{"id":"https://openalex.org/W4292158697","doi":"https://doi.org/10.1145/3538969.3539010","title":"Precise Analysis of Purpose Limitation in Data Flow Diagrams","display_name":"Precise Analysis of Purpose Limitation in Data Flow Diagrams","publication_year":2022,"publication_date":"2022-08-17","ids":{"openalex":"https://openalex.org/W4292158697","doi":"https://doi.org/10.1145/3538969.3539010"},"language":"en","primary_location":{"id":"doi:10.1145/3538969.3539010","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3538969.3539010","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3538969.3539010","source":{"id":"https://openalex.org/S4363608926","display_name":"Proceedings of the 17th International Conference on Availability, Reliability and Security","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 17th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3538969.3539010","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5066872602","display_name":"Hanaa Alshareef","orcid":"https://orcid.org/0000-0002-0338-2839"},"institutions":[{"id":"https://openalex.org/I66862912","display_name":"Chalmers University of Technology","ror":"https://ror.org/040wg7k59","country_code":"SE","type":"education","lineage":["https://openalex.org/I66862912"]}],"countries":["SE"],"is_corresponding":true,"raw_author_name":"Hanaa Alshareef","raw_affiliation_strings":["Chalmers University of Technology, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chalmers University of Technology, Sweden","institution_ids":["https://openalex.org/I66862912"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007822940","display_name":"Katja Tuma","orcid":"https://orcid.org/0000-0001-7189-2817"},"institutions":[{"id":"https://openalex.org/I865915315","display_name":"Vrije Universiteit Amsterdam","ror":"https://ror.org/008xxew50","country_code":"NL","type":"education","lineage":["https://openalex.org/I865915315"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Katja Tuma","raw_affiliation_strings":["Vrije Universiteit Amsterdam, Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Vrije Universiteit Amsterdam, Netherlands","institution_ids":["https://openalex.org/I865915315"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025885695","display_name":"Sandro Stucki","orcid":"https://orcid.org/0000-0001-5608-8273"},"institutions":[{"id":"https://openalex.org/I66862912","display_name":"Chalmers University of Technology","ror":"https://ror.org/040wg7k59","country_code":"SE","type":"education","lineage":["https://openalex.org/I66862912"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Sandro Stucki","raw_affiliation_strings":["Chalmers University of Technology, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chalmers University of Technology, Sweden","institution_ids":["https://openalex.org/I66862912"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051084250","display_name":"Gerardo Schneider","orcid":"https://orcid.org/0000-0003-0629-6853"},"institutions":[{"id":"https://openalex.org/I881427289","display_name":"University of Gothenburg","ror":"https://ror.org/01tm6cn81","country_code":"SE","type":"education","lineage":["https://openalex.org/I881427289"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Gerardo Schneider","raw_affiliation_strings":["University of Gothenburg, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Gothenburg, Sweden","institution_ids":["https://openalex.org/I881427289"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5012313708","display_name":"Riccardo Scandariato","orcid":"https://orcid.org/0000-0003-3591-7671"},"institutions":[{"id":"https://openalex.org/I159176309","display_name":"Universit\u00e4t Hamburg","ror":"https://ror.org/00g30e956","country_code":"DE","type":"education","lineage":["https://openalex.org/I159176309"]},{"id":"https://openalex.org/I884043246","display_name":"Hamburg University of Technology","ror":"https://ror.org/04bs1pb34","country_code":"DE","type":"education","lineage":["https://openalex.org/I884043246"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Riccardo Scandariato","raw_affiliation_strings":["Hamburg University of Technology, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hamburg University of Technology, Germany","institution_ids":["https://openalex.org/I159176309","https://openalex.org/I884043246"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5066872602"],"corresponding_institution_ids":["https://openalex.org/I66862912"],"apc_list":null,"apc_paid":null,"fwci":1.5595,"has_fulltext":true,"cited_by_count":17,"citation_normalized_percentile":{"value":0.85209327,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"11"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9940000176429749,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8600901365280151},{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.620925784111023},{"id":"https://openalex.org/keywords/data-flow-diagram","display_name":"Data