{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,18]],"date-time":"2026-06-18T20:56:26Z","timestamp":1781816186828,"version":"3.54.5"},"reference-count":25,"publisher":"IEEE","license":[{"start":{"date-parts":[[2019,6,1]],"date-time":"2019-06-01T00:00:00Z","timestamp":1559347200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2019,6,1]],"date-time":"2019-06-01T00:00:00Z","timestamp":1559347200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2019,6,1]],"date-time":"2019-06-01T00:00:00Z","timestamp":1559347200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019,6]]},"DOI":"10.1109\/cns.2019.8802745","type":"proceedings-article","created":{"date-parts":[[2019,8,22]],"date-time":"2019-08-22T17:55:11Z","timestamp":1566496511000},"page":"160-168","source":"Crossref","is-referenced-by-count":17,"title":["\u201cWhat\u201d, \u201cWhere\u201d, and \u201cWhy\u201d Cybersecurity Controls to Enforce for Optimal Risk Mitigation"],"prefix":"10.1109","author":[{"given":"Ashutosh","family":"Dutta","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ehab","family":"Al-Shaer","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134646"},{"key":"ref11","year":"0","journal-title":"OWASP Benchmark Project"},{"key":"ref12","article-title":"2018 Consumer Security Products Performance Benchmarks","year":"2017","journal-title":"Passmark Software"},{"key":"ref13","year":"2017","journal-title":"Common Vulnerabilities and Exposures (CVE)"},{"key":"ref14","year":"0","journal-title":"Mitre CVE Details"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/1387830.1387835"},{"key":"ref16","first-page":"337","article-title":"Z3: An efficient smt solver","author":"de moura","year":"0","journal-title":"Proceedings of the Theory and Practice of Software 14th International Conference on Tools and Algorithms for the Construction and Analysis of Systems"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10575-8_11"},{"key":"ref18","author":"alberts","year":"2002","journal-title":"Managing Information Security Risks The OCTAVE Approach"},{"key":"ref19","doi-asserted-by":"crossref","first-page":"413","DOI":"10.1016\/j.ijinfomgt.2008.02.002","article-title":"An economic modelling approach to information security risk management","volume":"28","author":"jerman-bla\u017ei?","year":"2008","journal-title":"International Journal of Information Management"},{"key":"ref4","year":"0","journal-title":"Symantec Security Center"},{"key":"ref3","year":"0","journal-title":"Adversarial Tactics Techniques & Common Knowledge"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.dss.2012.04.001"},{"key":"ref5","year":"0","journal-title":"Z3 Theorem Prover"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1016\/j.dss.2011.02.013"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.2753\/MIS0742-1222250102"},{"key":"ref2","year":"2018","journal-title":"CIS Controls Version 7 Center for Internet Security"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1016\/j.dss.2016.02.012"},{"key":"ref1","year":"0","journal-title":"Framework for Improving Critical Infrastructure Security National Institue of Standards and Technology"},{"key":"ref20","first-page":"45","article-title":"Return on security investment (rosi)-a practical quantitative model","volume":"38","author":"sonnenreich","year":"2006","journal-title":"Journal of Research and Practice in Information Technology"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1016\/j.dss.2013.01.001"},{"key":"ref21","author":"fielder","year":"2017","journal-title":"Uncertainty in cyber security investments"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315272"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1016\/j.dss.2004.06.004"},{"key":"ref25","year":"0","journal-title":"OWASP Cyber Defense Matrix"}],"event":{"name":"2019 IEEE Conference on Communications and Network Security (CNS)","location":"Washington DC, DC, USA","start":{"date-parts":[[2019,6,10]]},"end":{"date-parts":[[2019,6,12]]}},"container-title":["2019 IEEE Conference on Communications and Network Security (CNS)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8790401\/8802631\/08802745.pdf?arnumber=8802745","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,18]],"date-time":"2022-07-18T15:36:36Z","timestamp":1658158596000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8802745\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,6]]},"references-count":25,"URL":"https:\/\/doi.org\/10.1109\/cns.2019.8802745","relation":{},"subject":[],"published":{"date-parts":[[2019,6]]}}}