{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,15]],"date-time":"2026-05-15T18:28:55Z","timestamp":1778869735096,"version":"3.51.4"},"reference-count":38,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2015,3,13]],"date-time":"2015-03-13T00:00:00Z","timestamp":1426204800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Wireless Pers Commun"],"published-print":{"date-parts":[[2015,4]]},"DOI":"10.1007\/s11277-015-2478-z","type":"journal-article","created":{"date-parts":[[2015,3,12]],"date-time":"2015-03-12T06:32:17Z","timestamp":1426141937000},"page":"1359-1376","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":28,"title":["Multi-Metrics Approach for Security, Privacy and Dependability in Embedded Systems"],"prefix":"10.1007","volume":"81","author":[{"given":"I\u00f1aki","family":"Garitano","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Seraj","family":"Fayyad","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Josef","family":"Noll","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2015,3,13]]},"reference":[{"issue":"3","key":"2478_CR1","doi-asserted-by":"crossref","first-page":"567","DOI":"10.1007\/s11277-011-0384-6","volume":"61","author":"S Alam","year":"2011","unstructured":"Alam, S., Chowdhury, M. M. R., & Noll, J. (2011). Interoperability of security-enabled internet of things. Wireless Personal Communications, 61(3), 567\u2013586.","journal-title":"Wireless Personal Communications"},{"key":"2478_CR2","unstructured":"new SHIELD (2014) nSHIELD. New embedded systems architecture for multi-layer dependable solutions. Retrieved September 9, 2014 http:\/\/www.newshield.eu"},{"issue":"3","key":"2478_CR3","doi-asserted-by":"crossref","first-page":"371","DOI":"10.1109\/TSE.2010.60","volume":"37","author":"PK Manadhata","year":"2011","unstructured":"Manadhata, P. K., & Wing, J. M. (2011a). An attack surface metric. Software Engineering, IEEE Transactions on, 37(3), 371\u2013386.","journal-title":"Software Engineering, IEEE Transactions on"},{"key":"2478_CR4","unstructured":"Voas, J., & Miller, K. W. (1995). Predicting software\u2019s minimum-time-to-hazard andmean-time-to-hazard for rare input events. In Software Reliability Engineering, 1995. Proceedings, Sixth International Symposium on, IEEE (pp. 229\u2013238)."},{"key":"2478_CR5","unstructured":"Voas, J., Ghosh, A., McGraw, G., Charron, F., & Miller, K. W. (1996). Defning an adaptive software security metric from a dynamic software failure tolerance measure. In Computer Assurance, 1996. COMPASS\u201996, Systems Integrity. Software Safety. Process Security. Proceedings of the Eleventh Annual Conference on, IEEE (pp. 250\u2013263)."},{"key":"2478_CR6","doi-asserted-by":"crossref","unstructured":"Engler, D., Chelf, B., Chou, A., & Hallem, S. (2000). Checking system rules using system-specific, programmer-written compiler extensions. In Proceedings of the 4th conference on Symposium on Operating System Design & Implementation, USENIX Association (Vol. 4, pp. 1\u201316).","DOI":"10.21236\/ADA419626"},{"key":"2478_CR7","doi-asserted-by":"crossref","unstructured":"Engler, D., Chen, D. Y., Hallem, S., Chou, A., & Chelf, B. (2001). Bugs as deviant behavior: A general approach to inferring errors in systems code. In Proceedings of the Eighteenth ACM Symposium on Operating Systems Principles, SOSP \u201901, ACM, New York, NY, USA (pp. 57\u201372). doi: 10.1145\/502034.502041","DOI":"10.1145\/502034.502041"},{"key":"2478_CR8","volume-title":"A first step towards automated detection of buffer overrun vulnerabilities","author":"D Wagner","year":"2000","unstructured":"Wagner, D., Foster, J. S., Brewer, E. A., & Aiken, A. (2000). A first step towards automated detection of buffer overrun vulnerabilities. New York, NY: NDSS."},{"key":"2478_CR9","unstructured":"Zhang, X., Edwards, A., & Jaeger, T. (2002). Using cqual for static analysis of authorization hook placement. In USENIX Security Symposium, (pp. 33\u201348)."