{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,7]],"date-time":"2026-01-07T18:23:23Z","timestamp":1767810203265,"version":"3.49.0"},"reference-count":30,"publisher":"Association for Computing Machinery (ACM)","issue":"1","license":[{"start":{"date-parts":[[2013,1,23]],"date-time":"2013-01-23T00:00:00Z","timestamp":1358899200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["SIGSOFT Softw. Eng. Notes"],"published-print":{"date-parts":[[2013,1,23]]},"abstract":"<jats:p>In turbulent economic times, the cost effectiveness of security measures is of the utmost importance when designing safeguards or countermeasures. This paper presents an optimal approach: MMT-O, Mitigating Multi-Threats Optimally, to meet the above challenges. The proposed approach is based on an optimum mitigation path set generation algorithm that provides optimal plans for threat\/vulnerability management which can be adopted at the design level of the software life cycle. In MMT-O, a multi-threat attack graph is generated by combining all of the individual threats responsible for security compromise of the system. It identifies a unique set of attacks needing mitigation by removing redundant nodes, as an attack can be a part of multiple threats. The proposed algorithm, implemented in Java, provides the minimum mitigation paths required to be blocked to avert the threat. Countermeasures using a multi-agent system are inducted in these identified mitigation paths to avert the threat optimally. The proposed approach has been applied on different test cases and the results validate its economic justification over traditional security solutions as a part of proactive threat management.<\/jats:p>","DOI":"10.1145\/2413038.2413041","type":"journal-article","created":{"date-parts":[[2013,1,29]],"date-time":"2013-01-29T11:20:55Z","timestamp":1359458455000},"page":"1-7","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":4,"title":["Mitigating multi-threats optimally in proactive threat management"],"prefix":"10.1145","volume":"38","author":[{"given":"Punam","family":"Bedi","sequence":"first","affiliation":[{"name":"University of Delhi, Delhi, India"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vandana","family":"Gandotra","sequence":"additional","affiliation":[{"name":"University of Delhi, Delhi, India"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Archana","family":"Singhal","sequence":"additional","affiliation":[{"name":"University of Delhi, Delhi, India"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Himanshi","family":"Narang","sequence":"additional","affiliation":[{"name":"University of Delhi, Delhi, India"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sumit","family":"Sharma","sequence":"additional","affiliation":[{"name":"University of Delhi, Delhi, India"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2013,1,23]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-04441-0_62"},{"key":"e_1_2_1_2_1","volume-title":"Threat Analysis using Goal Oriented Action Planning","author":"Bjarnolf P.","year":"2008","unstructured":"Bjarnolf, P. 2008. Threat Analysis using Goal Oriented Action Planning. University of Skovde, May 2008."},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1007\/11962977_19"},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/581339.581370"},{"key":"e_1_2_1_5_1","volume-title":"Secure Software Development Life Cycle Processes: A Technology Scouting Report {Report}","author":"Davis N.","unstructured":"Davis, N. 2005. Secure Software Development Life Cycle Processes: A Technology Scouting Report {Report}. Software Engineering Institute, Carnegie Mellon University, Pittsburgh."},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315272"},{"key":"e_1_2_1_7_1","volume-title":"Symposium on Requirement Engineering for Information Security, In conjunction with RE 05-13th IEEE International Requirements Engineering Conference","author":"Firesmith D.G.","unstructured":"Firesmith, D.G. 2005. Analyzing the Security Significance of System Requirements. In Symposium on Requirement Engineering for Information Security, In conjunction with RE 05-13th IEEE International Requirements Engineering Conference, Paris, France."},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1456659.1456667"},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSEA.2009.65"},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/ARTCom.2009.38"},{"key":"e_1_2_1_11_1","volume-title":"Proceedings of IEEE 2nd International Conference on Computer Engineering and Technology, 417--422","author":"Gandotra V.","unstructured":"Gandotra, V., Singhal, A. and Bedi, P. 2010. A Step Towards Secure Software System Using Fuzzy Logic. In Proceedings of IEEE 2nd International Conference on Computer Engineering and Technology, 417--422."