{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,1]],"date-time":"2026-02-01T11:37:17Z","timestamp":1769945837516,"version":"3.49.0"},"reference-count":82,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-001"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100006976","name":"Lilly Endowment","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100006976","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100016311","name":"Arm","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100016311","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,5]]},"DOI":"10.1109\/sp46214.2022.9833591","type":"proceedings-article","created":{"date-parts":[[2022,7,27]],"date-time":"2022-07-27T19:28:05Z","timestamp":1658950085000},"page":"249-266","source":"Crossref","is-referenced-by-count":15,"title":["TASHAROK: Using Mechanism Design for Enhancing Security Resource Allocation in Interdependent Systems"],"prefix":"10.1109","author":[{"given":"Mustafa","family":"Abdallah","sequence":"first","affiliation":[{"name":"Purdue University,West Lafayette,Indiana"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Daniel","family":"Woods","sequence":"additional","affiliation":[{"name":"University of Innsbruck,Innsbruck,Austria"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Parinaz","family":"Naghizadeh","sequence":"additional","affiliation":[{"name":"Ohio State University,Columbus,Ohio,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Issa","family":"Khalil","sequence":"additional","affiliation":[{"name":"Qatar Computing Research Institute,Doha,Qatar"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Timothy","family":"Cason","sequence":"additional","affiliation":[{"name":"Purdue University,West Lafayette,Indiana"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shreyas","family":"Sundaram","sequence":"additional","affiliation":[{"name":"Purdue University,West Lafayette,Indiana"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Saurabh","family":"Bagchi","sequence":"additional","affiliation":[{"name":"Purdue University,West Lafayette,Indiana"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/2635673"},{"key":"ref57","first-page":"16","article-title":"Guide to industrial control systems (ics) security","volume":"800","author":"stouffer","year":"2011","journal-title":"NIST Special Publication"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2002.1004377"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-64793-3_8"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23496"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-58"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382255"},{"key":"ref58","article-title":"gtraq Vulnerability Database","year":"2021"},{"key":"ref53","first-page":"367","article-title":"Partial-revelation vcg mechanism for combinatorial auctions","author":"conen","year":"2002","journal-title":"AAAI\/IAAI"},{"key":"ref52","doi-asserted-by":"crossref","first-page":"403","DOI":"10.3982\/TE604","article-title":"Supermodular mechanism design","volume":"5","author":"mathevet","year":"2010","journal-title":"Theoretical Economics"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417247"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.3982\/TE2089"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1016\/0047-2727(75)90001-8"},{"key":"ref10","article-title":"IT Security Investment and Gordon-Loeb’s 1\/e rule","author":"baryshnikov","year":"2012","journal-title":"Workshop on the Economics of Information Security (WEIS)"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-87403-4_15"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-47413-7_6"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1006\/cogp.1998.0710"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.2307\/1914185"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.2307\/2297046"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1016\/S0022-0000(03)00044-8"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2016.2599005"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/1-4020-8090-5_1"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.2307\/1911749"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3338506.3340273"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2420950.2420971"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2009.163"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.2307\/2998573"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/581271.581274"},{"key":"ref49","article-title":"California Proposal for Mandatory Cyber Insurance","author":"rasch","year":"2020"},{"key":"ref8","article-title":"Cybersecurity Threat Evaluation on renewable energy systems","year":"2021"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2627534.2627558"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485361"},{"key":"ref4","article-title":"Colonial Pipeline ransomware attack","author":"robertson","year":"2021"},{"key":"ref3","article-title":"The 10 biggest cyber security attacks of 2020","author":"week","year":"2021"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3152042.3152080"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417249"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1109\/ISI.2017.8004894"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1111\/risa.13454"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/CSF51468.2021.00003"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1093\/acprof:oso\/9780195328325.001.0001"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.2139\/ssrn.2131581"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/s11235-010-9302-6"},{"key":"ref78","article-title":"The theory of implementation in nash equilibrium: A survey","author":"maskin","year":"1983","journal-title":"Cambridge Mass Dept of Economics Massachusetts Institute of Technology"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.3233\/JCS-130475"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2016.7524353"},{"key":"ref36","author":"parkes","year":"2001","journal-title":"Iterative Combinatorial Auctions Achieving Economic and Computational Efficiency"},{"key":"ref75","article-title":"What risk? i don’t understand. an empirical study on users’ understanding of the terms used in security texts","author":"wu","year":"2020","journal-title":"Proceedings of 2020 ACM Asia Conference on Computer and Communications Security"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.23919\/ECC54610.2021.9654432"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1145\/3219166.3219185"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00021"},{"key":"ref77","author":"green","year":"1979","journal-title":"Incentives in public decision-making"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2017.7996862"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/CDC40024.2019.9030279"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/TCNS.2020.2988007"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3391195"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2017.2703172"},{"key":"ref39","article-title":"Extending attack graphs to represent cyber-attacks in communication protocols and modern it networks","author":"stan","year":"2020","journal-title":"IEEE Transactions on Dependable and Secure Computing"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2006.302434"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1126\/science.aaa1465"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2018.2805720"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-74143-5_5"},{"key":"ref72","article-title":"A framework for reasoning about the human in the loop","author":"cranor","year":"2008","journal-title":"Proc 1st Conference on Usability Psychology and Security Usenix Assoc"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2016.09.006"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1145\/2566468.2566480"},{"key":"ref23","article-title":"CISO Should Stand For Chief Influence Security Officer","author":"council","year":"2018"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417247"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00019"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3433210.3437534"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2015.2408598"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/s11166-013-9179-3"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2010.35"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2019.100219"},{"key":"ref22","article-title":"IT Leadership: 3 Tips for Making Better Investments in Security","author":"week","year":"2017"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1111\/risa.13257"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/PRDC.2015.37"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/CICYBS.2011.5949407"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1093\/cybsec\/tyw009"},{"key":"ref27","article-title":"Experimental elicitation of risk behaviour amongst information security professionals","author":"mersinas","year":"2015","journal-title":"Workshop on the Economics of Information Security (WEIS)"},{"key":"ref29","first-page":"239","article-title":"Security, availability, and multiple information sources: Exploring update behavior of system administrators","author":"tiefenau","year":"2020","journal-title":"Sixteenth Symposium on Usable Privacy and Security (SOUPS 2020)"},{"key":"ref60","first-page":"1","article-title":"Network defense and behavioral biases: An experimental study","author":"woods","year":"2021","journal-title":"Experimental Economics"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2821095"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2016.2516916"}],"event":{"name":"2022 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2022,5,22]]},"end":{"date-parts":[[2022,5,26]]}},"container-title":["2022 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9833550\/9833558\/09833591.pdf?arnumber=9833591","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,11,8]],"date-time":"2023-11-08T23:09:05Z","timestamp":1699484945000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9833591\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,5]]},"references-count":82,"URL":"https:\/\/doi.org\/10.1109\/sp46214.2022.9833591","relation":{},"subject":[],"published":{"date-parts":[[2022,5]]}}}