<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01490710</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-21T02:43:20+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">An Approach to Select Cost-Effective Risk Countermeasures</title>
            <author role="aut">
              <persName>
                <forename type="first">Le</forename>
                <forename type="middle">Sang</forename>
                <surname>Tran</surname>
              </persName>
              <email type="md5">ad25c767a6f9bc7e9b8b52ab37321099</email>
              <email type="domain">disi.unitn.it</email>
              <idno type="idhal" notation="numeric">1004152</idno>
              <idno type="halauthorid" notation="string">1149617-1004152</idno>
              <affiliation ref="#struct-304024"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Bjørnar</forename>
                <surname>Solhaug</surname>
              </persName>
              <email type="md5">38ac805a28c2515d24eafc5e95cfc6f5</email>
              <email type="domain">sintef.no</email>
              <idno type="idhal" notation="numeric">1004153</idno>
              <idno type="halauthorid" notation="string">1149618-1004153</idno>
              <affiliation ref="#struct-86695"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Ketil</forename>
                <surname>Stølen</surname>
              </persName>
              <email type="md5">710d9494dbf6d1727f3b010518a7dcb3</email>
              <email type="domain">sintef.no</email>
              <idno type="idhal" notation="numeric">1004154</idno>
              <idno type="halauthorid" notation="string">1149619-1004154</idno>
              <affiliation ref="#struct-86695"/>
              <affiliation ref="#struct-50791"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hal</forename>
                <surname>Ifip</surname>
              </persName>
              <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2017-03-15 17:15:57</date>
              <date type="whenModified">2024-03-19 09:34:06</date>
              <date type="whenReleased">2017-03-16 09:24:24</date>
              <date type="whenProduced">2013-07-15</date>
              <date type="whenEndEmbargoed">2016-01-01</date>
              <ref type="file" target="https://inria.hal.science/hal-01490710v1/document">
                <date notBefore="2016-01-01"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-01490710v1/file/978-3-642-39256-6_18_Chapter.pdf" id="file-1490710-1555033">
                <date notBefore="2016-01-01"/>
              </ref>
              <ref type="externalLink" target="https://link.springer.com/content/pdf/10.1007%2F978-3-642-39256-6_18.pdf"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="200187">
                <persName>
                  <forename>Hal</forename>
                  <surname>Ifip</surname>
                </persName>
                <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01490710</idno>
            <idno type="halUri">https://inria.hal.science/hal-01490710</idno>
            <idno type="halBibtex">tran:hal-01490710</idno>
            <idno type="halRefHtml">&lt;i&gt;27th Data and Applications Security and Privacy (DBSec)&lt;/i&gt;, Jul 2013, Newark, NJ, United States. pp.266-273, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-642-39256-6_18"&gt;&amp;#x27E8;10.1007/978-3-642-39256-6_18&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">27th Data and Applications Security and Privacy (DBSec), Jul 2013, Newark, NJ, United States. pp.266-273, &amp;#x27E8;10.1007/978-3-642-39256-6_18&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-1490710-1555033"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="IFIP-LNCS" corresp="IFIP">IFIP - Lecture Notes in Computer Science</idno>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-WG" corresp="IFIP">Working Groups</idno>
            <idno type="stamp" n="IFIP-TC11" corresp="IFIP-TC">IFIP TC11: Security and Privacy Protection in Information Processing Systems</idno>
            <idno type="stamp" n="IFIP-WG11-3" corresp="IFIP-WG">WG 11.3: Data and Application Security and Privacy</idno>
            <idno type="stamp" n="IFIP-DBSEC" corresp="IFIP">DBSec: Data and Applications Security</idno>
            <idno type="stamp" n="IFIP-LNCS-7964" corresp="IFIP-LNCS">Data and Applications Security and Privacy XXVII</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Part 7: Short Papers</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">An Approach to Select Cost-Effective Risk Countermeasures</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Le</forename>
                    <forename type="middle">Sang</forename>
                    <surname>Tran</surname>
                  </persName>
                  <email type="md5">ad25c767a6f9bc7e9b8b52ab37321099</email>
                  <email type="domain">disi.unitn.it</email>
                  <idno type="idhal" notation="numeric">1004152</idno>
                  <idno type="halauthorid" notation="string">1149617-1004152</idno>
