The DOI matches its Crossref record, with a small difference in title or year; 2 of the 2 references it cites were found in a registry or an index.
Computer Security Incident Handling Guide : Recommendations of the National Institute of Standards and Technology
Open accessAbstract
This publication has been developed by NIST to further its statutory responsibilities under the Federal Information Security Management Act (FISMA), Public Law (P.L.) 107-347.NIST is responsible for developing information security standards and guidelines, including minimum requirements for Federal information systems, but such standards and guidelines shall not apply to national security systems without the express approval of appropriate Federal officials exercising policy authority over such systems.This guideline is consistent with the requirements of the Office of Management and Budget (OMB) Circular A-130, Section 8b(3), Securing Agency Information Systems, as analyzed in Circular A-130, Appendix IV: Analysis of Key Sections.Supplemental information is provided in Circular A-130, Appendix III, Security of Federal Automated Information Resources.Nothing in this publication should be taken to contradict the standards and guidelines made mandatory and binding on Federal agencies by the Secretary of Commerce under statutory authority.Nor should these guidelines be interpreted as altering or superseding the existing authorities of the Secretary of Commerce, Director of the OMB, or any other Federal official.This publication may be used by nongovernmental organizations on a voluntary basis and is not subject to copyright in the United States.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“When these logs serve as evidence in forensic investigations, compliance audits, or incident-response workflows, their integrity is not merely desirable; it is a hard prerequisite (Kebande and Venter, 2017; Cichonski et al., 2012; Kent et al., 2006; International Organization for Standardization, 2012).”
From Lightweight Tamper-Evident Log Integrity Verification for IoT Edge Environments: A Merkle Tree Pipeline with Adaptive Chunking (2026) · cites this paper as Cichonski et al., 2012
In the citing paper
“The standards serve as frameworks to develop secure networks and can be used as guides and best practice definitions [84].”
From Impact, Vulnerabilities, and Mitigation Strategies for Cyber-Secure Critical Infrastructure. (2023) · cites this paper as [84]
Citations
Cites
Guide to test, training, and exercise programs for IT plans and capabilities
Grance, T., Nolan, T., Burke, K., Dudley, R., White, G., & Good, T. (2006) · doi:10.6028/nist.sp.800-84 · Cited by 41
Self-citationRecommended security controls for federal information systems and organizations
Ross, R., Katzke, S. W., Johnson, L. A., Swanson, M., Stoneburner, G., & Rogers, G. (2007) · doi:10.6028/nist.sp.800-53r2 · Cited by 8
Cited by
Sorted by citations
Guide to Industrial Control Systems (ICS) Security
Stouffer, K., Pillitteri, V., Lightman, S., Abrams, M., & Hahn, A. (2015) · doi:10.6028/nist.sp.800-82r2 · Cited by 1,377
Studying users' computer security behavior: A health belief perspective
Ng, B.-Y., Kankanhalli, A., & Xu, Y. C. (2008) · Decision Support Systems · doi:10.1016/j.dss.2008.11.010 · Cited by 588
Security and Privacy Controls for Information Systems and Organizations
Joint Task Force Interagency Working Group (2020) · doi:10.6028/nist.sp.800-53r5 · Cited by 419
A survey of cyber security management in industrial control systems
Knowles, W., Prince, D., Hutchison, D., Disso, J. F. P., & Jones, K. (2015) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2015.02.002 · Cited by 344
Data-Driven Cybersecurity Incident Prediction: A Survey
