{"id":"https://openalex.org/W7123357775","doi":"https://doi.org/10.1109/access.2026.3653548","title":"Research on Discovery and Mapping of ATT&CK Tactics and Techniques by Cyber Threat Intelligence Based on BERT-TextCNN","display_name":"Research on Discovery and Mapping of ATT&CK Tactics and Techniques by Cyber Threat Intelligence Based on BERT-TextCNN","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7123357775","doi":"https://doi.org/10.1109/access.2026.3653548"},"language":null,"primary_location":{"id":"doi:10.1109/access.2026.3653548","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3653548","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2026.3653548","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Shuqin Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I132586189","display_name":"Zhongyuan University of Technology","ror":"https://ror.org/0360zcg91","country_code":"CN","type":"education","lineage":["https://openalex.org/I132586189"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuqin Zhang","raw_affiliation_strings":["School of Computer Science, Zhongyuan University of Technology, Zhengzhou, Henan, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, Zhongyuan University of Technology, Zhengzhou, Henan, China","institution_ids":["https://openalex.org/I132586189"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5122867264","display_name":"Dedong Li","orcid":null},"institutions":[{"id":"https://openalex.org/I132586189","display_name":"Zhongyuan University of Technology","ror":"https://ror.org/0360zcg91","country_code":"CN","type":"education","lineage":["https://openalex.org/I132586189"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dedong Li","raw_affiliation_strings":["School of Computer Science, Zhongyuan University of Technology, Zhengzhou, Henan, China"],"raw_orcid":"https://orcid.org/0009-0007-0372-0264","affiliations":[{"raw_affiliation_string":"School of Computer Science, Zhongyuan University of Technology, Zhengzhou, Henan, China","institution_ids":["https://openalex.org/I132586189"]}]},{"author_position":"last","author":{"id":null,"display_name":"Jun Li","orcid":"https://orcid.org/0000-0003-1089-3685"},"institutions":[{"id":"https://openalex.org/I132586189","display_name":"Zhongyuan University of Technology","ror":"https://ror.org/0360zcg91","country_code":"CN","type":"education","lineage":["https://openalex.org/I132586189"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jun Li","raw_affiliation_strings":["School of Computer Science, Zhongyuan University of Technology, Zhengzhou, Henan, China"],"raw_orcid":"https://orcid.org/0000-0003-1089-3685","affiliations":[{"raw_affiliation_string":"School of Computer Science, Zhongyuan University of Technology, Zhengzhou, Henan, China","institution_ids":["https://openalex.org/I132586189"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I132586189"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":24.7794,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.97957228,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"14","issue":null,"first_page":"5984","last_page":"5992"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.29750001430511475,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.29750001430511475,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12572","display_name":"Intelligence, Security, War Strategy","score":0.1639000028371811,"subfield":{"id":"https://openalex.org/subfields/3320","display_name":"Political Science and International Relations"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.061400000005960464,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.597100019454956},{"id":"https://openalex.org/keywords/standardization","display_name":"Standardization","score":0.5884000062942505},{"id":"https://openalex.org/keywords/documentation","display_name":"Documentation","score":0.5375999808311462},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.450300008058548},{"id":"https://openalex.org/keywords/knowledge-base","display_name":"Knowledge base","score":0.4239000082015991},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.4025999903678894},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.3594000041484833},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.34060001373291016},{"id":"https://openalex.org/keywords/baseline","display_name":"Baseline (sea)","score":0.3352000117301941}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8450000286102295},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.597100019454956},{"id":"https://openalex.org/C188087704","wikidata":"https://www.wikidata.org/wiki/Q369577","display_name":"Standardization","level":2,"score":0.5884000062942505},{"id":"https://openalex.org/C56666940","wikidata":"https://www.wikidata.org/wiki/Q788790","display_name":"Documentation","level":2,"score":0.5375999808311462},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.450300008058548},{"id":"https://openalex.org/C4554734","wikidata":"https://www.wikidata.org/wiki/Q593744","display_name":"Knowledge base","level":2,"score":0.4239000082015991},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.41819998621940613},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.4025999903678894},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3871000111103058},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.3594000041484833},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3508000075817108},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.34060001373291016},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.3352000117301941},{"id":"https://openalex.org/C187191949","wikidata":"https://www.wikidata.org/wiki/Q1138496","display_name":"Profiling (computer programming)","level":2,"score":0.334199994802475},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.3330000042915344},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.3294000029563904},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.31619998812675476},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3140000104904175},{"id":"https://openalex.org/C517642484","wikidata":"https://www.wikidata.org/wiki/Q2388514","display_name":"Intelligence analysis","level":2,"score":0.3037000000476837},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3012000024318695},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.29660001397132874},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.29089999198913574},{"id":"https://openalex.org/C123860398","wikidata":"https://www.wikidata.org/wiki/Q6934605","display_name":"Multiclass classification","level":3,"score":0.27799999713897705},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.27230000495910645},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2578999996185303},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.25609999895095825},{"id":"https://openalex.org/C2781252014","wikidata":"https://www.wikidata.org/wiki/Q1141900","display_name":"Unstructured data","level":3,"score":0.25060001015663147}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/access.2026.3653548","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3653548","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/access.2026.3653548","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3653548","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3328979115","display_name":null,"funder_award_id":"251111212000","funder_id":"https://openalex.org/F4320336597","funder_display_name":"Key Research and Development Program of Wuhu"},{"id":"https://openalex.org/G4898814878","display_name":null,"funder_award_id":"YKY2025ZK19","funder_id":"https://openalex.org/F4320329543","funder_display_name":"Zhongyuan University of Technology"}],"funders":[{"id":"https://openalex.org/F4320329543","display_name":"Zhongyuan University of Technology","ror":"https://ror.org/0360zcg91"},{"id":"https://openalex.org/F4320336597","display_name":"Key Research and Development Program of Wuhu","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W2538865281","https://openalex.org/W2771963642","https://openalex.org/W2837911466","https://openalex.org/W2900914892","https://openalex.org/W3007067381","https://openalex.org/W3009066821","https://openalex.org/W3042306246","https://openalex.org/W3164269180","https://openalex.org/W3196325333","https://openalex.org/W3199212845","https://openalex.org/W3211888892","https://openalex.org/W4223944214","https://openalex.org/W4312995921","https://openalex.org/W4324031781","https://openalex.org/W4392947753","https://openalex.org/W4402622967"],"related_works":[],"abstract_inverted_index":{"Cyber":[0],"Threat":[1],"Intelligence":[2],"(CTI)":[3],"serves":[4],"as":[5],"a":[6,37,65,73,106,171],"critical":[7],"component":[8],"in":[9,21,88,114,177],"modern":[10],"cybersecurity.":[11],"Nevertheless,":[12],"the":[13,56,83,89,111,115,127,151,178],"different":[14],"writing":[15],"styles":[16],"and":[17,43,49,72,85,103,120,146],"lack":[18],"of":[19,46,142],"standardization":[20],"CTI":[22,163],"documentation":[23],"impose":[24],"significant":[25],"interpretation":[26],"overhead":[27],"on":[28,82,105],"security":[29,175],"analysts.":[30],"To":[31],"mitigate":[32],"this":[33],"challenge,":[34],"we":[35],"present":[36],"structured":[38,165],"methodology":[39],"for":[40,69,144,148],"automated":[41],"extraction":[42],"contextual":[44],"mapping":[45],"adversarial":[47],"tactics":[48,84,145],"techniques":[50],"from":[51,110,126],"unstructured":[52,162],"threat":[53],"reports":[54,125],"to":[55,134,173],"ATT&CK":[57,90,117,131],"framework.":[58],"Our":[59],"architecture":[60],"comprises":[61],"two":[62],"core":[63],"components:":[64],"BERT-TextCNN":[66],"hybrid":[67],"classifier":[68],"feature":[70],"extraction,":[71],"result":[74],"correction":[75],"module":[76],"that":[77],"corrects":[78],"classification":[79,140],"results":[80,138],"based":[81],"technique":[86],"dependencies":[87],"matrix,":[91],"thereby":[92],"eliminating":[93],"errors":[94],"caused":[95],"by":[96],"independent":[97],"predictions.":[98],"The":[99,157],"model":[100],"is":[101],"trained":[102],"evaluated":[104],"composite":[107],"dataset,":[108],"constructed":[109],"canonical":[112],"descriptions":[113],"MITRE":[116],"knowledge":[118,166],"base":[119],"supplemented":[121],"with":[122,150,168],"annotated":[123],"real-world":[124],"TRAM":[128],"(Threat":[129],"Report":[130],"Mapping)":[132],"dataset":[133],"enhance":[135],"generalization.":[136],"Evaluation":[137],"demonstrate":[139],"accuracy":[141],"83.80%":[143],"71.74%":[147],"techniques,":[149],"latter":[152],"outperforming":[153],"existing":[154],"baseline":[155],"approaches.":[156],"proposed":[158],"method":[159],"effectively":[160],"converts":[161],"into":[164],"aligned":[167],"ATT&CK,":[169],"providing":[170],"tool":[172],"assist":[174],"analysts":[176],"intelligence":[179],"processing":[180],"pipeline.":[181]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2026-01-14T00:00:00"}