{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,10]],"date-time":"2026-07-10T16:24:54Z","timestamp":1783700694937,"version":"3.55.0"},"publisher-location":"Cham","reference-count":44,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030643294","type":"print"},{"value":"9783030643300","type":"electronic"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-64330-0_2","type":"book-chapter","created":{"date-parts":[[2020,12,16]],"date-time":"2020-12-16T02:02:44Z","timestamp":1608084164000},"page":"19-33","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":16,"title":["Attack Path Analysis for Cyber Physical Systems"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1278-1943","authenticated-orcid":false,"given":"Georgios","family":"Kavallieratos","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2966-9683","authenticated-orcid":false,"given":"Sokratis","family":"Katsikas","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2020,12,17]]},"reference":[{"issue":"1","key":"2_CR1","first-page":"499","volume":"9","author":"MN Al-Mhiqani","year":"2018","unstructured":"Al-Mhiqani, M.N., Ahmad, R., Yassin, W., Hassan, A., Abidin, Z.Z., Ali, N.S., Abdulkareem, K.H.: Cyber-security incidents: a review cases in cyber-physical systems. Int. J. Adv. Comput. Sci. Appl. 9(1), 499\u2013508 (2018)","journal-title":"Int. J. Adv. Comput. Sci. Appl."},{"key":"2_CR2","series-title":"Lecture Notes in Computer Science (Lecture Notes in Artificial Intelligence)","doi-asserted-by":"publisher","first-page":"202","DOI":"10.1007\/978-3-030-42058-1_17","volume-title":"Intelligent Information and Database Systems","author":"G Kavallieratos","year":"2020","unstructured":"Kavallieratos, G., Katsikas, S., Gkioulos, V.: Modelling shipping 4.0: a reference architecture for the cyber-enabled ship. In: Nguyen, N.T., Jearanaitanakij, K., Selamat, A., Trawi\u0144ski, B., Chittayasothorn, S. (eds.) ACIIDS 2020. LNCS (LNAI), vol. 12034, pp. 202\u2013217. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-42058-1_17"},{"key":"2_CR3","unstructured":"Emad, G.R., Khabir, M., Shahbakhsh, M.: Shipping 4.0 and training seafarers for the future autonomous and unmanned ships. In: Proceedings of the 21th Marine Industries Conference (MIC 2019), pp. 202\u2013217(2020)"},{"key":"2_CR4","unstructured":"Chang, C.H., Wenming, S., Wei, Z., Changki, P., Kontovas, C.A.: Evaluating cybersecurity risks in the maritime industry: a literature review. In: Proceedings of the International Association of Maritime Universities (IAMU) Conference (2019)"},{"key":"2_CR5","unstructured":"Silgado, D.M.: Cyber-attacks: a digital threat reality affecting the maritime industry (2018)"},{"key":"2_CR6","doi-asserted-by":"crossref","unstructured":"Hassani, V., Crasta, N., Pascoal, A.M.: Cyber security issues in navigation systems of marine vessels from a control perspective. In: Proceedings of the ASME: 36th International Conference on Ocean, p. 2017. American Society of Mechanical Engineers Digital Collection, Offshore and Arctic Engineering (2017)","DOI":"10.1115\/OMAE2017-61771"},{"key":"2_CR7","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"20","DOI":"10.1007\/978-3-030-12786-2_2","volume-title":"Computer Security","author":"G Kavallieratos","year":"2019","unstructured":"Kavallieratos, G., Katsikas, S., Gkioulos, V.: Cyber-attacks against the autonomous ship. In: Katsikas, S.K., Cuppens, F., Cuppens, N., Lambrinoudakis, C., Ant\u00f3n, A., Gritzalis, S., Mylopoulos, J., Kalloniatis, C. (eds.) SECPRE\/CyberICPS -2018. LNCS, vol. 11387, pp. 20\u201336. Springer, Cham (2019). https:\/\/doi.org\/10.1007\/978-3-030-12786-2_2"},{"key":"2_CR8","doi-asserted-by":"crossref","unstructured":"Chen, Y.C., Mooney, V., Grijalva, S.: A survey of attack models for cyber-physical security assessment in electricity grid. In: Proceedings of the 2019 IFIP\/IEEE 27th International Conference on Very Large Scale Integration (VLSI-SoC), pp. 242\u2013243. IEEE (2019)","DOI":"10.1109\/VLSI-SoC.2019.8920326"},{"key":"2_CR9","doi-asserted-by":"publisher","first-page":"100219","DOI":"10.1016\/j.cosrev.2019.100219","volume":"35","author":"HS Lallie","year":"2020","unstructured":"Lallie, H.S., Debattista, K., Bal, J.: A review of attack graph and attack tree visual syntax in cyber security. Comput. Sci. Rev. 35, 100219 (2020)","journal-title":"Comput. Sci. Rev."