{"id":"https://openalex.org/W7128725712","doi":"https://doi.org/10.1109/tr.2026.3664126","title":"SA.Resilience.Evaluator: Evaluate the Resilience of Software Architecture Based on Attack Surface Analysis","display_name":"SA.Resilience.Evaluator: Evaluate the Resilience of Software Architecture Based on Attack Surface Analysis","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7128725712","doi":"https://doi.org/10.1109/tr.2026.3664126"},"language":null,"primary_location":{"id":"doi:10.1109/tr.2026.3664126","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tr.2026.3664126","pdf_url":null,"source":{"id":"https://openalex.org/S87725633","display_name":"IEEE Transactions on Reliability","issn_l":"0018-9529","issn":["0018-9529","1558-1721"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Reliability","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5125770717","display_name":"Can Zhao","orcid":null},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Can Zhao","raw_affiliation_strings":["School of Computer Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-1974-8655","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005999583","display_name":"Jiaxin Pan","orcid":"https://orcid.org/0000-0002-7459-6850"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiaxin Pan","raw_affiliation_strings":["School of Computer Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5044422385","display_name":"Bixin Li","orcid":"https://orcid.org/0000-0001-9916-4790"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bixin Li","raw_affiliation_strings":["School of Computer Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0001-9916-4790","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I76569877"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.10024785,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"75","issue":null,"first_page":"1035","last_page":"1049"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.3472999930381775,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.3472999930381775,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.2840000092983246,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.05979999899864197,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/reference-architecture","display_name":"Reference architecture","score":0.5871000289916992},{"id":"https://openalex.org/keywords/software-architecture-description","display_name":"Software architecture description","score":0.5530999898910522},{"id":"https://openalex.org/keywords/software-architecture","display_name":"Software architecture","score":0.541700005531311},{"id":"https://openalex.org/keywords/resource-oriented-architecture","display_name":"Resource-oriented architecture","score":0.527899980545044},{"id":"https://openalex.org/keywords/architecture-tradeoff-analysis-method","display_name":"Architecture tradeoff analysis method","score":0.45500001311302185},{"id":"https://openalex.org/keywords/software-system","display_name":"Software system","score":0.44859999418258667},{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.44760000705718994},{"id":"https://openalex.org/keywords/software-construction","display_name":"Software construction","score":0.42899999022483826},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.397599995136261}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6340000033378601},{"id":"https://openalex.org/C55356503","wikidata":"https://www.wikidata.org/wiki/Q2136675","display_name":"Reference architecture","level":4,"score":0.5871000289916992},{"id":"https://openalex.org/C73219336","wikidata":"https://www.wikidata.org/wiki/Q7554254","display_name":"Software architecture description","level":5,"score":0.5530999898910522},{"id":"https://openalex.org/C35869016","wikidata":"https://www.wikidata.org/wiki/Q846636","display_name":"Software architecture","level":3,"score":0.541700005531311},{"id":"https://openalex.org/C97382630","wikidata":"https://www.wikidata.org/wiki/Q13501132","display_name":"Resource-oriented architecture","level":5,"score":0.527899980545044},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.4602999985218048},{"id":"https://openalex.org/C126383566","wikidata":"https://www.wikidata.org/wiki/Q4787220","display_name":"Architecture tradeoff analysis method","level":5,"score":0.45500001311302185},{"id":"https://openalex.org/C149091818","wikidata":"https://www.wikidata.org/wiki/Q2429814","display_name":"Software system","level":3,"score":0.44859999418258667},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.44760000705718994},{"id":"https://openalex.org/C186846655","wikidata":"https://www.wikidata.org/wiki/Q3398377","display_name":"Software construction","level":4,"score":0.42899999022483826},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.397599995136261},{"id":"https://openalex.org/C201515116","wikidata":"https://www.wikidata.org/wiki/Q7554363","display_name":"Software sizing","level":5,"score":0.3837999999523163},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.38280001282691956},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.36039999127388},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.3499999940395355},{"id":"https://openalex.org/C117447612","wikidata":"https://www.wikidata.org/wiki/Q1412670","display_name":"Software quality","level":4,"score":0.3402999937534332},{"id":"https://openalex.org/C74678566","wikidata":"https://www.wikidata.org/wiki/Q1052721","display_name":"Multilayered