{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,21]],"date-time":"2026-05-21T03:48:56Z","timestamp":1779335336186,"version":"3.51.4"},"publisher-location":"Cham","reference-count":29,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031651748","type":"print"},{"value":"9783031651755","type":"electronic"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-3-031-65175-5_29","type":"book-chapter","created":{"date-parts":[[2024,7,25]],"date-time":"2024-07-25T14:43:01Z","timestamp":1721918581000},"page":"410-422","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Multi-method Approach to Human Expertise, Automation, and Artificial Intelligence for Vulnerability Management"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-2300-0702","authenticated-orcid":false,"given":"Mehdi","family":"Saadallah","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Abbas","family":"Shahim","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6842-6644","authenticated-orcid":false,"given":"Svetlana","family":"Khapova","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,7,26]]},"reference":[{"key":"29_CR1","doi-asserted-by":"crossref","unstructured":"Haber, M.J., Hibbert, B.: The vulnerability management program. In: Haber 2018 Emphasizes the Role of Vulnerability and Compliance Management Initiatives in Securing Critical Information and Demonstrating Regulatory Compliance. pp. 111\u2013118. Apress (2018)","DOI":"10.1007\/978-1-4842-3627-7_12"},{"issue":"8","key":"29_CR2","doi-asserted-by":"publisher","first-page":"4060","DOI":"10.3390\/s23084060","volume":"23","author":"H Riggs","year":"2023","unstructured":"Riggs, H., et al.: Impact, vulnerabilities, and mitigation strategies for cyber-secure critical infrastructure. Sensors 23(8), 4060 (2023)","journal-title":"Sensors"},{"key":"29_CR3","doi-asserted-by":"crossref","unstructured":"Craigen, D., Diakun-Thibault, N., Purse, R.: Defining cybersecurity. Technol. Innov. Manag. Rev. 4(10) (2014)","DOI":"10.22215\/timreview\/835"},{"issue":"6","key":"29_CR4","doi-asserted-by":"publisher","first-page":"103334","DOI":"10.1016\/j.im.2020.103334","volume":"57","author":"R Syed","year":"2020","unstructured":"Syed, R.: Cybersecurity vulnerability management: a conceptual ontology and cyber intelligence alert system. Inf. Manag. 57(6), 103334 (2020)","journal-title":"Inf. Manag."},{"key":"29_CR5","unstructured":"Hazar, D.: Vulnerability Management Survey. 2020, SANS Institute (2020)"},{"key":"29_CR6","doi-asserted-by":"crossref","unstructured":"Ahmadi Mehri, V., Arlos, P., Casalicchio, E.: Automated context-aware vulnerability risk management for patch prioritization. Electronics 11(21), 3580 (2022)","DOI":"10.3390\/electronics11213580"},{"key":"29_CR7","doi-asserted-by":"publisher","unstructured":"Khan, S., Parkinson, S.: Review into state of the art of vulnerability assessment using artificial intelligence. In: Parkinson, S., Crampton, A., Hill, R. (eds.) Guide to Vulnerability Analysis for Computer Networks and Systems. CCN, LNCS, pp. 3\u201332. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-319-92624-7_1","DOI":"10.1007\/978-3-319-92624-7_1"},{"key":"29_CR8","doi-asserted-by":"publisher","first-page":"21","DOI":"10.1177\/001872088502700103","volume":"27","author":"DJ Hillman","year":"1985","unstructured":"Hillman, D.J.: Artificial intelligence. Hum. Factors: J. Hum. Factors Ergon. Soc. 27, 21\u201331 (1985)","journal-title":"Hum. Factors: J. Hum. Factors Ergon. Soc."},{"key":"29_CR9","doi-asserted-by":"crossref","unstructured":"Sadiku, M.N.O., Fagbohungbe, O., Musa, S.M.: Artificial intelligence in cyber security. Int. J. Res. Appl. Sci. Eng. Technol. (2020)","DOI":"10.31695\/IJERAT.2020.3612"},{"issue":"3","key":"29_CR10","doi-asserted-by":"publisher","first-page":"193","DOI":"10.4250\/jcvi.2021.0039","volume":"29","author":"YE Yoon","year":"2021","unstructured":"Yoon, Y.E., Kim, S., Chang, H.