},{"key":"2_CR10","doi-asserted-by":"crossref","unstructured":"Al-Mohannadi, H., Mirza, Q., Namanya, A., Awan, I., Cullen, A., Disso, J.: Cyber-attack modeling analysis techniques: an overview. In: Proceedings of the 2016 IEEE 4th International Conference on Future Internet of Things and Cloud Workshops (FiCloudW), pp. 69\u201376. IEEE (2016)","DOI":"10.1109\/W-FiCloud.2016.29"},{"key":"2_CR11","series-title":"IFIP Advances in Information and Communication Technology","doi-asserted-by":"publisher","first-page":"330","DOI":"10.1007\/978-3-642-39218-4_25","volume-title":"Security and Privacy Protection in Information Processing Systems","author":"JB Hong","year":"2013","unstructured":"Hong, J.B., Kim, D.S.: Performance analysis of scalable attack representation models. In: Janczewski, L.J., Wolfe, H.B., Shenoi, S. (eds.) SEC 2013. IAICT, vol. 405, pp. 330\u2013343. Springer, Heidelberg (2013). https:\/\/doi.org\/10.1007\/978-3-642-39218-4_25"},{"key":"2_CR12","doi-asserted-by":"crossref","unstructured":"Xie, A., Cai, Z., Tang, C., Hu, J., Chen, Z.: Evaluating network security with two-layer attack graphs. In: Proceedings of the 2009 Annual Computer Security Applications Conference, pp. 127\u2013136 (2009)","DOI":"10.1109\/ACSAC.2009.22"},{"key":"2_CR13","doi-asserted-by":"crossref","unstructured":"Ou, X., Boyer, W.F., McQueen, M.A.: A scalable approach to attack graph generation. In: Proceedings of the 13th ACM Conference on Computer and Communications Security, CCS 2006, pp. 336\u2013345. Association for Computing Machinery, New York, NY, USA (2006)","DOI":"10.1145\/1180405.1180446"},{"key":"2_CR14","doi-asserted-by":"crossref","unstructured":"Sheyner, O., Haines, J., Jha, S., Lippmann, R., Wing, J.M.: Automated generation and analysis of attack graphs. In: Proceedings 2002 IEEE Symposium on Security and Privacy, pp. 273\u2013284 (2002)","DOI":"10.1109\/SECPRI.2002.1004377"},{"key":"2_CR15","series-title":"IFIP Advances in Information and Communication Technology","doi-asserted-by":"publisher","first-page":"177","DOI":"10.1007\/978-1-5041-2919-0_15","volume-title":"Information Systems Security","author":"M Dacier","year":"1996","unstructured":"Dacier, M., Deswarte, Y., Ka\u00e2niche, M.: Models and tools for quantitative assessment of operational security. SEC 1996. IAICT, pp. 177\u2013186. Springer, Boston, MA (1996). https:\/\/doi.org\/10.1007\/978-1-5041-2919-0_15"},{"key":"2_CR16","unstructured":"Dacier, M.: Towards Quantitative Evaluation of Computer Security. Ph.D. thesis, Institut National Polytechnique de Toulouse (1994)"},{"key":"2_CR17","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"319","DOI":"10.1007\/3-540-58618-0_72","volume-title":"Computer Security \u2014 ESORICS 1994","author":"M Dacier","year":"1994","unstructured":"Dacier, M., Deswarte, Y.: Privilege graph: an extension to the typed access matrix model. In: Gollmann, D. (ed.) ESORICS 1994. LNCS, vol. 875, pp. 319\u2013334. Springer, Heidelberg (1994). https:\/\/doi.org\/10.1007\/3-540-58618-0_72"},{"key":"2_CR18","doi-asserted-by":"crossref","unstructured":"Phillips, C., Swiler, L.P.: A graph-based system for network-vulnerability analysis. In Proceedings of the 1998 Workshop on New Security Paradigms, NSPW 1998, pp. 71\u201379. Association for Computing Machinery, New York, NY, USA (1998)","DOI":"10.1145\/310889.310919"},{"issue":"3","key":"2_CR19","first-page":"2231","volume":"1","author":"S Khaitan","year":"2011","unstructured":"Khaitan, S., Raheja, S.: Finding optimal attack path using attack graphs: a survey. Int. J. Soft Comput. Eng. 1(3), 2231\u20132307 (2011)","journal-title":"Int. J. Soft Comput. Eng."