{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,24]],"date-time":"2026-08-24T05:21:28Z","timestamp":1787548888105,"version":"build-2736575974"},"publisher-location":"Cham","reference-count":22,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783031254598","type":"print"},{"value":"9783031254604","type":"electronic"}],"license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023]]},"DOI":"10.1007\/978-3-031-25460-4_12","type":"book-chapter","created":{"date-parts":[[2023,2,17]],"date-time":"2023-02-17T04:12:22Z","timestamp":1676607142000},"page":"212-227","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["Towards a\u00a0Security Impact Analysis Framework: A Risk-Based and\u00a0MITRE Attack Approach"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-8260-4638","authenticated-orcid":false,"given":"Abdelhadi","family":"Belfadel","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Martin","family":"Boyer","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"J\u00e9r\u00f4me","family":"Letailleur","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yohann","family":"Petiot","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Reda","family":"Yaich","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2023,2,18]]},"reference":[{"issue":"1","key":"12_CR1","doi-asserted-by":"publisher","first-page":"70","DOI":"10.1080\/10864415.2004.11044320","volume":"9","author":"H Cavusoglu","year":"2004","unstructured":"Cavusoglu, H., Mishra, B., Raghunathan, S.: The effect of internet security breach announcements on market value: capital market reactions for breached firms and internet security developers. Int. J. Electronic Commerce 9(1), 70\u2013104 (2004)","journal-title":"Int. J. Electronic Commerce"},{"key":"12_CR2","doi-asserted-by":"crossref","unstructured":"Ekelhart, A., Fenz, S., Neubauer, T.: Aurum: a framework for information security risk management. In: 2009 42nd Hawaii International Conference on System Sciences, pp. 1\u201310 . IEEE (2009)","DOI":"10.1109\/HICSS.2009.82"},{"issue":"115","key":"12_CR3","first-page":"2","volume":"800","author":"K Scarfone","year":"2008","unstructured":"Scarfone, K., Souppaya, M., Cody, A., Orebaugh, A.: Technical guide to information security testing and assessment. NIST Spec. Publ. 800(115), 2\u201325 (2008)","journal-title":"NIST Spec. Publ."},{"key":"12_CR4","unstructured":"IEC, T.: 62351-1, Power systems management and associated information exchange-data and communications security-part 1: communication network and system security-introduction to security issues (2007)"},{"key":"12_CR5","unstructured":"Chapple, M., Stewart, J.M., Gibson, D.: (ISC) 2 CISSP certified information systems security professional official study guide. John Wiley & Sons (2018)"},{"key":"12_CR6","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102376","volume":"108","author":"R Leszczyna","year":"2021","unstructured":"Leszczyna, R.: Review of cybersecurity assessment methods: applicability perspective. Comput. Secur. 108, 102376 (2021)","journal-title":"Comput. Secur."},{"key":"12_CR7","unstructured":"ISO, I.: IEC 27001 (2005) information technology, security techniques, information security management systems requirements. ISO, Geneva (2005)"},{"key":"12_CR8","doi-asserted-by":"crossref","unstructured":"Montesino, R., Fenz, S.: Automation possibilities in information security management. In: 2011 European Intelligence and Security Informatics Conference, pp. 259\u2013262. IEEE (2011)","DOI":"10.1109\/EISIC.2011.39"},{"key":"12_CR9","doi-asserted-by":"crossref","unstructured":"Abdallah, R., Yakymets, N., Lanusse, A.: Towards a model-driven based security framework. In: 2015 3rd International Conference on Model-Driven Engineering and Software Development (MODELSWARD), pp. 639\u2013645. IEEE (2015)","DOI":"10.5220\/0005368706390645"},{"key":"12_CR10","doi-asserted-by":"crossref","unstructured":"Straub, J.: Modeling attack, defense and threat trees and the cyber kill chain, att &ck and stride frameworks as blackboard architecture networks. In: 2020 IEEE International Conference on Smart Cloud (SmartCloud), pp. 148\u2013153. IEEE (2020)","DOI":"10.1109\/SmartCloud49737.2020.00035"},{"key":"12_CR11","doi-asserted-by":"publisher","first-page":"585","DOI":"10.1007\/978-3-319-58424-9_34","volume-title":"Computer and Network Security Essentials","author":"MS Khan","year":"2018","unstructured":"Khan, M.S., Siddiqui, S., Ferens, K.: A cognitive and concurrent cyber kill chain model. In: Daimi, K. (ed.) Computer and Network Security Essentials, pp. 585\u2013602. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-319-58424-9_34"},{"issue":"9","key":"12_CR12","doi-asserted-by":"publisher","first-page":"3267","DOI":"10.3390\/s21093267","volume":"21","author":"A Georgiadou","year":"2021","unstructured":"Georgiadou, A., Mouzakitis, S., Askounis, D.: Assessing mitre att &ck risk using a cyber-security culture framework. Sensors 21(9), 3267 (2021)","journal-title":"Sensors"},{"key":"12_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"18","DOI":"10.1007\/978-3-319-26416-5_2","volume-title":"Risk Assessment and Risk-Driven Testing","author":"J Gro\u00dfmann","year":"2015","unstructured":"Gro\u00dfmann, J., Seehusen, F.: Combining security risk assessment and security testing based on standards. In: Seehusen, F., Felderer, M., Gro\u00dfmann, J., Wendland, M.