{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,18]],"date-time":"2026-08-18T03:04:47Z","timestamp":1787022287065,"version":"build-2736575974"},"reference-count":50,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2017,7,10]],"date-time":"2017-07-10T00:00:00Z","timestamp":1499644800000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/501100004963","name":"Seventh Framework Programme","doi-asserted-by":"publisher","award":["610416"],"award-info":[{"award-number":["610416"]}],"id":[{"id":"10.13039\/501100004963","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["EURASIP J. on Info. Security"],"published-print":{"date-parts":[[2017,12]]},"DOI":"10.1186\/s13635-017-0063-6","type":"journal-article","created":{"date-parts":[[2017,7,10]],"date-time":"2017-07-10T12:34:10Z","timestamp":1499690050000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":8,"title":["Selection of Pareto-efficient response plans based on financial and operational assessments"],"prefix":"10.1186","volume":"2017","author":[{"given":"Alexander","family":"Motzek","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Gustavo","family":"Gonzalez-Granadillo","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Herv\u00e9","family":"Debar","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Joaquin","family":"Garcia-Alfaro","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ralf","family":"M\u00f6ller","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2017,7,10]]},"reference":[{"key":"63_CR1","first-page":"1","volume-title":"ETFA2013: 18th Conference on Emerging Technologies & Factory Automation","author":"G Dini","year":"2013","unstructured":"G Dini, M Tiloca, in ETFA2013: 18th Conference on Emerging Technologies & Factory Automation. On simulative analysis of attack impact in Wireless Sensor Networks (IEEE, Cagliari, 2013), pp. 1\u20138."},{"key":"63_CR2","first-page":"244","volume-title":"SmartGridComm: 1st International Conference on Smart Grid Communications","author":"D Kundur","year":"2010","unstructured":"D Kundur, X Feng, S Liu, T Zourntos, KL Butler-Purry, in SmartGridComm: 1st International Conference on Smart Grid Communications. Towards a framework for cyber attack impact analysis of the electric smart grid (IEEE, Gaithersburg, 2010), pp. 244\u2013249."},{"key":"63_CR3","first-page":"103","volume-title":"3rd International Conference on Innovative Computing Information and Control","author":"P Su","year":"2008","unstructured":"P Su, X Chen, H Tang, in 3rd International Conference on Innovative Computing Information and Control. DoS attack impact assessment based on 3GPP QoS indexes (IEEE, Dalian, 2008), p. 103."},{"key":"63_CR4","first-page":"1","volume-title":"ISGT2014: Innovative Smart Grid Technologies Conference","author":"KI Sgouras","year":"2014","unstructured":"KI Sgouras, AD Birda, DP Labridis, in ISGT2014: Innovative Smart Grid Technologies Conference. Cyber attack impact on critical smart grid infrastructures (IEEE, Washington, 2014), pp. 1\u20135."},{"key":"63_CR5","doi-asserted-by":"crossref","unstructured":"BW Roberts, The macroeconomic impacts of the 9\/11 attack: evidence from real-time forecasting. Peace Economics, Peace Science and Public Policy 15.2 (2009).","DOI":"10.2202\/1554-8597.1166"},{"key":"63_CR6","first-page":"137","volume-title":"ARES2016: 11th International Conference on Availability, Reliability, and Security","author":"G Gonzalez-Granadillo","year":"2016","unstructured":"G Gonzalez-Granadillo, A Motzek, J Garcia-Alfaro, H Debar, in ARES2016: 11th International Conference on Availability, Reliability, and Security. Selection of mitigation actions based on financial and operational impact assessments (IEEE, Salzburg, 2016), pp. 137\u2013146."},{"issue":"1","key":"63_CR7","doi-asserted-by":"crossref","first-page":"63","DOI":"10.1007\/s10207-013-0207-8","volume":"13","author":"G Gonzalez-Granadillo","year":"2014","unstructured":"G Gonzalez-Granadillo, M Belhaouane, H Debar, G Jacob, RORI-based countermeasure selection using the OrBAC formalism. Int. J. Inf. Secur. 