Sun, N., Zhang, J., Rimba, P., Gao, S., Zhang, L. Y., & Xiang, Y. (2018) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2018.2885561 · Cited by 343
Guide to Operational Technology (OT) security
Stouffer, K., Pease, M., Tang, C., Zimmerman, T., Pillitteri, V., Lightman, S., Hahn, A., Saravia, S., Sherule, A., & Thompson, M. (2023) · doi:10.6028/nist.sp.800-82r3 · Cited by 315
Securing the Internet of Things: Challenges, threats and solutions
Radoglou Grammatikis, P. I., Sarigiannidis, P. G., & Moscholios, I. D. (2019) · Internet of Things · doi:10.1016/j.iot.2018.11.003 · Cited by 308
Guide to Cyber Threat Information Sharing
Johnson, C. S., Badger, M. L., Waltermire, D., Snyder, J., & Skorupka, C. (2016) · doi:10.6028/nist.sp.800-150 · Cited by 293
A survey of information security incident handling in the cloud
Rahman, N. H. A., & Choo, K. R. (2014) · Computers & Security · doi:10.1016/j.cose.2014.11.006 · Cited by 201
Coronavirus and Migration: Analysis of Human Mobility and the Spread of Covid-19
Sirkeci, İ., & Yüceşahin, M. M. (2020) · MIGRATION LETTERS · doi:10.33182/ml.v17i2.935 · Cited by 164
Incident response recommendations and considerations for cybersecurity risk management :
Nelson, A. J., Rekhi, S. J., Souppaya, M., & Scarfone, K. A. (2025) · doi:10.6028/nist.sp.800-61r3 · Cited by 141
Self-citationRufini, A., Agostini, M., Grespi, F., Tomasini, R., Sayan, B. S., Niklison-Chirou, M. V., Conforti, F., Velletri, T., Mastino, A., Mak, T. W., et al. (2011) · Genes & Cancer · doi:10.1177/1947601911408890 · Cited by 151
Parvin, N., Joo, S., Jung, J. H., & Mandal, T. K. (2025) · Nanomaterials · doi:10.3390/nano15120895 · Cited by 131
Application container security guide
Souppaya, M., Morello, J., & Scarfone, K. A. (2017) · doi:10.6028/nist.sp.800-190 · Cited by 120
Self-citationSmart Substation Communications and Cybersecurity: A Comprehensive Survey
Gaspar, J., Cruz, T., Lam, C., & Simões, P. (2023) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2023.3305468 · Cited by 114
Radanliev, P. (2024) · Journal of Cyber Security Technology · doi:10.1080/23742917.2024.2312671 · Cited by 108
Organizational science and cybersecurity: abundant opportunities for research at the interface
Dalal, R. S., Howard, D., Bennett, R. J., Posey, C., Zaccaro, S. J., & Brummel, B. J. (2021) · Journal of Business and Psychology · doi:10.1007/s10869-021-09732-9 · Cited by 121
Salvi, A., Spagnoletti, P., & Noori, N. S. (2021) · Computers & Security · doi:10.1016/j.cose.2021.102507 · Cited by 103
Information security incident management: Current practice as reported in the literature
Tøndel, I. A., Line, M. B., & Jaatun, M. G. (2014) · Computers & Security · doi:10.1016/j.cose.2014.05.003 · Cited by 102
A Common Process Model for Incident Response and Computer Forensics.
Freiling, F., & Schwittay, B. (2007) · Cited by 95
A case analysis of information systems and security incident responses
Ahmad, A., Maynard, S. B., & Shanks, G. (2015) · International Journal of Information Management · doi:10.1016/j.ijinfomgt.2015.08.001 · Cited by 94
Taxonomy of Challenges for Digital Forensics
Karie, N. M., & Venter, H. S. (2015) · Journal of Forensic Sciences · doi:10.1111/1556-4029.12809 · Cited by 83
Guide for cybersecurity event recovery
Bartock, M., Cichonski, J., Souppaya, M., Smith, M., Witte, G., & Scarfone, K. A. (2016) · doi:10.6028/nist.sp.800-184 · Cited by 81
Self-citationIdentifying factors of “organizational information security management”
Singh, A., Gupta, M. P., & Ojha, A. (2014) · Journal of Enterprise Information Management · doi:10.1108/jeim-07-2013-0052 · Cited by 77
A Semantic Approach to Cloud Security and Compliance
Hendre, A., & Joshi, K. P. (2015) · IEEE ... International Conference on Cloud Computing · doi:10.1109/cloud.2015.157 · Cited by 75
