{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,30]],"date-time":"2026-01-30T05:20:42Z","timestamp":1769750442997,"version":"3.49.0"},"publisher-location":"Cham","reference-count":23,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319105567","type":"print"},{"value":"9783319105574","type":"electronic"}],"license":[{"start":{"date-parts":[[2014,1,1]],"date-time":"2014-01-01T00:00:00Z","timestamp":1388534400000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2014]]},"DOI":"10.1007\/978-3-319-10557-4_27","type":"book-chapter","created":{"date-parts":[[2014,8,27]],"date-time":"2014-08-27T12:12:24Z","timestamp":1409141544000},"page":"243-254","source":"Crossref","is-referenced-by-count":2,"title":["On Security Countermeasures Ranking through Threat Analysis"],"prefix":"10.1007","author":[{"given":"Nicola","family":"Nostro","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ilaria","family":"Matteucci","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Andrea","family":"Ceccarelli","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Felicita","family":"Di Giandomenico","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fabio","family":"Martinelli","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Andrea","family":"Bondavalli","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"27_CR1","doi-asserted-by":"crossref","unstructured":"Basin, D., Jug\u00e9, V., Klaedtke, F., Z\u0103linescu, E.: Enforceable security policies revisited. In: Degano, P., Guttman, J.D. (eds.) POST. LNCS, vol.\u00a07215, pp. 309\u2013328. Springer, Heidelberg (2012)","DOI":"10.1007\/978-3-642-28641-4_17"},{"key":"27_CR2","doi-asserted-by":"crossref","unstructured":"Bauer, L., Ligatti, J., Walker, D.: Edit automata: Enforcement mechanisms for run-time security policies. International Journal of Information Security\u00a04(1-2) (2005)","DOI":"10.1007\/s10207-004-0046-8"},{"key":"27_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"73","DOI":"10.1007\/978-3-642-19125-1_6","volume-title":"Engineering Secure Software and Systems","author":"N. Bielova","year":"2011","unstructured":"Bielova, N., Massacci, F.: Predictability of enforcement. In: Erlingsson, \u00da., Wieringa, R., Zannone, N. (eds.) ESSoS 2011. LNCS, vol.\u00a06542, pp. 73\u201386. Springer, Heidelberg (2011)"},{"key":"27_CR4","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","DOI":"10.1007\/b95712","volume-title":"Semirings for Soft Constraint Solving and Programming","author":"S. Bistarelli","year":"2004","unstructured":"Bistarelli, S.: Semirings for Soft Constraint Solving and Programming. LNCS, vol.\u00a02962. Springer, Heidelberg (2004)"},{"key":"27_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"33","DOI":"10.1007\/978-3-642-38004-4_3","volume-title":"Security and Trust Management","author":"G. Caravagna","year":"2013","unstructured":"Caravagna, G., Costa, G., Pardini, G.: Lazy security controllers. In: J\u00f8sang, A., Samarati, P., Petrocchi, M. (eds.) STM 2012. LNCS, vol.\u00a07783, pp. 33\u201348. Springer, Heidelberg (2013)"},{"key":"27_CR6","series-title":"LNCS","first-page":"178","volume-title":"FPS 2013","author":"V. Ciancia","year":"2013","unstructured":"Ciancia, V., Martinelli, F., Ilaria, M., Morisset, C.: Quantitative evaluation of enforcement strategies: Position paper. In: Danger, J.-L., Debbabi, M., Marion, J.-Y., Garcia-Alfaro, J., Heywood, N.Z. (eds.) FPS 2013. LNCS, vol.\u00a08352, pp. 178\u2013186. Springer, Heidelberg (2013)"},{"key":"27_CR7","doi-asserted-by":"crossref","unstructured":"Cinque, M., Cotroneo, D., Natella, R., Pecchia, A.: Assessing and improving the effectiveness of logs for the analysis of software faults. In: 2010 IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN), pp. 457\u2013466 (2010)","DOI":"10.1109\/DSN.2010.5544279"},{"key":"27_CR8","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"319","DOI":"10.1007\/3-540-58618-0_72","volume-title":"Computer Security - ESORICS 94","author":"M. Dacier","year":"1994","unstructured":"Dacier, M., Deswarte, Y.: Privilege graph: An extension to the typed access matrix model. In: Gollmann, D. (ed.) ESORICS 1994. LNCS, vol.\u00a0875, pp. 319\u2013334. Springer, Heidelberg (1994)"},{"key":"27_CR9","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/978-3-642-38004-4_1","volume-title":"Security and Trust Management","author":"P. Dr\u00e1bik","year":"2013","unstructured":"Dr\u00e1bik, P., Martinelli, F., Morisset, C.: Cost-aware runtime enforcement of security policies. In: J\u00f8sang, A., Samarati, P., Petrocchi, M. (eds.) STM 2012. LNCS, vol.