{"id":"https://openalex.org/W7214620193","doi":"https://doi.org/10.1177/18758967261488202","title":"A multi-agent RAG framework for telecom cybersecurity: Multi-generational threat intelligence and SOC assistance","display_name":"A multi-agent RAG framework for telecom cybersecurity: Multi-generational threat intelligence and SOC assistance","publication_year":2026,"publication_date":"2026-09-28","ids":{"openalex":"https://openalex.org/W7214620193","doi":"https://doi.org/10.1177/18758967261488202"},"language":"en","primary_location":{"id":"doi:10.1177/18758967261488202","doi":"https://doi.org/10.1177/18758967261488202","is_oa":false,"landing_page_url":"https://doi.org/10.1177/18758967261488202","pdf_url":null,"source":{"id":"https://openalex.org/S179157397","display_name":"Journal of Intelligent & Fuzzy Systems","issn_l":"1064-1246","issn":["1064-1246","1875-8967"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","cwts-core","poland-70","russia-white-list-2"],"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Intelligent & Fuzzy Systems: Applications in Engineering and Technology","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5039666716","display_name":"Latifa Guesmi","orcid":"https://orcid.org/0000-0001-6283-6063","observed_orcids":["https://orcid.org/0000-0001-6283-6063"]},"institutions":[{"id":"https://openalex.org/I4405269272","display_name":"\u00c9cole Sup\u00e9rieure des Communications de Tunis","ror":"https://ror.org/03mcjjp59","country_code":"TN","type":"education","lineage":["https://openalex.org/I4405269272"]}],"countries":["TN"],"is_corresponding":true,"raw_author_name":"Latifa Guesmi","raw_affiliation_strings":["Gres\u2019Com Laboratory, Higher School of Communication of Tunis (SUP\u2019COM), Ariana, Tunisia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Gres\u2019Com Laboratory, Higher School of Communication of Tunis (SUP\u2019COM), Ariana, Tunisia","institution_ids":["https://openalex.org/I4405269272"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042627180","display_name":"Ameni Mejri","orcid":"https://orcid.org/0000-0002-5823-3355","observed_orcids":["https://orcid.org/0000-0002-5823-3355"]},"institutions":[{"id":"https://openalex.org/I4210131288","display_name":"National Engineering School of Tunis","ror":"https://ror.org/03b1zjt31","country_code":"TN","type":"education","lineage":["https://openalex.org/I4210131288","https://openalex.org/I63596082"]}],"countries":["TN"],"is_corresponding":false,"raw_author_name":"Ameni Mejri","raw_affiliation_strings":["SYSCom Laboratory, National Engineering School of Tunis (ENIT), Tunisia"],"raw_orcid":"https://orcid.org/0000-0002-5823-3355","affiliations":[{"raw_affiliation_string":"SYSCom Laboratory, National Engineering School of Tunis (ENIT), Tunisia","institution_ids":["https://openalex.org/I4210131288"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5153259891","display_name":"Sarra Aissaui","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4210112335","display_name":"\u00c9cole Sup\u00e9rieure Priv\u00e9e d'Ing\u00e9nierie et de Technologies","ror":"https://ror.org/021f99908","country_code":"TN","type":"education","lineage":["https://openalex.org/I4210112335"]}],"countries":["TN"],"is_corresponding":false,"raw_author_name":"Sarra Aissaui","raw_affiliation_strings":["Espirit School of Engineering, Ariana, 2083, Tunisia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Espirit School of Engineering, Ariana, 2083, Tunisia","institution_ids":["https://openalex.org/I4210112335"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5039666716"],"corresponding_institution_ids":["https://openalex.org/I4405269272"],"apc_list":{"value":4150,"currency":"USD","value_usd":4150},"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.7817000150680542,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.7817000150680542,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13983","display_name":"Cybersecurity and Information Systems","score":0.07199999690055847,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.04699999839067459,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/retrieval-augmented-generation","display_name":"retrieval-augmented generation","score":0.9739999771118164},{"id":"https://openalex.org/keywords/multi-agent-systems","display_name":"multi-agent