{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T11:05:32Z","timestamp":1782903932650,"version":"3.54.5"},"reference-count":59,"publisher":"Springer Science and Business Media LLC","license":[{"start":{"date-parts":[[2021,4,28]],"date-time":"2021-04-28T00:00:00Z","timestamp":1619568000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,4,28]],"date-time":"2021-04-28T00:00:00Z","timestamp":1619568000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Inf Syst Front"],"DOI":"10.1007\/s10796-021-10134-8","type":"journal-article","created":{"date-parts":[[2021,4,28]],"date-time":"2021-04-28T23:19:46Z","timestamp":1619651986000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":11,"title":["Seeking Foundations for the Science of Cyber Security"],"prefix":"10.1007","author":[{"given":"Shouhuai","family":"Xu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Moti","family":"Yung","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jingguo","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2021,4,28]]},"reference":[{"key":"10134_CR1","unstructured":"Chen, H., Cho, J., & Xu, S. (2018a). Quantifying the security effectiveness of firewalls and dmzs. In Proc. HoTSoS\u20192018 (pp. 9:1\u20139:11)."},{"key":"10134_CR2","doi-asserted-by":"crossref","unstructured":"Chen, H., Cho, J., & Xu, S. (2018b). Quantifying the security effectiveness of network diversity. In Proc. hoTSos\u20192018 (p. 24:1).","DOI":"10.1145\/3190619.3191680"},{"issue":"5","key":"10134_CR3","doi-asserted-by":"publisher","first-page":"e0124, 472","DOI":"10.1371\/journal.pone.0124472","volume":"10","author":"Y Chen","year":"2015","unstructured":"Chen, Y., Huang, Z., Xu, S., & Lai, Y. (2015). Spatiotemporal patterns and predictability of cyberattacks. PLoS One, 10(5), e0124, 472.","journal-title":"PLoS One"},{"issue":"6","key":"10134_CR4","doi-asserted-by":"publisher","first-page":"128:1","DOI":"10.1145\/3277666","volume":"51","author":"J Cho","year":"2019","unstructured":"Cho, J., Xu, S., Hurley, P., Mackay, M., Benjamin, T., & Beaumont, M. (2019). Stram: Measuring the trustworthiness of computer-based systems. ACM Comput Surv, 51(6), 128:1\u2013128:47.","journal-title":"ACM Comput Surv"},{"key":"10134_CR5","unstructured":"Da, G., Xu, M., & Xu, S. (2014). A new approach to modeling and analyzing security of networked systems. In Proc. HotSoS\u201914 (pp. 6:1\u20136:12)."},{"key":"10134_CR6","doi-asserted-by":"crossref","unstructured":"Diffie, W., & Hellman, M.E. (1976). New directions in cryptography. IEEE TransInformTheory IT-22, 644\u2013654.","DOI":"10.1109\/TIT.1976.1055638"},{"issue":"12","key":"10134_CR7","first-page":"2965","volume":"13","author":"P Du","year":"2018","unstructured":"Du, P., Sun, Z., Chen, H., Cho, J.H., & Xu, S. (2018). Statistical estimation of malware detection metrics in the absence of ground truth. IEEE T-IFS, 13(12), 2965\u20132980.","journal-title":"IEEE T-IFS"},{"key":"10134_CR8","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1186\/s13635-019-0090-6","volume":"2019","author":"X Fang","year":"2019","unstructured":"Fang, X., Xu, M., Xu, S., & Zhao, P. (2019). A deep learning framework for predicting cyber attacks rates. EURASIP J Information Security, 2019, 5.","journal-title":"EURASIP J Information Security"},{"key":"10134_CR9","doi-asserted-by":"publisher","first-page":"2186","DOI":"10.1109\/TIFS.2021.3051804","volume":"16","author":"Z Fang","year":"2021","unstructured":"Fang, Z., Xu, M., Xu, S., & Hu, T. (2021). A framework for predicting data breach risk: Leveraging dependence to cope with sparsity. IEEE Trans Inf Forensics Secur, 16, 2186\u20132201.","journal-title":"IEEE Trans Inf Forensics