{"id":"https://openalex.org/W4388676551","doi":"https://doi.org/10.1109/access.2023.3332834","title":"ESASCF: Expertise Extraction, Generalization and Reply Framework for Optimized Automation of Network Security Compliance","display_name":"ESASCF: Expertise Extraction, Generalization and Reply Framework for Optimized Automation of Network Security Compliance","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4388676551","doi":"https://doi.org/10.1109/access.2023.3332834"},"language":"en","primary_location":{"id":"doi:10.1109/access.2023.3332834","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3332834","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10318088.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10318088.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101549630","display_name":"Mohamed Chahine Ghanem","orcid":"https://orcid.org/0000-0002-7067-7848"},"institutions":[{"id":"https://openalex.org/I126193024","display_name":"London Metropolitan University","ror":"https://ror.org/00ae33288","country_code":"GB","type":"education","lineage":["https://openalex.org/I126193024"]},{"id":"https://openalex.org/I146655781","display_name":"University of Liverpool","ror":"https://ror.org/04xs57h96","country_code":"GB","type":"education","lineage":["https://openalex.org/I146655781"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Mohamed Chahine Ghanem","raw_affiliation_strings":["Cyber Security Research Centre, London Metropolitan University, London, U.K","Department of Computer Sciences, University of Liverpool, Liverpool, UK"],"raw_orcid":"https://orcid.org/0000-0002-7067-7848","affiliations":[{"raw_affiliation_string":"Cyber Security Research Centre, London Metropolitan University, London, U.K","institution_ids":["https://openalex.org/I126193024"]},{"raw_affiliation_string":"Department of Computer Sciences, University of Liverpool, Liverpool, UK","institution_ids":["https://openalex.org/I146655781"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090198866","display_name":"Tom Chen","orcid":"https://orcid.org/0000-0001-8037-1685"},"institutions":[{"id":"https://openalex.org/I180825142","display_name":"City, University of London","ror":"https://ror.org/04489at23","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I180825142"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Thomas M. Chen","raw_affiliation_strings":["Department of Engineering, City, University of London, London, U.K"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Engineering, City, University of London, London, U.K","institution_ids":["https://openalex.org/I180825142"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026903935","display_name":"Mohamed Amine Ferrag","orcid":"https://orcid.org/0000-0002-0632-3172"},"institutions":[{"id":"https://openalex.org/I4210087059","display_name":"Technology Innovation Institute","ror":"https://ror.org/001kv2y39","country_code":"AE","type":"facility","lineage":["https://openalex.org/I4210087059"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Mohamed Amine Ferrag","raw_affiliation_strings":["Technology Innovation Institute, Abu Dhabi, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0002-0632-3172","affiliations":[{"raw_affiliation_string":"Technology Innovation Institute, Abu Dhabi, United Arab Emirates","institution_ids":["https://openalex.org/I4210087059"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5050444875","display_name":"Mohyi E. Kettouche","orcid":null},"institutions":[{"id":"https://openalex.org/I126193024","display_name":"London Metropolitan University","ror":"https://ror.org/00ae33288","country_code":"GB","type":"education","lineage":["https://openalex.org/I126193024"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Mohyi E. Kettouche","raw_affiliation_strings":["Cyber Security Research Centre, London Metropolitan University, London, U.K"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyber Security Research Centre, London Metropolitan University, London, U.K","institution_ids":["https://openalex.org/I126193024"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":3.2062,"has_fulltext":true,"cited_by_count":24,"citation_normalized_percentile":{"value":0.92197854,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":"11","issue":null,"first_page":"129840","last_page":"129853"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9858999848365784,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/compliance","display_name":"Compliance (psychology)","score":0.7324782013893127},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7231693267822266},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.6127086877822876},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.5711532831192017},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4072926640510559},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.09454944729804993},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.07537469267845154}],"concepts":[{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.7324782013893127},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7231693267822266},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.6127086877822876},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.5711532831192017},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4072926640510559},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.09454944729804993},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.07537469267845154},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2023.3332834","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3332834","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10318088.