systems","score":0.9309999942779541},{"id":"https://openalex.org/keywords/security-operations-center","display_name":"security operations center","score":0.6819999814033508},{"id":"https://openalex.org/keywords/threat-intelligence","display_name":"threat intelligence","score":0.9710000157356262},{"id":"https://openalex.org/keywords/iot-botnets","display_name":"IoT botnets","score":0.8299999833106995},{"id":"https://openalex.org/keywords/6g-security","display_name":"6G security","score":0.6729999780654907},{"id":"https://openalex.org/keywords/ai-chatbots","display_name":"AI chatbots","score":0.5099999904632568},{"id":"https://openalex.org/keywords/reciprocal-rank-fusion","display_name":"reciprocal rank fusion","score":0.7940000295639038},{"id":"https://openalex.org/keywords/neural-reranking","display_name":"neural reranking","score":0.9369999766349792}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6121000051498413},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.5735999941825867},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5663999915122986},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.5552999973297119},{"id":"https://openalex.org/C110994511","wikidata":"https://www.wikidata.org/wiki/Q661020","display_name":"Next-generation network","level":3,"score":0.5218999981880188},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.4869999885559082},{"id":"https://openalex.org/C171246234","wikidata":"https://www.wikidata.org/wiki/Q81945","display_name":"Voice over IP","level":3,"score":0.4147999882698059},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.4081000089645386},{"id":"https://openalex.org/C2777338717","wikidata":"https://www.wikidata.org/wiki/Q1762621","display_name":"Vendor","level":2,"score":0.40130001306533813},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3481999933719635},{"id":"https://openalex.org/C29852176","wikidata":"https://www.wikidata.org/wiki/Q373338","display_name":"Critical infrastructure","level":2,"score":0.32910001277923584},{"id":"https://openalex.org/C192126672","wikidata":"https://www.wikidata.org/wiki/Q1068715","display_name":"Telecommunications network","level":2,"score":0.3264999985694885},{"id":"https://openalex.org/C96391052","wikidata":"https://www.wikidata.org/wiki/Q256313","display_name":"White spaces","level":4,"score":0.3188000023365021},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.296999990940094},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.2962000072002411},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.28870001435279846},{"id":"https://openalex.org/C45440154","wikidata":"https://www.wikidata.org/wiki/Q6494801","display_name":"Last mile (transportation)","level":3,"score":0.2741999924182892},{"id":"https://openalex.org/C151423352","wikidata":"https://www.wikidata.org/wiki/Q5154228","display_name":"Communications security","level":3,"score":0.2676999866962433},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.2632000148296356},{"id":"https://openalex.org/C33271190","wikidata":"https://www.wikidata.org/wiki/Q3467747","display_name":"Telecommunications service","level":2,"score":0.25920000672340393},{"id":"https://openalex.org/C2780391855","wikidata":"https://www.wikidata.org/wiki/Q243961","display_name":"Public switched telephone network","level":3,"score":0.25699999928474426},{"id":"https://openalex.org/C56961345","wikidata":"https://www.wikidata.org/wiki/Q122469","display_name":"Enhanced Telecom Operations Map","level":4,"score":0.25290000438690186}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1177/18758967261488202","doi":"https://doi.org/10.1177/18758967261488202","is_oa":false,"landing_page_url":"https://doi.org/10.1177/18758967261488202","pdf_url":null,"source":{"id":"https://openalex.org/S179157397","display_name":"Journal of Intelligent & Fuzzy Systems","issn_l":"1064-1246","issn":["1064-1246","1875-8967"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","cwts-core","poland-70","russia-white-list-2"],"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Intelligent & Fuzzy Systems: Applications in Engineering and Technology","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.7207000255584717,"display_name":"Industry, innovation and