{"id":"https://openalex.org/W4402639489","doi":"https://doi.org/10.1016/j.cose.2024.104125","title":"RAF-AG: Report analysis framework for attack path generation","display_name":"RAF-AG: Report analysis framework for attack path generation","publication_year":2024,"publication_date":"2024-09-19","ids":{"openalex":"https://openalex.org/W4402639489","doi":"https://doi.org/10.1016/j.cose.2024.104125"},"language":"en","primary_location":{"id":"doi:10.1016/j.cose.2024.104125","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2024.104125","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.cose.2024.104125","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5104089051","display_name":"Khang Mai","orcid":"https://orcid.org/0009-0000-2488-6043"},"institutions":[{"id":"https://openalex.org/I177738480","display_name":"Japan Advanced Institute of Science and Technology","ror":"https://ror.org/03frj4r98","country_code":"JP","type":"education","lineage":["https://openalex.org/I177738480"]}],"countries":["JP"],"is_corresponding":true,"raw_author_name":"Khang Mai","raw_affiliation_strings":["Japan Advanced Institute of Science and Technology, 1-1 Asahidai, Nomi, 923-1211, Ishikawa, Japan"],"raw_orcid":"https://orcid.org/0009-0000-2488-6043","affiliations":[{"raw_affiliation_string":"Japan Advanced Institute of Science and Technology, 1-1 Asahidai, Nomi, 923-1211, Ishikawa, Japan","institution_ids":["https://openalex.org/I177738480"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100341491","display_name":"Jongmin Lee","orcid":"https://orcid.org/0000-0002-6167-7926"},"institutions":[{"id":"https://openalex.org/I177738480","display_name":"Japan Advanced Institute of Science and Technology","ror":"https://ror.org/03frj4r98","country_code":"JP","type":"education","lineage":["https://openalex.org/I177738480"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Jongmin Lee","raw_affiliation_strings":["Japan Advanced Institute of Science and Technology, 1-1 Asahidai, Nomi, 923-1211, Ishikawa, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Japan Advanced Institute of Science and Technology, 1-1 Asahidai, Nomi, 923-1211, Ishikawa, Japan","institution_ids":["https://openalex.org/I177738480"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011358297","display_name":"R\u0103zvan Beuran","orcid":"https://orcid.org/0000-0002-4109-3763"},"institutions":[{"id":"https://openalex.org/I177738480","display_name":"Japan Advanced Institute of Science and Technology","ror":"https://ror.org/03frj4r98","country_code":"JP","type":"education","lineage":["https://openalex.org/I177738480"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Razvan Beuran","raw_affiliation_strings":["Japan Advanced Institute of Science and Technology, 1-1 Asahidai, Nomi, 923-1211, Ishikawa, Japan"],"raw_orcid":"https://orcid.org/0000-0002-4109-3763","affiliations":[{"raw_affiliation_string":"Japan Advanced Institute of Science and Technology, 1-1 Asahidai, Nomi, 923-1211, Ishikawa, Japan","institution_ids":["https://openalex.org/I177738480"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068373176","display_name":"Ryosuke Hotchi","orcid":"https://orcid.org/0000-0003-0323-6468"},"institutions":[{"id":"https://openalex.org/I118347220","display_name":"NEC (Japan)","ror":"https://ror.org/04jndar25","country_code":"JP","type":"company","lineage":["https://openalex.org/I118347220"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Ryosuke Hotchi","raw_affiliation_strings":["NEC Corporation, Shiba 5-7-1, Minato-ku, Tokyo, 108-8001, Japan"],"raw_orcid":"https://orcid.org/0000-0003-0323-6468","affiliations":[{"raw_affiliation_string":"NEC Corporation, Shiba 5-7-1, Minato-ku, Tokyo, 108-8001, Japan","institution_ids":["https://openalex.org/I118347220"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066707341","display_name":"Sian En Ooi","orcid":"https://orcid.org/0009-0003-9738-699X"},"institutions":[{"id":"https://openalex.org/I118347220","display_name":"NEC (Japan)","ror":"https://ror.org/04jndar25","country_code":"JP","type":"company","lineage":["https://openalex.org/I118347220"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Sian En Ooi","raw_affiliation_strings":["NEC Corporation, Shiba 5-7-1, Minato-ku, Tokyo, 108-8001, Japan"],"raw_orcid":"https://orcid.org/0009-0003-9738-699X","affiliations":[{"raw_affiliation_string":"NEC Corporation, Shiba 5-7-1, Minato-ku, Tokyo, 108-8001, Japan","institution_ids":["https://openalex.org/I118347220"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063309609","display_name":"Takayuki Kuroda","orcid":"https://orcid.org/0000-0002-4926-9305"},"institutions":[{"id":"https://openalex.org/I118347220","display_name":"NEC (Japan)","ror":"https://ror.org/04jndar25","country_code":"JP","type":"company","lineage":["https://openalex.org/I118347220"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Takayuki Kuroda","raw_affiliation_strings":["NEC Corporation, Shiba 5-7-1, Minato-ku, Tokyo, 108-8001, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NEC Corporation, Shiba 5-7-1, Minato-ku, Tokyo, 108-8001, Japan","institution_ids":["https://openalex.org/I118347220"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5106403018","display_name":"Yasuo Tan","orcid":null},"institutions":[{"id":"https://openalex.org/I177738480","display_name":"Japan Advanced Institute of Science and Technology","ror":"https://ror.org/03frj4r98","country_code":"JP","type":"education","lineage":["https://openalex.org/I177738480"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Yasuo Tan","raw_affiliation_strings":["Japan Advanced Institute of Science and Technology, 1-1 