{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,25]],"date-time":"2026-09-25T17:38:43Z","timestamp":1790357923309,"version":"4.1.0"},"publisher-location":"Cham","reference-count":36,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319992280","type":"print"},{"value":"9783319992297","type":"electronic"}],"license":[{"start":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T00:00:00Z","timestamp":1514764800000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2018]]},"DOI":"10.1007\/978-3-319-99229-7_16","type":"book-chapter","created":{"date-parts":[[2018,8,20]],"date-time":"2018-08-20T10:32:58Z","timestamp":1534761178000},"page":"177-189","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["A Quantitative Approach for the Likelihood of Exploits of System Vulnerabilities"],"prefix":"10.1007","author":[{"given":"Siddhartha","family":"Verma","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Thomas","family":"Gruber","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Peter","family":"Puschner","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Christoph","family":"Schmittner","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Erwin","family":"Schoitsch","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2018,8,21]]},"reference":[{"key":"16_CR1","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"310","DOI":"10.1007\/978-3-319-10506-2_21","volume-title":"Computer Safety, Reliability, and Security","author":"C Schmittner","year":"2014","unstructured":"Schmittner, C., Gruber, T., Puschner, P., Schoitsch, E.: Security application of failure mode and effect analysis (FMEA). In: Bondavalli, A., Di Giandomenico, F. (eds.) SAFECOMP 2014. LNCS, vol. 8666, pp. 310\u2013325. Springer, Cham (2014). https:\/\/doi.org\/10.1007\/978-3-319-10506-2_21"},{"key":"16_CR2","unstructured":"Whitt, W.: Continuous Time Markov Chains, Department of Industrial Engineering and Operations Research, Columbia University (2013)"},{"key":"16_CR3","doi-asserted-by":"publisher","first-page":"226","DOI":"10.1177\/0954409715624466","volume":"231","author":"A Morant","year":"2017","unstructured":"Morant, A., Gustafson, A., S\u00f6derholm, P., Larsson-Kr\u00e5ik, P.O., Kumar, U.: Safety and availability evaluation of railway operation based on the state of signaling systems. Proc. Inst. Mech. Eng. Part F J. Rail Rapid Transit 231, 226\u2013238 (2017)","journal-title":"Proc. Inst. Mech. Eng. Part F J. Rail Rapid Transit"},{"issue":"6","key":"16_CR4","doi-asserted-by":"publisher","first-page":"52","DOI":"10.1109\/MSP.2015.126","volume":"13","author":"J Ryoo","year":"2015","unstructured":"Ryoo, J., Kazman, R., Anand, P.: Architectural analysis for security. IEEE Secur. Priv. 13(6), 52\u201359 (2015)","journal-title":"IEEE Secur. Priv."},{"key":"16_CR5","first-page":"46","volume":"5","author":"M Bunke","year":"2012","unstructured":"Bunke, M., Koschke, R., Sohr, K.: Organizing security patterns related to security and pattern recognition requirements. Int. J. Adv. Secur. 5, 46\u201367 (2012)","journal-title":"Int. J. Adv. Secur."},{"key":"16_CR6","unstructured":"Satty, T.L.: The Analytical Hierarchy and Analytical Network Measurement Process: Applications to Decisions under Risk (2008)"},{"key":"16_CR7","doi-asserted-by":"crossref","unstructured":"Macher, G., Sporer, H., Armengaud, E., Kreiner, C.: SAHARA: A Security-Aware Hazard and Risk Analysis Method (2015)","DOI":"10.7873\/DATE.2015.0622"},{"key":"16_CR8","unstructured":"Liu, Z., Liu, Y., Cai, B., Liu, X., Li, J., Tian, X., Ji, R.: RAMS Analysis of Hybrid Redundancy System of Subsea Blowout Preventer Based on Stochastic Petri Nets (2013)"},{"key":"16_CR9","doi-asserted-by":"publisher","first-page":"487","DOI":"10.1007\/s10270-008-0084-1","volume":"7","author":"S Mustafiz","year":"2008","unstructured":"Mustafiz, S., Sun, X., Kienzle, J., Vangheluwe, H.: Model-driven assessment of system dependability. Softw. Syst. Model. 7, 487\u2013502 (2008)","journal-title":"Softw. Syst. Model."},{"key":"16_CR10","series-title":"Software Design Patterns","volume-title":"Security Patterns : Integrating Security and System Engineering","author":"M Schumacher","year":"2006","unstructured":"Schumacher, M., Fernandez, E.B., Hybertson, D., Buscmann, F., Sommerlad, P.: Security Patterns : Integrating Security and System Engineering. Software Design Patterns. Wiley, Hoboken (2006)"},{"key":"16_CR11","unstructured":"Haldikis, S., Chatzigeorigou, A., Stephanides, G.: A practical evaluation of security patterns (2006)"},{"key":"16_CR12","unstructured":"Steel, C., Nagappan, R., Lai, R.: Core Security Patterns : Best Practices and strategies for J2EE : Web Services and Identity Management (2014)"},{"key":"16_CR13","unstructured":"Kienzle, D.M., Elder, M.C., Tyree, D., Edwards-Hewitt, J.: Security Patterns repository version 1.0 (2002)"},{"key":"16_CR14","doi-asserted-by":"crossref","unstructured":"Dougherty, C., Sayre, K., Seacord, R.C., Svoboda, D., Togashi, K.: Security Design Patterns (2009)","DOI":"10.21236\/ADA501670"},{"key":"16_CR15","volume-title":"Pattern-Oriented Software Architecture: A System of Patterns","author":"F Buschmann","year":"1996","unstructured":"Buschmann, F., Meunier, R., Rohnert, H., Sommerlad, P., Stal, M.: Pattern-Oriented Software Architecture: A System of Patterns. Wiley, New York (1996)"},{"key":"16_CR16","doi-asserted-by":"crossref","unstructured":"Shi, N., Olsson, R.A.: Reverse engineering of design patterns from Java source code (2006)","DOI":"10.1109\/ASE.2006.57"},{"key":"16_CR17","unstructured":"Konrad, S., Cheng, B.H., Campbell, L.A., Wasserman, R.: Using security patterns to model and analyse security requirements (2003)"},{"key":"16_CR18","unstructured":"Rosado, D.G., Gutierrez, C., Fernandez-Medina, E., Piattini, M.: Security patterns related to security requirements (2006)"},{"key":"16_CR19","doi-asserted-by":"crossref","unstructured":"Washizaki, H., Fernandez, E.B., Maruyama, K., Kubo, A., Yoshioka, N.: Improving the classification of security patterns (2009)","DOI":"10.1109\/DEXA.2009.79"},{"key":"16_CR20","unstructured":"Saridakis, T.: A system of patterns for fault tolerance. In: Proceedings of the EuroPLoP Conference (2002)"},{"key":"16_CR21","unstructured":"Buckley, I.A., Fernandez, E.B., Larrondo-Petrie, M.M.: Patterns combining reliability and security (2011)"},{"key":"16_CR22","unstructured":"Hamid, B.: Modelling of secure and dependable applications based on a repository of patterns : The SEMCO approach"},{"key":"16_CR23","unstructured":"Charlwood, M., Turner, S., Worsell, N.: A methodology for the assignment of SILs to safety-related control functions implemented by safety-related electrical, electronic and programmable electronic control system of machines : prepared by Innovation Electronics UK Ltd and Health and Safety Laboratory HSL (2004)"},{"key":"16_CR24","doi-asserted-by":"crossref","unstructured":"Stolte, T., Bagschik, G., Reschka, A., Maurer, M.: Hazard Analysis and Risk Assessment for an Automated Unmanned Protective Vehicle (2017)","DOI":"10.1109\/IVS.2017.7995974"},{"key":"16_CR25","unstructured":"Microsoft Corporation : The stride threat model (2005)"},{"key":"16_CR26","doi-asserted-by":"crossref","unstructured":"Reifer, D.J.: Software Failure Modes and Effects Analysis (1979)","DOI":"10.1109\/TR.1979.5220578"},{"key":"16_CR27","unstructured":"Haapanen, P., Helminen, A.: Failure mode and effect analysis of software-based automation systems (2002)"},{"key":"16_CR28","unstructured":"ISO - International Organization for Standarization: ISO 26262 Road vehicles Functional Safety (2011)"},{"key":"16_CR29","unstructured":"Zhan, Z., Xu, M., Xu, S.: Predicting cyber attack rates with extreme values (2015)"},{"key":"16_CR30","unstructured":"IEC 62443 : Industrial communication networks - Network and system security (2010)"},{"key":"16_CR31","unstructured":"cwe.mitre.org: Common weakness enumeration view : Architectural Concepts (2018)"},{"key":"16_CR32","unstructured":"TimeNET : A software tool for the performability evaluation with stochastic and colored petri nets. https:\/\/timenet.tu-ilmenau.de\/template\/index"},{"key":"16_CR33","doi-asserted-by":"crossref","unstructured":"Mell, P., Scarfone, K., Romanosky, S.: A Complete Guide to the Common Vulnerability Scoring System (2007)","DOI":"10.1049\/iet-ifs:20060055"},{"key":"16_CR34","unstructured":"IEC- International Standards and Conformity Assessment for all electrical, electronic and related technologies. http:\/\/www.iec.ch\/functionalsafety\/standards\/page3.htm"},{"key":"16_CR35","doi-asserted-by":"crossref","unstructured":"Flammini, F., Marrone, S., Valeria, V.: Petri Net Modelling of Physical Vulnerability (2013)","DOI":"10.1007\/978-3-642-41476-3_11"},{"key":"16_CR36","doi-asserted-by":"crossref","unstructured":"Pinna, B., Babykina, G., Brinzei, N., Petin, J-.F.: Using Coloured Petri Nets for integrated reliability and safety evaluations (2013)","DOI":"10.3182\/20130904-3-UK-4041.00016"}],"container-title":["Lecture Notes in Computer Science","Computer Safety, Reliability, and Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-99229-7_16","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,5]],"date-time":"2025-04-05T20:16:47Z","timestamp":1743884207000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-99229-7_16"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018]]},"ISBN":["9783319992280","9783319992297"],"references-count":36,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-99229-7_16","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018]]},"assertion":[{"value":"21 August 2018","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"SAFECOMP","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Computer Safety, Reliability, and Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"V\u00e4ster\u00e5s","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Sweden","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2018","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18 September 2018","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21 September 2018","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"37","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"safecomp2018","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.es.mdh.se\/safecomp2018\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Easychair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"62","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"19","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"1","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"31% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}