{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,10]],"date-time":"2025-09-10T22:11:21Z","timestamp":1757542281266,"version":"3.37.3"},"reference-count":17,"publisher":"Wiley","license":[{"start":{"date-parts":[[2018,8,2]],"date-time":"2018-08-02T00:00:00Z","timestamp":1533168000000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"crossref","award":["2016YFF0204002","2016YFF0204003","6140002020115","2017003","131PLJRC644"],"award-info":[{"award-number":["2016YFF0204002","2016YFF0204003","6140002020115","2017003","131PLJRC644"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"crossref","award":["2016YFF0204002","2016YFF0204003","6140002020115","2017003","131PLJRC644"],"award-info":[{"award-number":["2016YFF0204002","2016YFF0204003","6140002020115","2017003","131PLJRC644"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Equipment Pre-Research Foundation during the 13th Five-Year Plan Period","award":["2016YFF0204002","2016YFF0204003","6140002020115","2017003","131PLJRC644"],"award-info":[{"award-number":["2016YFF0204002","2016YFF0204003","6140002020115","2017003","131PLJRC644"]}]},{"name":"CCF-Venus \u201cHongyan\u201d Scientific Research Plan Foundation","award":["2016YFF0204002","2016YFF0204003","6140002020115","2017003","131PLJRC644"],"award-info":[{"award-number":["2016YFF0204002","2016YFF0204003","6140002020115","2017003","131PLJRC644"]}]},{"name":"Science and Technology Leading Talent Project of Zhengzhou","award":["2016YFF0204002","2016YFF0204003","6140002020115","2017003","131PLJRC644"],"award-info":[{"award-number":["2016YFF0204002","2016YFF0204003","6140002020115","2017003","131PLJRC644"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Security and Communication Networks"],"published-print":{"date-parts":[[2018,8,2]]},"abstract":"<jats:p>Network security metrics allow quantitatively evaluating the overall resilience of networked systems against attacks. From this aim, security metrics are of great importance to the security-related decision-making process of enterprises. In this paper, we employ absorbing Markov chain (AMC) to estimate the network security combining with the technique of big data correlation analysis. Specifically, we construct the model of AMC using a large amount of alert data to describe the scenario of multistep attacks in the real world. In addition, we implement big data correlation analysis to generate the transition probability matrix from alert stream, which defines the probabilities of transferring from one attack action to another according to a given scenario before reaching one of some attack targets. Based on the probability reasoning, two metric algorithms are designed to estimate the attack scenario as well as the attackers, namely, the expected number of visits (ENV) and the expected success probability (ESP). The superiority is that the proposed model and algorithms assist the administrator in building new scenarios, prioritizing alerts, and ranking them.<\/jats:p>","DOI":"10.1155\/2018\/5787102","type":"journal-article","created":{"date-parts":[[2018,8,2]],"date-time":"2018-08-02T23:34:55Z","timestamp":1533252895000},"page":"1-14","source":"Crossref","is-referenced-by-count":17,"title":["Security Metric Methods for Network Multistep Attacks Using AMC and Big Data Correlation Analysis"],"prefix":"10.1155","volume":"2018","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-4888-6368","authenticated-orcid":true,"given":"Hao","family":"Hu","sequence":"first","affiliation":[{"name":"Information Science and Technology Institute, Zhengzhou 450001, China"},{"name":"Henan Key Laboratory of Information Security, Zhengzhou 450001, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2740-9362","authenticated-orcid":true,"given":"Yuling","family":"Liu","sequence":"additional","affiliation":[{"name":"Trusted Computing and Information Assurance Laboratory, Institute of Software, Chinese Academy of Sciences, Beijing 100190, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hongqi","family":"Zhang","sequence":"additional","affiliation":[{"name":"Information Science and Technology Institute, Zhengzhou 450001, China"},{"name":"Henan Key Laboratory of Information Security, Zhengzhou 450001, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuchen","family":"Zhang","sequence":"additional","affiliation":[{"name":"Information Science and Technology Institute, Zhengzhou 450001, China"},{"name":"Henan Key Laboratory of Information Security, Zhengzhou 450001, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"311","reference":[{"doi-asserted-by":"publisher","key":"1","DOI":"10.1145\/3005714"},{"doi-asserted-by":"publisher","key":"2","DOI":"10.1109\/COMST.2017.2745505"},{"doi-asserted-by":"publisher","key":"3","DOI":"10.1016\/j.jisa.2016.02.001"},{"year":"2018","journal-title":"IEEE Transactions on Dependable Secure Computing","key":"4"},{"doi-asserted-by":"publisher","key":"5","DOI":"10.1109\/TDSC.2016.2536601"},{"issue":"1","key":"6","first-page":"141","volume":"20","year":"2018","journal-title":"International Journal of Network Security"},{"doi-asserted-by":"publisher","key":"9","DOI":"10.1109\/TDSC.2010.61"},{"doi-asserted-by":"publisher","key":"10","DOI":"10.1109\/32.815323"},{"doi-asserted-by":"publisher","key":"13","DOI":"10.1007\/s10489-017-0925-0"},{"year":"2013","journal-title":"Computer Science","key":"15"},{"issue":"3","key":"16","doi-asserted-by":"crossref","first-page":"112","DOI":"10.4236\/jis.2016.73008","volume":"7","year":"2016","journal-title":"Journal of Information Security"},{"issue":"4","key":"17","first-page":"831","volume":"55","year":"2018","journal-title":"Journal of Computer Research and Development"},{"doi-asserted-by":"publisher","key":"18","DOI":"10.1016\/j.cose.2015.11.005"},{"issue":"1","key":"19","doi-asserted-by":"crossref","first-page":"1","DOI":"10.5121\/ijcnc.2015.7101","volume":"7","year":"2015","journal-title":"International Journal of Computer Networks & Communications"},{"doi-asserted-by":"publisher","key":"20","DOI":"10.1016\/j.cose.2016.09.010"},{"doi-asserted-by":"publisher","key":"22","DOI":"10.1002\/sec.1190"},{"year":"2006","key":"23"}],"container-title":["Security and Communication Networks"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2018\/5787102.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2018\/5787102.xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2018\/5787102.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,5,19]],"date-time":"2020-05-19T22:56:06Z","timestamp":1589928966000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.hindawi.com\/journals\/scn\/2018\/5787102\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,8,2]]},"references-count":17,"alternative-id":["5787102","5787102"],"URL":"https:\/\/doi.org\/10.1155\/2018\/5787102","relation":{},"ISSN":["1939-0114","1939-0122"],"issn-type":[{"type":"print","value":"1939-0114"},{"type":"electronic","value":"1939-0122"}],"subject":[],"published":{"date-parts":[[2018,8,2]]}}}