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:c643e4e4f038480987d0dc3d8235ff48","is_oa":true,"landing_page_url":"https://doaj.org/article/c643e4e4f038480987d0dc3d8235ff48","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 11, Pp 129840-129853 (2023)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2023.3332834","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3332834","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10318088.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4388676551.pdf","grobid_xml":"https://content.openalex.org/works/W4388676551.grobid-xml"},"referenced_works_count":37,"referenced_works":["https://openalex.org/W32296153","https://openalex.org/W157669941","https://openalex.org/W1978913807","https://openalex.org/W1987464371","https://openalex.org/W2007049449","https://openalex.org/W2038235314","https://openalex.org/W2052788169","https://openalex.org/W2088688030","https://openalex.org/W2113631710","https://openalex.org/W2116148009","https://openalex.org/W2134633310","https://openalex.org/W2331904237","https://openalex.org/W2586823173","https://openalex.org/W2616205851","https://openalex.org/W2783394300","https://openalex.org/W2803522214","https://openalex.org/W2954034063","https://openalex.org/W2966351590","https://openalex.org/W2984080647","https://openalex.org/W2990919482","https://openalex.org/W2995988246","https://openalex.org/W3037017500","https://openalex.org/W3109748113","https://openalex.org/W3121575936","https://openalex.org/W3149084432","https://openalex.org/W3168746969","https://openalex.org/W4220693346","https://openalex.org/W4244301268","https://openalex.org/W4249515982","https://openalex.org/W4283008747","https://openalex.org/W4293545211","https://openalex.org/W4295279953","https://openalex.org/W4360764871","https://openalex.org/W6606508382","https://openalex.org/W6640461139","https://openalex.org/W6738288010","https://openalex.org/W6764589569"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2410395228","https://openalex.org/W2390279801","https://openalex.org/W3125941065","https://openalex.org/W3162204513","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345"],"abstract_inverted_index":{"Organizations":[0],"constantly":[1],"exposed":[2],"to":[3,8,36,51,65,96,151,174],"cyber":[4,11],"threats":[5],"are":[6,28],"compelled":[7],"comply":[9],"with":[10],"security":[12,33,38,42,48,74,184],"standards":[13],"and":[14,24,40,55,78,90,93,100,118,126,137,147,186,204,218],"policies":[15],"for":[16,32,47,171],"protecting":[17],"their":[18],"digital":[19],"assets.":[20],"Vulnerability":[21],"assessment":[22],"(VA)":[23],"penetration":[25],"testing":[26,127],"(PT)":[27],"widely":[29],"adopted":[30],"methods":[31,46],"compliance":[34,49,157,185],"(SC)":[35],"identify":[37],"gaps":[39],"anticipate":[41],"breaches.":[43],"However,":[44],"these":[45],"tend":[50],"be":[52],"highly":[53],"repetitive":[54],"resource-intensive.":[56],"In":[57,190],"this":[58],"paper,":[59],"we":[60],"propose":[61],"a":[62,163,195],"novel":[63],"method":[64],"tackle":[66],"the":[67,102,133,139,168,177,192,200,213],"ever-growing":[68],"problem":[69],"of":[70,123,179,212],"efficiency":[71,125],"in":[72,104,121,135,155,176,188,199,222],"network":[73],"auditing":[75],"by":[76,142,166],"designing":[77],"developing":[79],"an":[80,172],"Expert-System":[81],"Automated":[82],"Security":[83],"Compliance":[84],"Framework":[85],"(ESASCF).":[86],"ESASCF":[87,111,129],"enables":[88,207],"industrial":[89],"open-source":[91],"VA":[92],"PT":[94],"tools":[95],"extract,":[97],"process,":[98],"store":[99],"re-use":[101],"expertise":[103],"similar":[105],"scenarios":[106],"or":[107],"during":[108],"periodic":[109],"re-testing.":[110,189],"was":[112],"tested":[113],"on":[114],"different":[115],"size":[116],"networks":[117],"proved":[119],"efficient":[120],"terms":[122],"time":[124,169],"effectiveness.":[128],"takes":[130],"over":[131],"autonomously":[132],"SC":[134,146,209],"re-testing":[136],"offloading":[138],"human":[140,214],"expert":[141,173,215],"automating":[143],"repeated":[144],"segments":[145],"thus":[148],"enabling":[149],"experts":[150],"prioritize":[152],"important":[153],"tasks":[154],"ad-hoc":[156],"tests.":[158],"The":[159],"obtained":[160],"results":[161],"show":[162],"performance":[164],"improvement":[165],"cutting":[167],"required":[170],"50%":[175],"context":[178],"typical":[180],"corporate":[181],"networks\u2019":[182],"first":[183],"20%":[187],"addition,":[191],"framework":[193],"allows":[194],"long-term":[196],"impact":[197],"illustrated":[198],"knowledge":[201],"extraction,":[202],"generalization,":[203],"re-utilization,":[205],"which":[206],"better":[208],"confidence":[210],"independent":[211],"skills,":[216],"coverage,":[217],"wrong":[219],"decisions":[220],"resulting":[221],"false":[223],"negatives.":[224]},"counts_by_year":[{"year":2026,"cited_by_count":10},{"year":2025,"cited_by_count":9},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-18T07:39:51.176621","created_date":"2025-10-10T00:00:00"}