-J.: Artificial intelligence and echocardiography. J. Cardiovasc. Imaging 29(3), 193 (2021)","journal-title":"J. Cardiovasc. Imaging"},{"issue":"1","key":"29_CR11","doi-asserted-by":"publisher","first-page":"15","DOI":"10.1177\/1094428112452151","volume":"16","author":"DA Gioia","year":"2013","unstructured":"Gioia, D.A., Corley, K.G., Hamilton, A.L.: Seeking qualitative rigor in inductive research: notes on the Gioia methodology. Organ. Res. Methods 16(1), 15\u201331 (2013)","journal-title":"Organ. Res. Methods"},{"issue":"2","key":"29_CR12","doi-asserted-by":"publisher","first-page":"371","DOI":"10.1007\/s10111-021-00683-y","volume":"24","author":"A Pollini","year":"2022","unstructured":"Pollini, A., et al.: Leveraging human factors in cybersecurity: an integrated methodological approach. Cogn. Technol. Work 24(2), 371\u2013390 (2022)","journal-title":"Cogn. Technol. Work"},{"key":"29_CR13","doi-asserted-by":"publisher","unstructured":"van der Kleij, R., Leukfeldt, R.: Cyber resilient behavior: integrating human behavioral models and resilience engineering capabilities into cyber security. In: Ahram, T., Karwowski, W. (eds.) Advances in Human Factors in Cybersecurity. AHFE 2019. AISC, vol. 960, pp. 16\u201327. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-20488-4_2","DOI":"10.1007\/978-3-030-20488-4_2"},{"key":"29_CR14","doi-asserted-by":"crossref","unstructured":"Malatji, M., Solms, S.V., Marnewick, A.L.: Socio-technical systems cybersecurity framework. Inf. Comput. Secur. 27, 233\u2013272 (2019)","DOI":"10.1108\/ICS-03-2018-0031"},{"issue":"2","key":"29_CR15","doi-asserted-by":"publisher","first-page":"176","DOI":"10.1017\/eis.2016.8","volume":"1","author":"T Balzacq","year":"2016","unstructured":"Balzacq, T., Cavelty, M.D.: A theory of actor-network for cyber-security. Eur. J. Int. Secur. 1(2), 176\u2013198 (2016)","journal-title":"Eur. J. Int. Secur."},{"key":"29_CR16","doi-asserted-by":"crossref","unstructured":"Fernandez de Arroyabe, J.C., et al.: Cybersecurity resilience in SMEs. A machine learning approach. J. Comput. Inf. Syst. 1\u201317 (2023)","DOI":"10.1080\/08874417.2023.2248925"},{"key":"29_CR17","doi-asserted-by":"publisher","first-page":"565","DOI":"10.3390\/jmse9060565","volume":"9","author":"Y Yoo","year":"2021","unstructured":"Yoo, Y., Park, H.-S.: Qualitative risk assessment of cybersecurity and development of vulnerability enhancement plans in consideration of digitalized ship. J. Mar. Sci. Eng. 9, 565 (2021)","journal-title":"J. Mar. Sci. Eng."},{"key":"29_CR18","doi-asserted-by":"crossref","unstructured":"Crotty, J., Daniel, E.: Cyber threat: its origins and consequence and the use of qualitative and quantitative methods in cyber risk assessment. Appl. Comput. Inform. (2022). (ahead-of-print)","DOI":"10.1108\/ACI-07-2022-0178"},{"issue":"1","key":"29_CR19","doi-asserted-by":"publisher","first-page":"277","DOI":"10.1007\/s10459-021-10068-5","volume":"27","author":"DF Balmer","year":"2022","unstructured":"Balmer, D.F., Richards, B.F.: Conducting qualitative research through time: how might theory be useful in longitudinal qualitative research? Adv. Health Sci. Educ. 27(1), 277\u2013288 (2022)","journal-title":"Adv. Health Sci. Educ."},{"issue":"4","key":"29_CR20","doi-asserted-by":"publisher","first-page":"678","DOI":"10.1177\/1094428119836485","volume":"24","author":"H Aguinis","year":"2021","unstructured":"Aguinis, H., Hill, N.S., Bailey, J.R.: Best practices in data collection and preparation: recommendations for reviewers, editors, and authors. Organ. Res. Methods 24(4), 678\u2013693 (2021)","journal-title":"Organ. Res. Methods"},{"issue":"1","key":"29_CR21","doi-asserted-by":"publisher","first-page":"10","DOI":"10.1111\/2041-210X.12828","volume":"9","author":"JC Young","year":"2018","unstructured":"Young, J.C., et al.: A methodological guide to using and reporting on interviews in conservation science research. Methods Ecol. Evol. 9(1), 10\u201319 (2018)","journal-title":"Methods Ecol. Evol."