},{"key":"2_CR20","first-page":"5","volume-title":"Attack Graph Techniques","author":"X Ou","year":"2011","unstructured":"Ou, X., Singhal, A.: Quantitative security risk assessment of enterprise networks. In: Ou, X., Singhal, A. (eds.) Attack Graph Techniques, pp. 5\u20138. Springer, New York (2011)"},{"key":"2_CR21","doi-asserted-by":"crossref","unstructured":"Swiler, L.P., Phillips, C., Ellis, D., Chakerian, S.: Computer-attack graph generation tool. In: Proceedings DARPA Information Survivability Conference and Exposition II. DISCEX 2001, Vol. 2, pp. 307\u2013321 (2001)","DOI":"10.1109\/DISCEX.2001.932182"},{"key":"2_CR22","unstructured":"Ou, X., Govindavajhala, S., Appel, A.: MulVAL: a logic-based network security analyzer. In: Proceedings of the USENIX Security Symposium 2005, pp. 113\u2013127 (2005)"},{"key":"2_CR23","first-page":"244","volume-title":"Managing Cyber Threats Massive Computing","author":"S Jajodia","year":"2005","unstructured":"Jajodia, S., Noel, S., O\u2019Berry, B.: Topological analysis of network attack vulnerability. In: Kumar, V., Srivastava, J., Lazarevic, A. (eds.) Managing Cyber Threats Massive Computing, pp. 244\u2013266. Springer, Boston, MA (2005)"},{"key":"2_CR24","doi-asserted-by":"crossref","unstructured":"Ammann, P., Wijesekera, D., Kaushik, S.: Scalable, graph-based network vulnerability analysis. In: Proceedings of the 9th ACM Conference on Computer and Communications Security, CCS 2002, pp. 217\u2013224. Association for Computing Machinery, New York, NY, USA (2002)","DOI":"10.1145\/586110.586140"},{"key":"2_CR25","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1155\/2019\/2031063","volume":"2019","author":"J Zeng","year":"2019","unstructured":"Zeng, J., Wu, S., Chen, Y., Zeng, R., Wu, C.: Survey of attack graph analysis methods from the perspective of data and knowledge processing. Secur. Commun. Netw. 2019, 1\u201317 (2019)","journal-title":"Secur. Commun. Netw."},{"key":"2_CR26","volume-title":"Graph Theory and Interconnection Networks","author":"LH Hsu","year":"2019","unstructured":"Hsu, L.H., Lin, C.K.: Graph Theory and Interconnection Networks. CRC Press, Boca Raton (2019)"},{"key":"2_CR27","doi-asserted-by":"crossref","unstructured":"Ingols, K., Lippmann, R., Piwowarski, K.: Practical attack graph generation for network defense. In: Proceedings of the 22nd Annual Computer Security Applications Conference (ACSAC2006), pp. 121\u2013130 (2006)","DOI":"10.1109\/ACSAC.2006.39"},{"issue":"5","key":"2_CR28","doi-asserted-by":"publisher","first-page":"519","DOI":"10.1109\/TDSC.2015.2423682","volume":"13","author":"K Kaynar","year":"2016","unstructured":"Kaynar, K., Sivrikaya, F.: Distributed attack graph generation. IEEE Trans. Depend. Secur. Comput. 13(5), 519\u2013532 (2016)","journal-title":"IEEE Trans. Depend. Secur. Comput."},{"issue":"2","key":"2_CR29","doi-asserted-by":"publisher","first-page":"677","DOI":"10.2298\/CSIS160227022B","volume":"13","author":"K Bi","year":"2016","unstructured":"Bi, K., Han, D., Jun, W.: K maximum probability attack paths dynamic generation algorithm. Comput. Sci. Inform. Syst. 13(2), 677\u2013689 (2016)","journal-title":"Comput. Sci. Inform. Syst."},{"issue":"1","key":"2_CR30","doi-asserted-by":"publisher","first-page":"61","DOI":"10.1109\/TDSC.2011.34","volume":"9","author":"N Poolsappasit","year":"2012","unstructured":"Poolsappasit, N., Dewri, R., Ray, I.: Dynamic security risk management using Bayesian attack graphs. IEEE Trans. Depend. Secur. Comput. 9(1), 61\u201374 (2012)","journal-title":"IEEE Trans. Depend. Secur. Comput."},{"key":"2_CR31","unstructured":"Jehyun L., Heejo L., Peter, H.: Scalable attack graph for risk assessment. In: Proceedings of the International Conference on Information Networking, pp. 1\u20135 (2009)"},{"issue":"6","key":"2_CR32","doi-asserted-by":"publisher","first-page":"344","DOI":"10.1049\/iet-ifs.2014.0272","volume":"9","author":"F Dai","year":"2015","unstructured":"Dai, F., Hu, Y., Zheng, K., Wu, B.: Exploring risk flow attack graph for security risk assessment. IET Inform. Secur. 9(6), 344\u2013353 (2015)","journal-title":"IET Inform. Secur."},{"key":"2_CR33","doi-asserted-by":"crossref","unstructured":"Castellanos, J.H., Ochoa, M., Zhou, J.: Finding dependencies between cyber-physical domains for security testing of industrial control systems. In: Proceedings of the 34th Annual Computer Security Applications Conference, pp. 582\u2013594 (2018)","DOI":"10.1145\/3274694.3274745"},{"key":"2_CR34","doi-asserted-by":"publisher","first-page":"74","DOI":"10.1016\/j.csi.2017.09.006","volume":"56","author":"N Polatidis","year":"2018","unstructured":"Polatidis, N., Pavlidis, M., Mouratidis, H.: Cyber-attack path discovery in a dynamic supply chain maritime risk management system. Comput. Stand. Interf. 56, 74\u201382 (2018)","journal-title":"Comput. Stand. Interf."