{"id":"https://openalex.org/W2019196986","doi":"https://doi.org/10.1145/1363686.1363934","title":"A model-based semi-quantitative approach for evaluating security of enterprise networks","display_name":"A model-based semi-quantitative approach for evaluating security of enterprise networks","publication_year":2008,"publication_date":"2008-03-16","ids":{"openalex":"https://openalex.org/W2019196986","doi":"https://doi.org/10.1145/1363686.1363934","mag":"2019196986"},"language":"en","primary_location":{"id":"doi:10.1145/1363686.1363934","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1363686.1363934","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2008 ACM symposium on Applied computing","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5064838942","display_name":"Zonghua Zhang","orcid":"https://orcid.org/0000-0002-6645-6647"},"institutions":[{"id":"https://openalex.org/I2279609970","display_name":"Universit\u00e9 de Lille","ror":"https://ror.org/02kzqn938","country_code":"FR","type":"education","lineage":["https://openalex.org/I2279609970"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Zonghua Zhang","raw_affiliation_strings":["University of Sciences and Technologies of Lille, Cedex, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Sciences and Technologies of Lille, Cedex, France","institution_ids":["https://openalex.org/I2279609970"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086784630","display_name":"Farid Na\u00eft\u2010Abdesselam","orcid":"https://orcid.org/0000-0002-5042-5387"},"institutions":[{"id":"https://openalex.org/I2279609970","display_name":"Universit\u00e9 de Lille","ror":"https://ror.org/02kzqn938","country_code":"FR","type":"education","lineage":["https://openalex.org/I2279609970"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Farid Na\u00eft-Abdesselam","raw_affiliation_strings":["University of Sciences and Technologies of Lille, Cedex, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Sciences and Technologies of Lille, Cedex, France","institution_ids":["https://openalex.org/I2279609970"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083787204","display_name":"Xiaodong Lin","orcid":"https://orcid.org/0000-0001-8916-6645"},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Xiaodong Lin","raw_affiliation_strings":["University of Waterloo, ON, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Waterloo, ON, Canada","institution_ids":["https://openalex.org/I151746483"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089628133","display_name":"Pin\u2010Han Ho","orcid":"https://orcid.org/0000-0002-0717-1481"},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Pin-Han Ho","raw_affiliation_strings":["University of Waterloo, ON, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Waterloo, ON, Canada","institution_ids":["https://openalex.org/I151746483"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.2679,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.78911995,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1069","last_page":"1074"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9241999983787537,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7346212267875671},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6282530426979065},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.6095523238182068},{"id":"https://openalex.org/keywords/trace","display_name":"TRACE (psycholinguistics)","score":0.5788962244987488},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.5094473958015442},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.4779489040374756},{"id":"https://openalex.org/keywords/enterprise-private-network","display_name":"Enterprise private network","score":0.47575753927230835},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.46216604113578796},{"id":"https://openalex.org/keywords/risk-management","display_name":"Risk management","score":0.45810484886169434}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7346212267875671},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6282530426979065},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.6095523238182068},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.5788962244987488},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.5094473958015442},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.4779489040374756},{"id":"https://openalex.org/C149859251","wikidata":"https://www.wikidata.org/wiki/Q483426","display_name":"Enterprise private network","level":2,"score":0.47575753927230835},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.46216604113578796},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.45810484886169434},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1363686.1363934","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1363686.1363934","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2008 ACM symposium on Applied computing","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6800000071525574,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W1570912402","https://openalex.org/W1800991598","https://openalex.org/W1856750239","https://openalex.org/W1964246683","https://openalex.org/W1968909445","https://openalex.org/W1988918299","https://openalex.org/W2010714243","https://openalex.org/W2097476502","https://openalex.org/W2108376255","https://openalex.org/W2112257544","https://openalex.org/W2117210791","https://openalex.org/W2121805588","https://openalex.org/W2146440914","https://openalex.org/W2146949683","https://openalex.org/W2159443917","https://openalex.org/W2170590256","https://openalex.org/W2171297690","https://openalex.org/W2894665359","https://openalex.org/W3003288124","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W2362500257","https://openalex.org/W2944763794","https://openalex.org/W2363032787","https://openalex.org/W36040077","https://openalex.org/W2390013638","https://openalex.org/W2349495853","https://openalex.org/W2379463196","https://openalex.org/W2361530254","https://openalex.org/W2349199213","https://openalex.org/W2360657778"],"abstract_inverted_index":{"A":[0],"challenging":[1],"issue":[2],"in":[3,159],"Enterprise":[4],"Risk":[5],"Management":[6],"(ERM)":[7],"is":[8,69,95,112],"to":[9,15,86,99,115,155],"quantify":[10],"network":[11,129,134],"attributes":[12],"with":[13],"respect":[14],"security.":[16],"This":[17],"paper":[18],"presents":[19],"a":[20,72,78,82,92,136,151],"model-based":[21],"semi-quantitative":[22],"approach":[23,38,132],"for":[24,55,139],"evaluating":[25],"the":[26,88,101,126,144],"security":[27,120],"of":[28,32,84,128],"enterprise":[29],"networks.":[30],"Instead":[31],"focusing":[33],"on":[34],"particular":[35],"attacks/intrusions,":[36],"our":[37],"aims":[39],"at":[40],"characterizing":[41],"attacker":[42,46,80],"behaviors":[43],"by":[44,124],"examining":[45],"intent,":[47,103],"objective,":[48],"and":[49,91,105,107,161],"attack":[50,58,63,117],"consequence,":[51],"which":[52],"are":[53],"essential":[54],"enforcing":[56],"an":[57,62],"scheme.":[59],"In":[60],"particular,":[61],"scheme":[64],"involving":[65],"several":[66],"atomic":[67],"attacks":[68],"formulated":[70],"as":[71,97],"partially":[73],"observable":[74],"Markov":[75],"decision":[76],"process:":[77],"goal-directed":[79],"takes":[81],"sequence":[83],"actions":[85],"achieve":[87],"malicious":[89],"goal,":[90],"reward":[93],"signal":[94],"used":[96,114],"feedback":[98],"integrate":[100],"attacker's":[102],"cost":[104],"objective":[106],"guides":[108],"its":[109,157,163],"advances.":[110],"It":[111],"also":[113],"measure":[116],"impact,":[118],"from":[119],"analyst's":[121],"economic":[122],"perspective,":[123],"considering":[125],"significance":[127],"assets.":[130],"Our":[131],"provides":[133],"administrators":[135],"useful":[137],"tool":[138],"performing":[140],"better":[141],"countermeasures":[142],"during":[143],"risk":[145],"management":[146],"process.":[147],"We":[148],"carry":[149],"out":[150],"real":[152],"trace":[153],"study":[154],"demonstrate":[156],"feasibility":[158],"practice":[160],"validate":[162],"performance.":[164]},"counts_by_year":[{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":1},{"year":2013,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}