{"id":"https://openalex.org/W7162184451","doi":"https://doi.org/10.1007/s10922-026-10068-z","title":"MT2M: Strategic Cost-Based Optimization of Cyber Defense in Variable Constraints Systems","display_name":"MT2M: Strategic Cost-Based Optimization of Cyber Defense in Variable Constraints Systems","publication_year":2026,"publication_date":"2026-05-23","ids":{"openalex":"https://openalex.org/W7162184451","doi":"https://doi.org/10.1007/s10922-026-10068-z"},"language":"en","primary_location":{"id":"doi:10.1007/s10922-026-10068-z","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10922-026-10068-z","pdf_url":null,"source":{"id":"https://openalex.org/S67072002","display_name":"Journal of Network and Systems Management","issn_l":"1064-7570","issn":["1064-7570","1573-7705"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Network and Systems Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1007/s10922-026-10068-z","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5056497542","display_name":"Jamil Kassem","orcid":null},"institutions":[{"id":"https://openalex.org/I138847295","display_name":"Universitat Oberta de Catalunya","ror":"https://ror.org/01f5wp925","country_code":"ES","type":"education","lineage":["https://openalex.org/I138847295"]},{"id":"https://openalex.org/I4210143258","display_name":"SBS CyberSecurity (United States)","ror":"https://ror.org/0572r3k48","country_code":"US","type":"company","lineage":["https://openalex.org/I4210143258"]}],"countries":["ES","US"],"is_corresponding":true,"raw_author_name":"Jamil Ahmad Kassem","raw_affiliation_strings":["CYBERCAT - Center for Cybersecurity Research of Catalonia, Catalonia, Spain","UOC-TECH Research Center, Computer Science, Multimedia and Telecommunication Studies, Universitat Oberta de Catalunya (UOC), Rambla del Poblenou, 154-156, 08018, Barcelona, Spain"],"raw_orcid":"https://orcid.org/0000-0002-1040-8187","affiliations":[{"raw_affiliation_string":"CYBERCAT - Center for Cybersecurity Research of Catalonia, Catalonia, Spain","institution_ids":["https://openalex.org/I4210143258"]},{"raw_affiliation_string":"UOC-TECH Research Center, Computer Science, Multimedia and Telecommunication Studies, Universitat Oberta de Catalunya (UOC), Rambla del Poblenou, 154-156, 08018, Barcelona, Spain","institution_ids":["https://openalex.org/I138847295"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136850510","display_name":"Helena Rif\u00e0 Pous","orcid":"https://orcid.org/0000-0003-0923-0235"},"institutions":[{"id":"https://openalex.org/I138847295","display_name":"Universitat Oberta de Catalunya","ror":"https://ror.org/01f5wp925","country_code":"ES","type":"education","lineage":["https://openalex.org/I138847295"]},{"id":"https://openalex.org/I4210143258","display_name":"SBS CyberSecurity (United States)","ror":"https://ror.org/0572r3k48","country_code":"US","type":"company","lineage":["https://openalex.org/I4210143258"]}],"countries":["ES","US"],"is_corresponding":false,"raw_author_name":"Helena Rif\u00e0 Pous","raw_affiliation_strings":["CYBERCAT - Center for Cybersecurity Research of Catalonia, Catalonia, Spain","UOC-TECH Research Center, Computer Science, Multimedia and Telecommunication Studies, Universitat Oberta de Catalunya (UOC), Rambla del Poblenou, 154-156, 08018, Barcelona, Spain"],"raw_orcid":"https://orcid.org/0000-0003-0923-0235","affiliations":[{"raw_affiliation_string":"CYBERCAT - Center for Cybersecurity Research of Catalonia, Catalonia, Spain","institution_ids":["https://openalex.org/I4210143258"]},{"raw_affiliation_string":"UOC-TECH Research Center, Computer Science, Multimedia and Telecommunication Studies, Universitat Oberta de Catalunya (UOC), Rambla del Poblenou, 154-156, 08018, Barcelona, Spain","institution_ids":["https://openalex.org/I138847295"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5136850618","display_name":"Joaquin Garcia-Alfaro","orcid":"https://orcid.org/0000-0002-7453-4393"},"institutions":[{"id":"https://openalex.org/I4210145102","display_name":"Institut Polytechnique de Paris","ror":"https://ror.org/042tfbd02","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210145102"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Joaquin