{"id":"https://openalex.org/W2122385484","doi":"https://doi.org/10.1145/1842752.1842787","title":"Formal approach to security metrics.","display_name":"Formal approach to security metrics.","publication_year":2010,"publication_date":"2010-08-23","ids":{"openalex":"https://openalex.org/W2122385484","doi":"https://doi.org/10.1145/1842752.1842787","mag":"2122385484"},"language":"en","primary_location":{"id":"doi:10.1145/1842752.1842787","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1842752.1842787","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Fourth European Conference on Software Architecture: Companion Volume","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5074193860","display_name":"Leanid Krautsevich","orcid":null},"institutions":[{"id":"https://openalex.org/I108290504","display_name":"University of Pisa","ror":"https://ror.org/03ad39j10","country_code":"IT","type":"education","lineage":["https://openalex.org/I108290504"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Leanid Krautsevich","raw_affiliation_strings":["University of Pisa, Pisa, Italy","University of Pisa, Pisa, Italy ("],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Pisa, Pisa, Italy","institution_ids":["https://openalex.org/I108290504"]},{"raw_affiliation_string":"University of Pisa, Pisa, Italy (","institution_ids":["https://openalex.org/I108290504"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101546784","display_name":"Fabio Martinelli","orcid":"https://orcid.org/0000-0002-6721-9395"},"institutions":[{"id":"https://openalex.org/I4210130157","display_name":"Institute of Informatics and Telematics","ror":"https://ror.org/02gdcn153","country_code":"IT","type":"facility","lineage":["https://openalex.org/I4210130157","https://openalex.org/I4210155236"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Fabio Martinelli","raw_affiliation_strings":["Istituto di Informatica e Telematica, Consiglio Nazionale delle Ricerche, Pisa, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Istituto di Informatica e Telematica, Consiglio Nazionale delle Ricerche, Pisa, Italy","institution_ids":["https://openalex.org/I4210130157"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016282493","display_name":"Artsiom Yautsiukhin","orcid":"https://orcid.org/0000-0002-8493-1915"},"institutions":[{"id":"https://openalex.org/I4210130157","display_name":"Institute of Informatics and Telematics","ror":"https://ror.org/02gdcn153","country_code":"IT","type":"facility","lineage":["https://openalex.org/I4210130157","https://openalex.org/I4210155236"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Artsiom Yautsiukhin","raw_affiliation_strings":["Istituto di Informatica e Telematica, Consiglio Nazionale delle Ricerche, Pisa, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Istituto di Informatica e Telematica, Consiglio Nazionale delle Ricerche, Pisa, Italy","institution_ids":["https://openalex.org/I4210130157"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":14.3627,"has_fulltext":false,"cited_by_count":29,"citation_normalized_percentile":{"value":0.98834267,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"162","last_page":"169"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9937999844551086,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.9883000254631042,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7885566353797913},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.6615042686462402},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.5435507297515869},{"id":"https://openalex.org/keywords/relation","display_name":"Relation (database)","score":0.5406538844108582},{"id":"https://openalex.org/keywords/metric","display_name":"Metric (unit)","score":0.5088062882423401},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.486460417509079},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.4585350453853607},{"id":"https://openalex.org/keywords/security-testing","display_name":"Security testing","score":0.45192405581474304},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.3683895170688629},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.17389920353889465},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.11201032996177673}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7885566353797913},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.6615042686462402},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.5435507297515869},{"id":"https://openalex.org/C25343380","wikidata":"https://www.wikidata.org/wiki/Q277521","display_name":"Relation (database)","level":2,"score":0.5406538844108582},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.5088062882423401},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.486460417509079},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.4585350453853607},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.45192405581474304},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.3683895170688629},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.17389920353889465},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.11201032996177673},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C21547014","wikidata":"https://www.wikidata.org/wiki/Q1423657","display_name":"Operations management","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1842752.1842787","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1842752.1842787","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Fourth European Conference on Software Architecture: Companion Volume","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6100000143051147,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W111010178","https://openalex.org/W299675352","https://openalex.org/W591862760","https://openalex.org/W1198752617","https://openalex.org/W1508191694","https://openalex.org/W1587970460","https://openalex.org/W1596940357","https://openalex.org/W1813357990","https://openalex.org/W1970629474","https://openalex.org/W1980203329","https://openalex.org/W2001958591","https://openalex.org/W2009470162","https://openalex.org/W2038634581","https://openalex.org/W2044839138","https://openalex.org/W2064553186","https://openalex.org/W2106613101","https://openalex.org/W2117210791","https://openalex.org/W2129586531","https://openalex.org/W2132704120","https://openalex.org/W2141289698","https://openalex.org/W2149439200","https://openalex.org/W2151369956","https://openalex.org/W2168659663","https://openalex.org/W2169941120","https://openalex.org/W2369295637","https://openalex.org/W4285719527","https://openalex.org/W6635703843"],"related_works":["https://openalex.org/W88610236","https://openalex.org/W2165898552","https://openalex.org/W2020340787","https://openalex.org/W2418642600","https://openalex.org/W2290724697","https://openalex.org/W2188404590","https://openalex.org/W2187486724","https://openalex.org/W1811024770","https://openalex.org/W2353177111","https://openalex.org/W2907868081"],"abstract_inverted_index":{"Security":[0],"metrics":[1,29,89],"are":[2],"the":[3],"tools":[4],"for":[5,20,37,87,94,115],"providing":[6],"correct":[7],"and":[8,50,109,118],"up-to-date":[9],"information":[10,17],"about":[11],"a":[12,25,48,74,83,116],"state":[13],"of":[14,27,39,42,120],"security.":[15,40,78],"This":[16],"is":[18,61,81],"essential":[19],"managing":[21],"security":[22,28,121],"efficiently.":[23],"Although":[24],"number":[26],"were":[30],"proposed":[31],"we":[32,44,70,100,103],"still":[33],"need":[34],"reliable":[35],"ways":[36],"assessment":[38],"First":[41],"all,":[43],"do":[45],"not":[46],"have":[47],"widely-accepted":[49],"unambiguous":[51],"definition":[52],"which":[53,90],"defines":[54],"what":[55],"it":[56],"means":[57],"that":[58,73],"one":[59],"system":[60],"more":[106],"secure":[107],"than":[64],"another":[65],"one.":[66],"Without":[67],"this":[68,98],"knowledge":[69],"cannot":[71],"show":[72],"metric":[75],"really":[76],"measures":[77],"Second,":[79],"there":[80],"no":[82],"universal":[84],"formal":[85,113],"model":[86,114],"all":[88],"can":[91,104],"be":[92],"used":[93],"rigourous":[95],"analysis.":[96],"In":[97],"paper":[99],"investigate":[101],"how":[102],"define":[105],"relation":[108],"propose":[110],"our":[111],"basic":[112],"description":[117],"analysis":[119],"metrics.":[122]},"counts_by_year":[{"year":2024,"cited_by_count":3},{"year":2022,"cited_by_count":1},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":3},{"year":2013,"cited_by_count":3},{"year":2012,"cited_by_count":3}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}