{"id":"https://openalex.org/W7128200862","doi":"https://doi.org/10.1186/s42162-026-00640-x","title":"Integrated risk scoring and exploit prediction for cyber-physical power system vulnerabilities","display_name":"Integrated risk scoring and exploit prediction for cyber-physical power system vulnerabilities","publication_year":2026,"publication_date":"2026-02-06","ids":{"openalex":"https://openalex.org/W7128200862","doi":"https://doi.org/10.1186/s42162-026-00640-x"},"language":"en","primary_location":{"id":"doi:10.1186/s42162-026-00640-x","doi":"https://doi.org/10.1186/s42162-026-00640-x","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42162-026-00640-x","pdf_url":null,"source":{"id":"https://openalex.org/S3035173479","display_name":"Energy Informatics","issn_l":"2520-8942","issn":["2520-8942"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj","jufo-1","norway-1","poland-20","russia-white-list-1"],"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Energy Informatics","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1186/s42162-026-00640-x","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5082200006","display_name":"Firdous Kausar","orcid":"https://orcid.org/0000-0001-8922-549X","observed_orcids":["https://orcid.org/0000-0001-8922-549X"]},"institutions":[{"id":"https://openalex.org/I118073183","display_name":"Meharry Medical College","ror":"https://ror.org/00k63dq23","country_code":"US","type":"education","lineage":["https://openalex.org/I118073183"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Firdous Kausar","raw_affiliation_strings":["Department of Computer Science and Data Science, School of Applied Computational Sciences, Meharry Medical College, Nashville, TN, 37208, USA"],"raw_orcid":"https://orcid.org/0000-0001-8922-549X","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Data Science, School of Applied Computational Sciences, Meharry Medical College, Nashville, TN, 37208, USA","institution_ids":["https://openalex.org/I118073183"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121529097","display_name":"Lisette Batiste","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I118073183","display_name":"Meharry Medical College","ror":"https://ror.org/00k63dq23","country_code":"US","type":"education","lineage":["https://openalex.org/I118073183"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lisette Batiste","raw_affiliation_strings":["Department of Computer Science and Data Science, School of Applied Computational Sciences, Meharry Medical College, Nashville, TN, 37208, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Data Science, School of Applied Computational Sciences, Meharry Medical College, Nashville, TN, 37208, USA","institution_ids":["https://openalex.org/I118073183"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021253516","display_name":"Asmah Muallem","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I118073183","display_name":"Meharry Medical College","ror":"https://ror.org/00k63dq23","country_code":"US","type":"education","lineage":["https://openalex.org/I118073183"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Asmah Muallem","raw_affiliation_strings":["Department of Computer Science and Data Science, School of Applied Computational Sciences, Meharry Medical College, Nashville, TN, 37208, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Data Science, School of Applied Computational Sciences, Meharry Medical College, Nashville, TN, 37208, USA","institution_ids":["https://openalex.org/I118073183"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102009927","display_name":"Sajid Hussain","orcid":"https://orcid.org/0000-0002-2972-7049","observed_orcids":["https://orcid.org/0000-0002-2972-7049"]},"institutions":[{"id":"https://openalex.org/I118073183","display_name":"Meharry Medical College","ror":"https://ror.org/00k63dq23","country_code":"US","type":"education","lineage":["https://openalex.org/I118073183"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sajid Hussain","raw_affiliation_strings":["Department of Computer Science and Data Science, School of Applied Computational Sciences, Meharry Medical College, Nashville, TN, 37208, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Data Science, School of Applied Computational Sciences, Meharry Medical College, Nashville, TN, 37208, USA","institution_ids":["https://openalex.org/I118073183"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5082200006"],"corresponding_institution_ids":["https://openalex.org/I118073183"],"apc_list":{"value":1490,"currency":"USD","value_usd":1490},"apc_paid":{"value":1490,"currency":"USD","value_usd":1490},"fwci":14.9385,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.98635439,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":"9","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9297000169754028,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9297000169754028,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.026900000870227814,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.015399999916553497,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cyber-physical-power-systems","display_name":"cyber-physical