{"id":"https://openalex.org/W2055319964","doi":"https://doi.org/10.1108/10662240610710996","title":"Security patterns and requirements for internet\u2010based applications","display_name":"Security patterns and requirements for internet\u2010based applications","publication_year":2006,"publication_date":"2006-10-01","ids":{"openalex":"https://openalex.org/W2055319964","doi":"https://doi.org/10.1108/10662240610710996","mag":"2055319964"},"language":"en","primary_location":{"id":"doi:10.1108/10662240610710996","is_oa":false,"landing_page_url":"https://doi.org/10.1108/10662240610710996","pdf_url":null,"source":{"id":"https://openalex.org/S63576417","display_name":"Internet Research","issn_l":"1066-2243","issn":["1066-2243","2054-5657"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Internet Research","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5032305592","display_name":"David G. Rosado","orcid":"https://orcid.org/0000-0003-4613-5501"},"institutions":[{"id":"https://openalex.org/I79189158","display_name":"University of Castilla-La Mancha","ror":"https://ror.org/05r78ng12","country_code":"ES","type":"education","lineage":["https://openalex.org/I79189158"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"David G. Rosado","raw_affiliation_strings":["ALARCOS Research Group, Information Systems and Technologies Department, UCLM\u2010Soluziona Research and Development Institute, University of Castilla\u2010La Mancha, Escuela Superior de Inform\u00e1tica, Ciudad Real, Spain","(ALARCOS Research Group, Information Systems and Technologies Department, UCLM\u2010Soluziona Research and Development Institute, University of Castilla\u2010La Mancha, Escuela Superior de Inform\u00e1tica, Ciudad Real, Spain)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ALARCOS Research Group, Information Systems and Technologies Department, UCLM\u2010Soluziona Research and Development Institute, University of Castilla\u2010La Mancha, Escuela Superior de Inform\u00e1tica, Ciudad Real, Spain","institution_ids":["https://openalex.org/I79189158"]},{"raw_affiliation_string":"(ALARCOS Research Group, Information Systems and Technologies Department, UCLM\u2010Soluziona Research and Development Institute, University of Castilla\u2010La Mancha, Escuela Superior de Inform\u00e1tica, Ciudad Real, Spain)","institution_ids":["https://openalex.org/I79189158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057603637","display_name":"Carlos Guti\u00e9rrez","orcid":"https://orcid.org/0000-0002-6234-7849"},"institutions":[{"id":"https://openalex.org/I79189158","display_name":"University of Castilla-La Mancha","ror":"https://ror.org/05r78ng12","country_code":"ES","type":"education","lineage":["https://openalex.org/I79189158"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Carlos Guti\u00e9rrez","raw_affiliation_strings":["ALARCOS Research Group, Information Systems and Technologies Department, UCLM\u2010Soluziona Research and Development Institute, University of Castilla\u2010La Mancha, Escuela Superior de Inform\u00e1tica, Ciudad Real, Spain","(ALARCOS Research Group, Information Systems and Technologies Department, UCLM\u2010Soluziona Research and Development Institute, University of Castilla\u2010La Mancha, Escuela Superior de Inform\u00e1tica, Ciudad Real, Spain)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ALARCOS Research Group, Information Systems and Technologies Department, UCLM\u2010Soluziona Research and Development Institute, University of Castilla\u2010La Mancha, Escuela Superior de Inform\u00e1tica, Ciudad Real, Spain","institution_ids":["https://openalex.org/I79189158"]},{"raw_affiliation_string":"(ALARCOS Research Group, Information Systems and Technologies Department, UCLM\u2010Soluziona Research and Development Institute, University of Castilla\u2010La Mancha, Escuela Superior de Inform\u00e1tica, Ciudad Real, Spain)","institution_ids":["https://openalex.org/I79189158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053366224","display_name":"Eduardo Fern\u00e1ndez\u2010Medina","orcid":"https://orcid.org/0000-0003-2553-9320"},"institutions":[{"id":"https://openalex.org/I79189158","display_name":"University of Castilla-La Mancha","ror":"https://ror.org/05r78ng12","country_code":"ES","type":"education","lineage":["https://openalex.org/I79189158"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Eduardo Fern\u00e1ndez\u2010Medina","raw_affiliation_strings":["ALARCOS Research Group, Information Systems and Technologies Department, UCLM\u2010Soluziona Research and Development Institute, University of Castilla\u2010La Mancha, Escuela Superior de Inform\u00e1tica, Ciudad Real, Spain","(ALARCOS Research Group, Information Systems and Technologies Department, UCLM\u2010Soluziona Research and Development Institute, University of Castilla\u2010La Mancha, Escuela Superior de Inform\u00e1tica, Ciudad Real, Spain)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ALARCOS Research Group, Information Systems and Technologies Department, UCLM\u2010Soluziona Research and Development Institute, University of Castilla\u2010La Mancha, Escuela Superior de Inform\u00e1tica, Ciudad Real, Spain","institution_ids":["https://openalex.org/I79189158"]},{"raw_affiliation_string":"(ALARCOS Research Group, Information Systems and Technologies Department, UCLM\u2010Soluziona Research and Development Institute, University of Castilla\u2010La Mancha, Escuela Superior de Inform\u00e1tica, Ciudad