Secur"},{"key":"10134_CR10","doi-asserted-by":"crossref","unstructured":"Goldwasser, S., & Micali, S. (1982). Probabilistic encryption and how to play mental poker keeping secret all partial information. In ACM STOC (pp. 365\u2013377).","DOI":"10.1145\/800070.802212"},{"key":"10134_CR11","doi-asserted-by":"crossref","unstructured":"Han, Y., Lu, W., & Xu, S. (2014). Characterizing the power of moving target defense via cyber epidemic dynamics. In HotSoS (pp. 1\u201312).","DOI":"10.1145\/2600176.2600180"},{"key":"10134_CR12","unstructured":"Han, Y., Lu, W., & Xu, S. (2020). Preventive and reactive cyber defense dynamics with ergodic time-dependent parameters is globally attractive. arXiv:2001.07958."},{"key":"10134_CR13","doi-asserted-by":"crossref","unstructured":"Harrison, K., & Xu, S. (2007). Protecting cryptographic keys from memory disclosures. In IEEE\/IFIP DSN\u201907 (pp. 137\u2013143).","DOI":"10.1109\/DSN.2007.77"},{"key":"10134_CR14","doi-asserted-by":"crossref","unstructured":"Herley, C., & van Oorschot, P.C. (2017). Sok: Science, security and the elusive goal of security as a scientific pursuit. In 2017 IEEE symposium on security and privacy (SP) (pp. 99\u2013120).","DOI":"10.1109\/SP.2017.38"},{"key":"10134_CR15","doi-asserted-by":"publisher","unstructured":"Huang, X., Yan, F., & Zhang, L. (2021). Honeygadget: A deception based approach for detecting code reuse attacks. Information Systems Frontiers, 23(2). https:\/\/doi.org\/10.1007\/s10796-020-10014-7.","DOI":"10.1007\/s10796-020-10014-7"},{"key":"10134_CR16","doi-asserted-by":"crossref","unstructured":"Kocher, P. (1996). Timing attacks on implementations of Diffie-Hellman, RSA, DSS, and other systems. In Proc. CRYPTO 96, Springer-Verlag, pp 104\u2013113, lNCS 1109.","DOI":"10.1007\/3-540-68697-5_9"},{"key":"10134_CR17","first-page":"1","volume-title":"Towards fundamental science of cyber security","author":"A Kott","year":"2014","unstructured":"Kott, A. (2014). Towards fundamental science of cyber security, (pp. 1\u201313). New York: Springer."},{"key":"10134_CR18","unstructured":"Li, D., Li, Q., Ye, Y., & Xu, S. (2020). Sok: Arms race in adversarial malware detection. arXiv:2005.11671."},{"key":"10134_CR19","doi-asserted-by":"publisher","first-page":"736","DOI":"10.1109\/TNSE.2021.3051354","volume":"8","author":"D Li","year":"2021","unstructured":"Li, D., Li, Q., Ye, Y., & Xu, S. (2021a). A frameowrk for enhancing deep neural networks against adversarial malware examples. IEEE Transactions on Network Science and Engineering (TNSE), 8, 736\u2013750.","journal-title":"IEEE Transactions on Network Science and Engineering (TNSE)"},{"issue":"1","key":"10134_CR20","doi-asserted-by":"publisher","first-page":"28","DOI":"10.1109\/TDSC.2008.75","volume":"8","author":"X Li","year":"2011","unstructured":"Li, X., Parker, P., & Xu, S. (2011). A stochastic model for quantitative security analyses of networked systems. IEEE Transactions on Dependable and Secure Computing, 8(1), 28\u201343.","journal-title":"IEEE Transactions on Dependable and Secure Computing"},{"key":"10134_CR21","unstructured":"Li, Z., Zou, D., Xu, S., Ou, X., Jin, H., Wang, S., Deng, Z., & Zhong, Y. (2018). Vuldeepecker: A deep learning-based system for vulnerability detection. In: Proc. NDSS\u201918."},{"key":"10134_CR22","unstructured":"Li, Z., Tang, J., Zou, D., Chen, Q., Xu, S., Zhang, C., Li, Y., & Jin, H. (2021b). Robustness of deep learning-based vulnerability detectors: Attack anddefense. under review."