{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,27]],"date-time":"2025-03-27T11:08:54Z","timestamp":1743073734649,"version":"3.40.3"},"publisher-location":"Cham","reference-count":28,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030954833"},{"type":"electronic","value":"9783030954840"}],"license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022]]},"DOI":"10.1007\/978-3-030-95484-0_5","type":"book-chapter","created":{"date-parts":[[2022,2,7]],"date-time":"2022-02-07T10:05:46Z","timestamp":1644228346000},"page":"74-90","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Attack Path Analysis and Cost-Efficient Selection of Cybersecurity Controls for Complex Cyberphysical Systems"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2947-486X","authenticated-orcid":false,"given":"Georgios","family":"Spathoulas","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1278-1943","authenticated-orcid":false,"given":"Georgios","family":"Kavallieratos","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2966-9683","authenticated-orcid":false,"given":"Sokratis","family":"Katsikas","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alessio","family":"Baiocco","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2022,2,8]]},"reference":[{"issue":"5","key":"5_CR1","doi-asserted-by":"publisher","first-page":"1691","DOI":"10.3390\/s21051691","volume":"21","author":"G Kavallieratos","year":"2021","unstructured":"Kavallieratos, G., Spathoulas, G., Katsikas, S.: Cyber risk propagation and optimal selection of cybersecurity controls for complex cyberphysical systems. Sensors 21(5), 1691 (2021)","journal-title":"Sensors"},{"key":"5_CR2","doi-asserted-by":"crossref","unstructured":"Tsolakis, A.C., et al.: A secured and trusted demand response system based on blockchain technologies. In: 2018 Innovations in Intelligent Systems and Applications (INISTA), pp. 1\u20136 (2018)","DOI":"10.1109\/INISTA.2018.8466303"},{"issue":"4","key":"5_CR3","doi-asserted-by":"publisher","first-page":"3453","DOI":"10.1109\/COMST.2018.2855563","volume":"20","author":"I Stellios","year":"2018","unstructured":"Stellios, I., Kotzanikolaou, P., Psarakis, M., Alcaraz, C., Lopez, J.: A survey of IoT-enabled cyberattacks: assessing attack paths to critical infrastructures and services. IEEE Commun. Surv. Tutor. 20(4), 3453\u20133495 (2018)","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"5_CR4","unstructured":"Macola, I.G.: The five worst cyberattacks against the power industry since 2014 (2020). https:\/\/www.power-technology.com\/features\/the-five-worst-cyberattacks-against-the-power-industry-since2014\/. Accessed 20 July 2021"},{"issue":"2","key":"5_CR5","doi-asserted-by":"publisher","first-page":"566","DOI":"10.1109\/TSG.2014.2372315","volume":"6","author":"C Vellaithurai","year":"2014","unstructured":"Vellaithurai, C., Srivastava, A., Zonouz, S., Berthier, R.: CPIndex: cyber-physical vulnerability assessment for power-grid infrastructures. IEEE Trans. Smart Grid 6(2), 566\u2013575 (2014)","journal-title":"IEEE Trans. Smart Grid"},{"key":"5_CR6","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"19","DOI":"10.1007\/978-3-030-64330-0_2","volume-title":"Computer Security","author":"G Kavallieratos","year":"2020","unstructured":"Kavallieratos, G., Katsikas, S.: Attack path analysis for cyber physical systems. In: Katsikas, S., et al. (eds.) CyberICPS\/SECPRE\/ADIoT 2020. LNCS, vol. 12501, pp. 19\u201333. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-64330-0_2"},{"key":"5_CR7","doi-asserted-by":"crossref","unstructured":"Xie, A., Cai, Z., Tang, C., Hu, J., Chen, Z.: Evaluating network security with two-layer attack graphs. In: 2009 Annual Computer Security Applications Conference, pp. 127\u2013136. IEEE (2009)","DOI":"10.1109\/ACSAC.2009.22"},{"key":"5_CR8","doi-asserted-by":"crossref","unstructured":"Ou, X., Boyer, W.F., McQueen, M.A.: A scalable approach to attack graph generation. In: Proceedings of the 13th ACM Conference on Computer and Communications Security, pp. 336\u2013345 (2006)","DOI":"10.1145\/1180405.1180446"},{"key":"5_CR9","doi-asserted-by":"crossref","unstructured":"Lippmann, R.P., Ingols, K.W.: An annotated review of past papers on attack graphs (2005)","DOI":"10.21236\/ADA431826"},{"key":"5_CR10","doi-asserted-by":"crossref","unstructured":"Cheh, C., Keefe, K., Feddersen, B., Chen, B., Temple, W.G., Sanders, W.H.: Developing models for physical attacks in cyber-physical systems. In: Proceedings of the 2017 Workshop on Cyber-Physical Systems Security and Privacy, pp. 49\u201355 (2017)","DOI":"10.1145\/3140241.3140249"},{"issue":"9","key":"5_CR11","doi-asserted-by":"publisher","first-page":"4093","DOI":"10.1109\/TII.2018.2832853","volume":"14","author":"H Mouratidis","year":"2018","unstructured":"Mouratidis, H., Diamantopoulou, V.: A security analysis method for industrial internet of things. IEEE Trans. Industr. Inf. 14(9), 4093\u20134100 (2018)","journal-title":"IEEE Trans. Industr. Inf."},{"key":"5_CR12","doi-asserted-by":"publisher","first-page":"102316","DOI":"10.1016\/j.cose.2021.102316","volume":"107","author":"I Stellios","year":"2021","unstructured":"Stellios, I., Kotzanikolaou, P., Grigoriadis, C.: Assessing IoT enabled cyber-physical attack paths against critical systems. Comput. Secur. 107, 102316 (2021)","journal-title":"Comput. Secur."},{"key":"5_CR13","doi-asserted-by":"crossref","unstructured":"Liang, X., Wu, Y., Ni, M., Li, M.: Survivability index and evaluation framework for cyber physical power systems. In: 2020 12th IEEE PES Asia-Pacific Power and Energy Engineering Conference (APPEEC), pp. 1\u20135. IEEE (2020)","DOI":"10.1109\/APPEEC48164.2020.9220351"},{"key":"5_CR14","doi-asserted-by":"crossref","unstructured":"Malik, A.A., Tosh, D.K.: Quantitative risk modeling and analysis for large-scale cyber-physical systems. In: 2020 29th International Conference on Computer Communications and Networks (ICCCN), pp. 1\u20136. IEEE (2020)","DOI":"10.1109\/ICCCN49398.2020.9209654"},{"key":"5_CR15","doi-asserted-by":"publisher","first-page":"82844","DOI":"10.1109\/ACCESS.2020.2991075","volume":"8","author":"Z Qu","year":"2020","unstructured":"Qu, Z., et al.: Power cyber-physical system risk area prediction using dependent Markov chain and improved grey wolf optimization. IEEE Access 8, 82844\u201382854 (2020)","journal-title":"IEEE Access"},{"key":"5_CR16","doi-asserted-by":"crossref","unstructured":"Potteiger, B., Martins, G., Koutsoukos, X.: Software and attack centric integrated threat modeling for quantitative risk assessment. In: Proceedings of the Symposium and Bootcamp on the Science of Security, pp. 99\u2013108 (2016)","DOI":"10.1145\/2898375.2898390"},{"key":"5_CR17","doi-asserted-by":"publisher","first-page":"125494","DOI":"10.1016\/j.physa.2020.125494","volume":"563","author":"J Guo","year":"2021","unstructured":"Guo, J., Xu, J., He, Z., Liao, W.: Research on risk propagation method of multimodal transport network under uncertainty. Physica A 563, 125494 (2021)","journal-title":"Physica A"},{"key":"5_CR18","unstructured":"Guo, R., Tian, J., Wang, B., Shang, F.: Cyber-physical attack threats analysis for UAVs from cps perspective. In: 2020 International Conference on Computer Engineering and Application (ICCEA), pp. 259\u2013263. IEEE (2020)"},{"key":"5_CR19","doi-asserted-by":"publisher","first-page":"58","DOI":"10.1016\/j.physa.2015.09.082","volume":"443","author":"L Tang","year":"2016","unstructured":"Tang, L., Jing, K., He, J., Stanley, H.E.: Complex interdependent supply chain networks: cascading failure and robustness. Physica A 443, 58\u201369 (2016)","journal-title":"Physica A"},{"key":"5_CR20","doi-asserted-by":"crossref","unstructured":"Chattopadhyay, S., Dai, H.: Estimation of robustness of interdependent networks against failure of nodes. In: 2016 IEEE Global Communications Conference (GLOBECOM), pp. 1\u20136. IEEE (2016)","DOI":"10.1109\/GLOCOM.2016.7841822"},{"key":"5_CR21","doi-asserted-by":"crossref","unstructured":"Parandehgheibi, M., Modiano, E.: Robustness