{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T17:04:51Z","timestamp":1784135091483,"version":"3.55.0"},"reference-count":105,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"name":"CONCORDIA Project from the European Union\u2019s Horizon 2020 Research and Innovation Program","award":["830927"],"award-info":[{"award-number":["830927"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/access.2023.3257721","type":"journal-article","created":{"date-parts":[[2023,3,15]],"date-time":"2023-03-15T17:45:38Z","timestamp":1678902338000},"page":"27974-27991","source":"Crossref","is-referenced-by-count":43,"title":["A Survey of MulVAL Extensions and Their Attack Scenarios Coverage"],"prefix":"10.1109","volume":"11","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7745-1377","authenticated-orcid":false,"given":"David","family":"Tayouri","sequence":"first","affiliation":[{"name":"Department of Software and Information Systems Engineering, Ben-Gurion University of the Negev, Be’er Sheva, Israel"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nick","family":"Baum","sequence":"additional","affiliation":[{"name":"Department of Software and Information Systems Engineering, Ben-Gurion University of the Negev, Be’er Sheva, Israel"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0630-4059","authenticated-orcid":false,"given":"Asaf","family":"Shabtai","sequence":"additional","affiliation":[{"name":"Department of Software and Information Systems Engineering, Ben-Gurion University of the Negev, Be’er Sheva, Israel"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7229-3899","authenticated-orcid":false,"given":"Rami","family":"Puzis","sequence":"additional","affiliation":[{"name":"Department of Software and Information Systems Engineering, Ben-Gurion University of the Negev, Be’er Sheva, Israel"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Cyber security breaches survey 2020","author":"Johns","year":"2020"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/S1361-3723(20)30127-5"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1201\/9781420031232"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-16782-9_1"},{"issue":"1","key":"ref5","first-page":"80","article-title":"Intelligence-driven computer network defense informed by analysis of adversary campaigns and intrusion kill chains","volume":"1","author":"Hutchins","year":"2011","journal-title":"Lead. Issues Inf. Warfare Secur. Res."},{"key":"ref6","article-title":"Fault tree handbook","author":"Haasl","year":"1981"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/310889.310919"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2022.108795"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180446"},{"issue":"12","key":"ref10","first-page":"21","article-title":"Attack trees","volume":"24","author":"Schneier","year":"1999","journal-title":"Dr. Dobb\u2019s J."},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2002.1004377"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2003.1254313"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2006.39"},{"key":"ref14","first-page":"1","article-title":"MulVAL: A logic-based enterprise network security analyzer","volume-title":"Proc. 14th USENIX Secur. Symp.","author":"Ou"},{"key":"ref15","volume-title":"Mitre Att&ck Web Site","year":"2022"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2017.09.001"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2013.24"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/s10922-008-9109-x"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1093\/jigpal\/jzs034"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2012.58"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2006.06.018"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.3233\/FI-2017-1531"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/HASE.2017.12"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CSF49147.2020.00035"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-54549-9_21"},{"key":"ref26","first-page":"1","article-title":"SeaMonster: Providing tool support for security modeling","volume-title":"Proc. Norsk informasjonssikkerhetskonferanse","author":"Meland"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.2172\/573291"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586140"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/1229285.1229288"},{"key":"ref30","volume-title":"The CyVision Pedigree","year":"2016"},{"key":"ref31","volume-title":"A Logic-Programming Approach to Network Security Analysis","author":"Ou","year":"2005"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1117\/12.604240"},{"key":"ref33","article-title":"Netspa: A network security planning architecture","author":"Artz","year":"2002"},{"key":"ref34","volume-title":"Firemon Risk Analyzer"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1049\/cp.2013.1077"},{"key":"ref36","article-title":"A manual for the cyber security modeling language","author":"Holm","year":"2013"},{"key":"ref37","first-page":"117","article-title":"CyGraph: Graph-based analytics and visualization for cybersecurity","volume-title":"Handbook of Statistics","volume":"35","author":"Noel","year":"2016"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3117348"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-17140-6_29"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3143551"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2019.100219"},{"key":"ref42","volume-title":"NVD: National Vulnerability Database","year":"2022"},{"key":"ref43","volume-title":"Vulnerability Database","year":"1970"},{"key":"ref44","volume-title":"Whitesource Vulnerability Database","year":"2023"},{"key":"ref45","volume-title":"The Nessus Project","year":"2022"},{"key":"ref46","volume-title":"The OVAL Language