{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T14:45:39Z","timestamp":1743000339667,"version":"3.40.3"},"publisher-location":"Cham","reference-count":12,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783031171390"},{"type":"electronic","value":"9783031171406"}],"license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022]]},"DOI":"10.1007\/978-3-031-17140-6_18","type":"book-chapter","created":{"date-parts":[[2022,9,24]],"date-time":"2022-09-24T06:19:49Z","timestamp":1664000389000},"page":"367-386","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["A Formal Model for\u00a0Credential Hopping Attacks"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2675-5810","authenticated-orcid":false,"given":"Massimiliano","family":"Albanese","sequence":"first","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3413-4918","authenticated-orcid":false,"given":"Karin L.","family":"Johnsgard","sequence":"additional","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7892-4743","authenticated-orcid":false,"given":"Vipin","family":"Swarup","sequence":"additional","affiliation":[]}],"member":"297","published-online":{"date-parts":[[2022,9,25]]},"reference":[{"issue":"1","key":"18_CR1","doi-asserted-by":"publisher","first-page":"79","DOI":"10.1177\/1548512917706043","volume":"15","author":"M Albanese","year":"2018","unstructured":"Albanese, M., Jajodia, S.: A graphical model to assess the impact of multi-step attacks. J. Def. Model. Simul. 15(1), 79\u201393 (2018). https:\/\/doi.org\/10.1177\/1548512917706043","journal-title":"J. Def. Model. Simul."},{"key":"18_CR2","unstructured":"Desimone, J.: Windows credential theft: Methods and mitigations. Rochester Institute of Technology (2012)"},{"key":"18_CR3","doi-asserted-by":"publisher","unstructured":"Dunagan, J., Zheng, A.X., Simon, D.R.: Heat-ray: combating identity snowball attacks using machinelearning, combinatorial optimization and attack graphs. In: Proceedings of the ACM SIGOPS 22nd Symposium on Operating Systems Principles, SOSP 2009, pp. 305\u2013320. Association for Computing Machinery, New York (2009). https:\/\/doi.org\/10.1145\/1629575.1629605","DOI":"10.1145\/1629575.1629605"},{"key":"18_CR4","doi-asserted-by":"publisher","unstructured":"Hagberg, A., Lemons, N., Kent, A., Neil, J.: Connected components and credential hopping in authentication graphs. In: 2014 Tenth International Conference on Signal-Image Technology and Internet-Based Systems, pp. 416\u2013423 (2014). https:\/\/doi.org\/10.1109\/SITIS.2014.95","DOI":"10.1109\/SITIS.2014.95"},{"key":"18_CR5","doi-asserted-by":"publisher","unstructured":"Hong, J.B., Kim, D.S., Chung, C.J., Huang, D.: A survey on the usability and practical applications of graphical security models. Comput. Sci. Rev. 26, 1\u201316 (2017). https:\/\/doi.org\/10.1016\/j.cosrev.2017.09.001, https:\/\/www.sciencedirect.com\/science\/article\/pii\/S1574013716301083","DOI":"10.1016\/j.cosrev.2017.09.001"},{"key":"18_CR6","doi-asserted-by":"publisher","unstructured":"Kent, A.D.: User-computer authentication associations in time. Los Alamos National Laboratory (2014). https:\/\/doi.org\/10.11578\/1160076","DOI":"10.11578\/1160076"},{"key":"18_CR7","doi-asserted-by":"publisher","unstructured":"Kent, A.D.: Comprehensive, Multi-Source Cyber-Security Events. Los Alamos National Laboratory (2015). https:\/\/doi.org\/10.17021\/1179829","DOI":"10.17021\/1179829"},{"key":"18_CR8","doi-asserted-by":"publisher","unstructured":"Kent, A.D., Liebrock, L.M., Neil, J.C.: Authentication graphs: analyzing user behavior within an enterprise network. Comput. Secur. 48, 150\u2013166 (2015). https:\/\/doi.org\/10.1016\/j.cose.2014.09.001, https:\/\/www.sciencedirect.com\/science\/article\/pii\/S0167404814001321","DOI":"10.1016\/j.cose.2014.09.001"},{"key":"18_CR9","unstructured":"Microsoft: Windows defender credential guard (2022). https:\/\/docs.microsoft.com\/en-us\/windows\/security\/identity-protection\/credential-guard\/credential-guard-manage"},{"key":"18_CR10","doi-asserted-by":"publisher","unstructured":"Noel, S., Swarup, V., Johnsgard, K.: Optimizing network microsegmentation policy for cyber resilience. J. Def. Model. Simul. Appl. Methodol. Technol., 1\u201323 (2021). https:\/\/doi.org\/10.1177\/15485129211051386","DOI":"10.1177\/15485129211051386"},{"key":"18_CR11","doi-asserted-by":"publisher","unstructured":"Pope, A.S., Morning, R., Tauritz, D.R., Kent, A.D.: Automated design of network security metrics. In: Proceedings of the Genetic and Evolutionary Computation Conference Companion, GECCO 2018, pp. 1680\u20131687. Association for Computing Machinery, New York (2018). https:\/\/doi.org\/10.1145\/3205651.3208266","DOI":"10.1145\/3205651.3208266"},{"key":"18_CR12","doi-asserted-by":"crossref","unstructured":"Turcotte, M.J.M., Kent, A.D., Hash, C.: Unified Host and Network Data Set, chap. Chapter 1, pp. 1\u201322. World Scientific (2018)","DOI":"10.1142\/9781786345646_001"}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2022"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-17140-6_18","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,9,24]],"date-time":"2022-09-24T06:23:36Z","timestamp":1664000616000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-17140-6_18"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"ISBN":["9783031171390","9783031171406"],"references-count":12,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-17140-6_18","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2022]]},"assertion":[{"value":"25 September 2022","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Copenhagen","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Denmark","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2022","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 September 2022","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 September 2022","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2022","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/esorics2022.compute.dtu.dk\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"562","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"104","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"6","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"19% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3.4","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"12","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}