},{"key":"2478_CR10","unstructured":"United States Computer Emergency Readiness Team (US-CERT). (2014). National cyber awareness system. Retrieved September 9, 2014 https:\/\/www.us-cert.gov\/ncas"},{"key":"2478_CR11","unstructured":"National Institute of Standards and Technology (NIST). (2014). National vulnerability database. Retrieved September 28, 2014 http:\/\/nvd.nist.gov"},{"key":"2478_CR12","unstructured":"MITRE. (2014). Common vulnerabilities and exposures. Retrieved September 28, 2014 http:\/\/www.cve.mitre.org"},{"key":"2478_CR13","unstructured":"SecurityFocus. (2014). Securityfocus. Retrieved September 28, 2014 http:\/\/www.securityfocus.com"},{"key":"2478_CR14","doi-asserted-by":"crossref","unstructured":"Browne, H. K., Arbaugh, W. A., McHugh, J., & Fithen, W. L. (2001). A trend analysis of exploitations. In Security and Privacy, 2001. S&P 2001. Proceedings. 2001 IEEE Symposium on, IEEE, (pp. 214\u2013229).","DOI":"10.1109\/SECPRI.2001.924300"},{"issue":"3","key":"2478_CR15","doi-asserted-by":"crossref","first-page":"3","DOI":"10.1145\/206826.206829","volume":"29","author":"J Alves-Foss","year":"1995","unstructured":"Alves-Foss, J., & Barbosa, S. (1995). Assessing computer security vulnerability. SIGOPS Operating Systems Review, 29(3), 3\u201313. doi: 10.1145\/206826.206829 .","journal-title":"SIGOPS Operating Systems Review"},{"key":"2478_CR16","first-page":"233","volume":"2","author":"S Beattie","year":"2002","unstructured":"Beattie, S., Arnold, S., Cowan, C., Wagle, P., Wright, C., & Shostack, A. (2002). Timing the application of security patches for optimal uptime. LISA, 2, 233\u2013242.","journal-title":"LISA"},{"issue":"10","key":"2478_CR17","doi-asserted-by":"crossref","first-page":"7","DOI":"10.1109\/62.318876","volume":"9","author":"S Brocklehurst","year":"1994","unstructured":"Brocklehurst, S., Littlewood, B., Olovsson, T., & Jonsson, E. (1994). On measurement of operational security. Aerospace and Electronic Systems Magazine, IEEE, 9(10), 7\u201316.","journal-title":"Aerospace and Electronic Systems Magazine, IEEE"},{"key":"2478_CR18","unstructured":"Howard, M. (2003). Fending off future attacks by reducing attack surface. Retrieved September 9, 2014 http:\/\/msdn.microsoft.com\/en-us\/library\/ms972812.aspx"},{"key":"2478_CR19","doi-asserted-by":"crossref","unstructured":"Bartel, A., Klein, J., Le Traon, Y., & Monperrus, M. (2012). Automatically securing permission-based software by reducing the attack surface: An application to android. In Proceedings of the 27th IEEE\/ACM International Conference on Automated Software Engineering, ACM (pp. 274\u2013277).","DOI":"10.1145\/2351676.2351722"},{"key":"2478_CR20","doi-asserted-by":"crossref","first-page":"109","DOI":"10.1007\/0-387-24006-3_8","volume-title":"Computer Security in the 21st Century","author":"M Howard","year":"2005","unstructured":"Howard, M., Pincus, J., & Wing, J. M. (2005). Measuring relative attack surfaces. In D. T. Lee, S. P. Shieh, & J. D. Tygar (Eds.), Computer Security in the 21st Century (pp. 109\u2013137). US: Springer."},{"key":"2478_CR21","doi-asserted-by":"crossref","unstructured":"Kurmus, A., Sorniotti, A., & Kapitza, R. (2011). Attack surface reduction for commodity os kernels: Trimmed garden plants may attract less bugs. In Proceedings of the Fourth European Workshop on System Security, ACM, p. 6.","DOI":"10.1145\/1972551.1972557"},{"key":"2478_CR22","doi-asserted-by":"crossref","unstructured":"Manadhata, P., & Wing, J. M. (2004). Measuring a system\u2019s attack surface. Tech. rep., DTIC Document.","DOI":"10.21236\/ADA458115"},{"key":"2478_CR23","doi-asserted-by":"crossref","unstructured":"Manadhata, P.K., & Wing, J.M. (2011). A formal model for a systems attack surface. In Moving target defense, chap creating asymmetric uncertainty for cyber threats, Vol. 54, (pp. 1\u201328). New York: Springer.","DOI":"10.1007\/978-1-4614-0977-9_1"},{"key":"2478_CR24","doi-asserted-by":"crossref","unstructured":"Stuckman, J., & Purtilo, J. (2012). Comparing and applying attack surface metrics. In Proceedings of the 4th international workshop on Security measurements and metrics, ACM (pp. 3\u20136).","DOI":"10.1145\/2372225.2372229"},{"key":"2478_CR25","doi-asserted-by":"crossref","unstructured":"Szefer, J., Keller, E., Lee, R. B., & Rexford, J. (2011). Eliminating the hypervisor attack surface for a more secure cloud. In Proceedings of the 18th ACM conference on Computer and communications security, ACM (pp. 401\u2013412).","DOI":"10.1145\/2046707.2046754"},{"key":"2478_CR26","unstructured":"Public