{"id":"https://openalex.org/W4389574442","doi":"https://doi.org/10.1007/s10207-023-00760-5","title":"Generating ICS vulnerability playbooks with open standards","display_name":"Generating ICS vulnerability playbooks with open standards","publication_year":2023,"publication_date":"2023-12-11","ids":{"openalex":"https://openalex.org/W4389574442","doi":"https://doi.org/10.1007/s10207-023-00760-5"},"language":"en","primary_location":{"id":"doi:10.1007/s10207-023-00760-5","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-023-00760-5","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-023-00760-5.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10207-023-00760-5.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010195849","display_name":"Philip Empl","orcid":"https://orcid.org/0000-0002-7616-5931"},"institutions":[{"id":"https://openalex.org/I60668342","display_name":"University of Regensburg","ror":"https://ror.org/01eezs655","country_code":"DE","type":"education","lineage":["https://openalex.org/I60668342"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Philip Empl","raw_affiliation_strings":["University of Regensburg, Universit\u00e4tsstr. 31, 93053, Regensburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Regensburg, Universit\u00e4tsstr. 31, 93053, Regensburg, Germany","institution_ids":["https://openalex.org/I60668342"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065992739","display_name":"Daniel Schlette","orcid":"https://orcid.org/0000-0002-4847-522X"},"institutions":[{"id":"https://openalex.org/I60668342","display_name":"University of Regensburg","ror":"https://ror.org/01eezs655","country_code":"DE","type":"education","lineage":["https://openalex.org/I60668342"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Daniel Schlette","raw_affiliation_strings":["University of Regensburg, Universit\u00e4tsstr. 31, 93053, Regensburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Regensburg, Universit\u00e4tsstr. 31, 93053, Regensburg, Germany","institution_ids":["https://openalex.org/I60668342"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093467401","display_name":"Lukas St\u00f6ger","orcid":null},"institutions":[{"id":"https://openalex.org/I4210112995","display_name":"Bionorica (Germany)","ror":"https://ror.org/020yp9q46","country_code":"DE","type":"company","lineage":["https://openalex.org/I4210112995"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Lukas St\u00f6ger","raw_affiliation_strings":["Dehn SE, Hans-Dehn-Stra\u00dfe 1, 92318, Neumarkt in der Oberpfalz, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dehn SE, Hans-Dehn-Stra\u00dfe 1, 92318, Neumarkt in der Oberpfalz, Germany","institution_ids":["https://openalex.org/I4210112995"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5068820890","display_name":"G\u00fcnther Pernul","orcid":null},"institutions":[{"id":"https://openalex.org/I60668342","display_name":"University of Regensburg","ror":"https://ror.org/01eezs655","country_code":"DE","type":"education","lineage":["https://openalex.org/I60668342"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"G\u00fcnther Pernul","raw_affiliation_strings":["University of Regensburg, Universit\u00e4tsstr. 31, 93053, Regensburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Regensburg, Universit\u00e4tsstr. 31, 93053, Regensburg, Germany","institution_ids":["https://openalex.org/I60668342"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5010195849"],"corresponding_institution_ids":["https://openalex.org/I60668342"],"apc_list":{"value":3190,"currency":"USD","value_usd":3190},"apc_paid":{"value":3190,"currency":"USD","value_usd":3190},"fwci":4.8349,"has_fulltext":true,"cited_by_count":11,"citation_normalized_percentile":{"value":0.95403488,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":"23","issue":"2","first_page":"1215","last_page":"1230"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10703","display_name":"Business Process Modeling and Analysis","score":0.9883999824523926,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9768999814987183,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/workaround","display_name":"Workaround","score":0.8942817449569702},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7573304176330566},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7134908437728882},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5910703539848328},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5102574825286865},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.4752488136291504},{"id":"https://openalex.org/keywords/firewall","display_name":"Firewall (physics)","score":0.4614080488681793},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.1379108428955078}],"concepts":[{"id":"https://openalex.org/C194541083","wikidata":"https://www.wikidata.org/wiki/Q457174","display_name":"Workaround","level":2,"score":0.8942817449569702},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7573304176330566},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7134908437728882},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5910703539848328},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5102574825286865},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.4752488136291504},{"id":"https://openalex.org/C77714075","wikidata":"https://www.wikidata.org/wiki/Q5452017","display_name":"Firewall (physics)","level":5,"score":0.4614080488681793},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.1379108428955078},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C2776401274","wikidata":"https://www.wikidata.org/wiki/Q3756855","display_name":"Accretion (finance)","level":2,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.0},{"id":"https://openalex.org/C183915046","wikidata":"https://www.wikidata.org/wiki/Q1316152","display_name":"Charged black hole","level":4,"score":0.0},{"id":"https://openalex.org/C115304011","wikidata":"https://www.wikidata.org/wiki/Q72755","display_name":"Schwarzschild radius","level":3,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1007/s10207-023-00760-5","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-023-00760-5","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-023-00760-5.