{"id":"https://openalex.org/W2989543999","doi":"https://doi.org/10.1007/978-3-030-35231-8_51","title":"TOM: A Threat Operating Model for Early Warning of Cyber Security Threats","display_name":"TOM: A Threat Operating Model for Early Warning of Cyber Security Threats","publication_year":2019,"publication_date":"2019-01-01","ids":{"openalex":"https://openalex.org/W2989543999","doi":"https://doi.org/10.1007/978-3-030-35231-8_51","mag":"2989543999"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-030-35231-8_51","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-030-35231-8_51","pdf_url":null,"source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"http://hdl.handle.net/10072/392461","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103784699","display_name":"Tao Bo","orcid":null},"institutions":[{"id":"https://openalex.org/I4210118281","display_name":"National Earthquake Response Support Service","ror":"https://ror.org/02gzvm828","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210118281"]},{"id":"https://openalex.org/I90149893","display_name":"China Earthquake Administration","ror":"https://ror.org/045sza929","country_code":"CN","type":"facility","lineage":["https://openalex.org/I90149893"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tao Bo","raw_affiliation_strings":["Beijing Earthquake Agency, Beijing, China","Key Laboratory of Earthquake Engineering and Engineering Vibration, Institute of Engineering Mechanics, China Earthquake Administration, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing Earthquake Agency, Beijing, China","institution_ids":["https://openalex.org/I4210118281"]},{"raw_affiliation_string":"Key Laboratory of Earthquake Engineering and Engineering Vibration, Institute of Engineering Mechanics, China Earthquake Administration, Beijing, China","institution_ids":["https://openalex.org/I90149893"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102013043","display_name":"Yue Chen","orcid":"https://orcid.org/0000-0002-7959-3499"},"institutions":[{"id":"https://openalex.org/I4210087772","display_name":"National Computer Network Emergency Response Technical Team/Coordination Center of Chinar","ror":"https://ror.org/00247dh76","country_code":"CN","type":"nonprofit","lineage":["https://openalex.org/I4210087772"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yue Chen","raw_affiliation_strings":["CNCERT/CC, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CNCERT/CC, Beijing, China","institution_ids":["https://openalex.org/I4210087772"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100428572","display_name":"Can Wang","orcid":"https://orcid.org/0000-0002-2890-0057"},"institutions":[{"id":"https://openalex.org/I11701301","display_name":"Griffith University","ror":"https://ror.org/02sc3r913","country_code":"AU","type":"education","lineage":["https://openalex.org/I11701301"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Can Wang","raw_affiliation_strings":["School of ICT, Griffith University, Gold Coast, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of ICT, Griffith University, Gold Coast, Australia","institution_ids":["https://openalex.org/I11701301"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112370613","display_name":"Yunwei Zhao","orcid":null},"institutions":[{"id":"https://openalex.org/I4210087772","display_name":"National Computer Network Emergency Response Technical Team/Coordination Center of Chinar","ror":"https://ror.org/00247dh76","country_code":"CN","type":"nonprofit","lineage":["https://openalex.org/I4210087772"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yunwei Zhao","raw_affiliation_strings":["CNCERT/CC, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CNCERT/CC, Beijing, China","institution_ids":["https://openalex.org/I4210087772"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101720092","display_name":"Kwok\u2010Yan Lam","orcid":"https://orcid.org/0000-0001-7479-7970"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Kwok-Yan Lam","raw_affiliation_strings":["Nanyang Technological University, Singapore, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058644115","display_name":"Chi\u2010Hung Chi","orcid":"https://orcid.org/0000-0001-7271-1926"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Chi-Hung Chi","raw_affiliation_strings":["CSIRO, Hobart, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CSIRO, Hobart, Australia","institution_ids":["https://openalex.org/I1292875679"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100681241","display_name":"Hui Tian","orcid":"https://orcid.org/0000-0002-7952-571X"},"institutions":[{"id":"https://openalex.org/I11701301","display_name":"Griffith University","ror":"https://ror.org/02sc3r913","country_code":"AU","type":"education","lineage":["https://openalex.org/I11701301"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Hui Tian","raw_affiliation_strings":["School of ICT, Griffith University, Gold Coast, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of ICT, Griffith University, Gold Coast, Australia","institution_ids":["https://openalex.org/I11701301"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5100428572"],"corresponding_institution_ids":["https://openalex.org/I11701301"],"apc_list":{"value":5000,"currency":"EUR","value_usd":5392},"apc_paid":{"value":5000,"currency":"EUR","value_usd":5392},"fwci":1.0975,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.79120923,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"696","last_page":"711"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8230462074279785},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7601622343063354},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.613630473613739},{"id":"https://openalex.org/keywords/warning-system","display_name":"Warning