Interest, Inc. (2014). Debian. Retrieved October 15, 2014 http:\/\/www.debian.org"},{"key":"2478_CR27","unstructured":"Red Hat, Inc. (2014). Redhat. Retrieved October 15, 2014 http:\/\/www.redhat.com"},{"key":"2478_CR28","doi-asserted-by":"crossref","unstructured":"Manadhata, P. K., & Wing, J. M. (2005). An attack surface metric. Tech. rep., DTIC Document.","DOI":"10.21236\/ADA457096"},{"key":"2478_CR29","doi-asserted-by":"crossref","unstructured":"Manadhata, P. K., Tan, K. M., Maxion, R. A., & Wing, J. M. (2007). An approach to measuring a system\u2019s attack surface. Tech. rep., DTIC Document.","DOI":"10.21236\/ADA476977"},{"key":"2478_CR30","doi-asserted-by":"crossref","unstructured":"Manadhata, P., Wing, J., Flynn, M., & McQueen, M. (2006). Measuring the attack surfaces of two ftp daemons. In Proceedings of the 2nd ACM workshop on Quality of protection, ACM (pp. 3\u201310).","DOI":"10.1145\/1179494.1179497"},{"key":"2478_CR31","unstructured":"Kurmus, A., Tartler, R., Dorneanu, D., Heinloth, B., Rothberg, V., Ruprecht, A., et al. (2013). Attack surface metrics and automated compile-time os kernel tailoring. In NDSS."},{"key":"2478_CR32","unstructured":"Tartler, R., Kurmus, A., Ruprecht, A., Heinloth, B., Rothberg, V., Dorneanu, D., et al. (2012). Automatic os kernel tcb reduction by leveraging compile-time configurability. In Proceedings of the Eighth Workshop on Hot Topics in System Dependability, ser. HotDep, Vol. 12."},{"issue":"6","key":"2478_CR33","doi-asserted-by":"crossref","first-page":"391","DOI":"10.1007\/s00779-008-0212-5","volume":"13","author":"J Krumm","year":"2009","unstructured":"Krumm, J. (2009). A survey of computational location privacy. Personal and Ubiquitous Computing, 13(6), 391\u2013399.","journal-title":"Personal and Ubiquitous Computing"},{"key":"2478_CR34","doi-asserted-by":"crossref","unstructured":"Shokri, R., Theodorakopoulos, G., Le Boudec, J. Y., & Hubaux, J. P. (2011). Quantifying location privacy. In Security and Privacy (SP), 2011 IEEE Symposium on, IEEE (pp. 247\u2013262).","DOI":"10.1109\/SP.2011.18"},{"key":"2478_CR35","doi-asserted-by":"crossref","unstructured":"Ma, Z., Kargl, F., & Weber, M. (2009). A location privacy metric for v2x communication systems. In Sarnoff Symposium, 2009. SARNOFF\u201909, IEEE (pp. 1\u20136).","DOI":"10.1109\/SARNOF.2009.4850318"},{"key":"2478_CR36","doi-asserted-by":"crossref","unstructured":"Jatain, A., & Mehta, Y. (2014). Metrics and models for software reliability: A systematic review. In Issues and Challenges in Intelligent Computing Techniques (ICICT), 2014 International Conference on, IEEE (pp. 210\u2013214).","DOI":"10.1109\/ICICICT.2014.6781281"},{"key":"2478_CR37","doi-asserted-by":"crossref","unstructured":"Henkel, J., Bauer, L., Zhang, H., Rehman, S., & Shafique, M. (2014). Multi-layer dependability: From microarchitecture to application level. In Proceedings of the The 51st Annual Design Automation Conference on Design Automation Conference, ACM (pp. 1\u20136).","DOI":"10.1145\/2593069.2596683"},{"key":"2478_CR38","doi-asserted-by":"crossref","unstructured":"Weiner, M., Jorgovanovic, M., Sahai, A., & Nikolie, B. (2014). Design of a low-latency, high-reliability wireless communication system for control applications. In Communications (ICC), 2014 IEEE International Conference on, IEEE (pp. 3829\u20133835).","DOI":"10.1109\/ICC.2014.6883918"}],"container-title":["Wireless Personal Communications"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11277-015-2478-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s11277-015-2478-z\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11277-015-2478-z","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,8,21]],"date-time":"2019-08-21T22:17:25Z","timestamp":1566425845000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s11277-015-2478-z"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,3,13]]},"references-count":38,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2015,4]]}},"alternative-id":["2478"],"URL":"https:\/\/doi.org\/10.1007\/s11277-015-2478-z","relation":{},"ISSN":["0929-6212","1572-834X"],"issn-type":[{"value":"0929-6212","type":"print"},{"value":"1572-834X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2015,3,13]]}}}