13(1), 63\u201379 (2014).","journal-title":"Int. J. Inf. Secur"},{"key":"63_CR8","doi-asserted-by":"crossref","first-page":"38","DOI":"10.1109\/INTECH.2012.6457801","volume-title":"INTECH2012: International Conference on the Innovative Computing Technology","author":"G Gonzalez-Granadillo","year":"2012","unstructured":"G Gonzalez-Granadillo, H Debar, G Jacob, L Coppolino, in INTECH2012: International Conference on the Innovative Computing Technology. Combination approach to select optimal countermeasures based on the RORI index (IEEE, Casablanca, 2012), pp. 38\u201345."},{"key":"63_CR9","first-page":"156","volume-title":"MMM-ACNS2012: International Conference Mathematical Methods, Models and Architectures for Computer Network Security,","author":"G Gonzalez-Granadillo","year":"2012","unstructured":"G Gonzalez-Granadillo, D Debar, G Jacob, C Gaber, M Achemlal, in MMM-ACNS2012: International Conference Mathematical Methods, Models and Architectures for Computer Network Security,. Individual countermeasure selection based on the return on response investment index (Springer, St. Petersburg, 2012), pp. 156\u2013170."},{"key":"63_CR10","first-page":"16","volume-title":"NATO IST-128 Workshop: Assessing Mission Impact of Cyberattacks","author":"A Motzek","year":"2015","unstructured":"A Motzek, R M\u00f6ller, M Lange, S Dubus, in NATO IST-128 Workshop: Assessing Mission Impact of Cyberattacks. Probabilistic mission impact assessment based on widespread local events (NATO ISTIstanbul, 2015), pp. 16\u201322."},{"key":"63_CR11","doi-asserted-by":"crossref","first-page":"166","DOI":"10.1016\/j.cose.2016.11.005","volume":"65","author":"A Motzek","year":"2017","unstructured":"A Motzek, R M\u00f6ller, Context- and bias-free probabilistic mission impact assessment. Comput.Secur. 65:, 166\u2013186 (2017). ISSN 0167-4048. doi: 10.1016\/j.cose.2016.11.005 .","journal-title":"Comput.Secur"},{"key":"63_CR12","doi-asserted-by":"crossref","unstructured":"A Motzek, C Geick, R M\u00f6ller, in CBI2016: 18th IEEE Conference on Business Informatics. Semantic normalization and merging of business dependency models (Paris, 2016), pp. 7\u201315. doi: 10.1109\/CBI.2016.10 .","DOI":"10.1109\/CBI.2016.10"},{"issue":"4-5","key":"63_CR13","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/0895-7177(93)90170-4","volume":"17","author":"TL Saaty","year":"1993","unstructured":"TL Saaty, What is relative measurement? The ratio scale phantom. Math.Comput. Model. J. 17(4-5), 1\u201312 (1993).","journal-title":"Math.Comput. Model. J"},{"key":"63_CR14","first-page":"45","volume":"38.1","author":"W Sonnenreich","year":"2006","unstructured":"W Sonnenreich, J Albanese, B Stout, Return on security investment (ROSI)-a practical quantitative model. J. Res. Pract. Inf. Technol. 38.1:, 45\u201356 (2006).","journal-title":"J. Res. Pract. Inf. Technol"},{"key":"63_CR15","doi-asserted-by":"crossref","unstructured":"M Jeffrey, in Return on investment analysis for e-business projects, 3, ed. by H Bidgoli. Internet Encyclopedia (Wiley, 2004), pp. 211\u2013236. doi: 10.1002\/047148296X.tie154 .","DOI":"10.1002\/047148296X.tie154"},{"key":"63_CR16","unstructured":"Lockstep Consulting, A guide for government agencies calculating return on security investment, Technical Paper (2004)."},{"key":"63_CR17","unstructured":"M Schmidt, Return on investment (ROI): meaning and use (Encyclopedia of Business Terms and Methods, 2011). available at: https:\/\/www.business-case-analysis.com\/return-on-investment.html . Accessed 26 June 2017."},{"key":"63_CR18","first-page":"21","volume-title":"ISTA: 6th International Conference of Information Systems Technology and its Applications","author":"J Brocke","year":"2007","unstructured":"J Brocke, G Strauch, C Buddendick, in ISTA: 6th International Conference of Information Systems Technology and its Applications, 107. Return on security investment\u2014design principles of measurement system based on capital budgeting (LNI, Kharkiv, 2007), pp. 21\u201332."