},{"key":"10134_CR23","doi-asserted-by":"crossref","unstructured":"Li, Z., Zou, D., Xu, S., Jin, H., Zhu, Y., Chen, Z., Wang, S., & Wang, J. (2021c). Sysevr: A framework for using deep learning to detect software vulnerabilities. IEEE Transactions on Dependable and Secure Computing (accepted for publication).","DOI":"10.1109\/TDSC.2021.3051525"},{"key":"10134_CR24","unstructured":"Li, Z., Zou, D., Xu, S., Jin, H., Zhu, Y., Zhang, Z., Chen, Z., & Li, D. (2021d). Vuldeelocator: A deep learning-based system for detecting and locating software vulnerabilities. Under review."},{"issue":"3","key":"10134_CR25","doi-asserted-by":"publisher","first-page":"1098","DOI":"10.1109\/TNET.2019.2912847","volume":"27","author":"Z Lin","year":"2019","unstructured":"Lin, Z., Lu, W., & Xu, S. (2019). Unified preventive and reactive cyber defense dynamics is still globally convergent. IEEE\/ACM Trans Netw, 27(3), 1098\u20131111.","journal-title":"IEEE\/ACM Trans Netw"},{"issue":"2","key":"10134_CR26","doi-asserted-by":"publisher","first-page":"455","DOI":"10.1109\/JAS.2020.1003527","volume":"8","author":"Z Liu","year":"2021","unstructured":"Liu, Z., Zheng, R., Lu, W., & Xu, S. (2021). Using event-based method to estimate cybersecurity equilibrium. IEEE CAA J Autom Sinica, 8(2), 455\u2013467.","journal-title":"IEEE CAA J Autom Sinica"},{"issue":"12","key":"10134_CR27","first-page":"3217","volume":"14","author":"J Mireles","year":"2019","unstructured":"Mireles, J., Ficke, E., Cho, J., Hurley, P., & Xu, S. (2019). Metrics towards measuring cyber agility. IEEE T-IFS, 14(12), 3217\u20133232.","journal-title":"IEEE T-IFS"},{"issue":"4","key":"10134_CR28","first-page":"62:1","volume":"49","author":"M Pendleton","year":"2016","unstructured":"Pendleton, M., Garcia-Lebron, R., Cho, J., & Xu, S. (2016). A survey on systems security metrics. ACM Comput Surv, 49(4), 62:1\u2013 62:35.","journal-title":"ACM Comput Surv"},{"issue":"14","key":"10134_CR29","doi-asserted-by":"publisher","first-page":"2534","DOI":"10.1080\/02664763.2016.1257590","volume":"44","author":"C Peng","year":"2017","unstructured":"Peng, C., Xu, M., Xu, S., & Hu, T. (2017). Modeling and predicting extreme cyber attack rates via marked point processes. Journal of Applied Statistics, 44(14), 2534\u20132563.","journal-title":"Journal of Applied Statistics"},{"issue":"2","key":"10134_CR30","doi-asserted-by":"publisher","first-page":"120","DOI":"10.1145\/359340.359342","volume":"21","author":"R Rivest","year":"1978","unstructured":"Rivest, R., Shamir, A., & Adleman, L. (1978). A method for obtaining digital signatures and public-key cryptosystems. Communications of the ACM, 21(2), 120\u2013126.","journal-title":"Communications of the ACM"},{"key":"10134_CR31","unstructured":"Rodriguez, R.M., Golob, E., & Xu, S. (2020). Human cognition through the lens of social engineering cyberattacks. CoRR (to appear in Frontiers in Psychology-Cognition). arXiv:2007.04932."},{"key":"10134_CR32","doi-asserted-by":"crossref","unstructured":"Roque, A., Bush, K., & Degni, C. (2016). Security is about control: insights from cybernetics. In Proc. HotSoS (pp. 17\u201324).","DOI":"10.1145\/2898375.2898379"},{"key":"10134_CR33","doi-asserted-by":"publisher","unstructured":"Roy, K.C., & Chen, Q. (2021). Deepran: Attention-based bilstm and crf for ransomware early detection and classification. Information Systems Frontiers, 23(2). https:\/\/doi.org\/10.1007\/s10796-020-10017-4.","DOI":"10.1007\/s10796-020-10017-4"},{"key":"10134_CR34","unstructured":"Schneider, F. (2011). Blueprint for a science of cybersecurity. Tech. rep. Cornell University."