{"id":"https://openalex.org/W2913648972","doi":"https://doi.org/10.1049/iet-sen.2018.5293","title":"Service level agreement\u2010based GDPR compliance and security assurance in(multi)Cloud\u2010based systems","display_name":"Service level agreement\u2010based GDPR compliance and security assurance in(multi)Cloud\u2010based systems","publication_year":2019,"publication_date":"2019-02-01","ids":{"openalex":"https://openalex.org/W2913648972","doi":"https://doi.org/10.1049/iet-sen.2018.5293","mag":"2913648972"},"language":"en","primary_location":{"id":"doi:10.1049/iet-sen.2018.5293","doi":"https://doi.org/10.1049/iet-sen.2018.5293","is_oa":false,"landing_page_url":"https://doi.org/10.1049/iet-sen.2018.5293","pdf_url":null,"source":{"id":"https://openalex.org/S164201770","display_name":"IET Software","issn_l":"1751-8806","issn":["1751-8806","1751-8814"],"is_oa":false,"is_in_doaj":true,"is_core":true,"listed_in":["ccf-b","cwts-core","doaj","dongbi-c","jufo-1","norway-1","oarl","poland-70","russia-white-list-2"],"host_organization":"https://openalex.org/P4310311714","host_organization_name":"Institution of Engineering and Technology","host_organization_lineage":["https://openalex.org/P4310311714"],"host_organization_lineage_names":["Institution of Engineering and Technology"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IET Software","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://hdl.handle.net/11556/686","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5089953627","display_name":"Erkuden Rios","orcid":"https://orcid.org/0000-0001-5541-1091","observed_orcids":["https://orcid.org/0000-0001-5541-1091"]},"institutions":[{"id":"https://openalex.org/I4210113430","display_name":"Tecnalia","ror":"https://ror.org/02fv8hj62","country_code":"ES","type":"other","lineage":["https://openalex.org/I4210113430"]}],"countries":["ES"],"is_corresponding":true,"raw_author_name":"Erkuden Rios","raw_affiliation_strings":["Fundaci\u00f3n Tecnalia Research & Innovation Derio Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fundaci\u00f3n Tecnalia Research & Innovation Derio Spain","institution_ids":["https://openalex.org/I4210113430"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041721050","display_name":"Eider Iturbe","orcid":"https://orcid.org/0000-0002-5458-6049","observed_orcids":["https://orcid.org/0000-0002-5458-6049"]},"institutions":[{"id":"https://openalex.org/I4210113430","display_name":"Tecnalia","ror":"https://ror.org/02fv8hj62","country_code":"ES","type":"other","lineage":["https://openalex.org/I4210113430"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Eider Iturbe","raw_affiliation_strings":["Fundaci\u00f3n Tecnalia Research & Innovation Derio Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fundaci\u00f3n Tecnalia Research & Innovation Derio Spain","institution_ids":["https://openalex.org/I4210113430"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011676336","display_name":"Xabier Larrucea","orcid":"https://orcid.org/0000-0002-6402-922X","observed_orcids":["https://orcid.org/0000-0002-6402-922X"]},"institutions":[{"id":"https://openalex.org/I4210113430","display_name":"Tecnalia","ror":"https://ror.org/02fv8hj62","country_code":"ES","type":"other","lineage":["https://openalex.org/I4210113430"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Xabier Larrucea","raw_affiliation_strings":["Fundaci\u00f3n Tecnalia Research & Innovation Derio Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fundaci\u00f3n Tecnalia Research & Innovation Derio Spain","institution_ids":["https://openalex.org/I4210113430"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068111307","display_name":"Massimiliano Rak","orcid":"https://orcid.org/0000-0001-6708-4032","observed_orcids":["https://orcid.org/0000-0001-6708-4032"]},"institutions":[{"id":"https://openalex.org/I197809005","display_name":"University of Campania \"Luigi Vanvitelli\"","ror":"https://ror.org/02kqnpp86","country_code":"IT","type":"education","lineage":["https://openalex.org/I197809005"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Massimiliano Rak","raw_affiliation_strings":["University of Campania Studies Luigi Vanvitelli, Naples, Italy"],"raw_orcid":"https://orcid.org/0000-0001-6708-4032","affiliations":[{"raw_affiliation_string":"University of Campania Studies Luigi Vanvitelli, Naples, Italy","institution_ids":["https://openalex.org/I197809005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084443011","display_name":"Wissam Mallouli","orcid":"https://orcid.org/0000-0003-2548-6628","observed_orcids":["https://orcid.org/0000-0003-2548-6628"]},"institutions":[{"id":"https://openalex.org/I4210118939","display_name":"Montimage (France)","ror":"https://ror.org/02a8qtz61","country_code":"FR","type":"company","lineage":["https://openalex.org/I4210118939"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Wissam Mallouli","raw_affiliation_strings":["Montimage Research & Development Paris France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Montimage Research & Development Paris France","institution_ids":["https://openalex.org/I4210118939"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010904816","display_name":"Jacek Dominiak","orcid":"https://orcid.org/0000-0002-8080-5233","observed_orcids":["https://orcid.org/0000-0002-8080-5233"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jacek Dominiak","raw_affiliation_strings":["CA Technologies, Warszaw, Poland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CA Technologies, Warszaw, Poland","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008655642","display_name":"Victor