On Incident Handling and Response: A state-of-the-art approach
Mitropoulos, S., Patsos, D., & Douligeris, C. (2006) · Computers & Security · doi:10.1016/j.cose.2005.09.006 · Cited by 73
Protecting controlled unclassified information in nonfederal systems and organizations
Ross, R., Pillitteri, V. Y., Dempsey, K. L., Riddle, M., & Guissanie, G. (2020) · doi:10.6028/nist.sp.800-171r2 · Cited by 73
Information Security Risk Assessment Methods in Cloud Computing: Comprehensive Review
Ali, T., Al-Khalidi, M., & Al-Zaidi, R. (2024) · Journal of Computer Information Systems · doi:10.1080/08874417.2024.2329985 · Cited by 72
Enhancing Cybersecurity in Smart Grids: False Data Injection and Its Mitigation
Unsal, D. B., Ustun, T. S., Hussain, S. M. S., & Önen, A. (2021) · Energies · doi:10.3390/en14092657 · Cited by 64
Empirical Measurement of Perceived Privacy Risk
Bhatia, J., & Breaux, T. D. (2018) · ACM Transactions on Computer-Human Interaction · doi:10.1145/3267808 · Cited by 72
Internet Denial of Service Attacks and Defense Mechanisms
Abliz, M. (2011) · Cited by 59
Shielding IoT against Cyber‐Attacks: An Event‐Based Approach Using SIEM
López, D. D., Uribe, M. A. B., Cely, C. P. S., Torres, A. V., Guataquira, N. M., de Castro, S. K. V., Nespoli, P., & Mármol, F. G. (2018) · Wireless Communications and Mobile Computing · doi:10.1155/2018/3029638 · Cited by 59
Cyber incident response and planning: a flexible approach
Shinde, N., & Kulkarni, P. (2021) · Computer Fraud & Security · doi:10.1016/s1361-3723(21)00009-9 · Cited by 58
EARS to cyber incidents in health care
Jalali, M. S., Russell, B., Razak, S., & Gordon, W. J. (2018) · Journal of the American Medical Informatics Association · doi:10.1093/jamia/ocy148 · Cited by 58
A framework for incident response management in the petroleum industry
Jaatun, M. G., Albrechtsen, E., Line, M. B., Tøndel, I. A., & Longva, O. H. (2009) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2009.02.004 · Cited by 57
CRUSOE: A toolset for cyber situational awareness and decision support in incident handling
Husák, M., Sadlek, L., Špaček, S., Laštovička, M., Javorník, M., & Komárková, J. (2022) · Computers & Security · doi:10.1016/j.cose.2022.102609 · Cited by 56
SOTER: A Playbook for Cybersecurity Incident Management
Onwubiko, C., & Ouazzane, K. (2020) · IEEE Transactions on Engineering Management · doi:10.1109/tem.2020.2979832 · Cited by 56
Naseer, H., Desouza, K. C., Maynard, S. B., & Ahmad, A. (2023) · European Journal of Information Systems · doi:10.1080/0960085x.2023.2257168 · Cited by 64
Integrated Network and Security Operation Center: A Systematic Analysis
Shahjee, D., & Ware, N. R. (2022) · IEEE Access · doi:10.1109/access.2022.3157738 · Cited by 52
Efijemue, O., Obunadike, C., Olisah, S., Esther, T., Somto, K.-A., Odooh, C., & Ejimofor, I. (2023) · International Journal on Soft Computing · doi:10.5121/ijsc.2023.14301 · Cited by 52
How to exchange security events? Overview and evaluation of formats and protocols
Steinberger, J., Sperotto, A., Golling, M., & Baier, H. (2015) · IFIP/IEEE International Symposium on Integrated Network Management (IM) · doi:10.1109/inm.2015.7140300 · Cited by 52
The impact of repeated data breach events on organisations’ market value
Schatz, D., & Bashroush, R. (2016) · Information and Computer Security · doi:10.1108/ics-03-2014-0020 · Cited by 51
Cyber resilience recovery model to combat zero-day malware attacks
Tran, H. M., Campos-Náñez, E., Fomin, P., & Wasek, J. S. (2016) · Computers & Security · doi:10.1016/j.cose.2016.05.001 · Cited by 51
Small Business Information Security: The Fundamentals
Paulsen, C., & Toth, P. (2016) · doi:10.6028/nist.ir.7621r1 · Cited by 50
Cognitive Triaging of Phishing AttacksPreprint
van der Heijden, A., & Allodi, L. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1905.02162 · Cited by 49
