{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,23]],"date-time":"2026-06-23T11:46:06Z","timestamp":1782215166769,"version":"3.54.5"},"publisher-location":"Berlin, Heidelberg","reference-count":21,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783540859314","type":"print"},{"value":"9783540859338","type":"electronic"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"DOI":"10.1007\/978-3-540-85933-8_5","type":"book-chapter","created":{"date-parts":[[2008,9,14]],"date-time":"2008-09-14T01:44:51Z","timestamp":1221356691000},"page":"44-59","source":"Crossref","is-referenced-by-count":31,"title":["GARNET: A Graphical Attack Graph and Reachability Network Evaluation Tool"],"prefix":"10.1007","author":[{"given":"Leevar","family":"Williams","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Richard","family":"Lippmann","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kyle","family":"Ingols","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","reference":[{"issue":"4","key":"5_CR1","doi-asserted-by":"publisher","first-page":"833","DOI":"10.1145\/571647.571649","volume":"21","author":"B. Bederson","year":"2002","unstructured":"Bederson, B., Shneiderman, B., Wattenberg, M.: Ordered and quantum treemaps: making effective use of 2d space to display hierarchies. ACM Transactions on Graphics\u00a021(4), 833\u2013854 (2002)","journal-title":"ACM Transactions on Graphics"},{"issue":"2","key":"5_CR2","doi-asserted-by":"crossref","first-page":"19","DOI":"10.5711\/morj.10.2.19","volume":"10","author":"D. Buckshaw","year":"2005","unstructured":"Buckshaw, D., Parnell, G., Unkenholz, W., Parks, D., Wallner, J., Saydjari, S.: Mission oriented risk and design analysis of critical information systems. Military Operations Research\u00a010(2), 19\u201338 (2005)","journal-title":"Military Operations Research"},{"issue":"4","key":"5_CR3","doi-asserted-by":"publisher","first-page":"59","DOI":"10.1109\/MSP.2004.109","volume":"2","author":"S. Evans","year":"2004","unstructured":"Evans, S., Heinbuch, D., Kyle, E., Piorkowski, J., Wallner, J.: Risk-based systems security engineering: stopping attacks with intention. IEEE Security and Privacy Magazine\u00a02(4), 59\u201362 (2004)","journal-title":"IEEE Security and Privacy Magazine"},{"key":"5_CR4","doi-asserted-by":"crossref","unstructured":"Ingols, K., Lippmann, R., Piwowarski, K.: Practical attack graph generation for network defense. In: Proceedings Computer Security Applications Conference (ACSAC), pp. 121\u2013130 (2006)","DOI":"10.1109\/ACSAC.2006.39"},{"key":"5_CR5","volume-title":"Security metrics: replacing fear, uncertainty, and doubt","author":"A. Jaquith","year":"2007","unstructured":"Jaquith, A.: Security metrics: replacing fear, uncertainty, and doubt. Addison Wesley, Reading (2007)"},{"key":"5_CR6","unstructured":"Kewley, D., Lowry, J.: Observations on the effects of defense in depth on adversary behavior in cyber warfare. In: Proceedings of the 2001 IEEE Workshop on Information Assurance and Security United States Military Academy, West Point, NY, 5-6 June (2001)"},{"key":"5_CR7","doi-asserted-by":"crossref","unstructured":"Lippmann, R., Ingols, K.: An annotated review of past papers on attack graphs. MIT Lincoln Laboratory, Lexington, MA, Tech. Rep., 2005, ESC-TR-2005-054 (2005)","DOI":"10.21236\/ADA431826"},{"key":"5_CR8","doi-asserted-by":"crossref","unstructured":"Lippmann, R., Ingols, K., Scott, C., Piwowarski, K., Kratkiewicz, K., Cunningham, R.: Validating and restoring defense in depth using attack graphs. In: MILCOM 2006, Washington, DC (2006)","DOI":"10.1109\/MILCOM.2006.302434"},{"key":"5_CR9","unstructured":"Mell, P., Scarfone, K., Romanosky, S.: A complete guide to common vulnerability scoring system version 2.0 (2008) (Accessed 23 April 2008), http:\/\/www.first.org\/cvss\/cvss-guide.html"},{"key":"5_CR10","volume-title":"Usability Inspection Methods","author":"J. Nielsen","year":"1994","unstructured":"Nielsen, J.: Heuristic evaluation. In: Nielsen, J., Mack, R.L. (eds.) Usability Inspection Methods. John Wiley and Sons, New York (1994)"},{"key":"5_CR11","doi-asserted-by":"crossref","unstructured":"Nielsen, J., Molich, R.: Heuristic evaluation of user interfaces. In: Proceedings ACM CHI 1990 Conference, Seattle, WA, pp. 249\u2013256 (1990)","DOI":"10.1145\/97243.97281"},{"key":"5_CR12","doi-asserted-by":"crossref","unstructured":"Noel, S., Jajodia, S.: Understanding complex network attack graphs through clustered adjacency matrices. In: Proceedings Computer Security Applications Conference (ACSAC), pp. 160\u2013169 (2005)","DOI":"10.1109\/CSAC.2005.58"},{"key":"5_CR13","unstructured":"NVD National Vulnerability Database (2008) (Accessed 11 April 2008), http:\/\/nvd.nist.gov"},{"key":"5_CR14","unstructured":"Ou, X., Govindavajhala, S., Appel, A.W.: Mulval: a logic- based network security analyzer. In: Proceedings of the 14th Usenix Security Symposium 2005, pp. 113\u2013128 (2005)"},{"key":"5_CR15","doi-asserted-by":"crossref","unstructured":"Phan, D., Xiao, L., Yeh, R.B., Hanrahan, P., Winograd, T.: Flow map layout. In: Proceedings of the IEEE Symposium on Information Visualization 2005, pp. 219\u2013224 (2005)","DOI":"10.1109\/INFOVIS.2005.13"},{"key":"5_CR16","unstructured":"RedSeal Systems Inc. (2008) (Accessed 11 April 2008), http:\/\/www.redseal.net"},{"issue":"5","key":"5_CR17","doi-asserted-by":"publisher","first-page":"733","DOI":"10.1109\/TVCG.2006.166","volume":"12","author":"B. Shneiderman","year":"2006","unstructured":"Shneiderman, B., Aris, A.: Network visualization by semantic substrates. IEEE Transactions on Visualization and Computer Graphics\u00a012(5), 733\u2013740 (2006)","journal-title":"IEEE Transactions on Visualization and Computer Graphics"},{"key":"5_CR18","unstructured":"Skybox Security Inc. (2008) (Accessed 11 April 2008), http:\/\/www.skyboxsecurity.com"},{"key":"5_CR19","unstructured":"SWIG (2008) (Accessed 11 April 2008), http:\/\/www.swig.org"},{"key":"5_CR20","unstructured":"Symantec Corp. Internet security threat report (2008) (Accessed 11 April 2008), http:\/\/www.symantec.com\/business\/theme.jsp?themeid=threatreport"},{"key":"5_CR21","unstructured":"Williams, L., Lippmann, R., Ingols, K.: An interactive attack graph cascade and reachability display. In: VizSec 2007, Sacramento, CA (2007)"}],"container-title":["Lecture Notes in Computer Science","Visualization for Computer Security"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-540-85933-8_5.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,11,23]],"date-time":"2020-11-23T21:36:28Z","timestamp":1606167388000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-540-85933-8_5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[null]]},"ISBN":["9783540859314","9783540859338"],"references-count":21,"URL":"https:\/\/doi.org\/10.1007\/978-3-540-85933-8_5","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[]}}