{"id":"https://openalex.org/W7152988306","doi":"https://doi.org/10.1109/access.2026.3682868","title":"LLM-Guided Classification and Extension of the MISP Taxonomy for Dark Web Q&A Forums","display_name":"LLM-Guided Classification and Extension of the MISP Taxonomy for Dark Web Q&A Forums","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7152988306","doi":"https://doi.org/10.1109/access.2026.3682868"},"language":"en","primary_location":{"id":"doi:10.1109/access.2026.3682868","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3682868","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2026.3682868","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5128572671","display_name":"Luis de-Marcos","orcid":null},"institutions":[{"id":"https://openalex.org/I189268942","display_name":"Universidad de Alcal\u00e1","ror":"https://ror.org/04pmn0e78","country_code":"ES","type":"education","lineage":["https://openalex.org/I189268942"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Luis de-Marcos","raw_affiliation_strings":["Departamento de Ciencias de la Computación, Universidad de Alcalá, Alcala de Henares, Spain"],"raw_orcid":"https://orcid.org/0000-0003-0718-8774","affiliations":[{"raw_affiliation_string":"Departamento de Ciencias de la Computación, Universidad de Alcalá, Alcala de Henares, Spain","institution_ids":["https://openalex.org/I189268942"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5118974246","display_name":"Mikel Ferrer-Oliva","orcid":"https://orcid.org/0009-0001-0610-8210"},"institutions":[{"id":"https://openalex.org/I189268942","display_name":"Universidad de Alcal\u00e1","ror":"https://ror.org/04pmn0e78","country_code":"ES","type":"education","lineage":["https://openalex.org/I189268942"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Mikel Ferrer-Oliva","raw_affiliation_strings":["Departamento de Ciencias de la Computación, Universidad de Alcalá, Alcala de Henares, Spain"],"raw_orcid":"https://orcid.org/0009-0001-0610-8210","affiliations":[{"raw_affiliation_string":"Departamento de Ciencias de la Computación, Universidad de Alcalá, Alcala de Henares, Spain","institution_ids":["https://openalex.org/I189268942"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133388707","display_name":"Alejandro Ruiz-Zambrano","orcid":null},"institutions":[{"id":"https://openalex.org/I189268942","display_name":"Universidad de Alcal\u00e1","ror":"https://ror.org/04pmn0e78","country_code":"ES","type":"education","lineage":["https://openalex.org/I189268942"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Alejandro Ruiz-Zambrano","raw_affiliation_strings":["Departamento de Ciencias de la Computación, Universidad de Alcalá, Alcala de Henares, Spain"],"raw_orcid":"https://orcid.org/0009-0002-2560-5885","affiliations":[{"raw_affiliation_string":"Departamento de Ciencias de la Computación, Universidad de Alcalá, Alcala de Henares, Spain","institution_ids":["https://openalex.org/I189268942"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128388505","display_name":"Adri\u00e1n Dom\u00ednguez-D\u00edaz","orcid":null},"institutions":[{"id":"https://openalex.org/I189268942","display_name":"Universidad de Alcal\u00e1","ror":"https://ror.org/04pmn0e78","country_code":"ES","type":"education","lineage":["https://openalex.org/I189268942"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Adri\u00e1n Dom\u00ednguez-D\u00edaz","raw_affiliation_strings":["Departamento de Ciencias de la Computación, Universidad de Alcalá, Alcala de Henares, Spain"],"raw_orcid":"https://orcid.org/0000-0001-7632-8609","affiliations":[{"raw_affiliation_string":"Departamento de Ciencias de la Computación, Universidad de Alcalá, Alcala de Henares, Spain","institution_ids":["https://openalex.org/I189268942"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133343592","display_name":"Jos\u00e9 Fern\u00e1ndez-L\u00f3pez","orcid":"https://orcid.org/0000-0001-7632-8609"},"institutions":[{"id":"https://openalex.org/I189268942","display_name":"Universidad de Alcal\u00e1","ror":"https://ror.org/04pmn0e78","country_code":"ES","type":"education","lineage":["https://openalex.org/I189268942"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Jos\u00e9 Fern\u00e1ndez-L\u00f3pez","raw_affiliation_strings":["Departamento de Ciencias de la Computación, Universidad de Alcalá, Alcala de Henares, Spain"],"raw_orcid":"https://orcid.org/0009-0002-5826-5266","affiliations":[{"raw_affiliation_string":"Departamento de Ciencias de la Computación, Universidad de Alcalá, Alcala de Henares, Spain","institution_ids":["https://openalex.org/I189268942"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5125507023","display_name":"Jose-Amelio Medina-Merodio","orcid":null},"institutions":[{"id":"https://openalex.org/I189268942","display_name":"Universidad de Alcal\u00e1","ror":"https://ror.org/04pmn0e78","country_code":"ES","type":"education","lineage":["https://openalex.org/I189268942"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Jos\u00e9-Amelio Medina-Merodio","raw_affiliation_strings":["Departamento de Ciencias de la Computación, Universidad de Alcalá, Alcala de Henares, Spain"],"raw_orcid":"https://orcid.org/0000-0003-3359-4952","affiliations":[{"raw_affiliation_string":"Departamento de Ciencias de la Computación, Universidad de Alcalá, Alcala de