From Reconnaissance to Response: Quantitative Risk Parameterization and Game Theoretic Containment in Modern Enterprise Attack

arXiv:2609.36485 · cs.GT, cs.CR, cs.SY, eess.SY · Submitted 2026-09-29 · Read on arXiv

cs.GT, cs.CR, cs.SY, eess.SY

Submitted: 2026-09-29

Updated: 2026-10-08

Terminology

Factor Analysis of Information Risk — 6× in this paper
Cyber Kill Chain — 5× in this paper
Actor — 3× in this paper · explained in 3 episodes
Core — 3× in this paper · explained in 2 episodes
Fidelity — 3× in this paper · explained in 2 episodes
Intrusion Detection System — 3× in this paper
Common Vulnerability Scoring System — 2× in this paper
Grounding — 2× in this paper · explained in 3 episodes
Loss Event Frequency — 2× in this paper
Security Information and Event Management — 2× in this paper
Threat Event Frequency — 2× in this paper
User Interaction — 2× in this paper
Annual Loss Exposure — 1× in this paper
Automated Security Orchestration and Response — 1× in this paper
Bayesian Inference — 1× in this paper · explained in 5 episodes
Fingerprinting — 1× in this paper · explained in 2 episodes
Forum of Incident Response and Security Teams — 1× in this paper
Nash Equilibrium — 1× in this paper · explained in 2 episodes
Privilege Required — 1× in this paper

Sources

GTI-mSEMP Framework : A Proposed Framework to Simulate Malware Propagation with Inclusion of Attacker-Defender Strategy

Related papers