{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,4]],"date-time":"2026-07-04T11:55:44Z","timestamp":1783166144633,"version":"3.54.6"},"reference-count":99,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2022,11,1]],"date-time":"2022-11-01T00:00:00Z","timestamp":1667260800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,11,1]],"date-time":"2022-11-01T00:00:00Z","timestamp":1667260800000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,11,1]],"date-time":"2022-11-01T00:00:00Z","timestamp":1667260800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,11,1]],"date-time":"2022-11-01T00:00:00Z","timestamp":1667260800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"ARO","award":["W911NF-17-1-0566"],"award-info":[{"award-number":["W911NF-17-1-0566"]}]},{"DOI":"10.13039\/501100008982","name":"National Science Foundation","doi-asserted-by":"publisher","award":["2115134"],"award-info":[{"award-number":["2115134"]}],"id":[{"id":"10.13039\/501100008982","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100008982","name":"National Science Foundation","doi-asserted-by":"publisher","award":["2122631"],"award-info":[{"award-number":["2122631"]}],"id":[{"id":"10.13039\/501100008982","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100008982","name":"National Science Foundation","doi-asserted-by":"publisher","award":["1814825"],"award-info":[{"award-number":["1814825"]}],"id":[{"id":"10.13039\/501100008982","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Colorado State Bill 18-086"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2022,11,1]]},"DOI":"10.1109\/tdsc.2021.3107514","type":"journal-article","created":{"date-parts":[[2021,8,27]],"date-time":"2021-08-27T20:09:26Z","timestamp":1630094966000},"page":"3804-3821","source":"Crossref","is-referenced-by-count":15,"title":["Quantifying Cybersecurity Effectiveness of Dynamic Network Diversity"],"prefix":"10.1109","volume":"19","author":[{"given":"Huashan","family":"Chen","sequence":"first","affiliation":[{"name":"Department of Computer Science, University of Texas at San Antonio, San Antonio, TX, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hasan","family":"Cam","sequence":"additional","affiliation":[{"name":"Best Buy, Richfield, MN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8034-0942","authenticated-orcid":false,"given":"Shouhuai","family":"Xu","sequence":"additional","affiliation":[{"name":"Department of Computer Science, University of Colorado Colorado Springs, Colorado Springs, CO, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-11212-1_28"},{"key":"ref38","first-page":"5","article-title":"Software diversity: Security, entropy and game theory","author":"neti","year":"2012","journal-title":"Proc Workshop Hot Top Secur"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1093\/comnet\/cny031"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/1030083.1030101"},{"key":"ref31","first-page":"271","article-title":"PlatPal: Detecting malicious documents with platform diversity","author":"xu","year":"2017","journal-title":"Proc Usenix Secur Symp"},{"key":"ref30","first-page":"43","article-title":"COTS diversity based intrusion detection and application to web servers","author":"totel","year":"2005","journal-title":"Proc Int Workshop Recent Adv Intrusion Detection"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-41483-6_21"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1002\/spe.2180"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/1374618.1374640"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-43936-4_8"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2008.76"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3361525.3361550"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-36084-0_9"},{"key":"ref20","first-page":"1","article-title":"Mitigating buffer overflows by operating system randomization","author":"chew","year":"0"},{"key":"ref22","year":"0"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2011.18"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/1813654.1813655"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/502059.502037"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/SRDS.2014.16"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/1966445.1966457"},{"key":"ref50","year":"0"},{"key":"ref51","author":"lynch","year":"1996","journal-title":"Distributed Algorithms"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23262"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/1030083.1030124"},{"key":"ref57","article-title":"Diverse intrusion-tolerant systems","author":"henriques","year":"0"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.1986.6312924"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991111"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2011.5958251"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-02918-9_8"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/ASONAM.2011.114"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2016.2516916"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2807593"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/508171.508177"},{"key":"ref6","first-page":"3","article-title":"N-version programming: A fault-tolerant approach to reliability of software operation","author":"chen","year":"1978","journal-title":"Proc Int Symp Fault-Tolerant Comput"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.25"},{"key":"ref8","first-page":"294","article-title":"Survivability through customization and adaptability: The cactus approach","author":"hiltunen","year":"2000","journal-title":"Proc ARPA Inf Survivability Conf Expo"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.1985.231893"},{"key":"ref49","article-title":"Intelligence-driven computer network defense informed by analysis of adversary campaigns and intrusion kill chains","volume":"1","author":"hutchins","year":"2011","journal-title":"Lead Issues Inf Warf Secur