Henares, Spain","institution_ids":["https://openalex.org/I189268942"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I189268942"],"apc_list":{"value":2075,"currency":"USD","value_usd":2075},"apc_paid":{"value":2075,"currency":"USD","value_usd":2075},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.39171778,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"14","issue":null,"first_page":"57747","last_page":"57762"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T13274","display_name":"Expert finding and Q&A systems","score":0.6901000142097473,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T13274","display_name":"Expert finding and Q&A systems","score":0.6901000142097473,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12380","display_name":"Authorship Attribution and Profiling","score":0.042500000447034836,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10286","display_name":"Information Retrieval and Search Behavior","score":0.024399999529123306,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/taxonomy","display_name":"Taxonomy (biology)","score":0.6399999856948853},{"id":"https://openalex.org/keywords/extension","display_name":"Extension (predicate logic)","score":0.6245999932289124},{"id":"https://openalex.org/keywords/deep-web","display_name":"Deep Web","score":0.45509999990463257},{"id":"https://openalex.org/keywords/semantic-web","display_name":"Semantic Web","score":0.3521000146865845},{"id":"https://openalex.org/keywords/web-service","display_name":"Web service","score":0.2777000069618225}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7032999992370605},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.6399999856948853},{"id":"https://openalex.org/C2778029271","wikidata":"https://www.wikidata.org/wiki/Q5421931","display_name":"Extension (predicate logic)","level":2,"score":0.6245999932289124},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5914999842643738},{"id":"https://openalex.org/C46721378","wikidata":"https://www.wikidata.org/wiki/Q221989","display_name":"Deep Web","level":3,"score":0.45509999990463257},{"id":"https://openalex.org/C2129575","wikidata":"https://www.wikidata.org/wiki/Q54837","display_name":"Semantic Web","level":2,"score":0.3521000146865845},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.3224000036716461},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.29420000314712524},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.2777000069618225},{"id":"https://openalex.org/C136699151","wikidata":"https://www.wikidata.org/wiki/Q131164","display_name":"Web 2.0","level":3,"score":0.2500999867916107}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2026.3682868","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3682868","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:08c93a8df67741a590ee85aa97272eb7","is_oa":true,"landing_page_url":"https://doaj.org/article/08c93a8df67741a590ee85aa97272eb7","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 14, Pp 57747-57762 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2026.3682868","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3682868","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Dark":[0],"web":[1,42,53,180],"question-and-answer":[2],"(Q&A)":[3],"forums":[4],"hosted":[5],"on":[6,173],"the":[7,39,70,107,110,134,149,184],"Tor":[8],"network":[9],"serve":[10],"as":[11,166],"critical":[12],"hubs":[13],"for":[14,44,89,92,127,131,160],"cyber":[15],"threats":[16,140],"and":[17,37,59,80,104,118,129,141,170,187],"social":[18,189],"interactions,":[19],"yet":[20],"their":[21],"diverse":[22],"content":[23],"challenges":[24],"traditional":[25,146],"classification":[26,68],"methods.":[27],"This":[28],"study":[29,177],"leverages":[30],"large":[31],"language":[32],"models":[33],"(LLMs)":[34],"to":[35,125,145],"classify":[36],"extend":[38],"MISP":[40,111,185],"dark":[41,52,179],"taxonomy":[43,112,186],"analyzing":[45],"2,055":[46],"substantive":[47],"posts":[48,98],"from":[49],"three":[50,174],"high-traffic":[51],"Q&A":[54],"forums,":[55,175],"scraped":[56],"between":[57],"July":[58],"November":[60],"2024.":[61],"A":[62],"multi-stage":[63],"pipeline":[64],"was":[65],"employed:":[66],"initial":[67],"with":[69,113],"Mistral":[71],"7B":[72],"model":[73],"identified":[74],"dominant":[75],"topics":[76,128],"(e.g.,":[77,82],"\"finance-crypto,\"":[78],"10.80%)":[79],"motivations":[81],"\"forum,\"":[83],"20.54%),":[84],"revealing":[85,188],"high":[86],"ambiguity":[87,124],"(40.34%":[88],"topics,":[90],"10.37%":[91],"motivations).":[93],"HDBSCAN":[94],"clustering":[95],"of":[96,109,137],"ambiguous":[97],"uncovered":[99],"novel":[100],"themes,":[101],"including":[102],"\"mental-health\"":[103],"\"confessions-and-personal-secrets,\"":[105],"prompting":[106],"extension":[108],"seven":[114],"new":[115],"topic":[116,147],"categories":[117],"one":[119],"motivation":[120],"category.":[121],"Reclassification":[122],"reduced":[123],"2.95%":[126],"1.51%":[130],"motivations,":[132],"enhancing":[133],"taxonomy\u2019s":[135],"coverage":[136],"both":[138],"cybersecurity":[139],"non-traditional":[142],"content.":[143],"Compared":[144],"modeling,":[148],"LLM-guided":[150],"approach":[151],"provided":[152],"superior":[153],"contextual":[154],"accuracy,":[155],"offering":[156],"a":[157,171],"scalable":[158],"framework":[159],"threat":[161],"intelligence.":[162],"Despite":[163],"limitations,":[164],"such":[165],"potential":[167],"LLM":[168],"biases":[169],"focus":[172],"this":[176],"advances":[178],"analysis":[181],"by":[182],"refining":[183],"dynamics":[190],"alongside":[191],"illicit":[192],"activities.":[193]},"counts_by_year":[],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2026-04-11T00:00:00"}