{"id":"https://openalex.org/W7167366552","doi":"https://doi.org/10.36871/26189976.2026.06-4.015","title":"A comprehensive method for identifying and prioritizing information security threats based on the integration of the MITRE ATT&CK and DREAD frameworks and the methodology of the FSTEC of Russia","display_name":"A comprehensive method for identifying and prioritizing information security threats based on the integration of the MITRE ATT&CK and DREAD frameworks and the methodology of the FSTEC of Russia","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7167366552","doi":"https://doi.org/10.36871/26189976.2026.06-4.015"},"language":"en","primary_location":{"id":"doi:10.36871/26189976.2026.06-4.015","doi":"https://doi.org/10.36871/26189976.2026.06-4.015","is_oa":false,"landing_page_url":"https://doi.org/10.36871/26189976.2026.06-4.015","pdf_url":null,"source":{"id":"https://openalex.org/S4210204932","display_name":"SOFT MEASUREMENTS AND COMPUTING","issn_l":"2618-9976","issn":["2618-9976","2713-2072"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["russia-white-list-3"],"host_organization":"https://openalex.org/P4366370212","host_organization_name":"Publishing House Scientific Library","host_organization_lineage":["https://openalex.org/P4366370212"],"host_organization_lineage_names":["Publishing House Scientific Library"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"SOFT MEASUREMENTS AND COMPUTING","raw_type":"journal-article"},"parent_works":[],"lineage":["https://openalex.org/W7167366552"],"child_works_count":0,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5060331281","display_name":"Elena Georgievna Balenko","orcid":"https://orcid.org/0000-0002-4046-1317","observed_orcids":["https://orcid.org/0000-0002-4046-1317"]},"institutions":[{"id":"https://openalex.org/I4210118356","display_name":"Don State Agrarian University","ror":"https://ror.org/02ephqy68","country_code":"RU","type":"education","lineage":["https://openalex.org/I4210118356"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Elena Georgievna Balenko","raw_affiliation_strings":["Don State Agrarian University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Don State Agrarian University","institution_ids":["https://openalex.org/I4210118356"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063986092","display_name":"\u041c\u0438\u0442\u0440\u043e\u0444\u0430\u043d\u043e\u0432 \u041c\u0438\u0445\u0430\u0438\u043b \u0412\u0430\u043b\u0435\u0440\u044c\u0435\u0432\u0438\u0447","orcid":"https://orcid.org/0000-0002-4080-4340","observed_orcids":["https://orcid.org/0000-0002-4080-4340"]},"institutions":[{"id":"https://openalex.org/I173089394","display_name":"ITMO University","ror":"https://ror.org/04txgxn49","country_code":"RU","type":"education","lineage":["https://openalex.org/I173089394"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Mikhail Valerievich Mitrofanov","raw_affiliation_strings":["National Research University ITMO"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Research University ITMO","institution_ids":["https://openalex.org/I173089394"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140047045","display_name":"Nikolai Nikolaevich Kramskoy","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nikolai Nikolaevich Kramskoy","raw_affiliation_strings":["Special Technology Center"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Special Technology Center","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5139895200","display_name":"Alexander Sergeevich Kurakin","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Alexander Sergeevich Kurakin","raw_affiliation_strings":["Special Technology Center"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Special Technology Center","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"6/4","issue":"103","first_page":"144","last_page":"155"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.00279999990016222,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.0010999999940395355,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/information-security-threats","display_name":"information security threats","score":0.9589999914169312},{"id":"https://openalex.org/keywords/threat-prioritization","display_name":"threat prioritization","score":0.9660000205039978},{"id":"https://openalex.org/keywords/mitre-att-ck","display_name":"MITRE ATT&CK","score":0.9959999918937683},{"id":"https://openalex.org/keywords/threat-mapping","display_name":"threat mapping","score":0.5389999747276306},{"id":"https://openalex.org/keywords/risk-assessment","display_name":"risk assessment","score":0.6349999904632568},{"id":"https://openalex.org/keywords/asset-register","display_name":"asset