<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01954421</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-21T11:40:09+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Assessing Attack Impact on Business Processes by Interconnecting Attack Graphs and Entity Dependency Graphs</title>
            <author role="aut">
              <persName>
                <forename type="first">Chen</forename>
                <surname>Cao</surname>
              </persName>
              <email type="md5">21e56544e9b01afa3bfbefe6835ff132</email>
              <email type="domain">mails.ucas.ac.cn</email>
              <idno type="idhal" notation="numeric">1040512</idno>
              <idno type="halauthorid" notation="string">1105266-1040512</idno>
              <affiliation ref="#struct-452398"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Lun-Pin</forename>
                <surname>Yuan</surname>
              </persName>
              <email type="md5">c9bd7080babd67430063e2cd32ba8468</email>
              <email type="domain">psu.edu</email>
              <idno type="idhal" notation="numeric">1040513</idno>
              <idno type="halauthorid" notation="string">1479321-1040513</idno>
              <affiliation ref="#struct-452398"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Anoop</forename>
                <surname>Singhal</surname>
              </persName>
              <email type="md5">78176e4b183f9be546063b8929d3d033</email>
              <email type="domain">nist.gov</email>
              <idno type="idhal" notation="numeric">1022671</idno>
              <idno type="halauthorid" notation="string">1119619-1022671</idno>
              <affiliation ref="#struct-139751"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Peng</forename>
                <surname>Liu</surname>
              </persName>
              <email type="md5">93527d199b17cdf47b8a9a092e3eb282</email>
              <email type="domain">ist.psu.edu</email>
              <idno type="idhal" notation="numeric">1026634</idno>
              <idno type="halauthorid" notation="string">600990-1026634</idno>
              <affiliation ref="#struct-452398"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Xiaoyan</forename>
                <surname>Sun</surname>
              </persName>
              <email type="md5">26f5a1fec97ef8f0f79f9e31cd1c6cf2</email>
              <email type="domain">csus.edu</email>
              <idno type="idhal" notation="numeric">1026633</idno>
              <idno type="halauthorid" notation="string">1298062-1026633</idno>
              <affiliation ref="#struct-54974"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Sencun</forename>
                <surname>Zhu</surname>
              </persName>
              <email type="md5">2d5e4751806a53bf06cdd3139f9c5415</email>
              <email type="domain">cse.psu.edu</email>
              <idno type="idhal" notation="numeric">978056</idno>
              <idno type="halauthorid" notation="string">1005865-978056</idno>
              <affiliation ref="#struct-452398"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hal</forename>
                <surname>Ifip</surname>
              </persName>
              <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2018-12-13 16:04:01</date>
              <date type="whenModified">2025-12-24 11:40:35</date>
              <date type="whenReleased">2018-12-13 16:06:48</date>
              <date type="whenProduced">2018-07-16</date>
              <date type="whenEndEmbargoed">2021-01-01</date>
              <ref type="file" target="https://inria.hal.science/hal-01954421v1/document">
                <date notBefore="2021-01-01"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-01954421v1/file/470961_1_En_21_Chapter.pdf" id="file-1954421-1979041">
                <date notBefore="2021-01-01"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="200187">
                <persName>
                  <forename>Hal</forename>
                  <surname>Ifip</surname>
                </persName>
                <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01954421</idno>
            <idno type="halUri">https://inria.hal.science/hal-01954421</idno>
            <idno type="halBibtex">cao:hal-01954421</idno>
            <idno type="halRefHtml">&lt;i&gt;32th IFIP Annual Conference on Data and Applications Security and Privacy (DBSec)&lt;/i&gt;, Jul 2018, Bergamo, Italy. pp.330-348, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-319-95729-6_21"&gt;&amp;#x27E8;10.1007/978-3-319-95729-6_21&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">32th IFIP Annual Conference on Data and Applications Security and Privacy (DBSec), Jul 2018, Bergamo, Italy. pp.330-348, &amp;#x27E8;10.1007/978-3-319-95729-6_21&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-1954421-1979041"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="IFIP-LNCS" corresp="IFIP">IFIP - Lecture Notes in Computer Science</idno>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IRISA-D7">GESTION DES DONNÉES ET DE LA CONNAISSANCE </idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-WG" corresp="IFIP">Working Groups</idno>
            <idno type="stamp" n="IFIP-TC11" corresp="IFIP-TC">IFIP TC11: Security and Privacy Protection in Information Processing Systems</idno>
            <idno type="stamp" n="IFIP-WG11-3" corresp="IFIP-WG">WG 11.3: Data and Application Security and Privacy</idno>
            <idno type="stamp" n="IFIP-DBSEC" corresp="IFIP">DBSec: Data and Applications Security</idno>
            <idno type="stamp" n="IFIP-LNCS-10980" corresp="IFIP-LNCS">32th IFIP Annual Conference on Data and Applications Security and Privacy (DBSec)</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Part 7: Networked Systems</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Assessing Attack Impact on Business Processes by Interconnecting Attack Graphs and Entity Dependency Graphs</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Chen</forename>
                    <surname>Cao</surname>
                  </persName>
                  <email type="md5">21e56544e9b01afa3bfbefe6835ff132</email>
                  <email type="domain">mails.ucas.ac.cn</email>
                  <idno type="idhal" notation="numeric">1040512</idno>
                  <idno type="halauthorid" notation="string">1105266-1040512</idno>
                  <affiliation ref="#struct-452398"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Lun-Pin</forename>
                    <surname>Yuan</surname>
                  </persName>
                  <email type="md5">c9bd7080babd67430063e2cd32ba8468</email>
                  <email type="domain">psu.edu</email>