of interdependent networks: the case of communication networks and the power grid. In: 2013 IEEE Global Communications Conference (GLOBECOM), pp. 2164\u20132169. IEEE (2013)","DOI":"10.1109\/GLOCOM.2013.6831395"},{"key":"5_CR22","unstructured":"Microsoft: Chapter 3 - threat modeling (2010). https:\/\/docs.microsoft.com\/en-us\/previous-versions\/msp-n-p\/ff648644(v=pandp.10)?redirectedfrom=MSDN"},{"key":"5_CR23","doi-asserted-by":"crossref","unstructured":"Langweg, H., Zinsmaier, S.D., Waldvogel, M.: A practical approach to stakeholder-driven determination of security requirements based on the GDPR and common criteria. In: Proceedings of the 6th International Conference on Information Systems Security and Privacy (ICISSP 2020), pp. 473\u2013480 (2020)","DOI":"10.5220\/0008960604730480"},{"issue":"10","key":"5_CR24","doi-asserted-by":"publisher","first-page":"768","DOI":"10.3390\/jmse8100768","volume":"8","author":"G Kavallieratos","year":"2020","unstructured":"Kavallieratos, G., Katsikas, S.: Managing cyber security risks of the cyber-enabled ship. J. Marine Sci. Eng. 8(10), 768 (2020)","journal-title":"J. Marine Sci. Eng."},{"key":"5_CR25","doi-asserted-by":"crossref","unstructured":"Patsonakis, C., Terzi, S., Moschos, I., Ioannidis, D., Votis, K., Tzovaras, D.: Permissioned blockchains and virtual nodes for reinforcing trust between aggregators and prosumers in energy demand response scenarios. In: 2019 IEEE International Conference on Environment and Electrical Engineering and 2019 IEEE Industrial and Commercial Power Systems Europe (EEEIC\/I CPS Europe), pp. 1\u20136 (2019)","DOI":"10.1109\/EEEIC.2019.8783521"},{"key":"5_CR26","unstructured":"Psara, K., et al.: DELTA Overall Framework Architecture v2 (2020). https:\/\/www.delta-h2020.eu\/wp-content\/uploads\/2020\/06\/DELTA_D1.6_Final.pdf"},{"key":"5_CR27","volume-title":"Threat Modeling: Designing for Security","author":"A Shostack","year":"2014","unstructured":"Shostack, A.: Threat Modeling: Designing for Security. Wiley, New York (2014)"},{"issue":"82","key":"5_CR28","first-page":"247","volume":"800","author":"K Stouffer","year":"2015","unstructured":"Stouffer, K., Pillitteri, V., Marshall, A., Hahn, A.: Guide to industrial control systems (ICS) security. NIST Spec. Publ. 800(82), 247 (2015)","journal-title":"NIST Spec. Publ."}],"container-title":["Lecture Notes in Computer Science","Computer Security. ESORICS 2021 International Workshops"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-95484-0_5","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,2,7]],"date-time":"2022-02-07T10:06:56Z","timestamp":1644228416000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-95484-0_5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"ISBN":["9783030954833","9783030954840"],"references-count":28,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-95484-0_5","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2022]]},"assertion":[{"value":"8 February 2022","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Darmstadt","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Germany","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2021","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"4 October 2021","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"8 October 2021","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2021","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/esorics2021.athene-center.de\/index.php","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"351","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"71","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"20% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3.07","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"6.06","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"The conference was held virtually due to the COVID-19 pandemic.","order":10,"name":"additional_info_on_review_process","label":"Additional Info on Review Process","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}