Asahidai, Nomi, 923-1211, Ishikawa, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Japan Advanced Institute of Science and Technology, 1-1 Asahidai, Nomi, 923-1211, Ishikawa, Japan","institution_ids":["https://openalex.org/I177738480"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5104089051"],"corresponding_institution_ids":["https://openalex.org/I177738480"],"apc_list":{"value":3190,"currency":"USD","value_usd":3190},"apc_paid":{"value":3190,"currency":"USD","value_usd":3190},"fwci":2.238,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.90666277,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":"148","issue":null,"first_page":"104125","last_page":"104125"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9965000152587891,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14470","display_name":"Advanced Data Processing Techniques","score":0.9577999711036682,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6911234855651855},{"id":"https://openalex.org/keywords/path","display_name":"Path (computing)","score":0.5275233387947083},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3354548215866089},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.2080059051513672}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6911234855651855},{"id":"https://openalex.org/C2777735758","wikidata":"https://www.wikidata.org/wiki/Q817765","display_name":"Path (computing)","level":2,"score":0.5275233387947083},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3354548215866089},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2080059051513672}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.cose.2024.104125","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2024.104125","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1016/j.cose.2024.104125","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2024.104125","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W1962622193","https://openalex.org/W2047655726","https://openalex.org/W2076542142","https://openalex.org/W2524643686","https://openalex.org/W2771976988","https://openalex.org/W2912083425","https://openalex.org/W2915048431","https://openalex.org/W2924700250","https://openalex.org/W2965373594","https://openalex.org/W3176289544","https://openalex.org/W3186276894","https://openalex.org/W4231475713","https://openalex.org/W4240134866","https://openalex.org/W4285250401","https://openalex.org/W4296918582","https://openalex.org/W4387298299","https://openalex.org/W4388441710","https://openalex.org/W4390682030","https://openalex.org/W6681262047","https://openalex.org/W6739901393","https://openalex.org/W6754654208","https://openalex.org/W6755207826","https://openalex.org/W6761205521","https://openalex.org/W6793649513","https://openalex.org/W6803974822","https://openalex.org/W6838497180","https://openalex.org/W6846884853","https://openalex.org/W6860338728"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052","https://openalex.org/W2382290278","https://openalex.org/W4395014643"],"abstract_inverted_index":{"Information":[0],"sharing":[1],"is":[2,57,132],"a":[3,58,100,124,177],"key":[4],"practice":[5],"in":[6,74,93,152],"cybersecurity":[7,34,154],"for":[8,104,118,128,140,160],"coping":[9],"with":[10,172,201,209],"the":[11,49,54,78,114,142,148,153,158,168,196,204],"ever-changing":[12],"cyberattacks":[13],"that":[14],"are":[15,29],"targeting":[16],"computer":[17],"systems.":[18],"Thus,":[19],"when":[20],"cyber":[21,24],"incidents":[22],"happen,":[23],"threat":[25],"intelligence":[26],"(CTI)":[27],"reports":[28],"prepared":[30],"and":[31,47,120,123,137,198],"shared":[32],"among":[33],"practitioners":[35],"to":[36,52,69,76,186,215],"help":[37],"them":[38,200],"get":[39],"up-to-date":[40],"information":[41,56],"about":[42],"those":[43,173],"incidents.":[44],"However,":[45],"reading":[46],"analyzing":[48],"report":[50,72,101,180],"text":[51],"comprehend":[53],"included":[55],"cumbersome":[59],"process.":[60],"Although":[61],"techniques":[62,202],"based":[63],"on":[64],"deep":[65],"learning":[66],"were":[67],"proposed":[68],"speed":[70],"up":[71],"analysis":[73,102,181],"order":[75,194],"obtain":[77],"enclosed":[79],"essential":[80],"information,":[81],"such":[82],"as":[83],"attack":[84,105,143,170],"path,":[85],"training":[86],"data":[87,149],"insufficiency":[88,150],"makes":[89],"these":[90],"methods":[91],"inefficient":[92],"practical":[94],"circumstances.":[95],"This":[96,131],"paper":[97],"presents":[98],"RAF-AG,":[99],"framework":[103],"path":[106],"generation.":[107],"To":[108],"analyze":[109],"CTI":[110],"reports,":[111],"RAF-AG":[112,165,183],"utilizes":[113],"sentence":[115],"dependency":[116],"tree":[117],"entity":[119,129],"relation":[121],"extraction,":[122],"weak":[125],"supervision":[126],"approach":[127,146],"labeling.":[130],"followed":[133],"by":[134,156,166,175,190],"graph":[135,138],"building":[136],"alignment":[139],"generating":[141],"paths.":[144],"Our":[145],"resolves":[147],"problem":[151],"domain":[155],"lowering":[157],"need":[159],"expert":[161],"involvement.":[162],"We":[163],"evaluated":[164],"comparing":[167],"generated":[169],"paths":[171],"produced":[174],"AttacKG,":[176],"state-of-the-art":[178],"automatic":[179],"framework.":[182],"was":[184],"able":[185],"identify":[187],"cyberattack":[188],"steps":[189],"matching":[191],"their":[192],"appearance":[193],"inside":[195],"report,":[197],"link":[199],"from":[203],"MITRE":[205],"ATT&CK":[206],"knowledge":[207],"base":[208],"an":[210],"improved":[211],"F1":[212],"score":[213],"compared":[214],"AttacKG":[216],"(0.708":[217],"versus":[218],"0.393).":[219]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}