                  <affiliation ref="#struct-304024"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Bjørnar</forename>
                    <surname>Solhaug</surname>
                  </persName>
                  <email type="md5">38ac805a28c2515d24eafc5e95cfc6f5</email>
                  <email type="domain">sintef.no</email>
                  <idno type="idhal" notation="numeric">1004153</idno>
                  <idno type="halauthorid" notation="string">1149618-1004153</idno>
                  <affiliation ref="#struct-86695"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Ketil</forename>
                    <surname>Stølen</surname>
                  </persName>
                  <email type="md5">710d9494dbf6d1727f3b010518a7dcb3</email>
                  <email type="domain">sintef.no</email>
                  <idno type="idhal" notation="numeric">1004154</idno>
                  <idno type="halauthorid" notation="string">1149619-1004154</idno>
                  <affiliation ref="#struct-86695"/>
                  <affiliation ref="#struct-50791"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">Lecture Notes in Computer Science</title>
                <meeting>
                  <title>27th Data and Applications Security and Privacy (DBSec)</title>
                  <date type="start">2013-07-15</date>
                  <date type="end">2013-07-17</date>
                  <settlement>Newark, NJ</settlement>
                  <country key="US">United States</country>
                </meeting>
                <editor>Lingyu Wang</editor>
                <editor>Basit Shafiq</editor>
                <imprint>
                  <publisher>Springer</publisher>
                  <biblScope unit="serie">Data and Applications Security and Privacy XXVII</biblScope>
                  <biblScope unit="volume">LNCS-7964</biblScope>
                  <biblScope unit="pp">266-273</biblScope>
                  <date type="datePub">2013</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-642-39256-6_18</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Security risk analysis should be conducted regularly to maintain an acceptable level of security. In principle, all risks that are unacceptable according to the predefined criteria should be mitigated. However, risk mitigation comes at a cost, and only the countermeasures that cost-efficiently mitigate risks should be implemented. This paper presents an approach to integrate the countermeasure cost-benefit assessment into the risk analysis and to provide decision makers with the necessary decision support. The approach comes with the necessary modeling support, a calculus for reasoning about the countermeasure cost and effect, as well as means for visualization of the results to aid decision makers.</p>
            </abstract>
            <particDesc>
              <org type="consortium">TC 11</org>
              <org type="consortium">WG 11.3</org>
            </particDesc>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-304024" status="VALID">
          <idno type="ROR">https://ror.org/05trd4x28</idno>
          <orgName>Università degli Studi di Trento =  University of Trento</orgName>
          <orgName type="acronym">UNITN</orgName>
          <desc>
            <address>
              <addrLine>via Calepina, 14 - I-38122 Trento</addrLine>
              <country key="IT"/>
            </address>
            <ref type="url">http://www.unitn.it/</ref>
          </desc>
        </org>
        <org type="regrouplaboratory" xml:id="struct-86695" status="VALID">
          <orgName>Information and Communication Technology [Oslo]</orgName>
          <orgName type="acronym">SINTEF - ICT</orgName>
          <desc>
            <address>
              <addrLine>P.O.Box 4760 Sluppen NO-7465 Trondheim, Norway</addrLine>
              <country key="NO"/>
            </address>
            <ref type="url">http://www.sintef.no/home/Information-and-Communication-Technology-ICT/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-556764" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-50791" status="VALID">
          <idno type="IdRef">028101138</idno>
          <idno type="ROR">https://ror.org/01xtthb56</idno>
          <orgName>University of Oslo</orgName>
          <orgName type="acronym">UiO</orgName>
          <desc>
            <address>
              <addrLine>P.O 1072 Blindern 0316 Oslo</addrLine>
              <country key="NO"/>
            </address>
            <ref type="url">http://www.uio.no/english/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-556764" status="VALID">
          <idno type="ROR">https://ror.org/01f677e56</idno>
          <orgName>Stiftelsen for INdustriell og TEknisk Forskning Digital [Trondheim]</orgName>
          <orgName type="acronym">SINTEF Digital</orgName>
          <desc>
            <address>
              <addrLine>SINTEF, P.O. Box 4760 Torgarden, NO-7465 Trondheim, Norway</addrLine>
              <country key="NO"/>
            </address>
            <ref type="url">https://www.sintef.no/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>