{"id":"https://openalex.org/W4410887186","doi":"https://doi.org/10.1109/access.2025.3575070","title":"A Proactive and Time-Sensitive Cyber Risk Assessment Model Integrating Markov Chains and Bayesian Networks","display_name":"A Proactive and Time-Sensitive Cyber Risk Assessment Model Integrating Markov Chains and Bayesian Networks","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4410887186","doi":"https://doi.org/10.1109/access.2025.3575070"},"language":"en","primary_location":{"id":"doi:10.1109/access.2025.3575070","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3575070","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3575070","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5041863361","display_name":"Pavlos Cheimonidis","orcid":null},"institutions":[{"id":"https://openalex.org/I147962203","display_name":"Democritus University of Thrace","ror":"https://ror.org/03bfqnx40","country_code":"GR","type":"education","lineage":["https://openalex.org/I147962203"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Pavlos Cheimonidis","raw_affiliation_strings":["Department of Informatics, Democritus University of Thrace, Kavala, Greece"],"raw_orcid":"https://orcid.org/0009-0002-4253-1232","affiliations":[{"raw_affiliation_string":"Department of Informatics, Democritus University of Thrace, Kavala, Greece","institution_ids":["https://openalex.org/I147962203"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5010152963","display_name":"Konstantinos Rantos","orcid":"https://orcid.org/0000-0003-2453-3904"},"institutions":[{"id":"https://openalex.org/I147962203","display_name":"Democritus University of Thrace","ror":"https://ror.org/03bfqnx40","country_code":"GR","type":"education","lineage":["https://openalex.org/I147962203"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Konstantinos Rantos","raw_affiliation_strings":["Department of Informatics, Democritus University of Thrace, Kavala, Greece"],"raw_orcid":"https://orcid.org/0000-0003-2453-3904","affiliations":[{"raw_affiliation_string":"Department of Informatics, Democritus University of Thrace, Kavala, Greece","institution_ids":["https://openalex.org/I147962203"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":4.7179,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.94489728,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":"13","issue":null,"first_page":"96911","last_page":"96932"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9930999875068665,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.737739086151123},{"id":"https://openalex.org/keywords/bayesian-network","display_name":"Bayesian network","score":0.7154243588447571},{"id":"https://openalex.org/keywords/markov-chain","display_name":"Markov chain","score":0.6480035781860352},{"id":"https://openalex.org/keywords/markov-process","display_name":"Markov process","score":0.5265346169471741},{"id":"https://openalex.org/keywords/bayesian-probability","display_name":"Bayesian probability","score":0.5064200162887573},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.3443142771720886},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.33004656434059143},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.31406843662261963},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.08420628309249878},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.07892626523971558},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.0717049241065979}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.737739086151123},{"id":"https://openalex.org/C33724603","wikidata":"https://www.wikidata.org/wiki/Q812540","display_name":"Bayesian network","level":2,"score":0.7154243588447571},{"id":"https://openalex.org/C98763669","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov chain","level":2,"score":0.6480035781860352},{"id":"https://openalex.org/C159886148","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov process","level":2,"score":0.5265346169471741},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.5064200162887573},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3443142771720886},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.33004656434059143},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.31406843662261963},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.08420628309249878},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.07892626523971558},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.0717049241065979}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2025.3575070","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3575070","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:1227fdffa4e7460896cf43fdb65fa261","is_oa":true,"landing_page_url":"https://doaj.org/article/1227fdffa4e7460896cf43fdb65fa261","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 