},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/2020976.2020984"},{"key":"e_1_2_1_13_1","volume-title":"Multi-agent planning using HTN and GOAP","author":"Glenn W.","unstructured":"Glenn, W. 2007. Multi-agent planning using HTN and GOAP. Lulea University of Technology, Department of Skelleftea campus, Division of Leaisure and Entertainment, (2007:16HIP)."},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.5555\/579079"},{"key":"e_1_2_1_15_1","first-page":"1476","article-title":"Technical Report on A new approach to Internet banking. University of Cambridge computer Laboratory, UCAM-CL-Tr-731","author":"Johnson M.","year":"2008","unstructured":"Johnson, M. 2008. Technical Report on A new approach to Internet banking. University of Cambridge computer Laboratory, UCAM-CL-Tr-731, ISSN 1476-2986.","journal-title":"ISSN"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2004.41"},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2008.88"},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.5555\/1121680"},{"key":"e_1_2_1_19_1","volume-title":"Proceedings of symposium on Requirement Engineering for information Security (SREIS)","author":"Myagmar S.","unstructured":"Myagmar, S., Lee, A.J. and Yurcik, W. 2005. Threat Modeling as a Basis for Security Requirements. In Proceedings of symposium on Requirement Engineering for information Security (SREIS), Paris, France."},{"key":"e_1_2_1_20_1","volume-title":"Threat-Driven Architectural Design of Secure Information Systems. In Proceedings of the 7th International Conference on Enterprise Information System (ICEIS 2005","author":"Pauli J.","year":"2005","unstructured":"Pauli, J. and Xu, D. 2005. Threat-Driven Architectural Design of Secure Information Systems. In Proceedings of the 7th International Conference on Enterprise Information System (ICEIS 2005), Miami USA, May 2005, 136--143."},{"key":"e_1_2_1_21_1","volume-title":"Threat Analysis using Goal Oriented Action Planning","author":"Philiparning B.","year":"2008","unstructured":"Philiparning, B. 2008. Threat Analysis using Goal Oriented Action Planning. University of Skovde, May 2008."},{"key":"e_1_2_1_22_1","volume-title":"Planning with Agents. Matrikelnummer: 1008277","author":"Runan M.","year":"2001","unstructured":"Runan, M. 2001. Planning with Agents. Matrikelnummer: 1008277 (2001)."},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.5555\/773294"},{"key":"e_1_2_1_24_1","volume-title":"December","author":"Schneier B.","year":"1999","unstructured":"Schneier, B. 1999. Attack trees: Modeling security Threats. Dr. Dobb's Journal, December 1999."},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.5555\/517959"},{"key":"e_1_2_1_26_1","volume-title":"Proceedings of the 37th International Conference on Technology of Object-Oriented Languages and Systems","author":"Sindre G.","unstructured":"Sindre, G. and Opdahl, A.L. 2000. Eliciting Security Requirements by Misuse Cases. In Proceedings of the 37th International Conference on Technology of Object-Oriented Languages and Systems, Sydney, Australia, 120--131."},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","unstructured":"Swiderski F. and Synder W. 2004 Threat Modeling Microsoft Press.","DOI":"10.5555\/983226"},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/IRI-05.2005.1506524"},{"key":"e_1_2_1_29_1","volume-title":"Multi-agent planning using HTN and GOAP","author":"Wissing G.","unstructured":"Wissing, G. 2007. Multi-agent planning using HTN and GOAP. Lulea University of Technology, Department of Skelleftea campus, Division of Leaisure and Entertainment."},{"key":"e_1_2_1_30_1","volume-title":"Agent Based Software Engineering. IEEE Proc. Software Engineering\"","volume":"144","author":"Woolridge M.","year":"1997","unstructured":"Woolridge, M. 1997. Agent Based Software Engineering. IEEE Proc. Software Engineering\", Volume 144, Issue 1, Portal ACM, 26--37."}],"container-title":["ACM SIGSOFT Software Engineering Notes"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2413038.2413041","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2413038.2413041","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,7]],"date-time":"2026-01-07T17:19:25Z","timestamp":1767806365000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2413038.2413041"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013,1,23]]},"references-count":30,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2013,1,23]]}},"alternative-id":["10.1145\/2413038.2413041"],"URL":"https:\/\/doi.org\/10.1145\/2413038.2413041","relation":{},"ISSN":["0163-5948"],"issn-type":[{"value":"0163-5948","type":"print"}],"subject":[],"published":{"date-parts":[[2013,1,23]]},"assertion":[{"value":"2013-01-23","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}