{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,7]],"date-time":"2026-06-07T07:57:07Z","timestamp":1780819027739,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":17,"publisher":"ACM","license":[{"start":{"date-parts":[[2006,10,30]],"date-time":"2006-10-30T00:00:00Z","timestamp":1162166400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2006,10,30]]},"DOI":"10.1145\/1179494.1179502","type":"proceedings-article","created":{"date-parts":[[2007,1,17]],"date-time":"2007-01-17T01:15:56Z","timestamp":1168996556000},"page":"31-38","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":101,"title":["A weakest-adversary security metric for network configuration security analysis"],"prefix":"10.1145","author":[{"given":"Joseph","family":"Pamula","sequence":"first","affiliation":[{"name":"George Mason University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sushil","family":"Jajodia","sequence":"additional","affiliation":[{"name":"George Mason University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Paul","family":"Ammann","sequence":"additional","affiliation":[{"name":"George Mason University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Vipin","family":"Swarup","sequence":"additional","affiliation":[{"name":"The MITRE Corporation"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2006,10,30]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2005.6"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586140"},{"key":"e_1_3_2_1_3_1","volume-title":"Computer Security Associates. Workshop on Information Security System Scoring and Ranking","author":"Applied","year":"2001","unstructured":"Applied Computer Security Associates. Workshop on Information Security System Scoring and Ranking , 2001 . Applied Computer Security Associates. Workshop on Information Security System Scoring and Ranking, 2001."},{"key":"e_1_3_2_1_4_1","unstructured":"Common Vulnerabilities & Exposures (CVE). The standard for information security vulnerability names. http:\/\/cve.mitre.org.  Common Vulnerabilities & Exposures (CVE). The standard for information security vulnerability names. http:\/\/cve.mitre.org."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.5555\/265514.265530"},{"key":"e_1_3_2_1_7_1","volume-title":"Proceedings of the Workshop on Advanced Developments in Software and Systems Security","author":"Howard M.","year":"2003","unstructured":"M. Howard , J. Pincus , and J. M. Wing . Measuring relative attack surfaces . In Proceedings of the Workshop on Advanced Developments in Software and Systems Security , August 2003 . M. Howard, J. Pincus, and J. M. Wing. Measuring relative attack surfaces. In Proceedings of the Workshop on Advanced Developments in Software and Systems Security, August 2003."},{"key":"e_1_3_2_1_8_1","first-page":"248","volume-title":"Managing Cyber Threats: Issues, Approaches and Challenges","author":"Jajodia S.","year":"2005","unstructured":"S. Jajodia , S. Noel , and B. O'Berry . Topological analysis of network attack vulnerability . In Managing Cyber Threats: Issues, Approaches and Challenges , pages 248 -- 266 . V. Kumar, J. Srivastava and A. Lazarevic (Eds.), Springer-Verlag , 2005 . S. Jajodia, S. Noel, and B. O'Berry. Topological analysis of network attack vulnerability. In Managing Cyber Threats: Issues, Approaches and Challenges, pages 248--266. V. Kumar, J. Srivastava and A. Lazarevic (Eds.), Springer-Verlag, 2005."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.5555\/794201.795177"},{"key":"e_1_3_2_1_11_1","volume-title":"Security Metrics Guide for Information Technology Systems, number 800-55 in NIST Special Publication","author":"National Institute of Standards and Technology.","year":"2003","unstructured":"National Institute of Standards and Technology. Security Metrics Guide for Information Technology Systems, number 800-55 in NIST Special Publication , 2003 . National Institute of Standards and Technology. Security Metrics Guide for Information Technology Systems, number 800-55 in NIST Special Publication, 2003."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.5555\/956415.956451"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/32.815323"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/310889.310919"},{"key":"e_1_3_2_1_15_1","first-page":"156","volume-title":"Proceedings of the 2000 IEEE Symposium on Security and Privacy (S&P '00)","author":"Ronald","year":"2000","unstructured":"Ronald W. Ritchey and Paul Ammann. Using model checking to analyze network vulnerabilities . In Proceedings of the 2000 IEEE Symposium on Security and Privacy (S&P '00) , pages 156 -- 165 , Oakland, CA , May 2000 . Ronald W. Ritchey and Paul Ammann. Using model checking to analyze network vulnerabilities. In Proceedings of the 2000 IEEE Symposium on Security and Privacy (S&P '00), pages 156--165, Oakland, CA, May 2000."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.5555\/829514.830526"},{"key":"e_1_3_2_1_17_1","series-title":"Lecture Notes in Computer Science 3188","doi-asserted-by":"crossref","first-page":"344","DOI":"10.1007\/978-3-540-30101-1_17","volume-title":"Proceedings of International Symposium on Formal Methods for Components and Objects","author":"Sheyner Oleg","year":"2004","unstructured":"Oleg Sheyner and Jeannette Wing . Tools for generating and analyzing attack graphs . In Proceedings of International Symposium on Formal Methods for Components and Objects , Lecture Notes in Computer Science 3188 , pages 344 -- 371 , 2004 . Oleg Sheyner and Jeannette Wing. Tools for generating and analyzing attack graphs. In Proceedings of International Symposium on Formal Methods for Components and Objects, Lecture Notes in Computer Science 3188, pages 344--371, 2004."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1007\/11560326_3"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/DISCEX.2001.932182"}],"event":{"name":"CCS06: 13th ACM Conference on Computer and Communications Security 2006","location":"Alexandria Virginia USA","acronym":"CCS06","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control","ACM Association for Computing Machinery"]},"container-title":["Proceedings of the 2nd ACM workshop on Quality of protection"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1179494.1179502","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1179494.1179502","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T20:22:45Z","timestamp":1750278165000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1179494.1179502"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2006,10,30]]},"references-count":17,"alternative-id":["10.1145\/1179494.1179502","10.1145\/1179494"],"URL":"https:\/\/doi.org\/10.1145\/1179494.1179502","relation":{},"subject":[],"published":{"date-parts":[[2006,10,30]]},"assertion":[{"value":"2006-10-30","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}