{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T08:35:54Z","timestamp":1777624554001,"version":"3.51.4"},"reference-count":32,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2025,3,1]],"date-time":"2025-03-01T00:00:00Z","timestamp":1740787200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2025,3]]},"DOI":"10.1109\/tdsc.2024.3434748","type":"journal-article","created":{"date-parts":[[2024,7,29]],"date-time":"2024-07-29T18:21:45Z","timestamp":1722277305000},"page":"1383-1399","source":"Crossref","is-referenced-by-count":4,"title":["Malcoda: Practical and Stochastic Security Risk Assessment for Enterprise Networks"],"prefix":"10.1109","volume":"22","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3053-2609","authenticated-orcid":false,"given":"Ryohei","family":"Sato","sequence":"first","affiliation":[{"name":"NTT Network Innovation Center, Musashino, Tokyo, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7545-7468","authenticated-orcid":false,"given":"Hidetoshi","family":"Kawaguchi","sequence":"additional","affiliation":[{"name":"NTT Network Innovation Center, Musashino, Tokyo, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5848-4445","authenticated-orcid":false,"given":"Yuichi","family":"Nakatani","sequence":"additional","affiliation":[{"name":"NTT Network Innovation Center, Musashino, Tokyo, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","article-title":"ISO\/IEC 27000:2018 Information technology\u2013Security techniques \u2013 Information security management systems \u2013 Overview and vocabulary","year":"2018"},{"key":"ref2","article-title":"ISO\/IEC 27001:2013 Information technology\u2013Security techniques \u2013 Information security management systems \u2013 Requirements","year":"2013"},{"key":"ref3","article-title":"ISO\/IEC 27005:2018 Information technology\u2013Security techniques \u2013 Information security risk management","year":"2018"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3005714"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2017.2745505"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2017.2781126"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/310889.310919"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2002.1004377"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TSMC.2019.2915940"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2006.302434"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180446"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1117\/12.604240"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2008.88"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2010.5544924"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2011.34"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/CCST.2017.8167819"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/PDP.2017.44"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/DSC.2017.33"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TSMC.2015.2503399"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2016.2627033"},{"issue":"12","key":"ref21","first-page":"21","article-title":"Attack trees","volume":"24","author":"Schneier","year":"1999","journal-title":"Dr Dobb\u2019s J."},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1002\/sec.299"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40196-1_15"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2013.211"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2013.8"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2013.162"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2020.3045393"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/CIS.2015.82"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/CANDAR.2019.00039"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/ICONAT53423.2022.9726105"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2946708"},{"issue":"1","key":"ref43","first-page":"80","article-title":"Intelligence-driven computer network defense informed by analysis of adversary campaigns and intrusion kill chains","volume":"1","author":"Hutchins","year":"2011","journal-title":"Leading Issues Inf. Warfare Secur. Res."}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/10925471\/10613418.pdf?arnumber=10613418","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,17]],"date-time":"2025-03-17T21:18:50Z","timestamp":1742246330000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10613418\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,3]]},"references-count":32,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2024.3434748","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,3]]}}}