The security risk of a network against unknown zero day attacks has been considered as
something unmeasurable since software flaws are less predictable than hardware faults and …

Cybersecurity risk modeling and pricing are becoming a spotlight in actuarial science and
operational research. This paper pertains to the analysis of the cybersecurity risks involved …

We propose a new methodology for obtaining a quantitative measurement of the risk
reduction achieved when a control system is modified with the intent to improve cyber …

Perceiving and understanding cyber-attacks can be a difficult task. This problem is widely
recognized and welldocumented, and more effective techniques are needed to aid cyber …

We study the problem of allocating limited security countermeasures to protect network data
from cyber-attacks, for scenarios modeled by Bayesian attack graphs. We consider multi …

This paper proposes a novel approach to help computing system administrators in
monitoring the security of their systems. This approach is based on modeling the system as …

Attack trees are widely used to represent threat scenarios in a succinct and intuitive manner,
suitable for conveying security information to non-experts. The manual construction of such …

基于攻击图模型的网络安全评估研究Study of network security evaluation based on attack
graph model Page 1 2007 年3 月 Journal on Communications March 2007 第28 卷第3 期 通信 …

To provide insight on system security and aid decision-makers, we propose the ADversary
VIew Security Evaluation (ADVISE) method to quantitatively evaluate the strength of a …

It has long been recognized that it can be tedious and even infeasible for system
administrators to figure out critical security problems residing in full attack graphs, even for …