Garcia-Alfaro","raw_affiliation_strings":["SAMOVAR, T\u00e9l\u00e9com SudParis, Institut Polytechnique de Paris, Rte de Saclay, 91120, Palaiseau, Paris, France"],"raw_orcid":"https://orcid.org/0000-0002-7453-4393","affiliations":[{"raw_affiliation_string":"SAMOVAR, T\u00e9l\u00e9com SudParis, Institut Polytechnique de Paris, Rte de Saclay, 91120, Palaiseau, Paris, France","institution_ids":["https://openalex.org/I4210145102"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5056497542"],"corresponding_institution_ids":["https://openalex.org/I138847295","https://openalex.org/I4210143258"],"apc_list":{"value":3090,"currency":"USD","value_usd":3090},"apc_paid":{"value":3090,"currency":"USD","value_usd":3090},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.51498414,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"34","issue":"4","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.6018000245094299,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.6018000245094299,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11807","display_name":"Infrastructure Resilience and Vulnerability Analysis","score":0.17409999668598175,"subfield":{"id":"https://openalex.org/subfields/2205","display_name":"Civil and Structural Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10847","display_name":"Advanced Optical Network Technologies","score":0.04259999841451645,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/stackelberg-competition","display_name":"Stackelberg competition","score":0.8335999846458435},{"id":"https://openalex.org/keywords/flexibility","display_name":"Flexibility (engineering)","score":0.6692000031471252},{"id":"https://openalex.org/keywords/interdependence","display_name":"Interdependence","score":0.6255999803543091},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5809999704360962},{"id":"https://openalex.org/keywords/game-theory","display_name":"Game theory","score":0.557699978351593},{"id":"https://openalex.org/keywords/variable","display_name":"Variable (mathematics)","score":0.5336999893188477},{"id":"https://openalex.org/keywords/constraint","display_name":"Constraint (computer-aided design)","score":0.4860999882221222},{"id":"https://openalex.org/keywords/node","display_name":"Node (physics)","score":0.44119998812675476},{"id":"https://openalex.org/keywords/resource","display_name":"Resource (disambiguation)","score":0.41760000586509705},{"id":"https://openalex.org/keywords/cyber-physical-system","display_name":"Cyber-physical system","score":0.40450000762939453}],"concepts":[{"id":"https://openalex.org/C199510392","wikidata":"https://www.wikidata.org/wiki/Q1184602","display_name":"Stackelberg competition","level":2,"score":0.8335999846458435},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8159999847412109},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.6692000031471252},{"id":"https://openalex.org/C185874996","wikidata":"https://www.wikidata.org/wiki/Q269699","display_name":"Interdependence","level":2,"score":0.6255999803543091},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5809999704360962},{"id":"https://openalex.org/C177142836","wikidata":"https://www.wikidata.org/wiki/Q44455","display_name":"Game theory","level":2,"score":0.557699978351593},{"id":"https://openalex.org/C182365436","wikidata":"https://www.wikidata.org/wiki/Q50701","display_name":"Variable (mathematics)","level":2,"score":0.5336999893188477},{"id":"https://openalex.org/C2776036281","wikidata":"https://www.wikidata.org/wiki/Q48769818","display_name":"Constraint (computer-aided design)","level":2,"score":0.4860999882221222},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.44119998812675476},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4311999976634979},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.41760000586509705},{"id":"https://openalex.org/C42475967","wikidata":"https://www.wikidata.org/wiki/Q194292","display_name":"Operations research","level":1,"score":0.4147000014781952},{"id":"https://openalex.org/C179768478","wikidata":"https://www.wikidata.org/wiki/Q1120057","display_name":"Cyber-physical