{"id":"https://openalex.org/W4283367079","doi":"https://doi.org/10.1007/s42979-022-01209-7","title":"Formalizing and Integrating User Knowledge into Security Analytics","display_name":"Formalizing and Integrating User Knowledge into Security Analytics","publication_year":2022,"publication_date":"2022-06-24","ids":{"openalex":"https://openalex.org/W4283367079","doi":"https://doi.org/10.1007/s42979-022-01209-7"},"language":"en","primary_location":{"id":"doi:10.1007/s42979-022-01209-7","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s42979-022-01209-7","pdf_url":"https://link.springer.com/content/pdf/10.1007/s42979-022-01209-7.pdf","source":{"id":"https://openalex.org/S4210174798","display_name":"SN Computer Science","issn_l":"2661-8907","issn":["2661-8907","2662-995X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"SN Computer Science","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s42979-022-01209-7.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5044683748","display_name":"Fabian B\u00f6hm","orcid":"https://orcid.org/0000-0002-0023-6051"},"institutions":[{"id":"https://openalex.org/I60668342","display_name":"University of Regensburg","ror":"https://ror.org/01eezs655","country_code":"DE","type":"education","lineage":["https://openalex.org/I60668342"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Fabian B\u00f6hm","raw_affiliation_strings":["Chair of Information Systems, University of Regensburg, Universit\u00e4tstr. 31, Regensburg, 93053, Bavaria, Germany","Chair of Information Systems, University of Regensburg, Regensburg, Germany"],"raw_orcid":"https://orcid.org/0000-0002-0023-6051","affiliations":[{"raw_affiliation_string":"Chair of Information Systems, University of Regensburg, Universit\u00e4tstr. 31, Regensburg, 93053, Bavaria, Germany","institution_ids":["https://openalex.org/I60668342"]},{"raw_affiliation_string":"Chair of Information Systems, University of Regensburg, Regensburg, Germany","institution_ids":["https://openalex.org/I60668342"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002627594","display_name":"Manfred Vielberth","orcid":"https://orcid.org/0000-0002-1119-4715"},"institutions":[{"id":"https://openalex.org/I60668342","display_name":"University of Regensburg","ror":"https://ror.org/01eezs655","country_code":"DE","type":"education","lineage":["https://openalex.org/I60668342"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Manfred Vielberth","raw_affiliation_strings":["Chair of Information Systems, University of Regensburg, Universit\u00e4tstr. 31, Regensburg, 93053, Bavaria, Germany","Chair of Information Systems, University of Regensburg, Regensburg, Germany"],"raw_orcid":"https://orcid.org/0000-0002-1119-4715","affiliations":[{"raw_affiliation_string":"Chair of Information Systems, University of Regensburg, Universit\u00e4tstr. 31, Regensburg, 93053, Bavaria, Germany","institution_ids":["https://openalex.org/I60668342"]},{"raw_affiliation_string":"Chair of Information Systems, University of Regensburg, Regensburg, Germany","institution_ids":["https://openalex.org/I60668342"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5068820890","display_name":"G\u00fcnther Pernul","orcid":null},"institutions":[{"id":"https://openalex.org/I60668342","display_name":"University of Regensburg","ror":"https://ror.org/01eezs655","country_code":"DE","type":"education","lineage":["https://openalex.org/I60668342"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"G\u00fcnther Pernul","raw_affiliation_strings":["Chair of Information Systems, University of Regensburg, Universit\u00e4tstr. 31, Regensburg, 93053, Bavaria, Germany","Chair of Information Systems, University of Regensburg, Regensburg, Germany"],"raw_orcid":"https://orcid.org/0000-0003-1338-9003","affiliations":[{"raw_affiliation_string":"Chair of Information Systems, University of Regensburg, Universit\u00e4tstr. 31, Regensburg, 93053, Bavaria, Germany","institution_ids":["https://openalex.org/I60668342"]},{"raw_affiliation_string":"Chair of Information Systems, University of