\u00a07783, pp. 1\u201316. Springer, Heidelberg (2013)"},{"key":"27_CR10","unstructured":"Easwaran, A., Kannan, S., Lee, I.: Optimal control of software ensuring safety and functionality. Tech. Rep. MS-CIS-05-20, University of Pennsylvania (2005)"},{"key":"27_CR11","doi-asserted-by":"crossref","unstructured":"Evans, S., Wallner, J.: Risk-based security engineering through the eyes of the adversary. In: Information Assurance Workshop, Proc. of the 6th Annual IEEE SMC, pp. 158\u2013165 (2005)","DOI":"10.1109\/IAW.2005.1495947"},{"key":"27_CR12","unstructured":"H\u00e4gerling, C., Kurtz, F.M., Wietfeld, C., Iacono, D., Daidone, A., Di Giandomenico, F.: Security Risk Analysis and Evaluation of Integrating Customer Energy Management Systems into Smart Distribution Grids. CIRED Workshop Proc. (ed.) Accepted to be Published in the Technical Track About Telecommunications and Data Management"},{"key":"27_CR13","doi-asserted-by":"crossref","unstructured":"LeMay, E., Ford, M.D., Keefe, K., Sanders, W.H., Muehrcke, C.: Model-based Security Metrics Using ADversary VIew Security Evaluation (ADVISE). In: Proc. of the 8th Int. Conf. on Quantitative Evaluation of SysTems, QEST, pp. 191\u2013200. IEEE Computer Society (2011)","DOI":"10.1109\/QEST.2011.34"},{"key":"27_CR14","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"144","DOI":"10.1007\/978-3-642-41098-7_10","volume-title":"Security and Trust Management","author":"Y. Mallios","year":"2013","unstructured":"Mallios, Y., Bauer, L., Kaynar, D., Martinelli, F., Morisset, C.: Probabilistic cost enforcement of security policies. In: Accorsi, R., Ranise, S. (eds.) STM 2013. LNCS, vol.\u00a08203, pp. 144\u2013159. Springer, Heidelberg (2013)"},{"key":"27_CR15","doi-asserted-by":"crossref","unstructured":"Martinelli, F., Matteucci, I.: Through modeling to synthesis of security automata. ENTCS 179 (2007)","DOI":"10.1016\/j.entcs.2006.08.029"},{"key":"27_CR16","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"22","DOI":"10.1007\/978-3-642-33704-8_3","volume-title":"Computer Network Security","author":"F. Martinelli","year":"2012","unstructured":"Martinelli, F., Matteucci, I., Morisset, C.: From qualitative to quantitative enforcement of security policy. In: Kotenko, I., Skormin, V. (eds.) MMM-ACNS 2012. LNCS, vol.\u00a07531, pp. 22\u201335. Springer, Heidelberg (2012)"},{"key":"27_CR17","doi-asserted-by":"crossref","unstructured":"Mendes, N., Neto, A., Duraes, J., Vieira, M., Madeira, H.: Assessing and comparing security of web servers. In: 14th IEEE Pacific Rim International Symposium on Dependable Computing, PRDC 2008, pp. 313\u2013322 (2008)","DOI":"10.1109\/PRDC.2008.45"},{"issue":"1","key":"27_CR18","doi-asserted-by":"publisher","first-page":"48","DOI":"10.1109\/TDSC.2004.11","volume":"1","author":"D. Nicol","year":"2004","unstructured":"Nicol, D., Sanders, W., Trivedi, K.: Model-based evaluation: from dependability to security. IEEE Transactions on Dependable and Secure Computing\u00a01(1), 48\u201365 (2004)","journal-title":"IEEE Transactions on Dependable and Secure Computing"},{"key":"27_CR19","doi-asserted-by":"crossref","unstructured":"Nostro, N., Ceccarelli, A., Bondavalli, A., Brancati, F.: A methodology and supporting techniques for the quantitative assessment of insider threats. In: Proc. of the 2nd International Workshop on Dependability Issues in Cloud Computing, pp. 1\u20136 (2013)","DOI":"10.1145\/2506155.2506158"},{"key":"27_CR20","unstructured":"Practical threat analysis (pta), http:\/\/www.ptatechnologies.com\/Documents\/PTA_for_Software.pdf (accessed May 2014)"},{"issue":"1","key":"27_CR21","doi-asserted-by":"publisher","first-page":"30","DOI":"10.1145\/353323.353382","volume":"3","author":"F.B. Schneider","year":"2000","unstructured":"Schneider, F.B.: Enforceable security policies. ACM Transactions on Information and System Security\u00a03(1), 30\u201350 (2000)","journal-title":"ACM Transactions on Information and System Security"},{"key":"27_CR22","unstructured":"Schneier, B.: Secrets & Lies: Digital Security in a Networked World, 1st edn. John Wiley & Sons, Inc., New York (2000)"},{"key":"27_CR23","doi-asserted-by":"crossref","unstructured":"Wang, L., Singhal, A., Jajodia, S.: Toward measuring network security using attack graphs. In: Proc. of the ACM Workshop on Quality of Protection, QoP 2007, pp. 49\u201354 (2007)","DOI":"10.1145\/1314257.1314273"}],"container-title":["Lecture Notes in Computer Science","Computer Safety, Reliability, and Security"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-10557-4_27","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,5,4]],"date-time":"2025-05-04T10:51:47Z","timestamp":1746355907000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-10557-4_27"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014]]},"ISBN":["9783319105567","9783319105574"],"references-count":23,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-10557-4_27","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2014]]}}}