infrastructure"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W2148972377","https://openalex.org/W4306407034","https://openalex.org/W4384652670","https://openalex.org/W4384834994","https://openalex.org/W4385452929","https://openalex.org/W4388717437","https://openalex.org/W4389736946","https://openalex.org/W4391631359","https://openalex.org/W4392544408","https://openalex.org/W4392828284","https://openalex.org/W4392925728","https://openalex.org/W4393027151","https://openalex.org/W4398164104","https://openalex.org/W4401247017","https://openalex.org/W4401306278","https://openalex.org/W4401326099","https://openalex.org/W4401827486","https://openalex.org/W4402633818","https://openalex.org/W4402671700","https://openalex.org/W4402811472","https://openalex.org/W4404783589","https://openalex.org/W4406418102","https://openalex.org/W4407070057","https://openalex.org/W4408325149","https://openalex.org/W4409061246","https://openalex.org/W4414405570","https://openalex.org/W4414580533","https://openalex.org/W4414769303","https://openalex.org/W4414825143","https://openalex.org/W4415914961","https://openalex.org/W4415971006","https://openalex.org/W4416407614","https://openalex.org/W7116778198","https://openalex.org/W7117877959","https://openalex.org/W7118691284","https://openalex.org/W7131132771","https://openalex.org/W7134199056","https://openalex.org/W7152049116","https://openalex.org/W7162130372","https://openalex.org/W7166578748"],"related_works":["https://openalex.org/W7149211150","https://openalex.org/W4417131435","https://openalex.org/W7134927698","https://openalex.org/W4402502989","https://openalex.org/W7117877959","https://openalex.org/W4417448467","https://openalex.org/W7131132771","https://openalex.org/W4406212021","https://openalex.org/W7134177787","https://openalex.org/W7204443461"],"abstract_inverted_index":{"Telecommunications":[0],"networks":[1],"from":[2,12],"2G":[3],"to":[4,18,135],"6G":[5,29],"face":[6],"escalating,":[7],"generation-specific":[8],"cyber":[9],"threats,":[10],"ranging":[11],"SS7":[13],"exploits":[14],"in":[15,21,27,51,61],"legacy":[16],"systems":[17],"IoT":[19],"botnets":[20],"5G":[22],"and":[23,55,64,95,101,131,139,159],"network":[24,81],"slicing":[25],"abuse":[26],"emerging":[28],"that":[30,78],"strain":[31],"traditional":[32],"Security":[33],"Operations":[34],"Center":[35],"(SOC)":[36],"capabilities.":[37],"Conventional":[38],"tools":[39],"rarely":[40],"encode":[41],"telecom":[42,76,97,169],"protocol":[43],"semantics,":[44],"while":[45],"generic":[46],"AI":[47],"chatbots":[48],"lack":[49],"grounding":[50],"vendor":[52],"advisories,":[53],"standards,":[54],"generation-aware":[56],"context,":[57],"leaving":[58],"critical":[59],"gaps":[60],"threat":[62,154],"investigation":[63],"response.":[65],"This":[66],"paper":[67],"presents":[68],"a":[69,108,119],"domain-specific":[70],"Retrieval-Augmented":[71],"Generation":[72],"(RAG)":[73],"framework":[74,144],"for":[75,149],"cybersecurity":[77],"bridges":[79],"multi-generational":[80],"threats":[82],"with":[83],"AI-assisted":[84],"defense.":[85],"The":[86,142],"system":[87],"unifies":[88],"structured":[89],"sources":[90],"(e.g.,":[91],"CVEs,":[92],"MITRE":[93],"ATT&CK)":[94],"unstructured":[96],"security":[98],"documents":[99],"(GSMA":[100],"ETSI":[102],"white":[103],"papers,":[104],"specialized":[105],"research)":[106],"into":[107],"hybrid":[109,120],"dense\u2013sparse":[110],"vector":[111],"knowledge":[112],"base.":[113],"On":[114],"top":[115],"of":[116,167],"this":[117],"corpus,":[118],"retrieval":[121],"pipeline":[122],"combines":[123],"BGE-M3":[124],"embeddings,":[125],"reciprocal":[126],"rank":[127],"fusion,":[128],"neural":[129],"reranking,":[130],"strict":[132],"generation":[133],"guardrails":[134],"deliver":[136],"precise,":[137],"context-aware,":[138],"faithful":[140],"responses.":[141],"resulting":[143],"provides":[145],"24/7,":[146],"telecom-native":[147],"assistance":[148],"SOC":[150],"analysts,":[151],"enabling":[152],"rapid":[153],"triage,":[155],"protocol-specific":[156],"mitigation":[157],"strategies,":[158],"cross-vendor":[160],"intelligence":[161],"correlation,":[162],"thereby":[163],"strengthening":[164],"the":[165],"resilience":[166],"modern":[168],"ecosystems.":[170]},"counts_by_year":[],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2026-09-29T00:00:00"}