inventory","score":0.8309999704360962},{"id":"https://openalex.org/keywords/security-audit","display_name":"security audit","score":0.9700000286102295}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6920999884605408},{"id":"https://openalex.org/C76178495","wikidata":"https://www.wikidata.org/wiki/Q4808784","display_name":"Asset (computer security)","level":2,"score":0.6031000018119812},{"id":"https://openalex.org/C2777615720","wikidata":"https://www.wikidata.org/wiki/Q11888847","display_name":"Prioritization","level":2,"score":0.5498999953269958},{"id":"https://openalex.org/C164226766","wikidata":"https://www.wikidata.org/wiki/Q7293202","display_name":"Rank (graph theory)","level":2,"score":0.539900004863739},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.40230000019073486},{"id":"https://openalex.org/C2777601897","wikidata":"https://www.wikidata.org/wiki/Q3409113","display_name":"Presentation (obstetrics)","level":2,"score":0.37139999866485596},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.3677000105381012},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.3578000068664551},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3540000021457672},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.3400000035762787},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3199000060558319},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.31029999256134033},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.2858999967575073},{"id":"https://openalex.org/C72634772","wikidata":"https://www.wikidata.org/wiki/Q386824","display_name":"Data integration","level":2,"score":0.2842000126838684},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.27300000190734863},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.26019999384880066},{"id":"https://openalex.org/C33326189","wikidata":"https://www.wikidata.org/wiki/Q17092450","display_name":"Information integration","level":2,"score":0.2565999925136566}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.36871/26189976.2026.06-4.015","doi":"https://doi.org/10.36871/26189976.2026.06-4.015","is_oa":false,"landing_page_url":"https://doi.org/10.36871/26189976.2026.06-4.015","pdf_url":null,"source":{"id":"https://openalex.org/S4210204932","display_name":"SOFT MEASUREMENTS AND COMPUTING","issn_l":"2618-9976","issn":["2618-9976","2713-2072"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["russia-white-list-3"],"host_organization":"https://openalex.org/P4366370212","host_organization_name":"Publishing House Scientific Library","host_organization_lineage":["https://openalex.org/P4366370212"],"host_organization_lineage_names":["Publishing House Scientific Library"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"SOFT MEASUREMENTS AND COMPUTING","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7214941755","https://openalex.org/W4312902088","https://openalex.org/W4225566757","https://openalex.org/W4382204693","https://openalex.org/W7096313108","https://openalex.org/W4367598047","https://openalex.org/W4390454473","https://openalex.org/W3082010351","https://openalex.org/W7120392760","https://openalex.org/W2798950906"],"abstract_inverted_index":{"The":[0,62,93],"authors":[1],"analyze":[2],"the":[3,13,17,20,26,32,35,39,52,56,72,97,101,118],"limitations":[4],"of":[5,16,22,34,38,55,58,96,103,123],"existing":[6,90],"approaches":[7],"when":[8],"applied":[9],"in":[10,25,100],"isolation,":[11],"noting":[12],"insufficient":[14],"specification":[15],"FSTEC":[18,73],"methodology,":[19],"lack":[21],"prioritization":[23],"mechanisms":[24],"MITRE":[27,76],"ATT&CK":[28,77],"knowledge":[29],"base,":[30],"and":[31,80,113],"subjectivity":[33],"quantitative":[36],"assessments":[37],"DREAD":[40,83],"model.":[41],"As":[42],"a":[43,47,104],"solution,":[44],"they":[45],"propose":[46],"comprehensive":[48],"methodology":[49],"based":[50,88],"on":[51,89],"mathematical":[53],"formalization":[54],"integration":[57],"these":[59],"three":[60],"frameworks.":[61],"developed":[63],"approach":[64],"includes":[65],"an":[66],"algorithm":[67],"for":[68],"mapping":[69],"threats":[70],"from":[71],"database":[74],"to":[75,85,121],"attack":[78],"techniques":[79],"uses":[81],"adapted":[82],"metrics":[84],"rank":[86],"risks":[87],"protective":[91],"measures.":[92],"practical":[94],"significance":[95],"study":[98],"lies":[99],"presentation":[102],"step-by-step":[105],"implementation":[106],"algorithm,":[107],"including":[108],"asset":[109],"inventory,":[110],"security":[111,114],"audit,":[112],"budget":[115],"optimization,":[116],"making":[117],"tool":[119],"applicable":[120],"organizations":[122],"all":[124],"sizes.":[125]},"counts_by_year":[],"updated_date":"2026-11-13T13:42:25.865203","created_date":"2026-07-05T00:00:00"}