system","level":2,"score":0.40450000762939453},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.400299996137619},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3912999927997589},{"id":"https://openalex.org/C3309286","wikidata":"https://www.wikidata.org/wiki/Q4907693","display_name":"Bilevel optimization","level":3,"score":0.38909998536109924},{"id":"https://openalex.org/C2779669469","wikidata":"https://www.wikidata.org/wiki/Q4895508","display_name":"Battlefield","level":2,"score":0.353300005197525},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.35089999437332153},{"id":"https://openalex.org/C2780609101","wikidata":"https://www.wikidata.org/wiki/Q17156588","display_name":"Resource management (computing)","level":2,"score":0.3508000075817108},{"id":"https://openalex.org/C125611927","wikidata":"https://www.wikidata.org/wiki/Q17008131","display_name":"Criticality","level":2,"score":0.34450000524520874},{"id":"https://openalex.org/C33724603","wikidata":"https://www.wikidata.org/wiki/Q812540","display_name":"Bayesian network","level":2,"score":0.3287999927997589},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.32420000433921814},{"id":"https://openalex.org/C29202148","wikidata":"https://www.wikidata.org/wiki/Q287260","display_name":"Resource allocation","level":2,"score":0.32120001316070557},{"id":"https://openalex.org/C137836250","wikidata":"https://www.wikidata.org/wiki/Q984063","display_name":"Optimization problem","level":2,"score":0.3188000023365021},{"id":"https://openalex.org/C73795354","wikidata":"https://www.wikidata.org/wiki/Q287618","display_name":"Sequential game","level":3,"score":0.31779998540878296},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.31779998540878296},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.3084000051021576},{"id":"https://openalex.org/C539667460","wikidata":"https://www.wikidata.org/wiki/Q2414942","display_name":"Management science","level":1,"score":0.29339998960494995},{"id":"https://openalex.org/C2781416736","wikidata":"https://www.wikidata.org/wiki/Q105354050","display_name":"Cooperative game theory","level":3,"score":0.29260000586509705},{"id":"https://openalex.org/C200594392","wikidata":"https://www.wikidata.org/wiki/Q812529","display_name":"Bayesian game","level":4,"score":0.2831000089645386},{"id":"https://openalex.org/C41045048","wikidata":"https://www.wikidata.org/wiki/Q202843","display_name":"Linear programming","level":2,"score":0.2727999985218048},{"id":"https://openalex.org/C29852176","wikidata":"https://www.wikidata.org/wiki/Q373338","display_name":"Critical infrastructure","level":2,"score":0.26910001039505005},{"id":"https://openalex.org/C161036016","wikidata":"https://www.wikidata.org/wiki/Q956095","display_name":"Theory of constraints","level":2,"score":0.250900000333786},{"id":"https://openalex.org/C193254401","wikidata":"https://www.wikidata.org/wiki/Q2160088","display_name":"Robust optimization","level":2,"score":0.2502000033855438}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1007/s10922-026-10068-z","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10922-026-10068-z","pdf_url":null,"source":{"id":"https://openalex.org/S67072002","display_name":"Journal of Network and Systems Management","issn_l":"1064-7570","issn":["1064-7570","1573-7705"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Network and Systems Management","raw_type":"journal-article"},{"id":"pmh:oai:openaccess.uoc.edu:10609/155259","is_oa":true,"landing_page_url":"https://hdl.handle.net/10609/155259","pdf_url":null,"source":{"id":"https://openalex.org/S7407053569","display_name":"O2 - Repositori Institucional (Universitat Oberta de Catalunya)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:HAL:hal-05705263v1","is_oa":true,"landing_page_url":"https://hal.science/hal-05705263","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Network and Systems Management, 2026, 34 (4), pp.105. ⟨10.1007/s10922-026-10068-z⟩","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1007/s10922-026-10068-z","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10922-026-10068-z","pdf_url":null,"source":{"id":"https://openalex.org/S67072002","display_name":"Journal of