{"id":"https://openalex.org/W4415222652","doi":"https://doi.org/10.1109/cns66487.2025.11194985","title":"Optimizing the Selection of Vulnerability Remediation Actions in Operational Technology Environments","display_name":"Optimizing the Selection of Vulnerability Remediation Actions in Operational Technology Environments","publication_year":2025,"publication_date":"2025-09-08","ids":{"openalex":"https://openalex.org/W4415222652","doi":"https://doi.org/10.1109/cns66487.2025.11194985"},"language":"en","primary_location":{"id":"doi:10.1109/cns66487.2025.11194985","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns66487.2025.11194985","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010750132","display_name":"Kylie McClanahan","orcid":"https://orcid.org/0000-0002-7809-6554"},"institutions":[{"id":"https://openalex.org/I78715868","display_name":"University of Arkansas at Fayetteville","ror":"https://ror.org/05jbt9m15","country_code":"US","type":"education","lineage":["https://openalex.org/I78715868"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kylie McClanahan","raw_affiliation_strings":["University of Arkansas,Department of Electrical Engineering and Computer Science"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Arkansas,Department of Electrical Engineering and Computer Science","institution_ids":["https://openalex.org/I78715868"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093809811","display_name":"Marie Louise Uwibambe","orcid":null},"institutions":[{"id":"https://openalex.org/I78715868","display_name":"University of Arkansas at Fayetteville","ror":"https://ror.org/05jbt9m15","country_code":"US","type":"education","lineage":["https://openalex.org/I78715868"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Marie Louise Uwibambe","raw_affiliation_strings":["University of Arkansas,Department of Electrical Engineering and Computer Science"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Arkansas,Department of Electrical Engineering and Computer Science","institution_ids":["https://openalex.org/I78715868"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101927781","display_name":"Qinghua Li","orcid":"https://orcid.org/0000-0002-7734-6216"},"institutions":[{"id":"https://openalex.org/I78715868","display_name":"University of Arkansas at Fayetteville","ror":"https://ror.org/05jbt9m15","country_code":"US","type":"education","lineage":["https://openalex.org/I78715868"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Qinghua Li","raw_affiliation_strings":["University of Arkansas,Department of Electrical Engineering and Computer Science"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Arkansas,Department of Electrical Engineering and Computer Science","institution_ids":["https://openalex.org/I78715868"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I78715868"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T14470","display_name":"Advanced Data Processing Techniques","score":0.8029999732971191,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T14470","display_name":"Advanced Data Processing Techniques","score":0.8029999732971191,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11357","display_name":"Risk and Safety Analysis","score":0.7753999829292297,"subfield":{"id":"https://openalex.org/subfields/1804","display_name":"Statistics, Probability and Uncertainty"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T14222","display_name":"Knowledge Management and Technology","score":0.680400013923645,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/heuristics","display_name":"Heuristics","score":0.6650000214576721},{"id":"https://openalex.org/keywords/heuristic","display_name":"Heuristic","score":0.5663999915122986},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5602999925613403},{"id":"https://openalex.org/keywords/selection","display_name":"Selection (genetic algorithm)","score":0.5597000122070312},{"id":"https://openalex.org/keywords/knapsack-problem","display_name":"Knapsack problem","score":0.5515000224113464},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5069000124931335},{"id":"https://openalex.org/keywords/electre","display_name":"ELECTRE","score":0.37209999561309814},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.35690000653266907}],"concepts":[{"id":"https://openalex.org/C127705205","wikidata":"https://www.wikidata.org/wiki/Q5748245","display_name":"Heuristics","level":2,"score":0.6650000214576721},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5703999996185303},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.5695000290870667},{"id":"https://openalex.org/C173801870","wikidata":"https://www.wikidata.org/wiki/Q201413","display_name":"Heuristic","level":2,"score":0.5663999915122986},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5602999925613403},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.5597000122070312},{"id":"https://openalex.org/C113138325","wikidata":"https://www.wikidata.org/wiki/Q864457","display_name":"Knapsack