},{"key":"63_CR19","first-page":"626","volume-title":"ESORICS2010: 15th European Symposium on Research in Computer Security, Athens, Greece","author":"N Kheir","year":"2010","unstructured":"N Kheir, N Cuppens-Boulahia, F Cuppens, H Debar, in ESORICS2010: 15th European Symposium on Research in Computer Security, Athens, Greece. A service dependency model for cost-sensitive intrusion response (Springer, Athens, 2010), pp. 626\u2013642."},{"key":"63_CR20","first-page":"1","volume-title":"Fusion2011: 14th International Conference on Information Fusion","author":"G Jakobson","year":"2011","unstructured":"G Jakobson, in Fusion2011: 14th International Conference on Information Fusion. Mission cyber security situation assessment using impact dependency graphs (IEEE, Chicago, 2011), pp. 1\u20138."},{"key":"63_CR21","unstructured":"J Pearl, Probabilistic reasoning in intelligent systems: networks of plausible inference (Morgan, Kaufmann, 2014)."},{"key":"63_CR22","first-page":"132","volume-title":"UAI1987: 3rd Conference on Uncertainty in Artificial Intelligence","author":"M Henrion","year":"1987","unstructured":"M Henrion, in UAI1987: 3rd Conference on Uncertainty in Artificial Intelligence. Practical issues in constructing a Bayes\u2019 belief network (AUAI, Seattle, 1987), pp. 132\u2013139."},{"key":"63_CR23","doi-asserted-by":"crossref","first-page":"195","DOI":"10.1007\/3-540-49795-1_17","volume-title":"IBERAMIA 98: 6th Ibero-American Conference on AI","author":"JG Torres-Toledano","year":"1998","unstructured":"JG Torres-Toledano, LE Sucar, in IBERAMIA 98: 6th Ibero-American Conference on AI. Bayesian networks for reliability analysis of complex systems (Springer, Lisbon, 1998), pp. 195\u2013206."},{"key":"63_CR24","first-page":"2462","volume-title":"IJCAI2007: 20th International Joint Conference on Artificial Intelligence","author":"LD Raedt","year":"2007","unstructured":"LD Raedt, A Kimmig, H Toivonen, in IJCAI2007: 20th International Joint Conference on Artificial Intelligence. ProbLog: a probabilistic prolog and its application in link discovery (AAAI, Hyderabad, 2007), pp. 2462\u20132467."},{"key":"63_CR25","doi-asserted-by":"crossref","unstructured":"TL Norman, Risk analysis and security countermeasure selection (CRC Press, Taylor & Francis Group, 2010).","DOI":"10.1201\/9781420078718"},{"key":"63_CR26","doi-asserted-by":"crossref","first-page":"538","DOI":"10.1007\/978-3-319-28865-9_29","volume":"164","author":"G Gonzalez-Granadillo","year":"2015","unstructured":"G Gonzalez-Granadillo, J Garcia-Alfaro, H Debar, Using a 3D geometrical model to improve accuracy in the evaluation and selection of countermeasures against complex cyber attacks. Secur. Priv. Commun. Netw. 164:, 538\u2013555 (2015).","journal-title":"Secur. Priv. Commun. Netw"},{"key":"63_CR27","first-page":"242","volume-title":"CRiSIS2015: 10th International Conference on Risks and Security of Internet and Systems","author":"G Gonzalez-Granadillo","year":"2015","unstructured":"G Gonzalez-Granadillo, H Debar, G Jacob, in CRiSIS2015: 10th International Conference on Risks and Security of Internet and Systems. Attack volume model: geometrical approach and application (Springer, Mytilene, 2015), pp. 242\u2013257."},{"key":"63_CR28","unstructured":"SJ Russell, P Norvig, Artificial intelligence\u2014a modern approach (3. internat. ed.) (Pearson Education, 2010). ISBN 978-0-13-207148-2."},{"key":"63_CR29","unstructured":"G Combs, The Wireshark Foundation, Wireshark, (2017). Retrieved 13.02.2017 from http:\/\/www.wireshark.org\/ . Accessed 26 June 2017."},{"key":"63_CR30","doi-asserted-by":"crossref","DOI":"10.1017\/CBO9780511803161","volume-title":"Causality: models, reasoning and inference","author":"J Pearl","year":"2009","unstructured":"J Pearl, Causality: models, reasoning and inference, 2nd edn. (Cambridge University Press, New York, 2009)."},{"key":"63_CR31","unstructured":"A Motzek, R M\u00f6ller, in NATO IST-148 Symposium on Cyber Defence Situation Awareness, Sofia, Bulgaria. Probabilistic mission defense and assurance, (2016), pp. 4\u20131\u20134-18. doi: 10.14339\/STO-MP-IST-148 ."