{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,12]],"date-time":"2026-03-12T10:42:56Z","timestamp":1773312176169,"version":"3.50.1"},"publisher-location":"Cham","reference-count":24,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032006387","type":"print"},{"value":"9783032006394","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-3-032-00639-4_1","type":"book-chapter","created":{"date-parts":[[2025,8,9]],"date-time":"2025-08-09T09:58:09Z","timestamp":1754733489000},"page":"5-22","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Securing the\u00a0Road Ahead: Supporting Decision Making in\u00a0Automotive Cybersecurity Risk Treatment"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1119-4715","authenticated-orcid":false,"given":"Manfred","family":"Vielberth","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Robin","family":"Siepmann","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0239-7526","authenticated-orcid":false,"given":"Magdalena","family":"Glas","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1338-9003","authenticated-orcid":false,"given":"G\u00fcnther","family":"Pernul","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,8,10]]},"reference":[{"key":"1_CR1","unstructured":"Iso\/iec 21434:2022(e). road vehicles cybersecurity engineering (2022)"},{"key":"1_CR2","doi-asserted-by":"crossref","unstructured":"Adams, W.C.: Conducting Semi-Structured Interviews. In: Handbook of Practical Program Evaluation, pp. 492\u2013505. Wiley (2015)","DOI":"10.1002\/9781119171386.ch19"},{"key":"1_CR3","doi-asserted-by":"crossref","unstructured":"Akbar, M.A., Naseem, A., uz\u00a0Zaman, U.K., Petronijevic, J.: Integrated-decision support system (dss) for risk identification and mitigation in manufacturing industry for zero-defect manufacturing (zdm): a state-of-the-art review. Int. J. Adv. Manuf. Technol. 135(5-6), 1893\u20131931 (2024)","DOI":"10.1007\/s00170-024-14601-9"},{"key":"1_CR4","doi-asserted-by":"crossref","unstructured":"Decision support for selecting information security controls: Almeida, L., Resp cio, A. J. Decis. Syst. 27, 173\u2013180 (2018)","DOI":"10.1080\/12460125.2018.1468177"},{"key":"1_CR5","doi-asserted-by":"crossref","unstructured":"Benyahya, M., Lenard, T., Collen, A., Nijdam, N.A.: A systematic review of threat analysis and risk assessment methodologies for connected and automated vehicles. In: Proceedings of the 18th International Conference on Availability, Reliability and Security, pp. 1\u201310. ARES 2023, ACM (2023)","DOI":"10.1145\/3600160.3605084"},{"key":"1_CR6","doi-asserted-by":"crossref","unstructured":"Benyahya, M., Lenard, T., Collen, A., Nijdam, N.A.: A systematic review of threat analysis and risk assessment methodologies for connected and automated vehicles. In: Proceedings of the 18th International Conference on Availability, Reliability and Security. ARES 2023, ACM (2023)","DOI":"10.1145\/3600160.3605084"},{"key":"1_CR7","doi-asserted-by":"crossref","unstructured":"Corbin, J., Strauss, A.: Basics of qualitative research (3rd ed.): techniques and procedures for developing grounded theory (2008), https:\/\/methods.sagepub.com\/book\/basics-of-qualitative-research","DOI":"10.4135\/9781452230153"},{"key":"1_CR8","unstructured":"Fran ois, M., Arduin, P.E., Merad, M.: Classification of decision support systems for cybersecurity. In: MCIS 2023 Proceedings, No.\u00a011 (2023), https:\/\/aisel.aisnet.org\/mcis2023\/1"},{"key":"1_CR9","doi-asserted-by":"publisher","first-page":"45","DOI":"10.18280\/ijtdi.070106","volume":"7","author":"MD Gangi","year":"2023","unstructured":"Gangi, M.D., Belcore, O.M., Polimeni, A.: An overview on decision support systems for risk management in emergency conditions: present, past and future trends. Int. J. Transp. Dev. Integrat. 7, 45\u201353 (2023)","journal-title":"Int. J. Transp. Dev. Integrat."},{"issue":"4","key":"1_CR10","doi-asserted-by":"publisher","first-page":"438","DOI":"10.1145\/581271.581274","volume":"5","author":"LA Gordon","year":"2002","unstructured":"Gordon, L.A., Loeb, M.P.: The economics of information security investment. ACM Trans. Inf. Syst. Secur. (TISSEC) 5(4), 438\u2013457 (2002)","journal-title":"ACM Trans. Inf. Syst. Secur. (TISSEC)"},{"key":"1_CR11","doi-asserted-by":"crossref","unstructured":"Gordon, L.A., Loeb, M.P., Zhou, L.: Integrating cost benefit analysis into the nist cybersecurity framework via the gordon loeb model. J. Cybersecurity 6(1) (2020)","DOI":"10.1093\/cybsec\/tyaa005"},{"key":"1_CR12","unstructured":"Ingoldsby, T.R.: Attack tree-based threat risk analysis. Amenaza Technologies Limited (2013), https:\/\/api.semanticscholar.org\/CorpusID:231854288"},{"key":"1_CR13","doi-asserted-by":"publisher","unstructured":"Kiesling, E., Ekelhart, A., Grill, B., Strauss, C., Stummer, C.: Selecting security control portfolios: a multi-objective simulation-optimization approach. EURO J. Decis. Process. 