{"id":"https://openalex.org/W7123357894","doi":"https://doi.org/10.1109/access.2026.3653365","title":"Attack Classification and Response Framework (ACR) Based on Machine Learning and CAPEC Ontology","display_name":"Attack Classification and Response Framework (ACR) Based on Machine Learning and CAPEC Ontology","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7123357894","doi":"https://doi.org/10.1109/access.2026.3653365"},"language":null,"primary_location":{"id":"doi:10.1109/access.2026.3653365","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3653365","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2026.3653365","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5109586782","display_name":"Ivan Kawaminami","orcid":null},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ivan Kawaminami","raw_affiliation_strings":["NSF Center for Cloud and Autonomic Computing, The University of Arizona, Tucson, AZ, USA"],"raw_orcid":"https://orcid.org/0000-0002-5206-4693","affiliations":[{"raw_affiliation_string":"NSF Center for Cloud and Autonomic Computing, The University of Arizona, Tucson, AZ, USA","institution_ids":["https://openalex.org/I138006243"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5122338366","display_name":"Sicong Shao","orcid":null},"institutions":[{"id":"https://openalex.org/I24571045","display_name":"University of North Dakota","ror":"https://ror.org/04a5szx83","country_code":"US","type":"education","lineage":["https://openalex.org/I24571045"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sicong Shao","raw_affiliation_strings":["School of Electrical Engineering and Computer Science, University of North Dakota, Grand Forks, ND, USA"],"raw_orcid":"https://orcid.org/0000-0003-1205-3890","affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Computer Science, University of North Dakota, Grand Forks, ND, USA","institution_ids":["https://openalex.org/I24571045"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016342888","display_name":"S. Hariri","orcid":null},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Salim Hariri","raw_affiliation_strings":["NSF Center for Cloud and Autonomic Computing, The University of Arizona, Tucson, AZ, USA"],"raw_orcid":"https://orcid.org/0000-0003-3956-3401","affiliations":[{"raw_affiliation_string":"NSF Center for Cloud and Autonomic Computing, The University of Arizona, Tucson, AZ, USA","institution_ids":["https://openalex.org/I138006243"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007796269","display_name":"Cihan Tunc","orcid":"https://orcid.org/0000-0001-5200-1097"},"institutions":[{"id":"https://openalex.org/I123534392","display_name":"University of North Texas","ror":"https://ror.org/00v97ad02","country_code":"US","type":"education","lineage":["https://openalex.org/I123534392"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Cihan Tunc","raw_affiliation_strings":["Department of Computer Science and Engineering, University of North Texas, Denton, TX, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, University of North Texas, Denton, TX, USA","institution_ids":["https://openalex.org/I123534392"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":25.9972,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.98028835,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"14","issue":null,"first_page":"11560","last_page":"11581"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.607200026512146,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.607200026512146,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.2287999987602234,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.021299999207258224,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5708000063896179},{"id":"https://openalex.org/keywords/ontology","display_name":"Ontology","score":0.5482000112533569},{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.43630000948905945},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.4077000021934509},{"id":"https://openalex.org/keywords/statistical-classification","display_name":"Statistical classification","score":0.3684999942779541},{"id":"https://openalex.org/keywords/latency","display_name":"Latency (audio)","score":0.34540000557899475},{"id":"https://openalex.org/keywords/situation-awareness","display_name":"Situation awareness","score":0.33899998664855957}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8568000197410583},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6298999786376953},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5708000063896179},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5625},{"id":"https://openalex.org/C25810664","wikidata":"https://www.wikidata.org/wiki/Q44325","display_name":"Ontology","level":2,"score":0.5482000112533569},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.43630000948905945},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.4077000021934509},{"id":"https://openalex.org/C110083411","wikidata":"https://www.wikidata.org/wiki/Q1744628","display_name":"Statistical classification","level":2,"score":0.3684999942779541},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.34540000557899475},{"id":"https://openalex.org/C145804949","wikidata":"https://www.wikidata.org/wiki/Q478123","display_name":"Situation awareness","level":2,"score":0.33899998664855957},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.3278999924659729},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.326200008392334},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.31029999256134033},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.3077999949455261},{"id":"https://openalex.org/C201307755","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber-attack","level":2,"score":0.2849999964237213},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.2793000042438507},{"id":"https://openalex.org/C136389625","wikidata":"https://www.wikidata.org/wiki/Q334384","display_name":"Supervised