Munt\u00e9s","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Victor Munt\u00e9s","raw_affiliation_strings":["CA Technologies, Barcelona, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CA Technologies, Barcelona, Spain","institution_ids":[]}]},{"author_position":"middle","author":{"id":null,"display_name":"Peter Matthews","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Peter Matthews","raw_affiliation_strings":["CA Technologies, Berkshire, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CA Technologies, Berkshire, UK","institution_ids":[]}]},{"author_position":"last","author":{"id":null,"display_name":"Luis Gonzalez","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4387152565","display_name":"Tampere University of Technology","ror":"https://ror.org/02ba3pt07","country_code":"FI","type":"education","lineage":["https://openalex.org/I166825849","https://openalex.org/I4387152565"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Luis Gonzalez","raw_affiliation_strings":["FAST Laboratory, Tampere University of Technology, Tampere, Finland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"FAST Laboratory, Tampere University of Technology, Tampere, Finland","institution_ids":["https://openalex.org/I4387152565"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5089953627"],"corresponding_institution_ids":["https://openalex.org/I4210113430"],"apc_list":{"value":2210,"currency":"USD","value_usd":2210},"apc_paid":null,"fwci":5.5393,"has_fulltext":false,"cited_by_count":44,"citation_normalized_percentile":{"value":0.95957757,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":99},"biblio":{"volume":"13","issue":"3","first_page":"213","last_page":"222"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9390000104904175,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9390000104904175,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.017000000923871994,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13364","display_name":"Digitalization, Law, and Regulation","score":0.009399999864399433,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/gdpr-compliance","display_name":"GDPR compliance","score":0.9490000009536743},{"id":"https://openalex.org/keywords/service-level-agreements","display_name":"service level agreements","score":0.8149999976158142},{"id":"https://openalex.org/keywords/multi-cloud-systems","display_name":"multi-cloud systems","score":0.7480000257492065},{"id":"https://openalex.org/keywords/cloud-security","display_name":"cloud security","score":0.7080000042915344},{"id":"https://openalex.org/keywords/privacy-control","display_name":"privacy control","score":0.6740000247955322},{"id":"https://openalex.org/keywords/security-assurance","display_name":"security assurance","score":0.8690000176429749},{"id":"https://openalex.org/keywords/runtime-monitoring","display_name":"runtime monitoring","score":0.8270000219345093},{"id":"https://openalex.org/keywords/data-protection-regulation","display_name":"data protection regulation","score":0.5220000147819519},{"id":"https://openalex.org/keywords/evidence-collection","display_name":"evidence collection","score":0.367000013589859}],"concepts":[{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.7525175213813782},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.691977858543396},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6835685968399048},{"id":"https://openalex.org/C3090818","wikidata":"https://www.wikidata.org/wiki/Q1172506","display_name":"General Data Protection Regulation","level":3,"score":0.660387396812439},{"id":"https://openalex.org/C2778160497","wikidata":"https://www.wikidata.org/wiki/Q869830","display_name":"Service-level agreement","level":3,"score":0.5870128273963928},{"id":"https://openalex.org/C2780233690","wikidata":"https://www.wikidata.org/wiki/Q535347","display_name":"Transparency (behavior)","level":2,"score":0.499739408493042},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.4982166290283203},{"id":"https://openalex.org/C2777407602","wikidata":"https://www.wikidata.org/wiki/Q1888932","display_name":"Mandatory access control","level":4,"score":0.4959343373775482},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4848969578742981},{"id":"https://openalex.org/C193934123","wikidata":"https://www.wikidata.org/wiki/Q7246028","display_name":"Privacy by Design","level":3,"score":0.46564731001853943},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.45985040068626404},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.44784843921661377},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.4330313205718994},{"id":"https://openalex.org/C9903902","wikidata":"https://www.wikidata.org/wiki/Q3025536","display_name":"DevOps","level":3,"score":0.4231144189834595},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.4202900528907776},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.3859560489654541},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3715834617614746},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.3536195755004883},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2865799069404602},{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.11261466145515442},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.07877179980278015},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1049/iet-sen.2018.5293","doi":"https://doi.org/10.1049/iet-sen.2018.5293","is_oa":false,"landing_page_url":"https://doi.org/10.1049/iet-sen.2018.5293","pdf_url":null,"source":{"id":"https://openalex.org/S164201770","display_name":"IET