},{"key":"10134_CR35","doi-asserted-by":"crossref","unstructured":"Spring, J., Moore, T., & Pym, D. (2017). Practicing a science of security: A philosophy of science perspective. In Proc. NSPW (pp. 1\u201318).","DOI":"10.1145\/3171533.3171540"},{"issue":"1","key":"10134_CR36","doi-asserted-by":"publisher","first-page":"91","DOI":"10.25300\/MISQ\/2015\/39.1.05","volume":"39","author":"J Wang","year":"2015","unstructured":"Wang, J., Gupta, M., & Rao, H.R. (2015). Insider threats in a financial institution: Analysis of attack-proneness of information systems applications. MIS Quarterly, 39(1), 91\u2013112.","journal-title":"MIS Quarterly"},{"key":"10134_CR37","doi-asserted-by":"crossref","unstructured":"Wang, J., Shan, Z., Gupta, M., & Rao, H.R. (2019). A longitudinal study of unauthorized access attempts on information systems: The role of opportunity contexts. MIS Quarterly, 43(2).","DOI":"10.25300\/MISQ\/2019\/14751"},{"key":"10134_CR38","doi-asserted-by":"publisher","unstructured":"Xia, B., Bai, Y., Yin, J., Li, Y., & Xu, J. (2021). Loggan: a log-level generative adversarial network for anomaly detection using permutation event modeling. Information Systems Frontiers, 23(2). https:\/\/doi.org\/10.1007\/s10796-020-10026-3.","DOI":"10.1007\/s10796-020-10026-3"},{"issue":"3","key":"10134_CR39","doi-asserted-by":"publisher","first-page":"288","DOI":"10.1080\/15427951.2012.654480","volume":"8","author":"M Xu","year":"2012","unstructured":"Xu, M., & Xu, S. (2012). An extended stochastic model for quantitative security analysis of networked systems. Internet Mathematics, 8(3), 288\u2013320.","journal-title":"Internet Mathematics"},{"issue":"1","key":"10134_CR40","doi-asserted-by":"publisher","first-page":"62","DOI":"10.1080\/15427951.2014.902407","volume":"11","author":"M Xu","year":"2015","unstructured":"Xu, M., Da, G., & Xu, S. (2015a). Cyber epidemic models with dependences. Internet Mathematics, 11(1), 62\u201392.","journal-title":"Internet Mathematics"},{"issue":"4","key":"10134_CR41","doi-asserted-by":"publisher","first-page":"508","DOI":"10.1080\/00401706.2016.1256841","volume":"59","author":"M Xu","year":"2017","unstructured":"Xu, M., Hua, L., & Xu, S. (2017). A vine copula model for predicting the effectiveness of cyber defense early-warning. Technometrics, 59(4), 508\u2013520.","journal-title":"Technometrics"},{"issue":"11","key":"10134_CR42","first-page":"2856","volume":"13","author":"M Xu","year":"2018","unstructured":"Xu, M., Schweitzer, K.M., Bateman, R.M., & Xu, S. (2018). Modeling and predicting cyber hacking breaches. IEEE T-IFS, 13(11), 2856\u20132871.","journal-title":"IEEE T-IFS"},{"key":"10134_CR43","unstructured":"Xu, S. (2008). Collaborative attack vs. collaborative defense (pp. 217\u2013228)."},{"key":"10134_CR44","doi-asserted-by":"crossref","unstructured":"Xu, S. (2014a). Cybersecurity dynamics. In Proc. HotSoS\u201914 (pp. 14:1\u201314:2).","DOI":"10.1145\/2600176.2600190"},{"key":"10134_CR45","unstructured":"Xu, S. (2014b). Emergent behavior in cybersecurity. In Proc. HotSoS (pp. 13:1\u201313:2)."},{"key":"10134_CR46","doi-asserted-by":"crossref","unstructured":"Xu, S. (2019). Cybersecurity dynamics: A foundation for the science of cybersecurity. In Proactive and dynamic network defense (pp. 1\u201331).","DOI":"10.1007\/978-3-030-10597-6_1"},{"key":"10134_CR47","doi-asserted-by":"crossref","unstructured":"Xu, S. (2020). The cybersecurity dynamics way of thinking and landscape (invited paper). In ACM Workshop on Moving Target Defense.","DOI":"10.1145\/3411496.3421225"},{"key":"10134_CR48","doi-asserted-by":"crossref","unstructured":"Xu, S., & Yung, M. (2009). Expecting the unexpected: Towards robust credential infrastructure. In Financial Crypto (pp. 201\u2013221).","DOI":"10.1007\/978-3-642-03549-4_12"},{"key":"10134_CR49","doi-asserted-by":"crossref","unstructured":"Xu, S., Lu, W., & Xu, L. (2012). Push- and pull-based epidemic spreading in networks: Thresholds and deeper insights. ACM TAAS, 7(3).","DOI":"10.1145\/2348832.2348835"},{"key":"10134_CR50","doi-asserted-by":"crossref","unstructured":"Xu, S., Lu, W., Xu, L., & Zhan, Z. (2014). Adaptive