Karabacak, B., Yildirim, S. O., & Baykal, N. (2016) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2016.10.001 · Cited by 48
A comparative analysis of incident reporting formats
Menges, F., & Pernul, G. (2017) · Computers & Security · doi:10.1016/j.cose.2017.10.009 · Cited by 46
Zhao, Y., Huang, L., Smidts, C. S., & Zhu, Q. (2020) · Reliability Engineering & System Safety · doi:10.1016/j.ress.2020.106878 · Cited by 46
Naseer, A., Naseer, H., Ahmad, A., Maynard, S. B., & Siddiqui, A. M. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103525 · Cited by 48
Patterson, C. M., Nurse, J. R. C., & Franqueira, V. N. L. (2024) · Computers & Security · doi:10.1016/j.cose.2023.103699 · Cited by 45
Denial of service attacks, defences and research challenges
Zlomislić, V., Fertalj, K., & Sruk, V. (2017) · Cluster Computing · doi:10.1007/s10586-017-0730-x · Cited by 45
A Formal Approach Enabling Risk-Aware Business Process Modeling and Simulation
Tjoa, S. (2010) · IEEE Transactions on Services Computing · doi:10.1109/tsc.2010.17 · Cited by 45
Computer Security Incident Response Team Effectiveness: A Needs Assessment
van der Kleij, R., Kleinhuis, G., & Young, H. (2017) · Frontiers in Psychology · doi:10.3389/fpsyg.2017.02179 · Cited by 44
A Comprehensive Review and Assessment of Cybersecurity Vulnerability Detection Methodologies
Bennouk, K., Aali, N. A., Idrissi, Y. E. B. E., Sebai, B., Faroukhi, A. Z., & Mahouachi, D. (2024) · Journal of Cybersecurity and Privacy · doi:10.3390/jcp4040040 · Cited by 48
Malware in the future? Forecasting of analyst detection of cyber events
Bakdash, J. Z., Hutchinson, S. E., Zaroukian, E. G., Marusich, L. R., Thirumuruganathan, S., Sample, C., Hoffman, B., & Das, G. (2018) · Journal of Cybersecurity · doi:10.1093/cybsec/tyy007 · Cited by 45
A New Network Model for Cyber Threat Intelligence Sharing using Blockchain Technology
Homan, D., Shiel, I., & Thorpe, C. (2019) · IFIP International Conference on New Technologies, Mobility and Security (NTMS) · doi:10.1109/ntms.2019.8763853 · Cited by 44
Managing the Inevitable – A Maturity Model to Establish Incident Response Management Capabilities
Bitzer, M., Häckel, B. S., Leuthe, D., Ott, J., Stahl, B., & Strobel, J. (2022) · Computers & Security · doi:10.1016/j.cose.2022.103050 · Cited by 38
CSIRT s and Global Cybersecurity: How Technical Experts Support Science Diplomacy
Tanczer, L. M., Brass, I., & Carr, M. (2018) · Global Policy · doi:10.1111/1758-5899.12625 · Cited by 38
Linking Cybersecurity and Accounting: An Event, Impact, Response Framework
Janvrin, D. J., & Wang, T. (2021) · Accounting Horizons · doi:10.2308/horizons-2020-101 · Cited by 37
Shedden, P., Ahmad, A., & Ruighaver, A. B. (2010) · Australasian Journal of Paramedicine · doi:10.4225/75/57b6771734788 · Cited by 37
Real-time behavioral DGA detection through machine learning
Bisio, F., Saeli, S., Lombardo, P., Bernardi, D., Perotti, A., & Massa, D. (2017) · IEEE International Carnahan Conference on Security Technology (ICCST) · doi:10.1109/ccst.2017.8167790 · Cited by 37
eMUD: Enhanced Manufacturer Usage Description for IoT Botnets Prevention on Home WiFi Routers
Sajjad, S. M., Yousaf, M., Afzal, H., & Mufti, M. R. (2020) · IEEE Access · doi:10.1109/access.2020.3022272 · Cited by 36
Bartnes, M., Moe, N. B., & Heegaard, P. E. (2016) · Computers & Security · doi:10.1016/j.cose.2016.05.004 · Cited by 47
(2015) · Elsevier eBooks · doi:10.1016/c2014-0-00456-x · Cited by 35
An overview of computer forensics
Dixon, P. D. (2005) · IEEE Potentials · doi:10.1109/mp.2005.1594001 · Cited by 35
Thangavelu, M., Krishnaswamy, V., & Sharma, M. K. (2021) · Computers & Security · doi:10.1016/j.cose.2021.102401 · Cited by 40
A Novel Intrusion Detection and Prevention Scheme for Network Coding-Enabled Mobile Small Cells