Real, Spain)","institution_ids":["https://openalex.org/I79189158"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5083263115","display_name":"Mario Piattini","orcid":"https://orcid.org/0000-0002-7212-8279"},"institutions":[{"id":"https://openalex.org/I79189158","display_name":"University of Castilla-La Mancha","ror":"https://ror.org/05r78ng12","country_code":"ES","type":"education","lineage":["https://openalex.org/I79189158"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Mario Piattini","raw_affiliation_strings":["ALARCOS Research Group, Information Systems and Technologies Department, UCLM\u2010Soluziona Research and Development Institute, University of Castilla\u2010La Mancha, Escuela Superior de Inform\u00e1tica, Ciudad Real, Spain","(ALARCOS Research Group, Information Systems and Technologies Department, UCLM\u2010Soluziona Research and Development Institute, University of Castilla\u2010La Mancha, Escuela Superior de Inform\u00e1tica, Ciudad Real, Spain)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ALARCOS Research Group, Information Systems and Technologies Department, UCLM\u2010Soluziona Research and Development Institute, University of Castilla\u2010La Mancha, Escuela Superior de Inform\u00e1tica, Ciudad Real, Spain","institution_ids":["https://openalex.org/I79189158"]},{"raw_affiliation_string":"(ALARCOS Research Group, Information Systems and Technologies Department, UCLM\u2010Soluziona Research and Development Institute, University of Castilla\u2010La Mancha, Escuela Superior de Inform\u00e1tica, Ciudad Real, Spain)","institution_ids":["https://openalex.org/I79189158"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I79189158"],"apc_list":null,"apc_paid":null,"fwci":2.1142,"has_fulltext":false,"cited_by_count":30,"citation_normalized_percentile":{"value":0.90908889,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"16","issue":"5","first_page":"519","last_page":"536"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9927999973297119,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10679","display_name":"Service-Oriented Architecture and Web Services","score":0.9909999966621399,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.757456362247467},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.728634238243103},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.7035861015319824},{"id":"https://openalex.org/keywords/security-testing","display_name":"Security testing","score":0.6865904927253723},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.6471719741821289},{"id":"https://openalex.org/keywords/web-application-security","display_name":"Web application security","score":0.6150002479553223},{"id":"https://openalex.org/keywords/security-through-obscurity","display_name":"Security through obscurity","score":0.6130198240280151},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6107314825057983},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.5958983898162842},{"id":"https://openalex.org/keywords/security-convergence","display_name":"Security convergence","score":0.5337439775466919},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.5064390897750854},{"id":"https://openalex.org/keywords/internet-security","display_name":"Internet security","score":0.4755922555923462},{"id":"https://openalex.org/keywords/sherwood-applied-business-security-architecture","display_name":"Sherwood Applied Business Security Architecture","score":0.46195366978645325},{"id":"https://openalex.org/keywords/security-association","display_name":"Security association","score":0.4412885308265686},{"id":"https://openalex.org/keywords/security-engineering","display_name":"Security engineering","score":0.41483357548713684},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4121696650981903},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.29628127813339233},{"id":"https://openalex.org/keywords/network-security-policy","display_name":"Network security policy","score":0.2303997278213501},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.22525015473365784},{"id":"https://openalex.org/keywords/web-development","display_name":"Web development","score":0.13884922862052917},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.07094106078147888}],"concepts":[{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.757456362247467},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.728634238243103},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.7035861015319824},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.6865904927253723},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.6471719741821289},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.6150002479553223},{"id":"https://openalex.org/C114869243","wikidata":"https://www.wikidata.org/wiki/Q133735","display_name":"Security through obscurity","level":5,"score":0.6130198240280151},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6107314825057983},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.5958983898162842},{"id":"https://openalex.org/C52420254","wikidata":"https://www.wikidata.org/wiki/Q7445028","display_name":"Security convergence","level":5,"score":0.5337439775466919},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.5064390897750854},{"id":"https://openalex.org/C22111027","wikidata":"https://www.wikidata.org/wiki/Q1070427","display_name":"Internet security","level":4,"score":0.4755922555923462},{"id":"https://openalex.org/C60172848","wikidata":"https://www.wikidata.org/wiki/Q7495506","display_name":"Sherwood Applied Business Security