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},{"id":"pmh:oai:epub.uni-regensburg.de:55214","is_oa":true,"landing_page_url":"http://orcid.org/0000-0002-7616-5931>,","pdf_url":"https://epub.uni-regensburg.de/55214/1/s10207-023-00760-5.pdf","source":{"id":"https://openalex.org/S4306401229","display_name":"University of Regensburg Publication Server (University of Regensburg)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I60668342","host_organization_name":"University of Regensburg","host_organization_lineage":["https://openalex.org/I60668342"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"},{"id":"doi:10.5283/epub.55214","is_oa":true,"landing_page_url":"https://doi.org/10.5283/epub.55214","pdf_url":null,"source":{"id":"https://openalex.org/S4306401229","display_name":"University of Regensburg Publication Server (University of Regensburg)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I60668342","host_organization_name":"University of Regensburg","host_organization_lineage":["https://openalex.org/I60668342"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"doi:10.1007/s10207-023-00760-5","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-023-00760-5","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-023-00760-5.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5279965213","display_name":null,"funder_award_id":"DIK0338/01","funder_id":"https://openalex.org/F4320331012","funder_display_name":"Bayerische Staatsministerium f\u00fcr Wirtschaft, Landesentwicklung und Energie"}],"funders":[{"id":"https://openalex.org/F4320321114","display_name":"Bundesministerium f\u00fcr Bildung und Forschung","ror":"https://ror.org/04pz7b180"},{"id":"https://openalex.org/F4320323328","display_name":"Universit\u00e4t Regensburg","ror":"https://ror.org/01eezs655"},{"id":"https://openalex.org/F4320331012","display_name":"Bayerische Staatsministerium f\u00fcr Wirtschaft, Landesentwicklung und Energie","ror":null}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4389574442.pdf"},"referenced_works_count":18,"referenced_works":["https://openalex.org/W2124035628","https://openalex.org/W2136922540","https://openalex.org/W2339166448","https://openalex.org/W2598491244","https://openalex.org/W2623359660","https://openalex.org/W2791587036","https://openalex.org/W2793427727","https://openalex.org/W2943546107","https://openalex.org/W2990143838","https://openalex.org/W3168857007","https://openalex.org/W3204342889","https://openalex.org/W4223953821","https://openalex.org/W4224981387","https://openalex.org/W4226017579","https://openalex.org/W4256531287","https://openalex.org/W4293637494","https://openalex.org/W4293637499","https://openalex.org/W4300519129"],"related_works":["https://openalex.org/W1883246888","https://openalex.org/W4220912467","https://openalex.org/W2370114625","https://openalex.org/W2363554702","https://openalex.org/W2947584067","https://openalex.org/W2062873522","https://openalex.org/W1756374135","https://openalex.org/W3118510577","https://openalex.org/W3157230915","https://openalex.org/W2789975780"],"abstract_inverted_index":{"Abstract":[0],"Organizations":[1],"face":[2],"attacks":[3],"on":[4,68,131],"industrial":[5,155],"control":[6],"systems":[7,16],"(ICS)":[8],"as":[9],"vulnerabilities":[10],"are":[11],"pervasive.":[12],"However,":[13],"patching":[14,201],"vulnerable":[15],"by":[17],"simply":[18],"updating":[19],"to":[20,32,52,82,107,169,216],"the":[21,72],"newest":[22],"version":[23],"is":[24],"often":[25],"not":[26],"an":[27],"option":[28],"and":[29,96,109,120,198,212,219,225],"shifts":[30],"focus":[31],"workarounds.":[33],"Beyond":[34],"pure":[35],"patching,":[36],"workarounds":[37],"specify":[38],"other":[39],"remediation":[40,133,194],"measures":[41],"(e.g.,":[42],"firewall":[43],"or":[44,57],"VPN":[45],"configuration)":[46],"that":[47,142],"must":[48,159],"be":[49,147],"taken":[50],"due":[51],"system":[53],"availability":[54],"requirements,":[55],"complexity,":[56],"heterogeneous":[58],"devices.":[59],"In":[60],"this":[61],"paper,":[62],"we":[63,140,158,227],"introduce":[64],"vulnerability":[65,87],"playbooks":[66,129,177],"based":[67,130],"open":[69,230],"standards.":[70],"Pushing":[71],"envelope":[73],"of":[74,125,138],"cybersecurity":[75,83],"playbooks\u2014steps":[76],"organizations":[77,90],"should":[78,190,208],"follow":[79],"when":[80],"responding":[81],"incidents":[84],"reactively\u2014for":[85],"ICS":[86],"management":[88],"offers":[89],"a":[91,104,136],"more":[92],"transparent,":[93],"repeatable":[94],"process":[95,105],"faster,":[97],"possibly":[98],"automated":[99],"actions.":[100],"We":[101],"have":[102],"designed":[103],"model":[106],"collect":[108],"transform":[110],"security":[111,163,205],"advisories":[112],"in":[113,203],"Common":[114],"Security":[115],"Advisory":[116],"Framework":[117],"(CSAF)":[118],"format":[119],"generate":[121],"Collaborative":[122],"Automated":[123],"Course":[124],"Action":[126],"Operations":[127],"(CACAO)":[128],"listed":[132],"advice.":[134],"With":[135,223],"proof":[137],"concept,":[139],"demonstrate":[141],"structured":[143],"CSAF":[144,224],"documents":[145],"can":[146],"seamlessly":[148],"transformed":[149],"into":[150],"CACAO":[151,176,221],"playbooks.":[152,222],"For":[153],"our":[154],"use":[156,161,213],"case,":[157],"also":[160],"unstructured":[162],"advice":[164,185],"highlighting":[165],"quality":[166],"differences":[167],"(compared":[168],"CSAF).":[170],"Our":[171],"generated":[172],"79":[173],"standard":[174],"conformant":[175],"with":[178],"485":[179],"identified":[180],"actions":[181],"hint":[182],"at":[183],"imbalanced":[184],"toward":[186],"patching.":[187],"Preferably,":[188],"vendors":[189],"include":[191],"detailed":[192],"technical":[193],"advice,":[195],"provide":[196],"APIs,":[197],"go":[199],"beyond":[200],"recommendations":[202],"their":[204,210],"advisories.":[206],"Subscribers":[207],"structure":[209],"assets":[211],"machine":[214],"learning":[215],"normalize,":[217],"generate,":[218],"prioritize":[220],"CACAO,":[226],"see":[228],"two":[229],"standards":[231],"for":[232],"handling":[233],"vulnerabilities.":[234]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":5}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}