{"id":"https://openalex.org/W4409249361","doi":"https://doi.org/10.1109/access.2025.3558985","title":"A Hybrid Graph-Based Risk Assessment and Attack Path Detection Model for IoT Systems","display_name":"A Hybrid Graph-Based Risk Assessment and Attack Path Detection Model for IoT Systems","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4409249361","doi":"https://doi.org/10.1109/access.2025.3558985"},"language":"en","primary_location":{"id":"doi:10.1109/access.2025.3558985","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3558985","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3558985","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013379876","display_name":"Ferhat Arat","orcid":"https://orcid.org/0000-0002-4347-0016"},"institutions":[{"id":"https://openalex.org/I4210115931","display_name":"Samsun University","ror":"https://ror.org/02brte405","country_code":"TR","type":"education","lineage":["https://openalex.org/I4210115931"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Ferhat Arat","raw_affiliation_strings":["Department of Software Engineering, Samsun University, Samsun, Türkiye"],"raw_orcid":"https://orcid.org/0000-0002-4347-0016","affiliations":[{"raw_affiliation_string":"Department of Software Engineering, Samsun University, Samsun, Türkiye","institution_ids":["https://openalex.org/I4210115931"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039513308","display_name":"Sedat Akleylek","orcid":"https://orcid.org/0000-0001-7005-6489"},"institutions":[{"id":"https://openalex.org/I56085075","display_name":"University of Tartu","ror":"https://ror.org/03z77qz90","country_code":"EE","type":"education","lineage":["https://openalex.org/I56085075"]}],"countries":["EE"],"is_corresponding":false,"raw_author_name":"Sedat Akleylek","raw_affiliation_strings":["Institute of Computer Science, University of Tartu, Tartu, Estonia"],"raw_orcid":"https://orcid.org/0000-0001-7005-6489","affiliations":[{"raw_affiliation_string":"Institute of Computer Science, University of Tartu, Tartu, Estonia","institution_ids":["https://openalex.org/I56085075"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5114296943","display_name":"Zaliha Y\u00fcce Tok","orcid":"https://orcid.org/0000-0002-4145-0994"},"institutions":[{"id":"https://openalex.org/I56303344","display_name":"Aselsan (Turkey)","ror":"https://ror.org/04knh8e66","country_code":"TR","type":"company","lineage":["https://openalex.org/I56303344"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Zaliha Y\u00fcce Tok","raw_affiliation_strings":["ASELSAN, Ankara, Türkiye"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ASELSAN, Ankara, Türkiye","institution_ids":["https://openalex.org/I56303344"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":1.7678,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.84590805,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"13","issue":null,"first_page":"64770","last_page":"64782"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9908999800682068,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9908999800682068,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9889000058174133,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9646999835968018,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7534279823303223},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.472574383020401},{"id":"https://openalex.org/keywords/risk-assessment","display_name":"Risk assessment","score":0.46810269355773926},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.35942983627319336}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7534279823303223},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.472574383020401},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.46810269355773926},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.35942983627319336}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2025.3558985","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3558985","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:d55a052518404530964407cbb58e09fe","is_oa":true,"landing_page_url":"https://doaj.org/article/d55a052518404530964407cbb58e09fe","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 13, Pp 64770-64782 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3558985","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3558985","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2138603981","display_name":null,"funder_award_id":"2211C","funder_id":"https://openalex.org/F4320322626","funder_display_name":"T\u00fcrkiye Bilimsel ve Teknolojik Ara\u015ft\u0131rma Kurumu"},{"id":"https://openalex.org/G8395212836","display_name":null,"funder_award_id":"1515 