Parsamehr, R., Esfahani, A., Μαντάς, Γ., Radwan, A., Mumtaz, S., Rodrı́guez, J., & Martínez-Ortega, J.-F. (2019) · IEEE Transactions on Computational Social Systems · doi:10.1109/tcss.2019.2949153 · Cited by 33
A Review of Security Awareness Approaches With Special Emphasis on Gamification
Sharif, K. H., & Ameen, S. Y. (2020) · International Conference on Advanced Science and Engineering (ICOASE) · doi:10.1109/icoase51841.2020.9436595 · Cited by 33
Agile incident response (AIR): Improving the incident response process in healthcare
He, Y., Zamani, E. D., Lloyd, S., & Luo, C. (2021) · International Journal of Information Management · doi:10.1016/j.ijinfomgt.2021.102435 · Cited by 33
Evaluating SLIM-based human error probability for ECDIS cybersecurity in maritime
Kayışoğlu, G., Bolat, P., & Tam, K. (2022) · Journal of Navigation · doi:10.1017/s0373463322000534 · Cited by 33
Mitigating cybercrimes in an evolving organizational landscape
Yeboah-Ofori, A., & Opoku-Boateng, F. A. (2023) · Continuity & Resilience Review · doi:10.1108/crr-09-2022-0017 · Cited by 33
Grispos, G., Glisson, W. B., & Storer, T. (2019) · Hawaii International Conference on System Sciences (HICSS) · doi:10.24251/hicss.2019.859 · Cited by 33
Security analysis of SDN controller-based DHCP services and attack mitigation with DHCPguard
Tok, M. S., & Demirci, M. (2021) · Computers & Security · doi:10.1016/j.cose.2021.102394 · Cited by 31
Khurana, H., Basney, J., Bakht, M., Freemon, M., Welch, V., & Butler, R. (2009) · Identity and Trust on the Internet · doi:10.1145/1527017.1527023 · Cited by 31
He, Y., & Johnson, C. (2017) · Informatics for Health and Social Care · doi:10.1080/17538157.2016.1255629 · Cited by 30
Papastergiou, S., Mouratidis, H., & Kalogeraki, E.-M. (2019) · Communications in computer and information science · doi:10.1007/978-3-030-20257-6_41 · Cited by 30
Papastergiou, S., Mouratidis, H., & Kalogeraki, E.-M. (2020) · Evolving Systems · doi:10.1007/s12530-020-09335-4 · Cited by 30
The THREAT-ARREST Cyber Range Platform
Hatzivasilis, G., Ioannidis, S., Smyrlis, M., Spanoudakis, G., Frati, F., Braghin, C., Damiani, E., Koshutanski, H., Tsakirakis, G., Hildebrandt, T., et al. (2021) · IEEE International Conference on Cyber Security and Resilience (CSR) · doi:10.1109/csr51186.2021.9527963 · Cited by 30
Ross, R., Pillitteri, V. Y., Guissanie, G., WAGNER, R., Graubart, R. D., & Bodeau, D. J. (2021) · doi:10.6028/nist.sp.800-172 · Cited by 33
Chu, A. M. Y., & So, M. K. P. (2020) · Sustainability · doi:10.3390/su12083163 · Cited by 29
Schlette, D., Vielberth, M., & Pernul, G. (2021) · Computers & Security · doi:10.1016/j.cose.2021.102482 · Cited by 29
Studying Analysts’ Data Triage Operations in Cyber Defense Situational Analysis
Zhong, C., Yen, J., Liu, P., Erbacher, R., Garneau, C. J., & Chen, B. (2017) · Lecture notes in computer science · doi:10.1007/978-3-319-61152-5_6 · Cited by 31
Security Incident Response Criteria: A Practitioner's PerspectivePreprint
Grispos, G., Glisson, W. B., & Storer, T. (2015) · arXiv (Cornell University) · doi:10.48550/arxiv.1508.02526 · Cited by 28
Analytical Review of Cybersecurity for Embedded Systems
Aloseel, A., He, H., Shaw, C., & Khan, M. (2020) · IEEE Access · doi:10.1109/access.2020.3045972 · Cited by 27
Implications of traffic signal cybersecurity on potential deliberate traffic disruptions
Perrine, K. A., Levin, M. W., Yahia, C. N., Duell, M., & Boyles, S. D. (2018) · Transportation Research Part A Policy and Practice · doi:10.1016/j.tra.2018.12.009 · Cited by 26
Human Capital Acquisition in Response to Data Breaches
Bana, S., Brynjolfsson, E., Jin, W., Steffen, S., & Wang, X. (2024) · MIS Quarterly · doi:10.25300/misq/2024/18352 · Cited by 26
