{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T05:04:50Z","timestamp":1755839090447,"version":"3.40.3"},"publisher-location":"Cham","reference-count":11,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030688868"},{"type":"electronic","value":"9783030688875"}],"license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021]]},"DOI":"10.1007\/978-3-030-68887-5_22","type":"book-chapter","created":{"date-parts":[[2021,2,11]],"date-time":"2021-02-11T15:22:40Z","timestamp":1613056960000},"page":"347-353","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["Towards Attacker Attribution for Risk Analysis"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6707-9153","authenticated-orcid":false,"given":"Elena","family":"Doynikova","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2923-4954","authenticated-orcid":false,"given":"Evgenia","family":"Novikova","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5266-8649","authenticated-orcid":false,"given":"Diana","family":"Gaifulina","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6859-7120","authenticated-orcid":false,"given":"Igor","family":"Kotenko","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2021,2,12]]},"reference":[{"key":"22_CR1","doi-asserted-by":"crossref","unstructured":"Kheir, N., Cuppens-Boulahia, N., Cuppens, F., Debar, H.: A service dependency model for cost-sensitive intrusion response. In: ESORICS Proceedings, Athens, Greece (2010)","DOI":"10.1007\/978-3-642-15497-3_38"},{"key":"22_CR2","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"216","DOI":"10.1007\/11909033_20","volume-title":"Communications and Multimedia Security","author":"I Kotenko","year":"2006","unstructured":"Kotenko, I., Stepashkin, M.: Attack graph based evaluation of network security. In: Leitold, H., Markatos, E.P. (eds.) CMS 2006. LNCS, vol. 4237, pp. 216\u2013227. Springer, Heidelberg (2006). https:\/\/doi.org\/10.1007\/11909033_20"},{"key":"22_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"107","DOI":"10.1007\/978-3-319-31811-0_7","volume-title":"Risks and Security of Internet and Systems","author":"E Doynikova","year":"2016","unstructured":"Doynikova, E., Kotenko, I.: Countermeasure selection based on the attack and service dependency graphs for security incident management. In: Lambrinoudakis, C., Gabillon, A. (eds.) CRiSIS 2015. LNCS, vol. 9572, pp. 107\u2013124. Springer, Cham (2016). https:\/\/doi.org\/10.1007\/978-3-319-31811-0_7"},{"key":"22_CR4","unstructured":"Oosterhof, G.M.: Cowrie-Medium-Interaction Honeypot. https:\/\/github.com\/micheloosterhof\/cowrie. Accessed 18 July 2020"},{"key":"22_CR5","doi-asserted-by":"crossref","unstructured":"Katipally, R., Yang, L., Liu, A: Attacker behavior analysis in multi-stage attack detection system. In: CSIIRW Proceedings, Oak Ridge, TN, USA. ACM, New York (2011)","DOI":"10.1145\/2179298.2179369"},{"key":"22_CR6","doi-asserted-by":"publisher","first-page":"1626","DOI":"10.1515\/jisys-2018-0479","volume":"29","author":"S Shyla","year":"2019","unstructured":"Shyla, S., Sujatha, S.: Cloud security: LKM and optimal fuzzy system for intrusion detection in cloud environment. J. Intell. Syst. 29, 1626\u20131642 (2019)","journal-title":"J. Intell. Syst."},{"key":"22_CR7","doi-asserted-by":"publisher","first-page":"6111","DOI":"10.1002\/sec.1761","volume":"9","author":"H Orojloo","year":"2016","unstructured":"Orojloo, H., Abdollahi Azgomi, M.: Predicting the behavior of attackers and the consequences of attacks against cyber-physical systems. Secur. Commun. Netw. 9, 6111\u20136136 (2016)","journal-title":"Secur. Commun. Netw."},{"key":"22_CR8","doi-asserted-by":"publisher","first-page":"31","DOI":"10.22619\/IJCSA.2017.100113","volume":"19","author":"D Fraunholz","year":"2017","unstructured":"Fraunholz, D., Krohmer, D., Duque Ant\u00f3n, S., Schotten, H.D.: YAAS-on the attribution of honeypot data. J. Int. J. Cyber Situat. Aware. 19, 31\u201348 (2017)","journal-title":"J. Int. J. Cyber Situat. Aware."},{"key":"22_CR9","doi-asserted-by":"crossref","unstructured":"Perry, I., et al.: Dierentiating and predicting cyberattack behaviors using LSTM. In: DSC Proceedings, Kaohsiung, Taiwan (2018)","DOI":"10.1109\/DESEC.2018.8625145"},{"key":"22_CR10","doi-asserted-by":"publisher","first-page":"168","DOI":"10.3390\/info11030168","volume":"11","author":"E Doynikova","year":"2020","unstructured":"Doynikova, E., Novikova, E., Kotenko, I.: Attacker behaviour forecasting using methods of intelligent data analysis: a comparative review and prospects. Information 11, 168 (2020)","journal-title":"Information"},{"key":"22_CR11","unstructured":"DEFCON 26 CTF Homepage. https:\/\/media.defcon.org\/DEF%20CON%2026\/DEF%20CON%2026%20ctf\/. Accessed 19 July 2020"}],"container-title":["Lecture Notes in Computer Science","Risks and Security of Internet and Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-68887-5_22","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,4,24]],"date-time":"2021-04-24T22:52:20Z","timestamp":1619304740000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-68887-5_22"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"ISBN":["9783030688868","9783030688875"],"references-count":11,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-68887-5_22","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2021]]},"assertion":[{"value":"12 February 2021","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"CRiSIS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Risks and Security of Internet and Systems","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Paris","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"France","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2020","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"4 November 2020","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"6 November 2020","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"15","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"crisis2020","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.crisis-conference.com\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"44","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"16","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"7","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"36% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"The conference was held virtually due to the COVID-19 pandemic","order":10,"name":"additional_info_on_review_process","label":"Additional Info on Review Process","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}