-F. (eds.) RISK 2015. LNCS, vol. 9488, pp. 18\u201333. Springer, Cham (2015). https:\/\/doi.org\/10.1007\/978-3-319-26416-5_2"},{"key":"12_CR14","series-title":"Communications in Computer and Information Science","doi-asserted-by":"publisher","first-page":"397","DOI":"10.1007\/978-3-662-43908-1_49","volume-title":"Trustworthy Computing and Services","author":"A Rennoch","year":"2014","unstructured":"Rennoch, A., Schieferdecker, I., Gro\u00dfmann, J.: Security testing approaches \u2013 for research, industry and standardization. In: Yuan, Y., Wu, X., Lu, Y. (eds.) ISCTCS 2013. CCIS, vol. 426, pp. 397\u2013406. Springer, Heidelberg (2014). https:\/\/doi.org\/10.1007\/978-3-662-43908-1_49"},{"key":"12_CR15","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2019.101709","volume":"90","author":"EK Szczepaniuk","year":"2020","unstructured":"Szczepaniuk, E.K., Szczepaniuk, H., Rokicki, T., Klepacki, B.: Information security assessment in public administration. Comput. Secur. 90, 101709 (2020)","journal-title":"Comput. Secur."},{"key":"12_CR16","doi-asserted-by":"crossref","unstructured":"Trim, P.R., Lee, Y.-I.: A security framework for protecting business, government and society from cyber attacks. In: 2010 5th International Conference on System of Systems Engineering, pp. 1\u20136. IEEE (2010)","DOI":"10.1109\/SYSOSE.2010.5544085"},{"issue":"1","key":"12_CR17","first-page":"108","volume":"9","author":"I Atoum","year":"2017","unstructured":"Atoum, I., Otoom, A., Ali, A.A.: Holistic cyber security implementation frameworks: a case study of Jordan. Int. J. Inf. Bus. Manag. 9(1), 108 (2017)","journal-title":"Int. J. Inf. Bus. Manag."},{"issue":"4","key":"12_CR18","doi-asserted-by":"publisher","first-page":"733","DOI":"10.1007\/s00530-020-00680-7","volume":"27","author":"S Khattak","year":"2021","unstructured":"Khattak, S., Jan, S., Ahmad, I., Wadud, Z., Khan, F.Q.: An effective security assessment approach for internet banking services via deep analysis of multimedia data. Multimed. Syst. 27(4), 733\u2013751 (2021)","journal-title":"Multimed. Syst."},{"issue":"9","key":"12_CR19","doi-asserted-by":"publisher","first-page":"3443","DOI":"10.1007\/s11227-015-1585-7","volume":"72","author":"Y You","year":"2016","unstructured":"You, Y., Cho, I., Lee, K.: An advanced approach to security measurement system. J. Supercomput. 72(9), 3443\u20133454 (2016)","journal-title":"J. Supercomput."},{"key":"12_CR20","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"80","DOI":"10.1007\/978-3-319-46263-9_5","volume-title":"Graphical Models for Security","author":"O Gadyatskaya","year":"2016","unstructured":"Gadyatskaya, O., Harpes, C., Mauw, S., Muller, C., Muller, S.: Bridging two worlds: reconciling practical risk assessment methodologies with theory of attack trees. In: Kordy, B., Ekstedt, M., Kim, D.S. (eds.) GraMSec 2016. LNCS, vol. 9987, pp. 80\u201393. Springer, Cham (2016). https:\/\/doi.org\/10.1007\/978-3-319-46263-9_5"},{"key":"12_CR21","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2019.101656","volume":"90","author":"C Schmitz","year":"2020","unstructured":"Schmitz, C., Pape, S.: LISRA: lightweight security risk assessment for decision support in information security. Comput. Secur. 90, 101656 (2020)","journal-title":"Comput. Secur."},{"key":"12_CR22","unstructured":"ISO27002, I.: IEC 27002: 2005 information technology-security techniques-code of practice for information security management (2005)"}],"container-title":["Lecture Notes in Computer Science","Computer Security. ESORICS 2022 International Workshops"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-25460-4_12","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,24]],"date-time":"2026-08-24T05:07:55Z","timestamp":1787548075000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-25460-4_12"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"ISBN":["9783031254598","9783031254604"],"references-count":22,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-25460-4_12","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]},"assertion":[{"value":"18 February 2023","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Copenhagen","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Denmark","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2022","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 September 2022","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 September 2022","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2022","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/esorics2022.compute.dtu.dk\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}