Regensburg, Regensburg, Germany","institution_ids":["https://openalex.org/I60668342"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5044683748"],"corresponding_institution_ids":["https://openalex.org/I60668342"],"apc_list":{"value":2890,"currency":"USD","value_usd":2890},"apc_paid":{"value":2890,"currency":"USD","value_usd":2890},"fwci":0.2996,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.57963034,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":"3","issue":"5","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.9962999820709229,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.9962999820709229,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T14222","display_name":"Knowledge Management and Technology","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.993399977684021,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/analytics","display_name":"Analytics","score":0.707709789276123},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.673893928527832},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6110842227935791},{"id":"https://openalex.org/keywords/security-domain","display_name":"Security domain","score":0.6093761324882507},{"id":"https://openalex.org/keywords/domain-knowledge","display_name":"Domain knowledge","score":0.5243219137191772},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.489952951669693},{"id":"https://openalex.org/keywords/visual-analytics","display_name":"Visual analytics","score":0.4825519919395447},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.438540518283844},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.42582884430885315},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.3333406448364258},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.09563273191452026},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.08322227001190186}],"concepts":[{"id":"https://openalex.org/C79158427","wikidata":"https://www.wikidata.org/wiki/Q485396","display_name":"Analytics","level":2,"score":0.707709789276123},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.673893928527832},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6110842227935791},{"id":"https://openalex.org/C2780264999","wikidata":"https://www.wikidata.org/wiki/Q7445032","display_name":"Security domain","level":2,"score":0.6093761324882507},{"id":"https://openalex.org/C207685749","wikidata":"https://www.wikidata.org/wiki/Q2088941","display_name":"Domain knowledge","level":2,"score":0.5243219137191772},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.489952951669693},{"id":"https://openalex.org/C59732488","wikidata":"https://www.wikidata.org/wiki/Q2528440","display_name":"Visual analytics","level":3,"score":0.4825519919395447},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.438540518283844},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.42582884430885315},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.3333406448364258},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.09563273191452026},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.08322227001190186},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1007/s42979-022-01209-7","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s42979-022-01209-7","pdf_url":"https://link.springer.com/content/pdf/10.1007/s42979-022-01209-7.pdf","source":{"id":"https://openalex.org/S4210174798","display_name":"SN Computer Science","issn_l":"2661-8907","issn":["2661-8907","2662-995X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"SN Computer Science","raw_type":"journal-article"},{"id":"pmh:oai:epub.uni-regensburg.de:52510","is_oa":false,"landing_page_url":"http://orcid.org/0000-0002-0023-6051>,","pdf_url":null,"source":{"id":"https://openalex.org/S4306401229","display_name":"University of Regensburg Publication Server (University of Regensburg)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I60668342","host_organization_name":"University of Regensburg","host_organization_lineage":["https://openalex.org/I60668342"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"},{"id":"doi:10.5283/epub.52510","is_oa":true,"landing_page_url":"https://doi.org/10.5283/epub.52510","pdf_url":null,"source":{"id":"https://openalex.org/S4306401229","display_name":"University of Regensburg Publication Server (University of Regensburg)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I60668342","host_organization_name":"University of Regensburg","host_organization_lineage":["https://openalex.org/I60668342"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"doi:10.1007/s42979-022-01209-7","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s42979-022-01209-7","pdf_url":"https://link.springer.com/content/pdf/10.1007/s42979-022-01209-7.pdf","source":{"id":"https://openalex.org/S4210174798","display_name":"SN