},{"issue":"3","key":"63_CR32","doi-asserted-by":"crossref","first-page":"599","DOI":"10.1016\/j.dss.2012.04.001","volume":"53","author":"V Viduto","year":"2012","unstructured":"V Viduto, C Maple, W Huang, D L\u00f3pez-P\u00e9rez, A novel risk assessment and optimisation model for a multi-objective network security countermeasure selection problem. Decis. Support. Syst. 53(3), 599\u2013610 (2012).","journal-title":"Decis. Support. Syst"},{"key":"63_CR33","first-page":"508","volume-title":"DSN2005: International Conference on Dependable Systems and Networks, Yokohama, Japan, 28 June - 1 July, 2005","author":"B Foo","year":"2005","unstructured":"B Foo, Y Wu, Y Mao, S Bagchi, EH Spafford, in DSN2005: International Conference on Dependable Systems and Networks, Yokohama, Japan, 28 June - 1 July, 2005. ADEPTS: adaptive intrusion response using attack graphs in an e-commerce environment (IEEE, Yokohama, 2005), pp. 508\u2013517."},{"key":"63_CR34","first-page":"204","volume-title":"CCS2007: ACM Conference on Computer and Communications Security","author":"R Dewri","year":"2007","unstructured":"R Dewri, N Poolsappasit, I Ray, D Whitley, in CCS2007: ACM Conference on Computer and Communications Security. Optimal security hardening using multi-objective optimization on attack tree models of networks (ACM, Alexandria, 2007), pp. 204\u2013213."},{"issue":"2","key":"63_CR35","doi-asserted-by":"crossref","first-page":"395","DOI":"10.1109\/TPDS.2013.211","volume":"25","author":"SA Zonouz","year":"2014","unstructured":"SA Zonouz, H Khurana, WH Sanders, TM Yardley, RRE: a game-theoretic intrusion response and recovery engine. IEEE Trans. Parallel Distrib. Syst. 25(2), 395\u2013406 (2014).","journal-title":"IEEE Trans. Parallel Distrib. Syst"},{"key":"63_CR36","first-page":"1","volume-title":"FAST2006: 4th International Workshop on Formal Aspects in Security and Trust","author":"S Bistarelli","year":"2006","unstructured":"S Bistarelli, M Dall\u2019Aglio, P Peretti, in FAST2006: 4th International Workshop on Formal Aspects in Security and Trust. Strategic games on defense trees (Springer, Hamilton, 2006), pp. 1\u201315."},{"key":"63_CR37","doi-asserted-by":"crossref","first-page":"13","DOI":"10.1016\/j.dss.2016.02.012","volume":"86","author":"A Fielder","year":"2016","unstructured":"A Fielder, E Panaousis, P Malacaria, C Hankin, F Smeraldi, Decision support approaches for cyber security investment. Decis. Support. Syst. 86:, 13\u201323 (2016).","journal-title":"Decis. Support. Syst"},{"key":"63_CR38","first-page":"1","volume-title":"DSN2012: IEEE\/IFIP International Conference on Dependable Systems and Networks","author":"A Roy","year":"2012","unstructured":"A Roy, DS Kim, KS Trivedi, in DSN2012: IEEE\/IFIP International Conference on Dependable Systems and Networks. Scalable optimal countermeasure selection using implicit enumeration on attack countermeasure trees (IEEE, Boston, 2012), pp. 1\u201312."},{"issue":"2-3","key":"63_CR39","doi-asserted-by":"crossref","first-page":"169","DOI":"10.3233\/JCS-2011-0436","volume":"20","author":"N Stakhanova","year":"2012","unstructured":"N Stakhanova, C Strasburg, S Basu, JS Wong. J. Comput. Secur. 20(2-3), 169\u2013198 (2012).","journal-title":"J. Comput. Secur"},{"issue":"2","key":"63_CR40","doi-asserted-by":"crossref","first-page":"205","DOI":"10.1108\/ICS-01-2016-0006","volume":"24","author":"R Alavi","year":"2016","unstructured":"R Alavi, S Islam, H Mouratidis, An information security risk-driven investment model for analysing human factors. Inf. Comput. Secur. 24(2), 205\u2013227 (2016).","journal-title":"Inf. Comput. Secur"},{"key":"63_CR41","first-page":"283","volume-title":"Data and Applications Security XXII, 22nd Annual IFIP WG 11.3 Working Conference on Data and Applications Security","author":"L Wang","year":"2008","unstructured":"L Wang, Ta Islam, T Long, A Singhal, S Jajodia, in Data and Applications Security XXII, 22nd Annual IFIP WG 11.3 Working Conference on Data and Applications Security. An attack graph-based probabilistic security metric (Springer, London, 2008), pp. 283\u2013296."