85\u2013117 (2016). https:\/\/doi.org\/10.1007\/s40070-016-0055-7","DOI":"10.1007\/s40070-016-0055-7"},{"key":"1_CR14","doi-asserted-by":"crossref","unstructured":"Lautenbach, A., Almgren, M., Olovsson, T.: Proposing heavens 2.0 an automotive risk assessment model. In: Proceedings of the 5th ACM Computer Science in Cars Symposium. CSCS 2021, Association for Computing Machinery, New York, NY, USA (2021)","DOI":"10.1145\/3488904.3493378"},{"key":"1_CR15","doi-asserted-by":"crossref","unstructured":"Leech, B.L.: Asking questions: techniques for semistructured interviews. PS: Polit. Sci. Polit. 35(4), 665\u2013668 (2002), publisher: Cambridge University Press","DOI":"10.1017\/S1049096502001129"},{"key":"1_CR16","doi-asserted-by":"crossref","unstructured":"L veill , D., Jaskolka, J.: A game-theoretic approach for security control selection. Electron. Proc. Theor. Comput. Sci. 409, 103\u2013119 (2024)","DOI":"10.4204\/EPTCS.409.11"},{"key":"1_CR17","doi-asserted-by":"crossref","unstructured":"Mohamed, I., Hefny, H.A., Darwish, N.R.: Enhancing cybersecurity defenses: a multicriteria decision-making approach to mitre att &ck mitigation strategy (2024)","DOI":"10.5121\/ijcnc.2024.16402"},{"key":"1_CR18","unstructured":"Nowey, T., Federrath, H., Klein, C.: Pl l, K.: Ans tze zur evaluierung von sicherheitsinvestitionen. In: Sicherheit 2005. Sicherheit Schutz und Zuverl ssigkeit, pp. 15\u201326. Gesellschaft f r Informatik e.V, Bonn (2005)"},{"key":"1_CR19","unstructured":"Pal, S.S.: MCDM for selection of cybersecurity technologies used in cybersecurity education. Ph.D. thesis (2022)"},{"issue":"1","key":"1_CR20","doi-asserted-by":"publisher","first-page":"37","DOI":"10.2307\/23043488","volume":"35","author":"MK Sein","year":"2011","unstructured":"Sein, M.K., Henfridsson, O., Purao, S., Rossi, M., Lindgren, R.: Action design research. MIS Q. 35(1), 37\u201356 (2011)","journal-title":"MIS Q."},{"key":"1_CR21","unstructured":"Stouffer, K., et al.: Guide to operational technology (ot) security. Technical Report, NIST Special Publication 800-82 Revision 3, National Institute of Standards and Technology, Gaithersburg, MD (2023)"},{"key":"1_CR22","doi-asserted-by":"crossref","unstructured":"Vielberth, M., Raab, K., Glas, M., Gr\u00fcmer, P., Pernul, G.: Elevating tara: a maturity model for automotive threat analysis and risk assessment. In: Proceedings of the 19th International Conference on Availability, Reliability and Security, pp.\u00a01\u20139 (2024)","DOI":"10.1145\/3664476.3670888"},{"key":"1_CR23","doi-asserted-by":"crossref","unstructured":"Weish upl, E., Yasasin, E., Schryen, G.: Information security investments: an exploratory multiple case study on decision-making, evaluation and learning. Comput. Secur. 77, 807\u2013823 (2018)","DOI":"10.1016\/j.cose.2018.02.001"},{"key":"1_CR24","doi-asserted-by":"publisher","first-page":"1035","DOI":"10.1016\/j.procs.2015.08.625","volume":"64","author":"I Yevseyeva","year":"2015","unstructured":"Yevseyeva, I., Basto-Fernandes, V., Emmerich, M., van Moorsel, A.: Selecting optimal subset of security controls. Procedia Comput. Sci. 64, 1035\u20131042 (2015)","journal-title":"Procedia Comput. Sci."}],"container-title":["Lecture Notes in Computer Science","Availability, Reliability and Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-00639-4_1","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,3,11]],"date-time":"2026-03-11T16:15:06Z","timestamp":1773245706000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-00639-4_1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"ISBN":["9783032006387","9783032006394"],"references-count":24,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-00639-4_1","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]},"assertion":[{"value":"10 August 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ARES","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Availability, Reliability and Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Ghent","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Belgium","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"11 August 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"14 August 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"ares-12025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/2025.ares-conference.eu","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}