},{"key":"29_CR22","doi-asserted-by":"crossref","unstructured":"Carter, N.: The use of triangulation in qualitative research. In: Oncol Nurs Forum (2014)","DOI":"10.1188\/14.ONF.545-547"},{"key":"29_CR23","doi-asserted-by":"publisher","first-page":"573","DOI":"10.3390\/jcp2030029","volume":"2","author":"WJ Triplett","year":"2022","unstructured":"Triplett, W.J.: Addressing human factors in cybersecurity leadership. J. Cybersecur. Priv. 2, 573\u2013586 (2022)","journal-title":"J. Cybersecur. Priv."},{"key":"29_CR24","doi-asserted-by":"crossref","unstructured":"Webb, J.: Rethinking the governance of technology in the digital age. In: Cornish, P. (ed.), The Oxford Handbook of Cyber Security. Oxford University Press, Oxford (2021). 687C42","DOI":"10.1093\/oxfordhb\/9780198800682.013.58"},{"key":"29_CR25","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s10869-021-09732-9","volume":"37","author":"RS Dalal","year":"2021","unstructured":"Dalal, R.S., et al.: Organizational science and cybersecurity: abundant opportunities for research at the interface. J. Bus. Psychol. 37, 1\u201329 (2021)","journal-title":"J. Bus. Psychol."},{"key":"29_CR26","first-page":"19","volume":"37","author":"S Direction","year":"2021","unstructured":"Direction, S.: Investing in cybersecurity: gaining a competitive advantage through cybersecurity. J. Bus. Strat 37, 19\u201321 (2021)","journal-title":"J. Bus. Strat"},{"key":"29_CR27","doi-asserted-by":"publisher","first-page":"1187","DOI":"10.1177\/1541931215591185","volume":"59","author":"J Cowley","year":"2015","unstructured":"Cowley, J., Greitzer, F.L.: Organizational impacts to cybersecurity expertise development and maintenance. Proc. Hum. Factors Ergon. Soc. Annu. Meet. 59, 1187\u20131191 (2015)","journal-title":"Proc. Hum. Factors Ergon. Soc. Annu. Meet."},{"key":"29_CR28","doi-asserted-by":"crossref","unstructured":"Russell, M.G., Smorodinskaya, N.V.: Leveraging complexity for ecosystemic innovation. Technol. Forecast. Soc. Change (2018)","DOI":"10.1016\/j.techfore.2017.11.024"},{"key":"29_CR29","doi-asserted-by":"crossref","unstructured":"Ishikawa, E., et al.: Modeling a Cyber Defense Business Ecosystem of Ecosystems. Handbook of Research on Cyber Crime and Information Privacy (2021)","DOI":"10.4018\/978-1-7998-5728-0.ch021"}],"container-title":["IFIP Advances in Information and Communication Technology","ICT Systems Security and Privacy Protection"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-65175-5_29","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,7,25]],"date-time":"2024-07-25T14:46:59Z","timestamp":1721918819000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-65175-5_29"}},"subtitle":["Investigation of Challenges and Emerging Tensions"],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9783031651748","9783031651755"],"references-count":29,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-65175-5_29","relation":{},"ISSN":["1868-4238","1868-422X"],"issn-type":[{"value":"1868-4238","type":"print"},{"value":"1868-422X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"26 July 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"The authors declare that they have no known competing interests.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Disclosure of Interests"}},{"value":"SEC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"IFIP International Conference on ICT Systems Security and Privacy Protection","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Edinburgh","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"United Kingdom","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"12 June 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"14 June 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"39","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"sec2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/ifipsec2024.co.uk\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}