Res"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4614-0977-9_4"},{"key":"ref46","first-page":"2224","article-title":"?VulDeePecker: A deep learning-based system for multiclass vulnerability detection","volume":"18","author":"zou","year":"0","journal-title":"IEEE Trans Dependable Secure Comput"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23158"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3076142"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3051525"},{"key":"ref42","article-title":"The essence of winning and losing.","author":"boyd","year":"0"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2017.0722"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991102"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3190619.3190639"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2467358"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2014.6883401"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/SecTech.2014.9"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4614-0977-9_8"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2000.848453"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2012.6263942"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1145\/310889.310919"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2002.1004377"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1145\/586139.586140"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-11391-3_13"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.53"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23477"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1145\/1519144.1519145"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23271"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.45"},{"key":"ref65","first-page":"145","article-title":"Where’s the feeb? the effectiveness of instruction set randomization","author":"sovarel","year":"2005","journal-title":"Proc USENIX Security07"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2006.33"},{"key":"ref67","first-page":"105","article-title":"N-variant systems: A secretless framework for security through diversity","author":"cox","year":"2006","journal-title":"Proc Usenix Secur Symp"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2019.2963791"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/971617.971650"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1145\/2600176.2600180"},{"key":"ref1","article-title":"Cyberinsecurity: The cost of monopoly.","author":"geer","year":"0"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2017.2734075"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2017.2734904"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1145\/2746194.2746196"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1145\/2555613"},{"key":"ref91","first-page":"325","author":"cam","year":"2014","journal-title":"Controllability and Observability of Risk and Resilience in Cyber-Physical Cloud Systems"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-02786-9_13"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1080\/15427951.2014.902407"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1145\/3190619.3191680"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2019.2912847"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1145\/2600176.2600184"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2015.2433252"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/2808475.2808488"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23264"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2013.129"},{"key":"ref14","first-page":"291","article-title":"Address obfuscation: An efficient approach to combat a broad range of memory error exploits","author":"bhatkar","year":"2003","journal-title":"Proc Usenix Secur Symp"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/HOTOS.1997.595185"},{"key":"ref16","article-title":"Gcc extentions for protecting applications from stack-smashing attacks","author":"etoh","year":"2000"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-04834-1_22"},{"key":"ref17","first-page":"260","article-title":"Transparent runtime randomization for security","author":"xu","year":"2003","journal-title":"Proc IEEE Symp Reliable Distrib Syst"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2018.2889086"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948146"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-10597-6_1"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948147"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1145\/3411496.3421225"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.3233\/JCS-130475"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1080\/15427951.2012.654480"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1145\/2600176.2600190"},{"key":"ref86","doi-asserted-by":"crossref","first-page":"28","DOI":"10.1109\/TDSC.2008.75","article-title":"A stochastic model for quantitative security analyses of networked systems","volume":"8","author":"li","year":"2011","journal-title":"IEEE Trans Dependable Secure Comput"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1145\/2348832.2348835"},{"key":"ref88","doi-asserted-by":"crossref","first-page":"30","DOI":"10.1109\/TDSC.2011.33","article-title":"A stochastic model of multivirus dynamics","volume":"9","author":"xu","year":"2012","journal-title":"IEEE Trans Dependable Secure Comput"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/8858\/9945627\/9524529-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/9945627\/09524529.pdf?arnumber=9524529","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,12,12]],"date-time":"2022-12-12T19:24:23Z","timestamp":1670873063000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9524529\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,11,1]]},"references-count":99,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2021.3107514","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,11,1]]}}}