power systems","score":0.9990000128746033},{"id":"https://openalex.org/keywords/vulnerability-prioritization","display_name":"vulnerability prioritization","score":0.906000018119812},{"id":"https://openalex.org/keywords/vulnerability-remediation","display_name":"vulnerability remediation","score":0.7170000076293945},{"id":"https://openalex.org/keywords/protective-relays","display_name":"protective relays","score":0.7160000205039978},{"id":"https://openalex.org/keywords/threat-intelligence","display_name":"threat intelligence","score":0.6050000190734863},{"id":"https://openalex.org/keywords/vulnerability-management","display_name":"vulnerability management","score":0.6330000162124634}],"concepts":[{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.8980000019073486},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7434999942779541},{"id":"https://openalex.org/C2777120189","wikidata":"https://www.wikidata.org/wiki/Q780067","display_name":"Triage","level":2,"score":0.63919997215271},{"id":"https://openalex.org/C2777615720","wikidata":"https://www.wikidata.org/wiki/Q11888847","display_name":"Prioritization","level":2,"score":0.6014000177383423},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5871999859809875},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5680999755859375},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.5616000294685364},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5511999726295471},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.5002999901771545},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.41179999709129333},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.37770000100135803},{"id":"https://openalex.org/C4679612","wikidata":"https://www.wikidata.org/wiki/Q866298","display_name":"Aggregate (composite)","level":2,"score":0.36570000648498535},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.34470000863075256},{"id":"https://openalex.org/C107327155","wikidata":"https://www.wikidata.org/wiki/Q330268","display_name":"Decision support system","level":2,"score":0.3296000063419342},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3287000060081482},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3172999918460846},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.31360000371932983},{"id":"https://openalex.org/C189430467","wikidata":"https://www.wikidata.org/wiki/Q7293293","display_name":"Ranking (information retrieval)","level":2,"score":0.30160000920295715},{"id":"https://openalex.org/C29852176","wikidata":"https://www.wikidata.org/wiki/Q373338","display_name":"Critical infrastructure","level":2,"score":0.2809000015258789},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2709999978542328},{"id":"https://openalex.org/C89227174","wikidata":"https://www.wikidata.org/wiki/Q2388981","display_name":"Electric power system","level":3,"score":0.25529998540878296}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1186/s42162-026-00640-x","doi":"https://doi.org/10.1186/s42162-026-00640-x","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42162-026-00640-x","pdf_url":null,"source":{"id":"https://openalex.org/S3035173479","display_name":"Energy Informatics","issn_l":"2520-8942","issn":["2520-8942"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj","jufo-1","norway-1","poland-20","russia-white-list-1"],"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Energy Informatics","raw_type":"journal-article"},{"id":"doi:10.21203/rs.3.rs-8244471/v1","doi":"https://doi.org/10.21203/rs.3.rs-8244471/v1","is_oa":true,"landing_page_url":"https://doi.org/10.21203/rs.3.rs-8244471/v1","pdf_url":"https://www.researchsquare.com/article/rs-8244471/latest.pdf","source":{"id":"https://openalex.org/S4306525896","display_name":"Research Square","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"Research Square","raw_type":"posted-content"},{"id":"pmh:oai:doaj.org/article:6c0d93142609453888bb2c749608e332","doi":null,"is_oa":true,"landing_page_url":"https://doaj.org/article/6c0d93142609453888bb2c749608e332","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Energy Informatics, Vol 9, Iss 1 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s42162-026-00640-x","doi":"https://doi.org/10.1186/s42162-026-00640-x","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42162-026-00640-x","pdf_url":null,"source":{"id":"https://openalex.org/S3035173479","display_name":"Energy