problem","level":2,"score":0.5515000224113464},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5069000124931335},{"id":"https://openalex.org/C42475967","wikidata":"https://www.wikidata.org/wiki/Q194292","display_name":"Operations research","level":1,"score":0.3831000030040741},{"id":"https://openalex.org/C47431972","wikidata":"https://www.wikidata.org/wiki/Q3045948","display_name":"ELECTRE","level":3,"score":0.37209999561309814},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.35690000653266907},{"id":"https://openalex.org/C2776613951","wikidata":"https://www.wikidata.org/wiki/Q7097788","display_name":"Operational planning","level":2,"score":0.35589998960494995},{"id":"https://openalex.org/C522964758","wikidata":"https://www.wikidata.org/wiki/Q2019586","display_name":"Environmental remediation","level":3,"score":0.35109999775886536},{"id":"https://openalex.org/C29202148","wikidata":"https://www.wikidata.org/wiki/Q287260","display_name":"Resource allocation","level":2,"score":0.3481000065803528},{"id":"https://openalex.org/C137836250","wikidata":"https://www.wikidata.org/wiki/Q984063","display_name":"Optimization problem","level":2,"score":0.34139999747276306},{"id":"https://openalex.org/C539667460","wikidata":"https://www.wikidata.org/wiki/Q2414942","display_name":"Management science","level":1,"score":0.32919999957084656},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.28040000796318054},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.27379998564720154},{"id":"https://openalex.org/C48243021","wikidata":"https://www.wikidata.org/wiki/Q932522","display_name":"Strategic planning","level":2,"score":0.26600000262260437},{"id":"https://openalex.org/C193254401","wikidata":"https://www.wikidata.org/wiki/Q2160088","display_name":"Robust optimization","level":2,"score":0.2574000060558319},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2549999952316284},{"id":"https://openalex.org/C191489605","wikidata":"https://www.wikidata.org/wiki/Q6043021","display_name":"Integrated business planning","level":2,"score":0.25130000710487366}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cns66487.2025.11194985","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns66487.2025.11194985","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1871829960","display_name":"CAREER: Towards Automated Security Vulnerability and Patch Management for Power Grid Operations","funder_award_id":"1751255","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W2022501047","https://openalex.org/W2029500603","https://openalex.org/W2135814502","https://openalex.org/W2506654222","https://openalex.org/W2593932391","https://openalex.org/W2609207095","https://openalex.org/W2804264889","https://openalex.org/W3006025933","https://openalex.org/W3023019431","https://openalex.org/W3047932800","https://openalex.org/W3048335302","https://openalex.org/W4281616937","https://openalex.org/W4399909337","https://openalex.org/W4402811482","https://openalex.org/W4404567738","https://openalex.org/W4407949841"],"related_works":[],"abstract_inverted_index":{"Operational":[0],"technology":[1],"environments":[2],"frequently":[3],"face":[4],"with":[5],"an":[6,38,104],"accumulation":[7],"of":[8,44,83,92,115],"software":[9],"vulnerabilities":[10],"and":[11,112],"limited":[12],"resources":[13],"for":[14,49],"remediation.":[15],"In":[16],"such":[17],"contexts,":[18],"organizations":[19],"must":[20],"prioritize":[21],"which":[22],"actions":[23],"to":[24],"take,":[25],"often":[26],"under":[27],"significant":[28],"constraints.":[29],"This":[30],"paper":[31],"models":[32],"the":[33,45,73,87],"remediation":[34,51,101],"planning":[35,102],"process":[36],"as":[37,42,103],"optimization":[39,74,105],"problem,":[40,47],"specifically":[41],"variants":[43],"knapsack":[46],"allowing":[48],"multiple":[50],"options":[52],"per":[53],"vulnerability.":[54],"We":[55],"evaluate":[56],"this":[57],"formulation":[58],"by":[59],"comparing":[60],"common":[61],"industry":[62],"heuristics":[63],"against":[64],"our":[65],"proposed":[66],"optimization-based":[67],"solutions.":[68],"Experimental":[69],"results":[70,97],"show":[71],"that":[72,99],"approach":[75],"outperforms":[76],"heuristic":[77],"methods,":[78],"achieving":[79],"a":[80],"minimum":[81],"improvement":[82],"40.9":[84],"%":[85],"over":[86],"next-best":[88],"alternative":[89],"in":[90],"terms":[91],"total":[93],"security":[94],"benefit.":[95],"These":[96],"indicate":[98],"treating":[100],"problem":[106],"enables":[107],"more":[108],"effective":[109],"vulnerability":[110],"management":[111],"improved":[113],"allocation":[114],"scarce":[116],"operational":[117],"resources.":[118]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-16T00:00:00"}