{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,10,23]],"date-time":"2024-10-23T09:47:56Z","timestamp":1729676876356,"version":"3.28.0"},"reference-count":23,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2013,12]]},"DOI":"10.1109\/isias.2013.6947732","type":"proceedings-article","created":{"date-parts":[[2014,11,12]],"date-time":"2014-11-12T22:39:11Z","timestamp":1415831951000},"page":"49-54","source":"Crossref","is-referenced-by-count":5,"title":["Quantitative penetration testing with item response theory"],"prefix":"10.1109","author":[{"given":"Florian","family":"Arnold","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wolter","family":"Pieters","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Marielle","family":"Stoelinga","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"journal-title":"The Rating of Chessplayers Past and Present","year":"1975","author":"en","key":"19"},{"key":"22","first-page":"235","article-title":"A quantitative model of the security intrusion process based on attacker behavior,\" Software Engineering","volume":"23","author":"jonsson","year":"1997","journal-title":"IEEE Transactions on"},{"journal-title":"Probabilistic models for some intelligence and attainment tests","year":"1960","author":"rasch","key":"17"},{"journal-title":"Risk Taxonomy","year":"2009","key":"23"},{"key":"18","doi-asserted-by":"publisher","DOI":"10.1016\/j.compedu.2011.02.003"},{"key":"15","first-page":"ls6","article-title":"Foundations of attack trees","volume":"3935","author":"mauw","year":"2006","journal-title":"Proceedings of ICISC Ser LNCS"},{"key":"16","first-page":"21","article-title":"Attack trees: Modeling security threats,\" Dr","volume":"24","author":"schneier","year":"1999","journal-title":"Dobb's Journal"},{"key":"13","doi-asserted-by":"publisher","DOI":"10.1109\/SocialCom-PASSAT.2012.65"},{"key":"14","doi-asserted-by":"crossref","first-page":"66","DOI":"10.1145\/1529282.1529294","article-title":"Multistep attack modelling and simulation (MsAMS) framework based on mobile ambients","author":"nunes leal franqueira","year":"2009","journal-title":"Proceedings of SAC"},{"key":"11","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2007.159"},{"key":"12","first-page":"s","article-title":"Testing our defences or defending our tests: The obstacles to performing security assessment references","volume":"2005","author":"furnell","year":"2005","journal-title":"Computer Fraud & Security"},{"key":"21","doi-asserted-by":"publisher","DOI":"10.1111\/j.1745-3984.2009.00080.x"},{"key":"3","article-title":"Quantitative penetration testing with item response theory (extended version","author":"arnold","year":"2013","journal-title":"CTIT"},{"key":"20","first-page":"1","article-title":"A move in the security measurement stalemate: Elo-sty1e ratings to quantify vulnerability","author":"pieters","year":"2012","journal-title":"Proceedings of NSPW"},{"key":"2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-79789-7_30"},{"key":"1","doi-asserted-by":"publisher","DOI":"10.1145\/508171.508187"},{"key":"10","doi-asserted-by":"publisher","DOI":"10.1109\/PDP.2011.62"},{"key":"7","doi-asserted-by":"publisher","DOI":"10.1145\/1920261.1920319"},{"key":"6","doi-asserted-by":"publisher","DOI":"10.1080\/10658989609342519"},{"journal-title":"Unauthorised Access Physical Penetration Testing for IT Security Teams","year":"2010","author":"allsopp","key":"5"},{"key":"4","doi-asserted-by":"publisher","DOI":"10.1145\/366173.366183"},{"key":"9","doi-asserted-by":"crossref","first-page":"132","DOI":"10.1007\/978-3-540-31979-5_12","article-title":"Measuring resistance to social engineering","author":"hasle","year":"2005","journal-title":"Information Security Practice and Experience"},{"key":"8","article-title":"Broadening the scope of penetration testing techniques","author":"gula","year":"1999","journal-title":"Enterasys Networks"}],"event":{"name":"2013 9th International Conference on Information Assurance and Security (IAS)","start":{"date-parts":[[2013,12,4]]},"location":"Gammarth","end":{"date-parts":[[2013,12,6]]}},"container-title":["2013 9th International Conference on Information Assurance and Security (IAS)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6915058\/6947727\/06947732.pdf?arnumber=6947732","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,7,18]],"date-time":"2023-07-18T02:52:39Z","timestamp":1689648759000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/6947732\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013,12]]},"references-count":23,"URL":"https:\/\/doi.org\/10.1109\/isias.2013.6947732","relation":{},"subject":[],"published":{"date-parts":[[2013,12]]}}}