learning","level":3,"score":0.27869999408721924},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.26339998841285706},{"id":"https://openalex.org/C62230096","wikidata":"https://www.wikidata.org/wiki/Q275969","display_name":"Crowdsourcing","level":2,"score":0.2542000114917755}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/access.2026.3653365","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3653365","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/access.2026.3653365","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3653365","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G103497871","display_name":null,"funder_award_id":"OIA-2218046","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G1225875991","display_name":null,"funder_award_id":"NSF-1849113","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G332799019","display_name":null,"funder_award_id":"4263090","funder_id":"https://openalex.org/F4320322064","funder_display_name":"Korea Institute for Advancement of Technology"},{"id":"https://openalex.org/G4264887044","display_name":null,"funder_award_id":"NSF-2149969","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5889474861","display_name":null,"funder_award_id":"DUE-1303362","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6708634048","display_name":null,"funder_award_id":"(NSF) DUE-1303362 (Scholarship-for-Service)","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G673270500","display_name":null,"funder_award_id":"(NSF) OIA-2218046","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7819583231","display_name":null,"funder_award_id":"DE-NA0003946","funder_id":"https://openalex.org/F4320332369","funder_display_name":"National Nuclear Security Administration"},{"id":"https://openalex.org/G7861850912","display_name":null,"funder_award_id":"DE-NA0003946","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"},{"id":"https://openalex.org/G8124440412","display_name":null,"funder_award_id":"786773","funder_id":"https://openalex.org/F4320321739","funder_display_name":"Consejo Nacional de Ciencia y Tecnolog\u00eda"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"},{"id":"https://openalex.org/F4320321739","display_name":"Consejo Nacional de Ciencia y Tecnolog\u00eda","ror":"https://ror.org/059ex5q34"},{"id":"https://openalex.org/F4320322064","display_name":"Korea Institute for Advancement of Technology","ror":"https://ror.org/015w1qa96"},{"id":"https://openalex.org/F4320332369","display_name":"National Nuclear Security Administration","ror":"https://ror.org/03sk1we31"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W2046163812","https://openalex.org/W2153635508","https://openalex.org/W2158662820","https://openalex.org/W2295598076","https://openalex.org/W2527760048","https://openalex.org/W2994405706","https://openalex.org/W3039673966","https://openalex.org/W3042853627","https://openalex.org/W3135759237","https://openalex.org/W3139126957","https://openalex.org/W3160751182","https://openalex.org/W3182412462","https://openalex.org/W3185359994","https://openalex.org/W3198575392","https://openalex.org/W3204175201","https://openalex.org/W4200072308","https://openalex.org/W4206015085","https://openalex.org/W4210481850","https://openalex.org/W4212768123","https://openalex.org/W4224223554","https://openalex.org/W4243650394","https://openalex.org/W4281726436","https://openalex.org/W4312671105","https://openalex.org/W4319997251","https://openalex.org/W4324290865","https://openalex.org/W4366447842","https://openalex.org/W4385452996","https://openalex.org/W4387415286","https://openalex.org/W4389319484","https://openalex.org/W4392729271","https://openalex.org/W4398152829","https://openalex.org/W4399881255"],"related_works":[],"abstract_inverted_index":{"The":[0,149],"rapid":[1],"evolution":[2],"of":[3,16,60,114,136,165,189,214],"cyber":[4],"threats":[5],"has":[6,119],"created":[7],"significant":[8],"challenges":[9],"for":[10,145],"maintaining":[11],"the":[12,79,161,174,200,204,209],"security":[13],"and":[14,27,34,38,49,55,67,70,130,141,163,184,212,221],"resilience":[15],"enterprise":[17],"systems.":[18,198],"Existing":[19],"approaches":[20],"have":[21],"relied":[22],"heavily":[23],"on":[24,127],"manual":[25,62,195],"analysis":[26,222],"rule-based":[28,197],"mechanisms,":[29],"resulting":[30],"in":[31,108,167,181],"delayed,":[32],"inconsistent,":[33],"error-prone":[35],"attack":[36,138,147,182],"classification":[37,65,154,183],"response.":[39],"To":[40,75],"overcome":[41],"these":[42],"limitations,":[43],"this":[44,77],"study":[45],"aimed":[46],"to":[47,73,122,158],"design":[48],"evaluate":[50],"an":[51,112,185],"automated":[52],"Attack":[53,89],"Classification":[54],"Response":[56],"(ACR)":[57],"framework":[58,81,176,206],"capable":[59,135],"reducing":[61,218],"intervention,":[63],"improving":[64],"accuracy,":[66,210],"providing":[68],"timely":[69],"intelligent":[71],"responses":[72],"cyberattacks.":[74],"achieve":[76],"objective,":[78],"proposed":[80],"integrates":[82],"three":[83],"core":[84],"components:":[85],"(1)":[86],"a":[87,132,178],"novel":[88],"Footprint":[90],"(AFP)":[91],"data":[92],"structure":[93],"that":[94,95,118,173,203],"encodes":[96],"real-time":[97],"behavioral":[98],"metrics,":[99],"enabling":[100],"ontology-driven":[101,156],"response":[102,143,187],"automation-an":[103],"approach":[104],"not":[105],"previously":[106],"explored":[107],"CAPEC/ATT&CK-based":[109],"systems;":[110],"(2)":[111],"ensemble":[113],"machine":[115],"learning":[116],"models":[117],"been":[120],"trained":[121],"classify":[123],"attacks":[124,166],"accurately":[125],"based":[126],"AFP":[128],"features;":[129],"(3)":[131],"CAPEC-based":[133],"ontology":[134],"define":[137],"characteristics,":[139],"relationships,":[140],"appropriate":[142],"actions":[144],"each":[146],"type.":[148],"methodology":[150],"combined":[151],"supervised":[152],"ML":[153],"with":[155],"reasoning":[157],"automate":[159],"both":[160],"identification":[162],"mitigation":[164],"real":[168],"time.":[169,223],"Experimental":[170],"results":[171],"demonstrated":[172],"ACR":[175,205],"achieved":[177],"99.13%":[179],"F1-score":[180],"average":[186],"latency":[188],"4":[190],"seconds,":[191],"significantly":[192],"outperforming":[193],"conventional":[194],"or":[196],"Overall,":[199],"findings":[201],"confirmed":[202],"effectively":[207],"enhanced":[208],"speed,":[211],"autonomy":[213],"cybersecurity":[215],"operations":[216],"while":[217],"human":[219],"error":[220]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-01-29T23:13:10.619473","created_date":"2026-01-14T00:00:00"}