Architecture","level":5,"score":0.46195366978645325},{"id":"https://openalex.org/C130881749","wikidata":"https://www.wikidata.org/wiki/Q586894","display_name":"Security association","level":5,"score":0.4412885308265686},{"id":"https://openalex.org/C13159133","wikidata":"https://www.wikidata.org/wiki/Q365674","display_name":"Security engineering","level":5,"score":0.41483357548713684},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4121696650981903},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.29628127813339233},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.2303997278213501},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.22525015473365784},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.13884922862052917},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.07094106078147888},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1108/10662240610710996","is_oa":false,"landing_page_url":"https://doi.org/10.1108/10662240610710996","pdf_url":null,"source":{"id":"https://openalex.org/S63576417","display_name":"Internet Research","issn_l":"1066-2243","issn":["1066-2243","2054-5657"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Internet Research","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W17771253","https://openalex.org/W25749873","https://openalex.org/W142284515","https://openalex.org/W190164772","https://openalex.org/W617329964","https://openalex.org/W1535654799","https://openalex.org/W1800478330","https://openalex.org/W1964211122","https://openalex.org/W1968983388","https://openalex.org/W2008932701","https://openalex.org/W2067070693","https://openalex.org/W2070418264","https://openalex.org/W2073878348","https://openalex.org/W2081944711","https://openalex.org/W2091259376","https://openalex.org/W2100564110","https://openalex.org/W2105470748","https://openalex.org/W2122440889","https://openalex.org/W2124105024","https://openalex.org/W2134521102","https://openalex.org/W2183693782","https://openalex.org/W2356199627","https://openalex.org/W2465326068","https://openalex.org/W2798477988","https://openalex.org/W2798977449","https://openalex.org/W6605913004","https://openalex.org/W6606870294","https://openalex.org/W6676387807","https://openalex.org/W6683742818"],"related_works":["https://openalex.org/W2222589037","https://openalex.org/W2185894447","https://openalex.org/W2289549784","https://openalex.org/W1906865040","https://openalex.org/W2571955537","https://openalex.org/W88610236","https://openalex.org/W2030343105","https://openalex.org/W2978152029","https://openalex.org/W3163326877","https://openalex.org/W3199517881"],"abstract_inverted_index":{"Purpose":[0],"The":[1],"purpose":[2],"of":[3,8,41,50,108,193,202,269],"this":[4,144,179],"paper":[5,241],"is":[6,114],"that":[7,37,46,54,88,98,142,158,178,205,228,248,260,278],"linking":[9],"security":[10,16,34,42,48,62,85,96,111,136,140,149,156,171,191,203,208,225,237,246,258,280],"requirements":[11,49,86,122,192,247,281],"for":[12,71,133,151,214,252],"web":[13,32,218],"services":[14,33,219],"with":[15,66],"patterns,":[17,43,157],"both":[18],"at":[19],"the":[20,23,47,51,61,67,83,106,109,138,148,188,194,198,224,234,256,265,270,275],"architectural":[21],"and":[22,93,123,160,186,200,217,232,255,267],"design":[24,180,199,266],"level,":[25],"obtaining":[26],"in":[27,264],"a":[28,31,39,116,134,164,243],"systematic":[29],"way":[30],"software":[35,172],"architecture":[36,213],"contains":[38],"set":[40],"thus":[44,146],"ensuring":[45],"internet\u2010based":[52,152,195,215,253],"application":[53],"have":[55,90,126],"been":[56],"elicited":[57],"are":[58,64,282],"fulfilled.":[59,283],"Additionally,":[60],"patterns":[63,97,124,141,184,259],"linked":[65],"most":[68,189,235],"appropriate":[69,95,236],"standards":[70],"their":[72],"implementation.":[73],"Design/methodology/approach":[74],"To":[75],"develop":[76],"secure":[77,165,271],"WS\u2010based":[78],"applications,":[79],"one":[80,162,174],"must":[81,230],"know":[82],"main":[84],"specified":[87,251],"applications":[89,196,216,254],"to":[91,127,131],"fulfil":[92,231],"find":[94],"assure,":[99],"through":[100,197],"combination":[101],"or":[102,119],"relationships":[103],"between":[104,121,245],"them,":[105],"fulfilment":[107],"implicated":[110],"requirements.":[112],"That":[113],"why":[115],"possible":[117,257],"link":[118],"connection":[120],"will":[125],"be":[128,176,221,250,262],"found,":[129],"attempting":[130],"select":[132],"determined":[135],"requirement":[137,226],"best":[139],"solve":[143],"requirement,":[145],"guaranteeing":[147,277],"properties":[150],"applications.":[153],"Findings":[154],"Using":[155],"drive":[159],"guide":[161],"towards":[163,170],"development":[166],"as":[167,169],"well":[168],"architecture,":[173],"can":[175,220,249,261],"sure":[177],"based":[181,273],"on":[182,274],"these":[183,279],"fulfils":[185],"guarantees":[187],"important":[190],"implementation":[201,268],"solutions":[204],"provide":[206],"reliable":[207],"services.":[209],"Practical":[210],"implications":[211],"Security":[212],"designed":[222],"considering":[223],"types":[227],"it":[229],"using":[233],"patterns.":[238],"Originality/value":[239],"This":[240],"proposes":[242],"relationship":[244],"used":[263],"system":[272],"internet,":[276]},"counts_by_year":[{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":4},{"year":2017,"cited_by_count":4},{"year":2015,"cited_by_count":3},{"year":2014,"cited_by_count":2},{"year":2013,"cited_by_count":2},{"year":2012,"cited_by_count":3}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}