Informatics","issn_l":"2520-8942","issn":["2520-8942"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj","jufo-1","norway-1","poland-20","russia-white-list-1"],"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Energy Informatics","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.7207000255584717,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"},{"id":"https://openalex.org/F4320332361","display_name":"Office of Environmental Management","ror":"https://ror.org/00km40770"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7128200862.pdf","grobid_xml":"https://content.openalex.org/works/W7128200862.grobid-xml"},"referenced_works_count":15,"referenced_works":["https://openalex.org/W2077937403","https://openalex.org/W4313003916","https://openalex.org/W4383333747","https://openalex.org/W4385227077","https://openalex.org/W4385412300","https://openalex.org/W4393189899","https://openalex.org/W4401878957","https://openalex.org/W4402125230","https://openalex.org/W4402587370","https://openalex.org/W4403266259","https://openalex.org/W4406015421","https://openalex.org/W4406745700","https://openalex.org/W4407697161","https://openalex.org/W4409323668","https://openalex.org/W4416549283"],"related_works":["https://openalex.org/W3128940659","https://openalex.org/W4311776410","https://openalex.org/W3112011743","https://openalex.org/W4283070891","https://openalex.org/W4410393598","https://openalex.org/W3089020591","https://openalex.org/W4226322799","https://openalex.org/W3003593383","https://openalex.org/W4405804599","https://openalex.org/W4287599718"],"abstract_inverted_index":{"Abstract":[0],"Cyber-Physical":[1],"Power":[2],"Systems":[3],"(CPPS)":[4],"face":[5],"a":[6,30,81,96,143,251],"rapidly":[7],"growing":[8],"number":[9],"of":[10,106,118,125,186,200,212],"cybersecurity":[11],"vulnerabilities,":[12],"yet":[13,237],"no":[14],"structured":[15,110,128],"dataset":[16,245],"or":[17,205],"unified":[18],"risk":[19,43,98,140,169,247],"scoring":[20,248],"method":[21],"exists":[22],"to":[23,40,94,164,189,215],"prioritize":[24,45],"these":[25],"CVEs.":[26],"This":[27],"paper":[28],"presents":[29],"cohesive":[31],"methodology":[32],"for":[33,100,139,168,180,254],"collecting,":[34],"enriching,":[35],"and":[36,44,57,74,90,103,112,132,171,218,231,246],"modeling":[37],"CPPS-related":[38],"CVEs":[39,52,201],"predict":[41],"their":[42],"remediation.":[46],"We":[47,78],"aggregate":[48],"over":[49],"4,030":[50],"ICS-relevant":[51],"from":[53],"public":[54],"sources":[55],"(2020--2025)":[56],"enrich":[58],"each":[59,101],"with":[60,136,175],"industry-standard":[61],"severity":[62,149],"(CVSS),":[63],"exploitation":[64],"data":[65],"(CISA":[66],"Known":[67],"Exploited":[68],"Vulnerabilities,":[69],"Exploit":[70],"Prediction":[71],"Scoring":[72],"System),":[73],"contextual":[75],"ICS":[76],"attributes.":[77],"then":[79],"develop":[80],"two-stage":[82],"machine":[83],"learning":[84],"pipeline":[85,249],"using":[86],"gradient-boosted":[87],"decision":[88],"trees":[89],"linear":[91],"regression":[92,170],"models":[93,158],"estimate":[95],"''CPPS":[97],"score''":[99],"CVE":[102,113],"the":[104,126,156,190,193,213],"probability":[105],"exploitation,":[107],"leveraging":[108],"both":[109],"features":[111],"textual":[114],"descriptions.":[115],"The":[116,243],"novelty":[117],"our":[119],"work":[120],"lies":[121],"in":[122,224,239,258],"building":[123],"one":[124],"first":[127],"CPPS":[129,191],"vulnerability":[130,256],"datasets":[131],"integrating":[133],"OT-specific":[134],"context":[135],"threat":[137],"intelligence":[138],"prediction,":[141],"bridging":[142],"gap":[144],"not":[145,236],"covered":[146],"by":[147],"existing":[148],"metrics":[150],"alone.":[151],"Our":[152],"results":[153],"show":[154],"that":[155,234],"proposed":[157],"achieve":[159],"high":[160],"predictive":[161],"performance":[162],"(up":[163],"R":[165],"2":[166],"=0.93":[167],"PR--AUC":[172],"\u2248":[173,178],"0.98":[174],"Brier":[176],"score":[177],"0.0018":[179],"exploit":[181],"prediction),":[182],"enabling":[183],"accurate":[184],"ranking":[185],"vulnerabilities.":[187],"Applied":[188],"dataset,":[192],"framework":[194],"concentrates":[195],"attention":[196],"on":[197],"roughly":[198],"30%":[199],"classified":[202],"as":[203,228],"Extreme":[204],"High":[206],"priority":[207],"while":[208],"demoting":[209],"about":[210],"half":[211],"vulnerabilities":[214],"Low":[216],"priority,":[217],"it":[219],"surfaces":[220],"several":[221],"high-risk":[222],"issues":[223],"critical":[225],"products":[226],"such":[227],"protection":[229],"relays":[230],"SCADA":[232],"servers":[233],"are":[235],"listed":[238],"CISA's":[240],"KEV":[241],"catalog.":[242],"curated":[244],"provide":[250],"reusable":[252],"foundation":[253],"data-driven":[255],"management":[257],"power":[259],"systems.":[260]},"counts_by_year":[{"year":2026,"cited_by_count":4}],"updated_date":"2026-11-08T12:12:28.789561","created_date":"2026-02-08T00:00:00"}