                  <idno type="idhal" notation="numeric">1040513</idno>
                  <idno type="halauthorid" notation="string">1479321-1040513</idno>
                  <affiliation ref="#struct-452398"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Anoop</forename>
                    <surname>Singhal</surname>
                  </persName>
                  <email type="md5">78176e4b183f9be546063b8929d3d033</email>
                  <email type="domain">nist.gov</email>
                  <idno type="idhal" notation="numeric">1022671</idno>
                  <idno type="halauthorid" notation="string">1119619-1022671</idno>
                  <affiliation ref="#struct-139751"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Peng</forename>
                    <surname>Liu</surname>
                  </persName>
                  <email type="md5">93527d199b17cdf47b8a9a092e3eb282</email>
                  <email type="domain">ist.psu.edu</email>
                  <idno type="idhal" notation="numeric">1026634</idno>
                  <idno type="halauthorid" notation="string">600990-1026634</idno>
                  <affiliation ref="#struct-452398"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Xiaoyan</forename>
                    <surname>Sun</surname>
                  </persName>
                  <email type="md5">26f5a1fec97ef8f0f79f9e31cd1c6cf2</email>
                  <email type="domain">csus.edu</email>
                  <idno type="idhal" notation="numeric">1026633</idno>
                  <idno type="halauthorid" notation="string">1298062-1026633</idno>
                  <affiliation ref="#struct-54974"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Sencun</forename>
                    <surname>Zhu</surname>
                  </persName>
                  <email type="md5">2d5e4751806a53bf06cdd3139f9c5415</email>
                  <email type="domain">cse.psu.edu</email>
                  <idno type="idhal" notation="numeric">978056</idno>
                  <idno type="halauthorid" notation="string">1005865-978056</idno>
                  <affiliation ref="#struct-452398"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">Lecture Notes in Computer Science</title>
                <meeting>
                  <title>32th IFIP Annual Conference on Data and Applications Security and Privacy (DBSec)</title>
                  <date type="start">2018-07-16</date>
                  <date type="end">2018-07-18</date>
                  <settlement>Bergamo</settlement>
                  <country key="IT">Italy</country>
                </meeting>
                <editor>Florian Kerschbaum</editor>
                <editor>Stefano Paraboschi</editor>
                <imprint>
                  <publisher>Springer International Publishing</publisher>
                  <biblScope unit="serie">Data and Applications Security and Privacy XXXII</biblScope>
                  <biblScope unit="volume">LNCS-10980</biblScope>
                  <biblScope unit="pp">330-348</biblScope>
                  <date type="datePub">2018</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-319-95729-6_21</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Cyber-defense and cyber-resilience techniques sometimes fail in defeating cyber-attacks. One of the primary causes is the ineffectiveness of business process impact assessment in the enterprise network. In this paper, we propose a new business process impact assessment method, which measures the impact of an attack towards a business-process-support enterprise network and produces a numerical score for this impact. The key idea is that all attacks are performed by exploiting vulnerabilities in the enterprise network. So the impact scores for business processes are the function result of the severity of the vulnerabilities and the relations between vulnerabilities and business processes. This paper conducts a case study systematically and the result shows the effectiveness of our method.</p>
            </abstract>
            <particDesc>
              <org type="consortium">TC 11</org>
              <org type="consortium">WG 11.3</org>
            </particDesc>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-452398" status="VALID">
          <idno type="ISNI">0000 0004 5907 5867</idno>
          <idno type="ROR">https://ror.org/04p491231</idno>
          <orgName>Pennsylvania State University [State College, PA]</orgName>
          <orgName type="acronym">Penn State</orgName>
          <desc>
            <address>
              <addrLine>201 Old Main, University Park, Pennsylvania 16802</addrLine>
              <country key="US"/>
            </address>
            <ref type="url">http://www.psu.edu/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-567057" type="direct"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-139751" status="VALID">
          <orgName>Computer Security Division</orgName>
          <orgName type="acronym">NIST</orgName>
          <desc>
            <address>
              <addrLine>ITL - Computer Security Division 100 Bureau Drive, M/S 8930 Gaithersburg, MD 20899-8930</addrLine>
              <country key="US"/>
            </address>
            <ref type="url">http://www.nist.gov/itl/csd/index.cfm</ref>
          </desc>
          <listRelation>
            <relation active="#struct-183043" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-54974" status="VALID">
          <idno type="ROR">https://ror.org/005f5hv41</idno>
          <orgName>California State University [Northridge]</orgName>
          <orgName type="acronym">CSUN</orgName>
          <desc>
            <address>
              <addrLine>18111 Nordhoff Street, Northridge, CA 91330</addrLine>
              <country key="US"/>
            </address>
            <ref type="url">http://www.csun.edu/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-567057" status="VALID">
          <orgName>Penn State System</orgName>
          <desc>
            <address>
              <addrLine>Pennsylvania, PA, USA, Etats-Unis</addrLine>
              <country key="US"/>
            </address>
            <ref type="url">https://www.psu.edu/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-183043" status="VALID">
          <idno type="ROR">https://ror.org/05xpvk416</idno>
          <orgName>National Institute of Standards and Technology [Gaithersburg]</orgName>
          <orgName type="acronym">NIST</orgName>
          <desc>
            <address>
              <addrLine>100 Bureau Drive, Stop 1070, Gaithersburg, MD 20899-1070</addrLine>
              <country key="US"/>
            </address>
            <ref type="url">http://www.nist.gov</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>