grant no 5239902","funder_id":"https://openalex.org/F4320322626","funder_display_name":"T\u00fcrkiye Bilimsel ve Teknolojik Ara\u015ft\u0131rma Kurumu"}],"funders":[{"id":"https://openalex.org/F4320322626","display_name":"T\u00fcrkiye Bilimsel ve Teknolojik Ara\u015ft\u0131rma Kurumu","ror":"https://ror.org/04w9kkr77"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W1987264479","https://openalex.org/W2157554212","https://openalex.org/W2790799828","https://openalex.org/W2890188242","https://openalex.org/W2896143299","https://openalex.org/W2916265211","https://openalex.org/W2940895343","https://openalex.org/W2946134548","https://openalex.org/W2996949461","https://openalex.org/W3150051937","https://openalex.org/W3159652141","https://openalex.org/W3161197673","https://openalex.org/W4223475515","https://openalex.org/W4281726436","https://openalex.org/W4298625430","https://openalex.org/W4312548370","https://openalex.org/W4323352991","https://openalex.org/W4324134785","https://openalex.org/W4360955459","https://openalex.org/W4385739807","https://openalex.org/W4387212647","https://openalex.org/W4388817831","https://openalex.org/W4389486349","https://openalex.org/W4401537182"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W4245926026","https://openalex.org/W4311097251","https://openalex.org/W2586548817","https://openalex.org/W2390279801","https://openalex.org/W2625093826","https://openalex.org/W4391913857","https://openalex.org/W2358668433"],"abstract_inverted_index":{"The":[0,46,202],"rapid":[1],"expansion":[2],"of":[3,5,14,58,80,99,218,240],"Internet":[4],"Things":[6],"(IoT)":[7],"technology":[8],"has":[9],"led":[10],"to":[11,43,54,141,177,243],"a":[12,77,113,132,150,155,173,208],"proliferation":[13],"smart":[15],"devices":[16,35,59],"and":[17,28,38,50,60,93,96,120,137,145,169,200,220],"interconnected":[18],"systems.":[19,82],"Critical":[20],"factors":[21],"such":[22],"as":[23],"production":[24],"limitations,":[25],"cost":[26],"constraints,":[27],"insufficient":[29],"technical":[30],"capabilities":[31],"have":[32,62,73],"rendered":[33],"these":[34,108],"more":[36,195],"vulnerable":[37,85],"at":[39],"higher":[40],"risk":[41,70,119],"compared":[42,242],"traditional":[44],"devices.":[45],"extensive":[47],"data":[48],"processing":[49],"communication":[51,143],"requirements":[52],"due":[53],"the":[55,88,100,146,160,188],"increasing":[56],"number":[57],"connections":[61],"also":[63],"introduced":[64],"significant":[65],"security":[66,69,151,210],"challenges.":[67],"Consequently,":[68],"assessment":[71,115,136],"methodologies":[72],"gained":[74],"relevance":[75],"for":[76,165,230],"wide":[78],"range":[79],"IoT":[81],"However,":[83],"identifying":[84],"nodes":[86],"within":[87,149,187],"system,":[89],"individually":[90],"assessing":[91],"devices,":[92,142],"performing":[94],"compact":[95],"efficient":[97,196],"analyses":[98],"entire":[101],"topology":[102],"remain":[103],"underexplored":[104],"areas.":[105],"To":[106],"address":[107],"gaps,":[109],"this":[110,139],"paper":[111],"presents":[112],"quantitative":[114],"approach":[116,183,229],"based":[117],"on":[118],"vulnerability":[121],"metrics.":[122],"By":[123],"integrating":[124],"computational":[125],"metrics":[126],"from":[127],"existing":[128,244],"literature,":[129],"we":[130,158],"conduct":[131],"host-based":[133],"attack":[134,166,197,233],"probability":[135],"extend":[138],"analysis":[140],"paths,":[144],"overall":[147],"graph":[148,170],"context.":[152],"Beyond":[153],"establishing":[154],"mathematical":[156],"framework,":[157],"refine":[159],"IOTA":[161],"approach,":[162],"typically":[163],"used":[164],"path":[167,198],"detection":[168,199],"generation,":[171],"into":[172],"hybrid":[174,228],"risk-based":[175],"model":[176],"enhance":[178],"search-domain":[179],"efficiency.":[180],"Our":[181],"proposed":[182],"targets":[184],"high-vulnerability":[185],"components":[186],"system":[189],"through":[190],"risk-weighted":[191],"backtracking,":[192],"thereby":[193],"facilitating":[194],"filtering.":[201],"developed":[203],"method":[204],"is":[205],"evaluated":[206],"in":[207,216],"border":[209],"case":[211],"scenario,":[212],"with":[213],"comparisons":[214],"made":[215],"terms":[217],"algorithmic":[219],"asymptotic":[221],"complexity.":[222],"Simulation":[223],"results":[224],"demonstrate":[225],"that":[226],"our":[227],"detecting":[231],"potential":[232],"paths":[234],"achieves":[235],"an":[236],"average":[237],"runtime":[238],"improvement":[239],"16.9%":[241],"methods.":[245]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2}],"updated_date":"2026-08-11T07:18:39.950985","created_date":"2025-10-10T00:00:00"}