Waelchli, S., & Walter, Y. (2024) · Computers & Security · doi:10.1016/j.cose.2024.104137 · Cited by 25
Parsamehr, R., Μαντάς, Γ., Rodrı́guez, J., & Martínez-Ortega, J.-F. (2020) · IEEE Access · doi:10.1109/access.2020.2977428 · Cited by 25
Detection and Blockchain‐Based Collaborative Mitigation of Internet of Things Botnets
Sajjad, S. M., Mufti, M. R., Yousaf, M., Aslam, W., Alshahrani, R., Nemri, N., Afzal, H., Khan, M. A., & Chen, C. (2022) · Wireless Communications and Mobile Computing · doi:10.1155/2022/1194899 · Cited by 25
Development and validation of technique to measure cyber situation awareness
Lif, P., Granåsen, M., & Sommestad, T. (2017) · International Conference on Cyber Situational Awareness, Data Analytics and Assessment (CyberSA) · doi:10.1109/cybersa.2017.8073388 · Cited by 25
Protecting controlled unclassified information in nonfederal systems and organizations
Ross, R., & Pillitteri, V. (2024) · doi:10.6028/nist.sp.800-171r3 · Cited by 33
Try to esCAPE from Cybersecurity Incidents! A Technology-Enhanced Educational Approach
Pirta-Dreimane, R., Brilingaitė, A., Roponena, E., Parish, K., Grabis, J., Lugo, R. G., & Bonders, M. (2024) · Technology Knowledge and Learning · doi:10.1007/s10758-024-09769-8 · Cited by 24
Review of Human Decision-making during Computer Security Incident Analysis
Spring, J., & Illari, P. K. (2021) · Digital Threats Research and Practice · doi:10.1145/3427787 · Cited by 24
Enterprise Architecture Frameworks Assessment: Capabilities, Cyber Security and Resiliency Review
Al-Turkistani, H. F., Aldobaian, S., & Latif, R. (2021) · International Conference on Artificial Intelligence and Data Analytics (CAIDA) · doi:10.1109/caida51941.2021.9425343 · Cited by 24
The Incident Object Description Exchange Format Version 2
Danyliw, R. (2016) · doi:10.17487/rfc7970 · Cited by 24
Privacy Risk in Cybersecurity Data Sharing
Bhatia, J., Breaux, T. D., Friedberg, L., Hibshi, H., & Smullen, D. (2016) · doi:10.1145/2994539.2994541 · Cited by 23
Enhancing security incident response follow-up efforts with lightweight agile retrospectives
Grispos, G., Glisson, W. B., & Storer, T. (2017) · Digital Investigation · doi:10.1016/j.diin.2017.07.006 · Cited by 23
Cyber Crisis Management: A Decision-Support Framework for Disclosing Security Incident Information
Kulikova, O., Heil, R., van den Berg, J., & Pieters, W. (2012) · doi:10.1109/cybersecurity.2012.20 · Cited by 25
Lightman, S., Suloway, T., & Brule, J. (2022) · doi:10.6028/nist.ir.8401.ipd · Cited by 23
Securing the Digital Supply Chain Cyber Threats and Vulnerabilities
Sindiramutty, S. R., Jhanjhi, N. Z., Tan, C. E., Khan, N. A., Shah, B., & Gaur, L. (2023) · Advances in logistics, operations, and management science book series · doi:10.4018/978-1-6684-7625-3.ch007 · Cited by 22
Metadata
- Authors
- Cichonski, P., Millar, T., Grance, T., & Scarfone, K.
- Affiliations
- National Institute of Standards and Technology (US)
- United States Department of Homeland Security (US)
- ORCID
- Scarfone, Karen
- Published
- 2012-08
- OpenAlex
- W2617200927
- Cited by
- 485
- References
- 2
- Citations by year
- 2026: 25 · 2025: 37 · 2024: 38 · 2023: 33 · 2022: 43 · 2021: 44 · 2020: 40 · 2019: 26 · 2018: 26 · 2017: 21 · 2016: 20 · 2015: 31 · 2014: 23 · 2013: 11 · 2012: 19
- Type
- report
- Language
- en
- Update notices
- new_version (2025-04-03)
- Open access
- gold
- doi.org
- Licence
- public-domain
- Topics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Social Sciences › Business, Management and Accounting › Management Information Systems › Information Technology Governance and Strategy
- Keywords
- incident response, information security management, FISMA, NIST guidelines, federal information systems, information security standards
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