Software","issn_l":"1751-8806","issn":["1751-8806","1751-8814"],"is_oa":false,"is_in_doaj":true,"is_core":true,"listed_in":["ccf-b","cwts-core","doaj","dongbi-c","jufo-1","norway-1","oarl","poland-70","russia-white-list-2"],"host_organization":"https://openalex.org/P4310311714","host_organization_name":"Institution of Engineering and Technology","host_organization_lineage":["https://openalex.org/P4310311714"],"host_organization_lineage_names":["Institution of Engineering and Technology"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IET Software","raw_type":"journal-article"},{"id":"pmh:oai:dnet:tecnaliapubl::bc93b24d545b738865f7c41d38db67a7","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/11556/686","pdf_url":null,"source":{"id":"https://openalex.org/S4306402641","display_name":"LA Referencia (Red Federada de Repositorios Institucionales de Publicaciones Cient\u00edficas)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4383465926","host_organization_name":"LA Referencia","host_organization_lineage":["https://openalex.org/I4383465926"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:dsp.tecnalia.com:11556/686","doi":null,"is_oa":true,"landing_page_url":"https://dsp.tecnalia.com/bitstreams/4faeec37-8d35-4d81-a99c-a0be87f90a05/download","pdf_url":null,"source":{"id":"https://openalex.org/S4306402037","display_name":"TECNALIA Publications (Fundaci\u00f3n TECNALIA Research & Innovation)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4210113430","host_organization_name":"Tecnalia","host_organization_lineage":["https://openalex.org/I4210113430"],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"journal article"},{"id":"pmh:oai:iris.unicampania.it:11591/402808","doi":null,"is_oa":false,"landing_page_url":"http://hdl.handle.net/11591/402808","pdf_url":null,"source":{"id":"https://openalex.org/S7407055255","display_name":"Archivio Istituzionale della Ricerca - Universit\u00e0 degli Studi della Campania \"Luigi Vanvitelli\"","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"pmh:oai:dnet:tecnaliapubl::bc93b24d545b738865f7c41d38db67a7","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/11556/686","pdf_url":null,"source":{"id":"https://openalex.org/S4306402641","display_name":"LA Referencia (Red Federada de Repositorios Institucionales de Publicaciones Cient\u00edficas)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4383465926","host_organization_name":"LA Referencia","host_organization_lineage":["https://openalex.org/I4383465926"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/article"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G5791376097","display_name":null,"funder_award_id":"644429","funder_id":"https://openalex.org/F4320332999","funder_display_name":"Horizon 2020 Framework Programme"},{"id":"https://openalex.org/G722232623","display_name":null,"funder_award_id":"780351","funder_id":"https://openalex.org/F4320332999","funder_display_name":"Horizon 2020 Framework Programme"}],"funders":[{"id":"https://openalex.org/F4320332999","display_name":"Horizon 2020 Framework Programme","ror":"https://ror.org/00k4n6c32"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W1580995791","https://openalex.org/W1982026743","https://openalex.org/W2086064930","https://openalex.org/W2331614211","https://openalex.org/W2517419853","https://openalex.org/W2582831480","https://openalex.org/W2606520092","https://openalex.org/W2725049274","https://openalex.org/W2725480740","https://openalex.org/W2744277773","https://openalex.org/W2778473028","https://openalex.org/W2892759841","https://openalex.org/W2904915737","https://openalex.org/W2910605743","https://openalex.org/W4251773444"],"related_works":["https://openalex.org/W4400977400","https://openalex.org/W3164359865","https://openalex.org/W4224033712","https://openalex.org/W7079641830","https://openalex.org/W4393311903","https://openalex.org/W6904585608","https://openalex.org/W3095486301","https://openalex.org/W2794893474","https://openalex.org/W4387007685","https://openalex.org/W2988468872"],"abstract_inverted_index":{"Compliance":[0],"with":[1],"the":[2,60,86,99],"new":[3],"European":[4],"General":[5],"Data":[6],"Protection":[7],"Regulation":[8],"(Regulation":[9],"(EU)":[10],"2016/679,":[11],"GDPR)":[12],"and":[13,29,34,54,63,78,94,104,109],"security":[14,30,64,95],"assurance":[15],"are":[16],"currently":[17],"two":[18],"major":[19],"challenges":[20],"of":[21,92],"Cloud\u2010based":[22],"systems.":[23],"GDPR":[24],"compliance":[25],"implies":[26],"both":[27],"privacy":[28,62,93],"mechanisms":[31],"definition,":[32],"enforcement":[33,80,110],"control,":[35],"including":[36],"evidence":[37],"collection.":[38],"This":[39],"study":[40],"presents":[41],"a":[42],"novel":[43],"DevOps":[44],"framework":[45,83],"aimed":[46],"at":[47,89,111],"supporting":[48],"Cloud":[49],"consumers":[50],"in":[51,73,98,105],"designing,":[52],"deploying":[53],"operating":[55],"(multi)Cloud":[56],"systems":[57],"that":[58],"include":[59],"necessary":[61],"controls":[65],"for":[66],"ensuring":[67],"transparency":[68],"to":[69],"end\u2010users,":[70],"third":[71],"parties":[72],"service":[74,101],"provision":[75],"(if":[76],"any)":[77],"law":[79],"authorities.":[81],"The":[82],"relies":[84],"on":[85],"risk\u2010driven":[87],"specification":[88],"design":[90],"time":[91],"level":[96,102],"objectives":[97],"system":[100],"agreement":[103],"their":[106],"continuous":[107],"monitoring":[108],"runtime.":[112]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":7},{"year":2020,"cited_by_count":6},{"year":2019,"cited_by_count":3}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2019-02-21T00:00:00"}