Specification","author":"Baker","year":"2011"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3041999"},{"key":"ref48","article-title":"Generation and dynamic update of attack graphs in cloud providers infrastructures","author":"Mensah","year":"2019"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-61152-5_1"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSecurity49315.2020.9138852"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/ICEIEC49280.2020.9152340"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-63255-7_33"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/ICASID.2013.6825274"},{"key":"ref54","volume-title":"MulVAL extensions for dynamic asset protection","author":"Bacic","year":"2006"},{"key":"ref55","first-page":"107","article-title":"Model-based validation of enterprise access policies","volume":"2","author":"Bhatt","year":"2006","journal-title":"Nato Secur. Through Sci. Ser. D-Inf. Commun. Secur."},{"key":"ref56","article-title":"Status of the MulVAL project","author":"Govindavajhala","year":"2006"},{"key":"ref57","article-title":"Windows access control demystified","author":"Govindavajhala","year":"2006"},{"key":"ref58","article-title":"A formal approach to practical network security management","author":"Govindavajhala","year":"2006"},{"key":"ref59","article-title":"Automatic configuration vulnerability analysis","author":"Govindavajhala","year":"2007"},{"key":"ref60","article-title":"From attack graphs to automated configuration management\u2014An iterative approach","author":"Homer","year":"2008"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455780"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4614-1860-3"},{"key":"ref63","article-title":"High assurance models for secure systems","author":"Almohri","year":"2013"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2015.2411264"},{"key":"ref65","first-page":"83","article-title":"A model towards using evidence from security events for network attack analysis","volume-title":"Proc. WOSIS","author":"Liu"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.15394\/jdfsl.2014.1180"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-24123-4_8"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-24123-4_8"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-23829-6_1"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.4108\/eai.4-1-2018.153526"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.15676\/ijeei.2015.7.4.15"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/THS.2015.7225307"},{"key":"ref73","article-title":"Establishing common input scenarios for security assessment","author":"Dong","year":"2023"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46263-9_3"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2016.7795462"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/TENCON.2017.8227911"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-61176-1_14"},{"key":"ref78","article-title":"Determining vulnerability using attack graphs: An expansion of the current fair model","author":"Anderson","year":"2018"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-95729-6_21"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1109\/ICCNC.2019.8685579"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/SEAMS.2019.00023"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329853"},{"key":"ref83","article-title":"Security risk analysis based on data criticality","author":"Zhou","year":"2020"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/SPW50608.2020.00035"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1109\/CSF51468.2021.00003"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1145\/3447548.3467159"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1145\/3559104"},{"key":"ref88","volume-title":"MITRE Corporate Overview","year":"2022"},{"key":"ref89","article-title":"MITRE ATT&CK: Design and philosophy","author":"Strom","year":"2018"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-37228-6_20"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSA49311.2020.9139715"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1109\/ESEM.2019.8870147"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-73951-9"},{"key":"ref94","article-title":"Threat modeling: 12 available methods","author":"Shevchenko","year":"2018"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-58424-9_34"},{"key":"ref96","article-title":"How to be a savvy ATT&CK consumer","author":"Nickels","year":"2019"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.14429\/dsj.66.10795"},{"key":"ref98","first-page":"224","article-title":"An evolutionary approach of attack graphs and attack trees: A survey of attack modeling","volume-title":"Proc. Int. Conf. Secur. Manag. (SAM)","author":"Haque"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1201\/9780429424878-5"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2954092"},{"key":"ref101","article-title":"Retrieving ATT&CK tactics and techniques in cyber threat reports","author":"Legoy","year":"2019"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1145\/3314058.3318167"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1109\/RWS50334.2020.9241271"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1109\/ISI49825.2020.9280541"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.4218\/etrij.2020-0086"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/10005208\/10070747.pdf?arnumber=10070747","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,2,13]],"date-time":"2024-02-13T13:26:48Z","timestamp":1707830808000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10070747\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":105,"URL":"https:\/\/doi.org\/10.1109\/access.2023.3257721","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}