{"id":"https://openalex.org/W4413239271","doi":"https://doi.org/10.1007/978-3-032-00639-4_4","title":"Cybersecurity Vulnerability Prioritisation via Risk Assessment","display_name":"Cybersecurity Vulnerability Prioritisation via Risk Assessment","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4413239271","doi":"https://doi.org/10.1007/978-3-032-00639-4_4"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-032-00639-4_4","doi":"https://doi.org/10.1007/978-3-032-00639-4_4","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-032-00639-4_4","pdf_url":null,"source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","jufo-1","ki-jl-1","norway-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"volume":{"id":"https://openalex.org/W4413222450","display_name":"Availability, Reliability and Security"},"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072275010","display_name":"Stephen Taylor","orcid":"https://orcid.org/0000-0002-9937-1762","observed_orcids":["https://orcid.org/0000-0002-9937-1762"]},"institutions":[{"id":"https://openalex.org/I43439940","display_name":"University of Southampton","ror":"https://ror.org/01ryk1543","country_code":"GB","type":"education","lineage":["https://openalex.org/I43439940"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Steve Taylor","raw_affiliation_strings":["University of Southampton, Southampton, UK"],"raw_orcid":"https://orcid.org/0000-0002-9937-1762","affiliations":[{"raw_affiliation_string":"University of Southampton, Southampton, UK","institution_ids":["https://openalex.org/I43439940"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Panos Melas","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I43439940","display_name":"University of Southampton","ror":"https://ror.org/01ryk1543","country_code":"GB","type":"education","lineage":["https://openalex.org/I43439940"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Panos Melas","raw_affiliation_strings":["University of Southampton, Southampton, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Southampton, Southampton, UK","institution_ids":["https://openalex.org/I43439940"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077694971","display_name":"Mike Surridge","orcid":"https://orcid.org/0000-0003-1485-7024","observed_orcids":["https://orcid.org/0000-0003-1485-7024"]},"institutions":[{"id":"https://openalex.org/I43439940","display_name":"University of Southampton","ror":"https://ror.org/01ryk1543","country_code":"GB","type":"education","lineage":["https://openalex.org/I43439940"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Mike Surridge","raw_affiliation_strings":["University of Southampton, Southampton, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Southampton, Southampton, UK","institution_ids":["https://openalex.org/I43439940"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080820786","display_name":"Paolo De Lutiis","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Paolo De Lutiis","raw_affiliation_strings":["Security Engineering and Threat Management, TIM S.p.A, Torino, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Security Engineering and Threat Management, TIM S.p.A, Torino, Italy","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077217656","display_name":"M. Leone","orcid":"https://orcid.org/0009-0000-3707-2882","observed_orcids":["https://orcid.org/0009-0000-3707-2882"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Manuel Leone","raw_affiliation_strings":["Security Engineering and Threat Management, TIM S.p.A, Torino, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Security Engineering and Threat Management, TIM S.p.A, Torino, Italy","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071836226","display_name":"Martin Gilje Jaatun","orcid":"https://orcid.org/0000-0001-7127-6694","observed_orcids":["https://orcid.org/0000-0001-7127-6694"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Martin Gilje Jaatun","raw_affiliation_strings":["Software Engineering, Safety and Security, SINTER Digital Trondheim, Trondheim, Norway"],"raw_orcid":"https://orcid.org/0000-0001-7507-6366","affiliations":[{"raw_affiliation_string":"Software Engineering, Safety and Security, SINTER Digital Trondheim, Trondheim, Norway","institution_ids":[]}]},{"author_position":"last","author":{"id":null,"display_name":"Ravishankar Borgaonkar","orcid":"https://orcid.org/0000-0001-7127-6694","observed_orcids":["https://orcid.org/0000-0001-7127-6694"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ravishankar Borgaonkar","raw_affiliation_strings":["Software Engineering, Safety and Security, SINTER Digital Trondheim, Trondheim, Norway"],"raw_orcid":"https://orcid.org/0000-0001-7127-6694","affiliations":[{"raw_affiliation_string":"Software Engineering, Safety and Security, SINTER Digital Trondheim, Trondheim, Norway","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5072275010"],"corresponding_institution_ids":["https://openalex.org/I43439940"],"apc_list":{"value":5000,"currency":"EUR","value_usd":5392},"apc_paid":null,"fwci":0.5315,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.60479007,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"57","last_page":"69"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.5195000171661377,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.5195000171661377,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.4745999872684479,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0008999999845400453,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cve","display_name":"CVE","score":0.9020000100135803},{"id":"https://openalex.org/keywords/risk-assessment","display_name":"risk assessment","score":0.7049999833106995},{"id":"https://openalex.org/keywords/vulnerability-severity","display_name":"vulnerability severity","score":0.7009999752044678},{"id":"https://openalex.org/keywords/software-vulnerabilities","display_name":"software vulnerabilities","score":0.7630000114440918}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8174808621406555},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.793384313583374},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.6503874659538269},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.608091413974762},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.44666558504104614},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.39140868186950684},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.05823430418968201},{"id":"https://openalex.org/C27415008","wikidata":"https://www.wikidata.org/wiki/Q7256382","display_name":"Psychological intervention","level":2,"score":0.0},{"id":"https://openalex.org/C118552586","wikidata":"https://www.wikidata.org/wiki/Q7867","display_name":"Psychiatry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/978-3-032-00639-4_4","doi":"https://doi.org/10.1007/978-3-032-00639-4_4","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-032-00639-4_4","pdf_url":null,"source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","jufo-1","ki-jl-1","norway-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":1,"referenced_works":["https://openalex.org/W4398226270"],"related_works":["https://openalex.org/W2983519477","https://openalex.org/W7204204302","https://openalex.org/W7223119318","https://openalex.org/W4415145773","https://openalex.org/W4210318281","https://openalex.org/W4412949903","https://openalex.org/W7221554651","https://openalex.org/W4320166372","https://openalex.org/W3206487040","https://openalex.org/W4413679426"],"abstract_inverted_index":null,"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-11-09T13:22:03.289127","created_date":"2025-10-10T00:00:00"}