisher","first-page":"10","DOI":"10.1145\/3110254","volume":"1","author":"D Winograd-Cort","year":"2017","unstructured":"Winograd-Cort D, Haeberlen A, Roth A, Pierce BC. A framework for adaptive differential privacy. Proc ACM Program Lang. 2017; 1(ICFP):10\u201311029.","journal-title":"Proc ACM Program Lang"},{"key":"98_CR28","doi-asserted-by":"crossref","unstructured":"Colombo P, Ferrari E. Towards a modeling and analysis framework for privacy-aware systems. In: 2012 International Conference on Privacy, Security, Risk and Trust and 2012 International Confernece on Social Computing: 2012. p. 81\u201390.","DOI":"10.1109\/SocialCom-PASSAT.2012.12"},{"issue":"1","key":"98_CR29","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/s00766-010-0115-7","volume":"16","author":"M Deng","year":"2011","unstructured":"Deng M, Wuyts K, Scandariato R, Preneel B, Joosen W. A privacy threat analysis framework: supporting the elicitation and fulfillment of privacy requirements. J Requir Eng. 2011; 16(1):3\u201332.","journal-title":"J Requir Eng"},{"issue":"2","key":"98_CR30","first-page":"155","volume":"41","author":"M Chinosi","year":"2009","unstructured":"Chinosi M, Trombetta A, et al. Integrating privacy policies into business processes. J Res Pract Inf Technol. 2009; 41(2):155.","journal-title":"J Res Pract Inf Technol"},{"key":"98_CR31","doi-asserted-by":"crossref","unstructured":"Short S, Kaluvuri SP. A data-centric approach for privacy-aware business process enablement. In: International IFIP Working Conference on Enterprise Interoperability. Springer: 2011. p. 191\u2013203.","DOI":"10.1007\/978-3-642-19680-5_16"}],"container-title":["Journal of Internet Services and Applications"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1186\/s13174-018-0098-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1186\/s13174-018-0098-z\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1186\/s13174-018-0098-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,2,9]],"date-time":"2022-02-09T22:15:11Z","timestamp":1644444911000},"score":1,"resource":{"primary":{"URL":"https:\/\/jisajournal.springeropen.com\/articles\/10.1186\/s13174-018-0098-z"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,1,8]]},"references-count":31,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2019,12]]}},"alternative-id":["98"],"URL":"https:\/\/doi.org\/10.1186\/s13174-018-0098-z","relation":{},"ISSN":["1867-4828","1869-0238"],"issn-type":[{"value":"1867-4828","type":"print"},{"value":"1869-0238","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,1,8]]},"assertion":[{"value":"2 May 2018","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"24 October 2018","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"8 January 2019","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"Not applicable.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethics approval and consent to participate"}},{"value":"Not applicable.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Consent for publication"}},{"value":"The authors declare that they have no competing interests.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}},{"value":"Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Publisher\u2019s Note"}}],"article-number":"1"}}