Network and Systems Management","issn_l":"1064-7570","issn":["1064-7570","1573-7705"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Network and Systems Management","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/8","display_name":"Decent work and economic growth","score":0.40724584460258484}],"awards":[],"funders":[{"id":"https://openalex.org/F4320328100","display_name":"Universitat Oberta de Catalunya","ror":"https://ror.org/01f5wp925"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":45,"referenced_works":["https://openalex.org/W1266384179","https://openalex.org/W1521850300","https://openalex.org/W1994442196","https://openalex.org/W2086454935","https://openalex.org/W2139936806","https://openalex.org/W2500898769","https://openalex.org/W2509858104","https://openalex.org/W2525685099","https://openalex.org/W2535017274","https://openalex.org/W2553733554","https://openalex.org/W2622921428","https://openalex.org/W2724727383","https://openalex.org/W2762039412","https://openalex.org/W2883263864","https://openalex.org/W2888279577","https://openalex.org/W2933652705","https://openalex.org/W2952332632","https://openalex.org/W2964682570","https://openalex.org/W3013219028","https://openalex.org/W3023504479","https://openalex.org/W3037597761","https://openalex.org/W3106749574","https://openalex.org/W3179934812","https://openalex.org/W4224932126","https://openalex.org/W4238738565","https://openalex.org/W4286233764","https://openalex.org/W4288296172","https://openalex.org/W4289292068","https://openalex.org/W4292056014","https://openalex.org/W4295884671","https://openalex.org/W4297895532","https://openalex.org/W4300025209","https://openalex.org/W4313120321","https://openalex.org/W4364383181","https://openalex.org/W4385692460","https://openalex.org/W4387178135","https://openalex.org/W4389549215","https://openalex.org/W4390101654","https://openalex.org/W4391168944","https://openalex.org/W4392885495","https://openalex.org/W4401813184","https://openalex.org/W4402426699","https://openalex.org/W4406020448","https://openalex.org/W4408133016","https://openalex.org/W7133535730"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"When":[1],"confronted":[2],"with":[3,12,62],"advanced":[4],"cyber":[5,89],"threats,":[6],"traditional":[7,129],"cybersecurity":[8],"methods":[9,130],"often":[10],"struggle":[11],"system":[13,50],"performance":[14],"and":[15,39,57,100,155],"cost-effectiveness.":[16],"Current":[17],"approaches":[18,54],"using":[19],"game":[20,85],"theory":[21,86],"for":[22],"passive":[23],"applications,":[24],"such":[25],"as":[26],"Moving":[27,71],"Target":[28,70,72],"Defense":[29,73],"(MTD),":[30],"lack":[31],"flexibility":[32],"in":[33],"adapting":[34],"to":[35,87,128,137,150],"varying":[36],"resource":[37,98],"criticalities":[38],"rely":[40],"on":[41,82],"rigid":[42],"cost":[43,108],"assumptions":[44],"that":[45,121,145],"overlook":[46],"the":[47,63,68,122],"interdependencies":[48],"among":[49],"components.":[51],"Additionally,":[52],"these":[53],"are":[55],"complex":[56,61,156],"grow":[58],"exponentially":[59],"more":[60,153],"network.":[64],"This":[65,140],"paper":[66],"presents":[67],"Multiple":[69],"(MTD)":[74],"Model":[75],"(MT2M),":[76],"a":[77,105,111,143,152],"strategic":[78],"MTD":[79],"framework":[80,124,144],"based":[81],"Bayesian":[83],"Stackelberg":[84],"optimize":[88],"defense":[90,133],"costs.":[91],"Optimization":[92],"is":[93],"done":[94],"while":[95,131],"considering":[96],"both":[97],"criticality":[99],"node":[101],"capacity.":[102],"By":[103],"transforming":[104],"complex,":[106],"NP-hard":[107],"problem":[109],"into":[110],"linear":[112],"one,":[113],"MT2M":[114],"enables":[115],"scalable":[116],"deployment.":[117],"Numerical":[118],"simulations":[119],"demonstrate":[120],"proposed":[123],"achieves":[125],"comparable":[126],"security":[127],"reducing":[132],"costs":[134],"by":[135],"up":[136],"$$15\\%$$":[138],".":[139],"research":[141],"establishes":[142],"can":[146],"be":[147],"later":[148],"expanded":[149],"include":[151],"variable":[154],"network":[157],"configuration.":[158]},"counts_by_year":[],"updated_date":"2026-08-26T07:47:46.906454","created_date":"2026-05-24T00:00:00"}