epidemic dynamics in networks: Thresholds and control. ACM TAAS, 8(4).","DOI":"10.1145\/2555613"},{"issue":"1","key":"10134_CR51","doi-asserted-by":"publisher","first-page":"23","DOI":"10.1080\/15427951.2013.830583","volume":"11","author":"S Xu","year":"2015","unstructured":"Xu, S., Lu, W., & Li, H. (2015b). A stochastic model of active cyber defense dynamics. Internet Mathematics, 11(1), 23\u201361.","journal-title":"Internet Mathematics"},{"key":"10134_CR52","doi-asserted-by":"publisher","unstructured":"Xue, G., Xu, J., Wu, H., Lu, w, & Xu, L. (2021). Incentive mechanism for rational miners in bitcoin mining pool. Information Systems Frontiers, 23(2). https:\/\/doi.org\/10.1007\/s10796-020-10019-2.","DOI":"10.1007\/s10796-020-10019-2"},{"key":"10134_CR53","unstructured":"Yao, A.C. (1982). Theory and application of trapdoor functions. In Proc. 23rd IEEE Symp. on Foundations of Comp. Science (pp. 80\u201391). Chicago: IEEE."},{"key":"10134_CR54","doi-asserted-by":"crossref","unstructured":"Zhan, Z., Xu, M., & Xu, S. (2013). Characterizing honeypot-captured cyber attacks: Statistical framework and case study. IEEE T-IFS, 8(11).","DOI":"10.1109\/TIFS.2013.2279800"},{"issue":"8","key":"10134_CR55","first-page":"1666","volume":"10","author":"Z Zhan","year":"2015","unstructured":"Zhan, Z., Xu, M., & Xu, S. (2015). Predicting cyber attack rates with extreme values. IEEE T-IFS, 10(8), 1666\u20131677.","journal-title":"IEEE T-IFS"},{"key":"10134_CR56","doi-asserted-by":"crossref","unstructured":"Zheng, R., Lu, W., & Xu, S. (2015). Active cyber defense dynamics exhibiting rich phenomena. In Proc. HotSoS.","DOI":"10.1145\/2746194.2746196"},{"issue":"2","key":"10134_CR57","first-page":"156","volume":"5","author":"R Zheng","year":"2018","unstructured":"Zheng, R., Lu, W., & Xu, S. (2018). Preventive and reactive cyber defense dynamics is globally stable. IEEE TNSE, 5(2), 156\u2013170.","journal-title":"IEEE TNSE"},{"key":"10134_CR58","doi-asserted-by":"publisher","unstructured":"Zou, D., Wang, S., Xu, S., Li, Z., & Jin, H. (2019). \u03bc vuldeepecker: A deep learning-based system for multiclass vulnerability detection. IEEE Transactions on Dependable and Secure Computing, pp 1\u20131. https:\/\/doi.org\/10.1109\/TDSC.2019.2942930.","DOI":"10.1109\/TDSC.2019.2942930"},{"key":"10134_CR59","doi-asserted-by":"crossref","unstructured":"Zou, D., Zhu, Y., Xu, S., Li, Z., Jin, H., & Ye, H. (2021). Interpreting deep learning-based vulnerability detector predictions based on heuristic searching. ACM Transactions on Software Engineering and Methodology, 30(2).","DOI":"10.1145\/3429444"}],"container-title":["Information Systems Frontiers"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10796-021-10134-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10796-021-10134-8\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10796-021-10134-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,4,29]],"date-time":"2021-04-29T00:04:14Z","timestamp":1619654654000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10796-021-10134-8"}},"subtitle":["Editorial for Special Issue of Information Systems Frontiers"],"short-title":[],"issued":{"date-parts":[[2021,4,28]]},"references-count":59,"alternative-id":["10134"],"URL":"https:\/\/doi.org\/10.1007\/s10796-021-10134-8","relation":{},"ISSN":["1387-3326","1572-9419"],"issn-type":[{"value":"1387-3326","type":"print"},{"value":"1572-9419","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,4,28]]},"assertion":[{"value":"31 March 2021","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"28 April 2021","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}