{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,14]],"date-time":"2026-03-14T17:55:58Z","timestamp":1773510958509,"version":"3.50.1"},"reference-count":55,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2023,5,1]],"date-time":"2023-05-01T00:00:00Z","timestamp":1682899200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,5,1]],"date-time":"2023-05-01T00:00:00Z","timestamp":1682899200000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,5,1]],"date-time":"2023-05-01T00:00:00Z","timestamp":1682899200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,5,1]],"date-time":"2023-05-01T00:00:00Z","timestamp":1682899200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100006234","name":"Sandia National Laboratories","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100006234","id-type":"DOI","asserted-by":"publisher"}]},{"name":"National Technology and Engineering Solutions of Sandia LLC"},{"DOI":"10.13039\/100000015","name":"U.S. Department of Energy","doi-asserted-by":"publisher","award":["DE-NA0003525"],"award-info":[{"award-number":["DE-NA0003525"]}],"id":[{"id":"10.13039\/100000015","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000015","name":"U.S. Department of Energy","doi-asserted-by":"publisher","award":["SAND2022-3936 J"],"award-info":[{"award-number":["SAND2022-3936 J"]}],"id":[{"id":"10.13039\/100000015","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2023,5,1]]},"DOI":"10.1109\/tdsc.2022.3165624","type":"journal-article","created":{"date-parts":[[2022,4,18]],"date-time":"2022-04-18T20:14:01Z","timestamp":1650312841000},"page":"1909-1926","source":"Crossref","is-referenced-by-count":18,"title":["Defender Policy Evaluation and Resource Allocation With MITRE ATT&CK Evaluations Data"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6922-8343","authenticated-orcid":false,"given":"Alexander V.","family":"Outkin","sequence":"first","affiliation":[{"name":"Sandia National Laboratories, Albuquerque, NM, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4651-2728","authenticated-orcid":false,"given":"Patricia V.","family":"Schulz","sequence":"additional","affiliation":[{"name":"Sandia National Laboratories, Albuquerque, NM, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Timothy","family":"Schulz","sequence":"additional","affiliation":[{"name":"Sandia National Laboratories, Albuquerque, NM, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7084-1225","authenticated-orcid":false,"given":"Thomas D.","family":"Tarman","sequence":"additional","affiliation":[{"name":"Sandia National Laboratories, Albuquerque, NM, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ali","family":"Pinar","sequence":"additional","affiliation":[{"name":"Sandia National Laboratories, Albuquerque, NM, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref13","article-title":"MITRE ATT&CK: Design and philosophy","author":"strom","year":"2018","journal-title":"MITRE Product MP"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2019.101660"},{"key":"ref15","article-title":"Finding cyber threats with ATT&CK-based analytics","author":"strom","year":"2017"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.101734"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/TCSS.2020.3035635"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3140549.3140556"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-96451-5_1"},{"key":"ref55","article-title":"Developing trust and managing uncertainty in partially observable sequential decision-making environments","author":"bishop","year":"2019"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/HPEC.2019.8916528"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijhcs.2018.06.004"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CCST.2010.5678720"},{"key":"ref16","article-title":"Attack chain information","year":"2020"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.2172\/1398865"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2016.7795421"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2013.21"},{"key":"ref50","article-title":"Power grid bad data injection attack modeling in PRESTIGE","author":"chen","year":"2019","journal-title":"Proc Annu GOMACTech Conf"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2009.21"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/DISCEX.2001.932182"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2011.34"},{"key":"ref47","first-page":"135","article-title":"Measuring security risk of networks using attack graphs","volume":"1","author":"noel","year":"2010","journal-title":"Int J Next-Gener Comput"},{"key":"ref42","first-page":"21","article-title":"Attack trees","volume":"24","author":"schneier","year":"1999","journal-title":"Dr Dobbs J Softw Tools"},{"key":"ref41","first-page":"62:1","article-title":"A survey on systems security metrics","volume":"49","author":"pendleton","year":"2016","journal-title":"ACM Comput Surv"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.21236\/ADA387544"},{"key":"ref43","first-page":"15","article-title":"Attack net penetration testing","author":"mcdermott","year":"2001","journal-title":"Proceedings New Security Paradigms Workshop"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.2172\/1222986"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2819967"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-68711-7_17"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1111\/j.1467-9469.2006.00467.x"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3326283"},{"key":"ref3","article-title":"What is IT Event Correlation?","year":"2022"},{"key":"ref6","author":"banisch","year":"2015","journal-title":"Mekov Chain Aggregation for Agent-Based Models"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1613\/jair.4415"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TMSCS.2016.2564963"},{"key":"ref35","first-page":"51","article-title":"Hardware trojan detection using path delay fingerprint","author":"jin","year":"2008","journal-title":"Proc IEEE Int Workshop Hardw -Orient Secur Trust"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2007.36"},{"key":"ref37","first-page":"211","article-title":"Quantifying system trust and microeletronics integrity","author":"pentrack","year":"2015","journal-title":"Government Microcircuit Applicat Critical Technol Conf"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2015.2422836"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CDC.2003.1273013"},{"key":"ref30","first-page":"4057","article-title":"Distributed strategic learning with application to network security","author":"zhu","year":"2011","journal-title":"Proc Amer Control Conf O’Farrell Street"},{"key":"ref33","first-page":"233","article-title":"Metrics for trust in integrated circuits","author":"wilt","year":"2008","journal-title":"Government Microcircuit Applicat Critical Technol Conf"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CDC.2004.1430267"},{"key":"ref2","article-title":"What is endpoint detection and response (EDR)?","year":"2022"},{"key":"ref1","article-title":"What is Endpoint Detection and Response (EDR)?","year":"2022"},{"key":"ref39","first-page":"187","article-title":"Toward optimal hardware trojan detection through security economics and game theory","author":"graf","year":"2016","journal-title":"Proc 41st Annu GOMACTech Conf"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/HST.2016.7495563"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/s10489-012-0383-7"},{"key":"ref23","article-title":"Alert correlation in intrusion detection: Combining AI-based approaches for exploiting security operators’ knowledge and preferences","author":"tabia","year":"2011","journal-title":"Proc Work Notes IJCAI Workshop Intell Secur"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2847722"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2014.08.002"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.2172\/1399831"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.3233\/FI-2010-373"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-32125-7_13"},{"key":"ref28","first-page":"80","article-title":"Intelligence-driven computer network defense informed by analysis of adversary campaigns and intrusion kill chains","volume":"1","author":"hutchins","year":"2011","journal-title":"Lead Issues Inf Warf Secur Res"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2895334"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-09699-5_27"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/8858\/10126099\/9758675-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/10126099\/09758675.pdf?arnumber=9758675","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,6,28]],"date-time":"2023-06-28T20:34:41Z","timestamp":1687984481000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9758675\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,5,1]]},"references-count":55,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2022.3165624","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,5,1]]}}}