This paper presents and discusses the current state of Graphical Security Models (GrSM), in
terms of four GrSM phases:(i) generation,(ii) representation,(iii) evaluation, and (iv) …

Capturing the uncertain aspects in cyber security is important for security analysis in
enterprise networks. However, there has been insufficient effort in studying what modeling …

The increasing complexity of today's computer systems, together with the rapid emergence
of novel vulnerabilities, make security hardening a formidable challenge for security …

Cybersecurity threats have surged in the past decades. Experts agree that conventional
security measures will soon not be enough to stop the propagation of more sophisticated …

We consider interdependent systems managed by multiple defenders that are under the
threat of stepping-stone attacks. We model such systems via game-theoretic models and …

Critical infrastructures are increasingly reliant on information and communications
technology (ICT) for more efficient operations, which, at the same time, exposes them to …

This paper introduces an autonomic model-based cyber security management approach for
the Internet of Things (IoT) ecosystems. The approach aims at realizing a self-protecting …

Intrusion analysis and incident management remains a difficult problem in practical network
security defense. The root cause of this problem is the large rate of false positives in the …

How do people distribute defenses over a directed network attack graph, where they must
defend a critical node? This question is of interest to computer scientists, information …

We model the behavioral biases of human decision-making in securing interdependent
systems and show that such behavioral decision-making leads to a suboptimal pattern of …