Computer Science","issn_l":"2661-8907","issn":["2661-8907","2662-995X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"SN Computer Science","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.6899999976158142,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320323328","display_name":"Universit\u00e4t Regensburg","ror":"https://ror.org/01eezs655"},{"id":"https://openalex.org/F4320331012","display_name":"Bayerische Staatsministerium f\u00fcr Wirtschaft, Landesentwicklung und Energie","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4283367079.pdf","grobid_xml":"https://content.openalex.org/works/W4283367079.grobid-xml"},"referenced_works_count":29,"referenced_works":["https://openalex.org/W197746879","https://openalex.org/W2090687959","https://openalex.org/W2096373083","https://openalex.org/W2118639955","https://openalex.org/W2130387020","https://openalex.org/W2143665444","https://openalex.org/W2163598528","https://openalex.org/W2168620475","https://openalex.org/W2289767335","https://openalex.org/W2471105315","https://openalex.org/W2541511557","https://openalex.org/W2583683552","https://openalex.org/W2768034912","https://openalex.org/W2786164903","https://openalex.org/W2803857222","https://openalex.org/W2905763413","https://openalex.org/W2945437145","https://openalex.org/W2953620812","https://openalex.org/W2963747690","https://openalex.org/W2981908090","https://openalex.org/W3005358365","https://openalex.org/W3037693502","https://openalex.org/W3081093222","https://openalex.org/W3111749540","https://openalex.org/W3126650274","https://openalex.org/W3133067619","https://openalex.org/W4240110967","https://openalex.org/W4253767994","https://openalex.org/W4388147587"],"related_works":["https://openalex.org/W17155033","https://openalex.org/W3207760230","https://openalex.org/W1496222301","https://openalex.org/W4210310791","https://openalex.org/W2062940763","https://openalex.org/W2937343495","https://openalex.org/W4360833258","https://openalex.org/W3048864202","https://openalex.org/W3100746587","https://openalex.org/W197746879"],"abstract_inverted_index":{"Abstract":[0],"The":[1],"Internet-of-Things":[2],"and":[3,18,67,79,130],"ubiquitous":[4],"cyber-physical":[5,12],"systems":[6],"increase":[7],"the":[8,81,102,108,180],"attack":[9],"surface":[10],"for":[11,54,90,152],"attacks.":[13],"They":[14],"exploit":[15],"technical":[16],"vulnerabilities":[17],"human":[19],"weaknesses":[20],"to":[21,43],"wreak":[22],"havoc":[23],"on":[24,101],"organizations\u2019":[25],"information":[26,64],"systems,":[27],"physical":[28],"machines,":[29],"or":[30],"even":[31],"humans.":[32],"Taking":[33],"a":[34,119,164],"stand":[35],"against":[36],"these":[37,172],"multi-dimensional":[38],"attacks":[39],"requires":[40],"automated":[41,183],"measures":[42],"be":[44,176],"combined":[45],"with":[46,182],"people":[47],"as":[48],"their":[49,133,147],"knowledge":[50,66,85,96,150,160,173],"has":[51],"proven":[52],"critical":[53],"security":[55,65,71,92,109,116,122,128,136,141,153,184],"analytics.":[56,93,123,154],"However,":[57,135],"there":[58],"is":[59,98],"no":[60],"uniform":[61],"understanding":[62],"of":[63,84,114,171],"its":[68],"integration":[69],"into":[70],"analytics":[72,110,117,185],"activities.":[73,111],"With":[74],"this":[75],"work,":[76],"we":[77,87],"structure":[78],"formalize":[80],"crucial":[82],"notions":[83],"that":[86,167],"deem":[88],"essential":[89],"holistic":[91],"A":[94],"corresponding":[95],"model":[97],"established":[99],"based":[100],"Incident":[103],"Detection":[104],"Lifecycle,":[105],"which":[106],"summarizes":[107],"This":[112,155],"idea":[113],"knowledge-based":[115],"highlights":[118],"dichotomy":[120],"in":[121,157],"Security":[124],"experts":[125],"can":[126,175],"operate":[127,140],"mechanisms":[129,142],"thus":[131],"contribute":[132],"knowledge.":[134],"novices":[137],"often":[138],"cannot":[139,145],"and,":[143],"therefore,":[144],"make":[146],"highly-specialized":[148],"domain":[149],"available":[151],"results":[156],"several":[158,170],"severe":[159],"gaps.":[161],"We":[162],"present":[163],"research":[165],"prototype":[166],"shows":[168],"how":[169],"gaps":[174],"overcome":[177],"by":[178],"simplifying":[179],"interaction":[181],"techniques.":[186]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}