{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,5]],"date-time":"2026-03-05T22:40:38Z","timestamp":1772750438001,"version":"3.50.1"},"reference-count":39,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/USG.html"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2017]]},"DOI":"10.1109\/access.2017.2714979","type":"journal-article","created":{"date-parts":[[2017,7,13]],"date-time":"2017-07-13T18:22:28Z","timestamp":1499970148000},"page":"12878-12894","source":"Crossref","is-referenced-by-count":6,"title":["A Customizable Framework for Prioritizing Systems Security Engineering Processes, Activities, and Tasks"],"prefix":"10.1109","volume":"5","author":[{"given":"Stephen","family":"Khou","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7034-8083","authenticated-orcid":false,"given":"Logan O.","family":"Mailloux","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"John M.","family":"Pecarina","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Michael","family":"Mcevilley","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-137"},{"key":"ref38","article-title":"Graph theory","author":"hazewinkel","year":"2001","journal-title":"Encyclopedia of Mathematics"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1016\/j.csi.2006.04.002"},{"key":"ref32","article-title":"Tools and techniques for SSE-CMM implementation","author":"pazos-revilla","year":"2008","journal-title":"Proc 12th World Multi-Conf Syst Cybern Informat"},{"key":"ref31","article-title":"Security controls for computer systems","year":"1970"},{"key":"ref30","year":"2016","journal-title":"Nodexl Network Overview Discovery and Exploration for Excel"},{"key":"ref37","doi-asserted-by":"crossref","first-page":"440","DOI":"10.1038\/30918","article-title":"Collective dynamics of ‘small-world’ networks","volume":"393","author":"watts","year":"1998","journal-title":"Nature"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1177\/104649647100200201"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/SysCon.2013.6549907"},{"key":"ref34","year":"2008","journal-title":"Information Technology—Security Techniques—Systems Security Engineering—Capability Maturity Model (SSE-CMM)"},{"key":"ref10","article-title":"The Canadian trusted computer product evaluation criteria","year":"1993"},{"key":"ref11","year":"2009","journal-title":"Information Technology—Security Techniques—Evaluation Criteria for it Security"},{"key":"ref12","article-title":"45 CFR 95.621—ADP reviews","year":"1990"},{"key":"ref13","year":"2013","journal-title":"Information Technology—Security Techniques—Code of Practice for Information Security Management"},{"key":"ref14","year":"2006","journal-title":"Minimum Security Requirements for Federal Information and Information Systems"},{"key":"ref15","author":"tipton","year":"2015","journal-title":"Official (ISC)2 Guide to the CISSP CBK"},{"key":"ref16","article-title":"Transportation systems sector-specific plan: An annex to the national infrastructure protection","year":"2010","journal-title":"DHS"},{"key":"ref17","article-title":"Catalog of control systems security: Recommendations for standards developers","year":"2011"},{"key":"ref18","year":"2014","journal-title":"Systems Engineering Guide - The MITRE Corporation"},{"key":"ref19","article-title":"Security engineering","year":"2015"},{"key":"ref28","first-page":"13","article-title":"Usable security: Why do we need it? How do we get it?","author":"sasse","year":"2005","journal-title":"Security and Usability Designing Secure Systems that People Can Use"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-160"},{"key":"ref27","article-title":"Resilient military systems and the advanced cyber threat","year":"2013"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/SysCon.2012.6189463"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1002\/inst.12092"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.21236\/ADA550373"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2010.123"},{"key":"ref8","article-title":"Department of Defense Standard 5200.28. Trusted computer system evaluation criteria","year":"1983"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2016.77"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2670781"},{"key":"ref9","article-title":"Information technology security evaluation criteria","year":"1991"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1002\/sys.21211"},{"key":"ref20","author":"schumacher","year":"2006","journal-title":"Security Patterns Integrating Security and Systems Engineering"},{"key":"ref22","first-page":"26","article-title":"System security engineering for program protection and cybersecurity","author":"reed","year":"2015","journal-title":"Proc 18th Annu NDIA Syst Eng Conf"},{"key":"ref21","author":"anderson","year":"2008","journal-title":"Security Engineering"},{"key":"ref24","article-title":"Security and privacy controls for federal information systems and organizations","year":"2013"},{"key":"ref23","first-page":"1","article-title":"Security risk analysis for complex systems","author":"branagan","year":"2006","journal-title":"Proc ISSSA"},{"key":"ref26","article-title":"Framework for SCADA security policy","author":"kilman","year":"2005"},{"key":"ref25","year":"2010","journal-title":"Defense Acquisition Guidebook"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/7859429\/07979510.pdf?arnumber=7979510","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,10,11]],"date-time":"2021-10-11T03:00:35Z","timestamp":1633921235000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7979510\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017]]},"references-count":39,"URL":"https:\/\/doi.org\/10.1109\/access.2017.2714979","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017]]}}}