},{"key":"63_CR42","first-page":"61","volume-title":"Data Mining, Intrusion Detection, Information Assurance, and Data Networks Security","author":"L Yu","year":"2005","unstructured":"L Yu, H Man, in Data Mining, Intrusion Detection, Information Assurance, and Data Networks Security. Network vulnerability assessment using Bayesian networks (SPIE, Orlando, 2005), pp. 61\u201371."},{"key":"63_CR43","first-page":"211","volume-title":"DSN2010: International Conference on Dependable Systems and Networks","author":"P Xie","year":"2010","unstructured":"P Xie, J Li, X Ou, P Liu, R Levy, in DSN2010: International Conference on Dependable Systems and Networks. Using Bayesian networks for cyber security analysis (IEEE\/IFIP, Chicago, 2010), pp. 211\u2013220."},{"key":"63_CR44","first-page":"1","volume-title":"International Conference on Network and Service Security","author":"N Kheir","year":"2009","unstructured":"N Kheir, H Debar, N Cuppens-Boulahia, F Cuppens, J Viinikka, in International Conference on Network and Service Security. Cost evaluation for intrusion response using dependency graphs (IEEE, Paris, France, 2009), pp. 1\u20136."},{"key":"63_CR45","first-page":"1035","volume-title":"LCN2007: 32nd IEEE Conference on Local Computer Networks","author":"J Marko","year":"2007","unstructured":"J Marko, C Thul, P Martini, in LCN2007: 32nd IEEE Conference on Local Computer Networks. Graph based metrics for intrusion response measures in computer networks (IEEE, Dublin, 2007), pp. 1035\u20131042."},{"key":"63_CR46","first-page":"64","volume-title":"STIDS2012: 7th International Conference on Semantic Technologies for Intelligence","author":"A Barreto","year":"2012","unstructured":"A Barreto, P Costa, E Yano, in STIDS2012: 7th International Conference on Semantic Technologies for Intelligence. A semantic approach to evaluate the impact of cyber actions to the physical domain (CEUR, Fairfax, 2012), pp. 64\u201371."},{"key":"63_CR47","first-page":"101","volume-title":"STIDS2013: 8th International Conference on Semantic Technologies for Intelligence","author":"A Barreto","year":"2013","unstructured":"A Barreto, P Costa, E Yano, in STIDS2013: 8th International Conference on Semantic Technologies for Intelligence. Using a semantic approach to cyber impact assessment (CEUR, Fairfax, 2013), pp. 101\u2013108."},{"key":"63_CR48","unstructured":"PW Farris, N Bendle, P Pfeifer, D Reibstein, Marketing metrics: the definitive guide to measuring marketing performance, Pearson Education (2010)."},{"key":"63_CR49","first-page":"703","volume-title":"IJCAI2015: 24th International Joint Conference on Artificial Intelligence","author":"A Motzek","year":"2015","unstructured":"A Motzek, R M\u00f6ller, in IJCAI2015: 24th International Joint Conference on Artificial Intelligence. Indirect causes in dynamic Bayesian networks revisited (AAAI, Buenos Aires, 2015), pp. 703\u2013709."},{"key":"63_CR50","doi-asserted-by":"crossref","unstructured":"M Bastian, S Heymann, M Jacomy, in International AAAI Conference on Weblogs and Social Media. Gephi: an open source software for exploring and manipulating networks, (2009).","DOI":"10.1609\/icwsm.v3i1.13937"}],"container-title":["EURASIP Journal on Information Security"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1186\/s13635-017-0063-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1186\/s13635-017-0063-6\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1186\/s13635-017-0063-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,8,24]],"date-time":"2023-08-24T11:19:05Z","timestamp":1692875945000},"score":1,"resource":{"primary":{"URL":"https:\/\/jis-eurasipjournals.springeropen.com\/articles\/10.1186\/s13635-017-0063-6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,7,10]]},"references-count":50,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2017,12]]}},"alternative-id":["63"],"URL":"https:\/\/doi.org\/10.1186\/s13635-017-0063-6","relation":{},"ISSN":["2510-523X"],"issn-type":[{"value":"2510-523X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017,7,10]]},"article-number":"12"}}