It is without doubt that today the volume and sophistication of cyber attacks keeps
consistently growing, militating an endless arm race between attackers and defenders. In …

Abstract Information is a perennially significant business asset in all organizations.
Therefore, it must be protected as any other valuable asset. This is the objective of …

Designing an efficient defense framework is challenging with respect to a network's
complexity, widespread sophisticated attacks, attackers' ability, and the diversity of security …

Appropriate response strategies against new and ongoing cyber attacks must be able to
reduce risks down to acceptable levels, without sacrificing a mission for security. Existing …

Connecting critical infrastructure assets to the network is absolutely essential for modern
industries. In contrast to the apparent advantages, network connectivity exposes other …

The impact quantification of attacks and security countermeasures is an active research in
the information and communications technology domain. Supporters of the Return On …

Generating fine-grained response policies is a fundamental problem for Intrusion Response
Systems (IRSs). Although existing schemes determine countermeasures and defense points …

We propose a mitigation model that evaluates individual and combined countermeasures
against multi-step cyber-attack scenarios. The goal is to anticipate the actions of an attacker …

Finding adequate responses to ongoing attacks on ICT systems is a pertinacious problem
and requires assessments from different perpendicular viewpoints. However, current …

Cost-sensitive metrics have been widely used during the past years as financial metrics that
quantify the monetary costs and benefits of security investments, assess risks, and select …