},{"issue":"9","key":"2_CR35","doi-asserted-by":"publisher","first-page":"4093","DOI":"10.1109\/TII.2018.2832853","volume":"14","author":"H Mouratidis","year":"2018","unstructured":"Mouratidis, H., Diamantopoulou, V.: A security analysis method for industrial internet of things. IEEE Trans. Indust. Inform. 14(9), 4093\u20134100 (2018)","journal-title":"IEEE Trans. Indust. Inform."},{"issue":"1","key":"2_CR36","doi-asserted-by":"publisher","first-page":"12","DOI":"10.3390\/pr8010012","volume":"8","author":"M Ibrahim","year":"2020","unstructured":"Ibrahim, M., Al-Hindawi, Q., Elhafiz, R., Alsheikh, A., Alquq, O.: Attack graph implementation and visualization for cyber physical systems. Processes 8(1), 12 (2020)","journal-title":"Processes"},{"key":"2_CR37","unstructured":"Bolbot, V., Theotokatos, G., Boulougouris, E., Vassalos, D.: Safety related cyber-attacks identification and assessment for autonomous inland ships. In: Proceedings of the International Seminar on Safety and Security of Autonomous Vessels (ISSAV) (2019)"},{"key":"2_CR38","doi-asserted-by":"crossref","unstructured":"Akbarzadeh, A., Katsikas, S.: Identifying critical components in large scale cyber physical systems. In: Proceedings of the 1st International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS) (2020)","DOI":"10.1145\/3387940.3391473"},{"key":"2_CR39","volume-title":"Threat modeling: Designing for security","author":"A Shostack","year":"2014","unstructured":"Shostack, A.: Threat modeling: Designing for security. John Wiley & Sons, New Jersey (2014)"},{"key":"2_CR40","unstructured":"Microsoft. Chapter 3 - Threat modeling (2010). https:\/\/docs.microsoft.com\/en-us\/previous-versions\/msp-n-p\/ff648644(v=pandp.10)?redirectedfrom=MSDN. Accessed 26 May 2020"},{"key":"2_CR41","doi-asserted-by":"crossref","unstructured":"Zinsmaier, S.D., Langweg, H., Waldvogel, M.: A practical approach to stakeholder-driven determination of security requirements based on the GDPR and common criteria. In: Proceedings of the International Conference on Information Systems Security and Privacy ICISSP, pp. 473\u2013480 (2020)","DOI":"10.5220\/0008960604730480"},{"key":"2_CR42","unstructured":"CASOS. http:\/\/www.casos.cs.cmu.edu\/index.php. Accessed 09 Dec 2019"},{"key":"2_CR43","unstructured":"Guide for conducting risk assessments. NIST SP 800\u201330 Rev. 1, National Institute of Standards and Technology, Gaithersburg MD, USA (2012)"},{"issue":"10","key":"2_CR44","doi-asserted-by":"publisher","first-page":"6617","DOI":"10.1109\/TII.2020.2976840","volume":"16","author":"G Kavallieratos","year":"2020","unstructured":"Kavallieratos, G., Diamantopoulou, V., Katsikas, S.K.: Shipping 4.0: Security requirements for the cyber-enabled ship. IEEE Trans. Indust. Inform. 16(10), 6617\u20136625 (2020)","journal-title":"IEEE Trans. Indust. Inform."}],"container-title":["Lecture Notes in Computer Science","Computer Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-64330-0_2","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,16]],"date-time":"2025-12-16T01:02:02Z","timestamp":1765846922000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-64330-0_2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030643294","9783030643300"],"references-count":44,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-64330-0_2","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"17 December 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"CyberICPS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Workshop on the Security of Industrial Control Systems and Cyber-Physical Systems","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2020","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"14 September 2020","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18 September 2020","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"6","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"cyberics2020","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.surrey.ac.uk\/esorics-2020\/workshops","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"21","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"8","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"38% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3.67","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"1.42","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}