flow diagram","score":0.5159893035888672},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.43200865387916565},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3990550935268402},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3850419819355011},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.37967732548713684},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2451547384262085},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.13727498054504395}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8600901365280151},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.620925784111023},{"id":"https://openalex.org/C489000","wikidata":"https://www.wikidata.org/wiki/Q747385","display_name":"Data flow diagram","level":2,"score":0.5159893035888672},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.43200865387916565},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3990550935268402},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3850419819355011},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.37967732548713684},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2451547384262085},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.13727498054504395},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":6,"locations":[{"id":"doi:10.1145/3538969.3539010","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3538969.3539010","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3538969.3539010","source":{"id":"https://openalex.org/S4363608926","display_name":"Proceedings of the 17th International Conference on Availability, Reliability and Security","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 17th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},{"id":"pmh:oai:research.chalmers.se:531936","is_oa":false,"landing_page_url":"https://research.chalmers.se/en/publication/531936","pdf_url":null,"source":{"id":"https://openalex.org/S4306402469","display_name":"Chalmers Research (Chalmers University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I66862912","host_organization_name":"Chalmers University of Technology","host_organization_lineage":["https://openalex.org/I66862912"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":""},{"id":"pmh:oai:research.vu.nl:openaire_cris_publications/61c1a5e1-13d5-4378-a4a6-24a4d26d30ca","is_oa":false,"landing_page_url":"https://hdl.handle.net/1871.1/61c1a5e1-13d5-4378-a4a6-24a4d26d30ca","pdf_url":null,"source":{"id":"https://openalex.org/S4306401107","display_name":"VU Research Portal","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I865915315","host_organization_name":"Vrije Universiteit Amsterdam","host_organization_lineage":["https://openalex.org/I865915315"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Alshareef, H, Tuma, K, Stucki, S, Schneider, G & Scandariato, R 2022, Precise Analysis of Purpose Limitation in Data Flow Diagrams. in ARES '22 : Proceedings of the 17th International Conference on Availability, Reliability and Security., 17, ACM International Conference Proceeding Series, Association for Computing Machinery, pp. 1-11, 17th International Conference on Availability, Reliability and Security, ARES 2022, Vienna, Austria, 23/08/22. https://doi.org/10.1145/3538969.3539010","raw_type":"info:eu-repo/semantics/publishedVersion"},{"id":"pmh:oai:research.vu.nl:publications/61c1a5e1-13d5-4378-a4a6-24a4d26d30ca","is_oa":false,"landing_page_url":"http://www.scopus.com/inward/record.url?scp=85136988924&partnerID=8YFLogxK","pdf_url":null,"source":{"id":"https://openalex.org/S4306401107","display_name":"VU Research Portal","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I865915315","host_organization_name":"Vrije Universiteit Amsterdam","host_organization_lineage":["https://openalex.org/I865915315"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Alshareef, H, Tuma, K, Stucki, S, Schneider, G & Scandariato, R 2022, Precise Analysis of Purpose Limitation in Data Flow Diagrams. in ARES '22 : Proceedings of the 17th International Conference on Availability, Reliability and Security., 17, ACM International Conference Proceeding Series, Association for Computing Machinery, pp. 1-11, 17th International Conference on Availability, Reliability and Security, ARES 2022, Vienna, Austria, 23/08/22. https://doi.org/10.1145/3538969.3539010","raw_type":"info:eu-repo/semantics/publishedVersion"},{"id":"pmh:oai:tore.tuhh.de:11420/13575","is_oa":false,"landing_page_url":"http://hdl.handle.net/11420/13575","pdf_url":null,"source":{"id":"https://openalex.org/S4306401751","display_name":"tub.dok (Hamburg University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I884043246","host_organization_name":"Hamburg University of Technology","host_organization_lineage":["https://openalex.org/I884043246"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference Paper"},{"id":"pmh:vu:oai:research.vu.nl:publications/61c1a5e1-13d5-4378-a4a6-24a4d26d30ca","is_oa":false,"landing_page_url":"https://research.vu.nl/en/publications/61c1a5e1-13d5-4378-a4a6-24a4d26d30ca","pdf_url":null,"source":{"id":"https://openalex.org/S4306401843","display_name":"Data Archiving and Networked Services (DANS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1322597698","host_organization_name":"Royal Netherlands Academy of Arts and Sciences","host_organization_lineage":["https://openalex.org/I1322597698"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ARES '22: Proceedings of the 17th International Conference on Availability, Reliability and Security, 1 - 11","raw_type":"info:eu-repo/semantics/conferencepaper"}],"best_oa_location":{"id":"doi:10.1145/3538969.3539010","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3538969.3539010","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3538969.3539010","source":{"id":"https://openalex.org/S4363608926","display_name":"Proceedings of the 17th International Conference on Availability, Reliability and Security","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 17th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.5899999737739563,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G712881263","display_name":null,"funder_award_id":"2018-","funder_id":"https://openalex.org/F4320322581","funder_display_name":"Vetenskapsr\u00e5det"}],"funders":[{"id":"https://openalex.org/F4320322581","display_name":"Vetenskapsr\u00e5det","ror":"https://ror.org/03zttf063"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4292158697.pdf","grobid_xml":"https://content.openalex.org/works/W4292158697.grobid-xml"},"referenced_works_count":9,"referenced_works":["https://openalex.org/W2039649206","https://openalex.org/W2080227433","https://openalex.org/W2155404021","https://openalex.org/W2489600561","https://openalex.org/W2529331507","https://openalex.org/W2973835278","https://openalex.org/W3129538454","https://openalex.org/W4233673850","https://openalex.org/W4255812512"],"related_works":["https://openalex.org/W1603736412","https://openalex.org/W4304185162","https://openalex.org/W2061685118","https://openalex.org/W3006282800","https://openalex.org/W2462100143","https://openalex.org/W1770503332","https://openalex.org/W3125207769","https://openalex.org/W2577825108","https://openalex.org/W2086008440","https://openalex.org/W1707430307"],"abstract_inverted_index":{"Data":[0],"Flow":[1],"Diagrams":[2],"(DFDs)":[3],"are":[4,38],"primarily":[5],"used":[6,24],"for":[7,99,139,145],"modelling":[8],"functional":[9],"properties":[10],"of":[11,78,113,134],"a":[12,95,129,135,162,167],"system.":[13],"In":[14,90],"recent":[15],"work,":[16],"it":[17],"was":[18],"shown":[19],"that":[20],"DFDs":[21,66,102],"can":[22],"be":[23,85],"to":[25,53,84],"also":[26],"model":[27,54],"non-functional":[28],"properties,":[29,35],"such":[30,152],"as":[31],"security":[32],"and":[33,43,81,106,115,117,143,147,159],"privacy":[34,48,107,141,171],"if":[36],"they":[37],"annotated":[39],"with":[40,103],"appropriate":[41],"security-":[42],"privacy-related":[44],"information.":[45],"An":[46],"important":[47],"principle":[49],"one":[50],"may":[51],"wish":[52],"in":[55,128],"this":[56,91],"way":[57],"is":[58],"purpose":[59,69,77,104,149],"limitation.":[60],"But":[61],"previous":[62],"work":[63],"on":[64,166],"privacy-aware":[65],"(PA-DFDs)":[67],"considers":[68],"limitation":[70],"only":[71],"superficially,":[72],"without":[73],"explaining":[74],"how":[75],"the":[76,111,170],"DFD":[79,168],"activators":[80],"flows":[82],"ought":[83],"specified,":[86],"checked":[87],"or":[88],"inferred.":[89],"paper,":[92],"we":[93,155],"define":[94],"rigorous":[96],"formal":[97],"framework":[98,127,158],"(1)":[100],"annotating":[101],"labels":[105,114,120,150],"signatures,":[108,116],"(2)":[109],"checking":[110,146],"consistency":[112],"(3)":[118],"inferring":[119,148],"from":[121,151,169],"signatures.":[122,153],"We":[123],"implement":[124],"our":[125,157],"theoretical":[126],"proof-of":[130],"concept":[131],"tool":[132,160],"consisting":[133],"domain-specific":[136],"language":[137],"(DSL)":[138],"specifying":[140],"signatures":[142],"algorithms":[144],"Finally,":[154],"evaluate":[156],"through":[161],"case":[163],"study":[164],"based":[165],"literature.":[172]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":2}],"updated_date":"2026-05-07T13:39:58.223016","created_date":"2025-10-10T00:00:00"}