{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,5,2]],"date-time":"2025-05-02T04:04:00Z","timestamp":1746158640529,"version":"3.40.4"},"publisher-location":"Cham","reference-count":16,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319039633"},{"type":"electronic","value":"9783319039640"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2013]]},"DOI":"10.1007\/978-3-319-03964-0_10","type":"book-chapter","created":{"date-parts":[[2013,12,17]],"date-time":"2013-12-17T02:34:56Z","timestamp":1387247696000},"page":"108-119","source":"Crossref","is-referenced-by-count":3,"title":["QSec: Supporting Security Decisions on an IT Infrastructure"],"prefix":"10.1007","author":[{"given":"Fabrizio","family":"Baiardi","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Federico","family":"Tonelli","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fabio","family":"Cor\u00f2","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Luca","family":"Guidi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"10_CR1","doi-asserted-by":"crossref","unstructured":"Ammann, P., Pamula, J., Street, J., Ritchey, R.W.: A host-based approach to network attack chaining analysis. In: ACSAC, pp. 72\u201384. IEEE Computer Society (2005)","DOI":"10.1109\/CSAC.2005.6"},{"key":"10_CR2","doi-asserted-by":"crossref","unstructured":"Baiardi, F., Cor\u00f2, F., Tonelli, F., Guidi, L.: Gvscan: Scanning networks for global vulnerabilities. In: First International Workshop on Emerging Cyberthreats and Countermeasures, Regensburg, Germany (September 2013)","DOI":"10.1109\/ARES.2013.88"},{"key":"10_CR3","doi-asserted-by":"crossref","unstructured":"Cheung, S., Lindqvist, U., Fong, M.W.: Modeling multistep cyber attacks for scenario recognition. In: DISCEX (1), pp. 284\u2013292. IEEE Computer Society (2003)","DOI":"10.1109\/DISCEX.2003.1194892"},{"key":"10_CR4","unstructured":"Cuppens, F., Autrel, F., Miege, A., Benferhat, S.: Correlation in an intrusion detection process. In: SECI 2002: S\u00e9curit\u00e9 des Communications sur Internet, Tunis, Tunisie, Septembre 19-21, pp. 153\u2013172 (2002)"},{"key":"10_CR5","doi-asserted-by":"crossref","unstructured":"Fovino, I.N., Masera, M., Guidi, L., Carpi, G.: An experimental platform for assessing SCADA vulnerabilities and countermeasures in power plants. In: 3rd International Conference on Human System Interaction, pp. 679\u2013686. IEEE (May 2010)","DOI":"10.1109\/HSI.2010.5514494"},{"key":"10_CR6","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"642","DOI":"10.1007\/978-3-642-38631-2_51","volume-title":"Network and System Security","author":"Z. Han","year":"2013","unstructured":"Han, Z., Cheng, L., Zhang, Y., Feng, D.: Measuring and comparing the protection quality in different operating systems. In: Lopez, J., Huang, X., Sandhu, R. (eds.) NSS 2013. LNCS, vol.\u00a07873, pp. 642\u2013648. Springer, Heidelberg (2013)"},{"key":"10_CR7","doi-asserted-by":"publisher","first-page":"25","DOI":"10.1145\/2379690.2379694","volume-title":"Proceedings of the Ninth International Symposium on Visualization for Cyber Security, VizSec 2012","author":"L. Harrison","year":"2012","unstructured":"Harrison, L., Spahn, R., Iannacone, M., Downing, E., Goodall, J.R.: Nv: Nessus vulnerability visualization for the web. In: Proceedings of the Ninth International Symposium on Visualization for Cyber Security, VizSec 2012, pp. 25\u201332. ACM, New York (2012)"},{"key":"10_CR8","unstructured":"Howard, J.D.: An analysis of security incidents on the Internet 1989-1995. PhD thesis, Carnegie Mellon University, Pittsburgh, PA, USA, UMI Order No. GAX98-02539 (1998)"},{"key":"10_CR9","doi-asserted-by":"crossref","unstructured":"Jajodia, S., Noel, S.: Topological vulnerability analysis: A powerful new approach for network attack prevention, detection, and response, pp. 285\u2013305. World Scientific Press (2009)","DOI":"10.1142\/9789812836243_0013"},{"key":"10_CR10","unstructured":"MITRE. Cve, a dictionary of publicly known information security vulnerabilities and exposures. Technical report, MITRE (1999)"},{"key":"10_CR11","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"115","DOI":"10.1007\/3-540-36084-0_7","volume-title":"Recent Advances in Intrusion Detection","author":"B. Morin","year":"2002","unstructured":"Morin, B., M\u00e9, L., Debar, H., Ducass\u00e9, M.: M2d2: A formal data model for ids alert correlation. In: Wespi, A., Vigna, G., Deri, L. (eds.) RAID 2002. LNCS, vol.\u00a02516, pp. 115\u2013127. Springer, Heidelberg (2002)"},{"key":"10_CR12","doi-asserted-by":"crossref","unstructured":"Noel, S., Robertson, E., Jajodia, S.: Correlating intrusion events and building attack scenarios through attack graph distances. In: ACSAC, pp. 350\u2013359. IEEE Computer Society (2004)","DOI":"10.1109\/CSAC.2004.11"},{"key":"10_CR13","unstructured":"Ozkan, S.: Cve details, the ultimate security vulnerability datasource. Technical report, Serkan Ozkan (1999)"},{"key":"10_CR14","unstructured":"Paxson, V., Zhang, Y.: Detecting stepping stones. In: USENIX (2000)"},{"key":"10_CR15","first-page":"3","volume-title":"Proceedings of the 4th International Workshop on Security Measurements and Metrics, MetriSec 2012","author":"J. Stuckman","year":"2012","unstructured":"Stuckman, J., Purtilo, J.: Comparing and applying attack surface metrics. In: Proceedings of the 4th International Workshop on Security Measurements and Metrics, MetriSec 2012, pp. 3\u20136. ACM, New York (2012)"},{"key":"10_CR16","doi-asserted-by":"publisher","first-page":"158","DOI":"10.1016\/j.cose.2012.09.013","volume":"32","author":"S. Wang","year":"2013","unstructured":"Wang, S., Zhang, Z., Kadobayashi, Y.: Exploring attack graph for cost-benefit security hardening: A probabilistic approach. Computers and Security\u00a032, 158\u2013169 (2013)","journal-title":"Computers and Security"}],"container-title":["Lecture Notes in Computer Science","Critical Information Infrastructures Security"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-03964-0_10","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,5,1]],"date-time":"2025-05-01T06:09:04Z","timestamp":1746079744000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-03964-0_10"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013]]},"ISBN":["9783319039633","9783319039640"],"references-count":16,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-03964-0_10","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2013]]}}}