architecture","level":5,"score":0.3328999876976013},{"id":"https://openalex.org/C56909552","wikidata":"https://www.wikidata.org/wiki/Q2297624","display_name":"Software design description","level":5,"score":0.32919999957084656},{"id":"https://openalex.org/C48002344","wikidata":"https://www.wikidata.org/wiki/Q2919644","display_name":"Verification and validation","level":2,"score":0.319599986076355},{"id":"https://openalex.org/C109905503","wikidata":"https://www.wikidata.org/wiki/Q4828920","display_name":"Avionics software","level":5,"score":0.31859999895095825},{"id":"https://openalex.org/C72280835","wikidata":"https://www.wikidata.org/wiki/Q635346","display_name":"Architectural pattern","level":5,"score":0.3082999885082245},{"id":"https://openalex.org/C82214349","wikidata":"https://www.wikidata.org/wiki/Q657339","display_name":"Software metric","level":5,"score":0.2818000018596649},{"id":"https://openalex.org/C174683762","wikidata":"https://www.wikidata.org/wiki/Q609588","display_name":"Component-based software engineering","level":4,"score":0.2621000111103058},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.2581999897956848},{"id":"https://openalex.org/C41065761","wikidata":"https://www.wikidata.org/wiki/Q2193309","display_name":"Applications architecture","level":4,"score":0.2578999996185303},{"id":"https://openalex.org/C145644426","wikidata":"https://www.wikidata.org/wiki/Q169411","display_name":"Unified Modeling Language","level":3,"score":0.25619998574256897}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tr.2026.3664126","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tr.2026.3664126","pdf_url":null,"source":{"id":"https://openalex.org/S87725633","display_name":"IEEE Transactions on Reliability","issn_l":"0018-9529","issn":["0018-9529","1558-1721"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Reliability","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W1587970460","https://openalex.org/W1973105020","https://openalex.org/W2062877251","https://openalex.org/W2069639155","https://openalex.org/W2085801258","https://openalex.org/W2120232805","https://openalex.org/W2122824813","https://openalex.org/W2129586531","https://openalex.org/W2324359486","https://openalex.org/W2598792555","https://openalex.org/W2736691150","https://openalex.org/W2883961236","https://openalex.org/W2886816214","https://openalex.org/W2906048991","https://openalex.org/W2943370261","https://openalex.org/W2955360971","https://openalex.org/W3001150309","https://openalex.org/W3216687398","https://openalex.org/W4213386241","https://openalex.org/W4224214483","https://openalex.org/W4322625793","https://openalex.org/W4361800989","https://openalex.org/W4367396662","https://openalex.org/W4388666772","https://openalex.org/W4400877190"],"related_works":[],"abstract_inverted_index":{"Resilience":[0],"is":[1,38,101,257],"vital":[2],"to":[3,42,103,154,162,194],"software":[4,29,35,57,66,92,107,119,140,146,159,169,215],"systems":[5,67],"and":[6,68,99,116,132,166,182,188,265],"helps":[7],"them":[8],"maintain":[9],"an":[10],"acceptable":[11],"level":[12],"of":[13,18,28,56,62,65,91,106,134,158,168,174,198,214,221,251],"service":[14],"in":[15,76,118,201,230,262],"the":[16,26,89,130,139,144,156,163,172,176,192,196,205,210,219,231,240],"face":[17],"various":[19,104],"attacks.":[20],"However,":[21],"existing":[22,50,260],"methods":[23,51,261],"for":[24,87],"evaluating":[25,88],"resilience":[27,44,90,157],"system":[30],"mainly":[31],"focus":[32],"on":[33,95,138],"implemented":[34],"system,":[36],"there":[37],"no":[39],"effective":[40],"method":[41,86,110,128,152,200,256],"evaluate":[43,155,195],"at":[45],"design":[46,181],"time.":[47],"In":[48,80,204],"addition,":[49],"only":[52],"concern":[53],"specific":[54],"types":[55,105,131],"systems,":[58],"lacking":[59],"comprehensive":[60],"consideration":[61],"multi-dimensional":[63],"characteristics":[64],"they":[69],"often":[70],"have":[71],"stringent":[72],"conditions":[73],"when":[74],"evaluated":[75],"practical":[77],"applications":[78],"etc.":[79],"this":[81],"paper,":[82],"we":[83,179,190,208,234],"propose":[84],"a":[85,184],"architecture":[93,120,141,160,216,228,236,246],"based":[94],"attack":[96,122,147],"surface":[97,123],"analysis":[98,124],"it":[100],"applicable":[102],"systems.":[108],"Our":[109],"first":[111,180,206],"identifies":[112],"potential":[113,135],"security":[114],"threats":[115],"vulnerabilities":[117],"through":[121],"technology.":[125],"Then,":[126],"our":[127,151,199,222,255],"analyzes":[129],"severity":[133],"external":[136],"attacks":[137],"by":[142],"combining":[143],"CAPEC":[145],"database.":[148],"After":[149],"that,":[150],"comes":[153],"according":[161],"safety,":[164],"reliability,":[165],"restoration":[167],"architecture.":[170],"For":[171],"convenience":[173],"conducting":[175],"case":[177],"studies,":[178],"implement":[183],"tool":[185,193],"called":[186],"SA.Resilience.Evaluator":[187],"then":[189],"use":[191,209,235],"effectiveness":[197,264],"two":[202],"scenarios.":[203],"scenario,":[207,233],"UML":[211],"activity":[212],"diagram":[213],"model":[217],"as":[218,239],"input":[220],"tool,":[223],"which":[224,242],"was":[225,243],"obtained":[226,244],"from":[227,245],"designer;":[229],"second":[232],"dependency":[237],"graph":[238],"input,":[241],"recovery":[247],"techniques.":[248],"The":[249],"results":[250],"studies":[252],"show":[253],"that":[254],"better":[258],"than":[259],"both":[263],"efficiency.":[266]},"counts_by_year":[],"updated_date":"2026-08-12T21:12:35.861297","created_date":"2026-02-13T00:00:00"}