A Bayesian network model for likelihood estimations of acquirement of critical software vulnerabilities and exploits

No abstract is available for this paper.

• Publication year

  2015

• Venue

  Information and Software Technology

• Publication date

  2015-02-01

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1016/J.INFSOF.2014.07.001
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Markets for Cybercrime Tools and Stolen Data: Hackers' Bazaar

  2014cited by this paper
• A Large-Scale Study of the Time Required to Compromise a Computer System

  2014cited by this paper
• Effort Estimates on Web Application Vulnerability Discovery

  2013cited by this paper
• A Vulnerability Life Cycle-Based Security Modeling and Evaluation Approach

  2013cited by this paper
• The Cyber Security Modeling Language: A Tool for Assessing the Vulnerability of Enterprise System Architectures

  2013cited by this paper
• Empirical Analysis of System-Level Vulnerability Metrics through Actual Attacks

  2012cited by this paper
• Before we knew it: an empirical study of zero-day attacks in the real world

  2012cited by this paper
• Effort Estimates for Vulnerability Discovery Projects

  2012cited by this paper
• A large scale exploratory analysis of software vulnerability life cycles

  2012cited by this paper
• Common Platform Enumeration (CPE) - Specification

  2011cited by this paper
• Cybersecurity Management in the States: The Emerging Role of Chief Information Security Officers

  2010cited by this paper
• Modeling Modern Network Attacks and Countermeasures Using Attack Graphs

  2009cited by this paper
• Vulnerability Black Markets: Empirical Evidence and Scenario Simulation

  2009cited by this paper
• TU Delft expert judgment data base

  2008cited by this paper
• Application of Vulnerability Discovery Models to Major Operating Systems

  2008cited by this paper
• Vulnerability Discovery Modeling Using Weibull Distribution

  2008cited by this paper
• Improving vulnerability discovery models

  2007cited by this paper
• Vulnerability Discovery in Multi-Version Software Systems

  2007cited by this paper
• The Legitimate vulnerability market: the secretive world of 0-day exploit sales

  2007cited by this paper
• Time-to-Compromise Model for Cyber Risk Reduction Estimation

  2006cited by this paper
• Common Vulnerability Scoring System

  2006cited by this paper
• Modeling the vulnerability discovery process

  2005cited by this paper
• Enterprise Vulnerability Management and Its Role in Information Security Management

  2005cited by this paper
• Model selection and multimodel inference : a practical information-theoretic approach

  2003cited by this paper
• Software Security for Open-Source Systems

  2003cited by this paper
• Software process: a roadmap

  2000cited by this paper
• Mail survey response behavior: A conceptualization of motivating factors and an empirical study

  1998cited by this paper
• A Quantitative Model of the Security Intrusion Process Based on Attacker Behavior

  1997cited by this paper
• Bayesian Network Classifiers

  1997cited by this paper
• Software Engineering Economics

  1993cited by this paper
• Introduction to computer security

  1992cited by this paper
• Experts in Uncertainty: Opinion and Subjective Probability in Science

  1991cited by this paper
• Factor analysis and AIC

  1987cited by this paper
• Management : a systems approach

  1972cited by this paper
• Coefficient alpha and the internal structure of tests

  1951cited by this paper
• Acm Sigsoft Software Engineering Notes Vol 17 No 4 Foundations for the Study of Software Architecture

  year unknowncited by this paper

• Cyber Evaluation and Management Toolkit (CEMT): Face Validity of Model-Based Cybersecurity Decision Making

  2024cites this paper
• Bayesian network model to distinguish between intentional attacks and accidental technical failures: a case study of floodgates

  2021cites this paper
• A Hybrid Asset-Based IT Risk Management Framework

  2021cites this paper
• Game Theoretical Model for Cybersecurity Risk Assessment of Industrial Control Systems

  2021cites this paper
• A 20-year mapping of Bayesian belief networks in software project management

  2021cites this paper
• A selective ensemble model for cognitive cybersecurity analysis

  2021cites this paper
• Study on Software Vulnerability Characteristics and Its Identification Method

  2020cites this paper
• Towards Machine Learning Enabled Automatic Design of IT-Network Architectures

  2019cites this paper
• Unknown Vulnerability Risk Assessment Based on Directed Graph Models: A Survey

  2019influential citation
• Cyber Security Inference Based on a Two-Level Bayesian Network Framework

  2018cites this paper
• Estimating software robustness in relation to input validation vulnerabilities using Bayesian networks

  2017cites this paper
• Bayesian Network Models in Cyber Security: A Systematic Review

  2017cites this paper
• Joint safety and security modeling for risk assessment in cyber physical systems

  2016cites this paper
• Trading exploits online: A preliminary case study

  2016cites this paper
• Threat modelling of historical attacks with CySeMoL

  2015cites this paper
• Mills Model Based Evaluation of Security of Software Systems

  2015cites this paper
• P<inline-formula><tex-math>$^{2}$</tex-math><alternatives> <inline-graphic xlink:type="simple" xlink:href="holm-ieq1-2382574.gif"/></alternatives></inline-formula>CySeMoL: Predictive, Probabilistic Cyber Security Modeling Language

  2015influential citation
• Securi CAD by Foreseeti: A CAD Tool for Enterprise Cyber Security Management

  2015cites this paper
• A Manual for the Cyber Security Modeling Language (simplified version)

  2013cites this paper