{"id":"https://openalex.org/W2885161897","doi":"https://doi.org/10.1109/metroi4.2018.8428307","title":"Coverage-Based Heuristics for Selecting Assessment Items from Security Standards: A Core Set Proposal","display_name":"Coverage-Based Heuristics for Selecting Assessment Items from Security Standards: A Core Set Proposal","publication_year":2018,"publication_date":"2018-04-01","ids":{"openalex":"https://openalex.org/W2885161897","doi":"https://doi.org/10.1109/metroi4.2018.8428307","mag":"2885161897"},"language":"en","primary_location":{"id":"doi:10.1109/metroi4.2018.8428307","is_oa":false,"landing_page_url":"https://doi.org/10.1109/metroi4.2018.8428307","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 Workshop on Metrology for Industry 4.0 and IoT","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5020081073","display_name":"Ferrucio de Franco Rosa","orcid":"https://orcid.org/0000-0001-9504-496X"},"institutions":[{"id":"https://openalex.org/I4210142333","display_name":"Centro de Tecnologia da Informa\u00e7\u00e3o Renato Archer","ror":"https://ror.org/044nfga98","country_code":"BR","type":"government","lineage":["https://openalex.org/I4210142333","https://openalex.org/I4210151455"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Ferrucio De Franco Rosa","raw_affiliation_strings":["CTI Renato Archer, Campinas, SP, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CTI Renato Archer, Campinas, SP, Brazil","institution_ids":["https://openalex.org/I4210142333"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068540423","display_name":"M\u00e1rio Jino","orcid":"https://orcid.org/0000-0002-1914-5790"},"institutions":[{"id":"https://openalex.org/I181391015","display_name":"Universidade Estadual de Campinas (UNICAMP)","ror":"https://ror.org/04wffgt70","country_code":"BR","type":"education","lineage":["https://openalex.org/I181391015"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Mario Jino","raw_affiliation_strings":["FEEC-UNICAMP, Campinas, SP, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"FEEC-UNICAMP, Campinas, SP, Brazil","institution_ids":["https://openalex.org/I181391015"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108259198","display_name":"Paulo Marcos Siqueira Bueno","orcid":null},"institutions":[{"id":"https://openalex.org/I4210142333","display_name":"Centro de Tecnologia da Informa\u00e7\u00e3o Renato Archer","ror":"https://ror.org/044nfga98","country_code":"BR","type":"government","lineage":["https://openalex.org/I4210142333","https://openalex.org/I4210151455"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Paulo Marcos Siqueira Bueno","raw_affiliation_strings":["CTI Renato Archer, Campinas, SP, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CTI Renato Archer, Campinas, SP, Brazil","institution_ids":["https://openalex.org/I4210142333"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5073408657","display_name":"Rodrigo Bonacin","orcid":"https://orcid.org/0000-0003-3441-0887"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rodrigo Bonacin","raw_affiliation_strings":["FACCAMP, Campo Limpo, SP, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"FACCAMP, Campo Limpo, SP, Brazil","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.208,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.85478739,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"21","issue":null,"first_page":"192","last_page":"197"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9965000152587891,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/heuristics","display_name":"Heuristics","score":0.8198940753936768},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7149830460548401},{"id":"https://openalex.org/keywords/core","display_name":"Core (optical fiber)","score":0.7038493156433105},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5871862173080444},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.46518272161483765},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.09670308232307434},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.08399468660354614}],"concepts":[{"id":"https://openalex.org/C127705205","wikidata":"https://www.wikidata.org/wiki/Q5748245","display_name":"Heuristics","level":2,"score":0.8198940753936768},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7149830460548401},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.7038493156433105},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5871862173080444},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.46518272161483765},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.09670308232307434},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.08399468660354614},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/metroi4.2018.8428307","is_oa":false,"landing_page_url":"https://doi.org/10.1109/metroi4.2018.8428307","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 Workshop on Metrology for Industry 4.0 and IoT","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/10","score":0.6100000143051147,"display_name":"Reduced inequalities"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W1500529282","https://openalex.org/W1804608893","https://openalex.org/W2030684361","https://openalex.org/W2063704486","https://openalex.org/W2125764176","https://openalex.org/W2189292182","https://openalex.org/W2204102791","https://openalex.org/W2240993717","https://openalex.org/W2726952220","https://openalex.org/W2797343713","https://openalex.org/W6629913055"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2280422768","https://openalex.org/W3143197806","https://openalex.org/W4252555497","https://openalex.org/W2951451014","https://openalex.org/W4288089942","https://openalex.org/W2095530470","https://openalex.org/W2081981665","https://openalex.org/W1543591978"],"abstract_inverted_index":{"In":[0],"the":[1,24,57,92,110,122,133,167,198,213,226],"realm":[2],"of":[3,5,26,84,94,106,112,116,128,132,169,200,212,220,228],"Internet":[4],"Things":[6],"(IoT),":[7],"information":[8],"security":[9,42,46,58,75,98,117,123,134,143,156,181,206,215,221,229],"is":[10,109,164,193],"a":[11,30,65,82,113,129,178],"critical":[12],"issue.":[13],"Security":[14],"standards,":[15],"including":[16],"their":[17],"assessment":[18,47,51,61,76,85,95,101,118,124,135,150,160,187,202,207],"items,":[19,52],"are":[20,38],"essential":[21],"instruments":[22],"in":[23,100],"evaluation":[25,219],"systems":[27],"security.":[28],"However,":[29],"key":[31],"question":[32],"remains":[33],"open:":[34],"\u201cWhich":[35],"test":[36],"cases":[37],"most":[39],"effective":[40],"for":[41,71],"assessment?\u201d":[43],"To":[44],"create":[45],"designs":[48],"with":[49,152,209,223],"suitable":[50],"we":[53],"need":[54],"to":[55,90,142,145,148,154,177,195,225],"know":[56,180],"properties":[59,157],"and":[60,73,87,97,158,171,185,217],"dimensions":[62,96,170],"covered":[63],"by":[64,126],"standard.":[66],"We":[67,120],"propose":[68],"an":[69],"approach":[70,138,163],"selecting":[72],"analyzing":[74],"items;":[77],"its":[78,186],"foundations":[79],"come":[80],"from":[81],"set":[83,115],"heuristics":[86],"it":[88],"aims":[89],"increase":[91],"coverage":[93,211,227],"characteristics":[99],"designs.":[102],"The":[103,162,191],"main":[104,214],"contribution":[105],"this":[107],"paper":[108],"definition":[111],"core":[114],"heuristics.":[119],"systematize":[121],"process":[125],"means":[127],"conceptual":[130],"formalization":[131],"area.":[136],"Our":[137,173],"can":[139],"be":[140],"applied":[141,176],"standards":[144,222],"select":[146],"or":[147],"prioritize":[149],"items":[151,188,208],"respect":[153,224],"11":[155],"6":[159],"dimensions.":[161],"flexible":[165],"allowing":[166],"inclusion":[168],"properties.":[172],"proposal":[174,192],"was":[175],"well":[179],"standard":[182],"(ISO/IEC":[183],"27001)":[184],"were":[189],"analyzed.":[190],"meant":[194],"support:":[196],"(i)":[197],"generation":[199],"high-coverage":[201],"designs,":[203],"which":[204],"include":[205],"assured":[210],"characteristics,":[216],"(ii)":[218],"aspects.":[230]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}