13, Pp 96911-96932 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3575070","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3575070","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":48,"referenced_works":["https://openalex.org/W1531218190","https://openalex.org/W1972141404","https://openalex.org/W1995713768","https://openalex.org/W2019022983","https://openalex.org/W2037027324","https://openalex.org/W2040492037","https://openalex.org/W2063647478","https://openalex.org/W2077937403","https://openalex.org/W2079172465","https://openalex.org/W2082367530","https://openalex.org/W2131060714","https://openalex.org/W2131875370","https://openalex.org/W2187280856","https://openalex.org/W2187611279","https://openalex.org/W2274921551","https://openalex.org/W2330650066","https://openalex.org/W2342413143","https://openalex.org/W2492406775","https://openalex.org/W2510386329","https://openalex.org/W2519207026","https://openalex.org/W2551099590","https://openalex.org/W2559923069","https://openalex.org/W2565077509","https://openalex.org/W2622921428","https://openalex.org/W2765472318","https://openalex.org/W2766872009","https://openalex.org/W2772871960","https://openalex.org/W2805805734","https://openalex.org/W2896921551","https://openalex.org/W2899075272","https://openalex.org/W2939771903","https://openalex.org/W2940636310","https://openalex.org/W2941094276","https://openalex.org/W2990105130","https://openalex.org/W3025221791","https://openalex.org/W3046978217","https://openalex.org/W3111503246","https://openalex.org/W3134318052","https://openalex.org/W4200200073","https://openalex.org/W4200507356","https://openalex.org/W4280577802","https://openalex.org/W4299670631","https://openalex.org/W4311202314","https://openalex.org/W4387178135","https://openalex.org/W4391998708","https://openalex.org/W4396747234","https://openalex.org/W4400045586","https://openalex.org/W4405180767"],"related_works":["https://openalex.org/W1660242800","https://openalex.org/W2077211377","https://openalex.org/W1006270037","https://openalex.org/W2379651310","https://openalex.org/W2113019827","https://openalex.org/W1541249122","https://openalex.org/W2413828414","https://openalex.org/W4236062181","https://openalex.org/W2367222340","https://openalex.org/W2555554314"],"abstract_inverted_index":{"As":[0],"cyberattacks":[1],"grow":[2],"in":[3,172],"complexity,":[4],"they":[5],"pose":[6],"increasing":[7],"threats":[8],"to":[9,21,23,47,61,79,152],"organizations":[10],"reliant":[11],"on":[12],"networked":[13],"infrastructures.":[14],"Conventional":[15],"risk":[16,36,134],"assessment":[17,37],"methodologies":[18],"often":[19],"fail":[20],"adapt":[22],"the":[24,55,63,88,101,119,146,158,162],"evolving":[25],"nature":[26],"of":[27,66,161],"these":[28],"threats.":[29],"This":[30,90],"paper":[31],"introduces":[32],"a":[33,41,69,164,177],"novel":[34],"cyber":[35,174],"model":[38,53,113],"that":[39],"adopts":[40],"proactive,":[42,131],"dynamic,":[43,130],"and":[44,84,132],"time-aware":[45],"approach":[46],"evaluating":[48],"security":[49],"risks.":[50],"The":[51,112],"proposed":[52],"leverages":[54],"Exploit":[56],"Prediction":[57],"Scoring":[58],"System":[59],"(EPSS)":[60],"estimate":[62],"short-term":[64],"likelihood":[65],"exploitation":[67,115],"over":[68,118],"30-day":[70],"period.":[71],"To":[72,156],"improve":[73],"accuracy,":[74],"Bayesian":[75],"networks":[76],"are":[77,106],"employed":[78],"capture":[80],"both":[81],"system":[82],"vulnerabilities":[83],"asset":[85,127],"interdependencies":[86],"within":[87,176],"network.":[89],"information":[91],"is":[92,167],"integrated":[93],"into":[94,141],"an":[95,150],"absorbing":[96],"Markov":[97],"chain":[98],"along":[99],"with":[100,126],"identified":[102],"attack":[103,142],"paths,":[104],"which":[105],"explored":[107],"using":[108],"Depth-First":[109],"Search":[110],"(DFS).":[111],"generates":[114],"probability":[116],"distributions":[117],"predefined":[120],"time":[121,147],"window,":[122],"which,":[123],"when":[124],"combined":[125],"impact,":[128],"facilitates":[129],"time-sensitive":[133],"assessments.":[135],"Additionally,":[136],"it":[137],"provides":[138],"valuable":[139],"insights":[140],"progression":[143],"by":[144],"estimating":[145],"required":[148],"for":[149],"adversary":[151],"compromise":[153],"critical":[154],"assets.":[155],"demonstrate":[157],"practical":[159],"applicability":[160],"model,":[163],"case":[165],"study":[166],"presented,":[168],"showcasing":[169],"its":[170],"effectiveness":[171],"assessing":[173],"risks":[175],"SCADA":[178],"environment.":[179]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}