system","score":0.6115115880966187},{"id":"https://openalex.org/keywords/cyber-threats","display_name":"Cyber threats","score":0.47420385479927063},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3250904083251953},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.1701573133468628}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8230462074279785},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7601622343063354},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.613630473613739},{"id":"https://openalex.org/C29825287","wikidata":"https://www.wikidata.org/wiki/Q1427940","display_name":"Warning system","level":2,"score":0.6115115880966187},{"id":"https://openalex.org/C3018725008","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber threats","level":2,"score":0.47420385479927063},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3250904083251953},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.1701573133468628}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/978-3-030-35231-8_51","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-030-35231-8_51","pdf_url":null,"source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},{"id":"pmh:oai:research-repository.griffith.edu.au:10072/392461","is_oa":true,"landing_page_url":"http://hdl.handle.net/10072/392461","pdf_url":null,"source":null,"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference output"}],"best_oa_location":{"id":"pmh:oai:research-repository.griffith.edu.au:10072/392461","is_oa":true,"landing_page_url":"http://hdl.handle.net/10072/392461","pdf_url":null,"source":null,"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference output"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.7099999785423279,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W139675679","https://openalex.org/W1507886088","https://openalex.org/W1646278814","https://openalex.org/W2005604419","https://openalex.org/W2013736495","https://openalex.org/W2095628874","https://openalex.org/W2123991517","https://openalex.org/W2132929535","https://openalex.org/W2136651239","https://openalex.org/W2152800262","https://openalex.org/W2269788763","https://openalex.org/W2407451098","https://openalex.org/W2477905973","https://openalex.org/W2808320263","https://openalex.org/W3186276894"],"related_works":["https://openalex.org/W3186372549","https://openalex.org/W3110311961","https://openalex.org/W3040950835","https://openalex.org/W4386107585","https://openalex.org/W4322731571","https://openalex.org/W2552246019","https://openalex.org/W2508779374","https://openalex.org/W2972971880","https://openalex.org/W4385452110","https://openalex.org/W1153919619"],"abstract_inverted_index":{"Threat":[0,166,189],"profiling":[1,35,73,111],"helps":[2],"reveal":[3],"the":[4,11,19,30,43,52,63,80,89,103,109,117,136,149,156,165,175,187,194,200],"current":[5],"trends":[6],"of":[7,13,26,55,86,96,125,159,174,186],"attacks,":[8],"and":[9,40,141,153,199,218],"underscores":[10],"significance":[12],"specific":[14],"vulnerabilities,":[15],"hence":[16,154],"serves":[17],"as":[18,183],"means":[20],"for":[21],"providing":[22],"an":[23,184],"early":[24,157],"warning":[25,158],"potential":[27,118],"attacks.":[28,162],"However,":[29],"existing":[31],"approaches":[32,106],"on":[33,42,76,79],"threat":[34,57,65,72,110,127,138],"models":[36,74,112],"are":[37,83,206],"mainly":[38],"rule-based":[39],"depend":[41],"domain":[44],"experts\u2019":[45],"knowledge,":[46],"which":[47,170],"limit":[48],"their":[49],"applicability":[50],"in":[51,113,144],"automated":[53,150],"processing":[54],"cyber":[56,64,126,137,161,177],"information":[58,67,134,173],"from":[59,68,92,130,135],"heterogeneous":[60],"sources,":[61,132],"e.g.":[62],"intelligence":[66,128,139],"open":[69,131],"sources.":[70],"The":[71,208],"based":[75,196,203],"analytic":[77,105],"approaches,":[78],"other":[81],"hand,":[82],"potentially":[84],"capable":[85],"automatically":[87],"discovering":[88],"hidden":[90],"patterns":[91],"a":[93,122,145,212,219],"massive":[94],"volume":[95],"information.":[97],"This":[98],"paper":[99],"proposes":[100],"to":[101,107,115],"apply":[102],"data":[104],"develop":[108],"order":[114],"identify":[116],"threats":[119],"by":[120],"analyzing":[121],"large":[123],"number":[124],"reports":[129],"extract":[133],"reports,":[140],"represent":[142],"them":[143],"structure":[146],"that":[147],"facilitates":[148],"risk":[151],"assessment,":[152],"achieve":[155],"likely":[160],"We":[163],"introduce":[164],"Operating":[167],"Model":[168],"(TOM)":[169],"captures":[171],"important":[172],"identified":[176],"threats,":[178],"while":[179],"can":[180],"be":[181],"implemented":[182],"extension":[185],"Structured":[188],"Information":[190],"eXpression":[191],"(STIX).":[192],"Both":[193],"matrix-decomposition":[195],"semi-supervised":[197],"method":[198,205],"term":[201],"frequency":[202],"unsupervised":[204],"proposed.":[207],"experiment":[209],"results":[210],"demonstrate":[211],"fairly":[213],"effectiveness":[214],"(accuracy":[215],"around":[216],"0.8)":[217],"robust":[220],"performance":[221],"w.r.t":[222],"different":[223],"temporal":[224],"periods.":[225]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}