{"id":"https://openalex.org/W7118161186","doi":"https://doi.org/10.1109/aiccsa66935.2025.11315369","title":"ForenSys: Semantic Assistant for Expressive Cyber Forensics in Connected Vehicles","display_name":"ForenSys: Semantic Assistant for Expressive Cyber Forensics in Connected Vehicles","publication_year":2025,"publication_date":"2025-10-19","ids":{"openalex":"https://openalex.org/W7118161186","doi":"https://doi.org/10.1109/aiccsa66935.2025.11315369"},"language":null,"primary_location":{"id":"doi:10.1109/aiccsa66935.2025.11315369","is_oa":false,"landing_page_url":"https://doi.org/10.1109/aiccsa66935.2025.11315369","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/ACS 22nd International Conference on Computer Systems and Applications (AICCSA)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5121915440","display_name":"Amani Abou-Rida","orcid":null},"institutions":[{"id":"https://openalex.org/I4210137867","display_name":"SKF (France)","ror":"https://ror.org/04eqf8242","country_code":"FR","type":"company","lineage":["https://openalex.org/I112643650","https://openalex.org/I4210137867"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Amani Abou-Rida","raw_affiliation_strings":["Expleo Group,Cybersecurity R&D Department,Montigny-le-Bretonneux,France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Expleo Group,Cybersecurity R&D Department,Montigny-le-Bretonneux,France","institution_ids":["https://openalex.org/I4210137867"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040570123","display_name":"Hamza Khemissa","orcid":null},"institutions":[{"id":"https://openalex.org/I4210137867","display_name":"SKF (France)","ror":"https://ror.org/04eqf8242","country_code":"FR","type":"company","lineage":["https://openalex.org/I112643650","https://openalex.org/I4210137867"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Hamza Khemissa","raw_affiliation_strings":["Expleo Group,Cybersecurity R&D Department,Montigny-le-Bretonneux,France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Expleo Group,Cybersecurity R&D Department,Montigny-le-Bretonneux,France","institution_ids":["https://openalex.org/I4210137867"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5117314338","display_name":"Karam Bou-chaaya","orcid":null},"institutions":[{"id":"https://openalex.org/I4210137867","display_name":"SKF (France)","ror":"https://ror.org/04eqf8242","country_code":"FR","type":"company","lineage":["https://openalex.org/I112643650","https://openalex.org/I4210137867"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Karam Bou-Chaaya","raw_affiliation_strings":["Expleo Group,Cybersecurity R&D Department,Montigny-le-Bretonneux,France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Expleo Group,Cybersecurity R&D Department,Montigny-le-Bretonneux,France","institution_ids":["https://openalex.org/I4210137867"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5019556209","display_name":"Helmi Md Rais","orcid":"https://orcid.org/0000-0002-7878-965X"},"institutions":[{"id":"https://openalex.org/I4210137867","display_name":"SKF (France)","ror":"https://ror.org/04eqf8242","country_code":"FR","type":"company","lineage":["https://openalex.org/I112643650","https://openalex.org/I4210137867"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Helmi Rais","raw_affiliation_strings":["Expleo Group,Cybersecurity R&D Department,Montigny-le-Bretonneux,France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Expleo Group,Cybersecurity R&D Department,Montigny-le-Bretonneux,France","institution_ids":["https://openalex.org/I4210137867"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210137867"],"apc_list":null,"apc_paid":null,"fwci":1.6856,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.88463962,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.2800999879837036,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.2800999879837036,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":0.11900000274181366,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10525","display_name":"Human-Automation Interaction and Safety","score":0.07810000330209732,"subfield":{"id":"https://openalex.org/subfields/3207","display_name":"Social Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/interpretability","display_name":"Interpretability","score":0.8001999855041504},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.6229000091552734},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5839999914169312},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.578499972820282},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5537999868392944},{"id":"https://openalex.org/keywords/network-forensics","display_name":"Network forensics","score":0.41449999809265137},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.374099999666214},{"id":"https://openalex.org/keywords/semantic-web","display_name":"Semantic Web","score":0.3447999954223633}],"concepts":[{"id":"https://openalex.org/C2781067378","wikidata":"https://www.wikidata.org/wiki/Q17027399","display_name":"Interpretability","level":2,"score":0.8001999855041504},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7817999720573425},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.6229000091552734},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5839999914169312},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.578499972820282},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5537999868392944},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.49959999322891235},{"id":"https://openalex.org/C50747538","wikidata":"https://www.wikidata.org/wiki/Q7001032","display_name":"Network forensics","level":3,"score":0.41449999809265137},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.374099999666214},{"id":"https://openalex.org/C2129575","wikidata":"https://www.wikidata.org/wiki/Q54837","display_name":"Semantic Web","level":2,"score":0.3447999954223633},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.33660000562667847},{"id":"https://openalex.org/C90312973","wikidata":"https://www.wikidata.org/wiki/Q7449052","display_name":"Semantic data model","level":2,"score":0.320499986410141},{"id":"https://openalex.org/C6881194","wikidata":"https://www.wikidata.org/wiki/Q7449091","display_name":"Semantic technology","level":4,"score":0.314300000667572},{"id":"https://openalex.org/C556601545","wikidata":"https://www.wikidata.org/wiki/Q878553","display_name":"Computer forensics","level":3,"score":0.30660000443458557},{"id":"https://openalex.org/C9616225","wikidata":"https://www.wikidata.org/wiki/Q3929429","display_name":"Semantic reasoner","level":2,"score":0.3059000074863434},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.26649999618530273},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2581000030040741},{"id":"https://openalex.org/C25810664","wikidata":"https://www.wikidata.org/wiki/Q44325","display_name":"Ontology","level":2,"score":0.2551000118255615},{"id":"https://openalex.org/C2775955345","wikidata":"https://www.wikidata.org/wiki/Q7449071","display_name":"Semantic mapping","level":2,"score":0.25290000438690186}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/aiccsa66935.2025.11315369","is_oa":false,"landing_page_url":"https://doi.org/10.1109/aiccsa66935.2025.11315369","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/ACS 22nd International Conference on Computer Systems and Applications (AICCSA)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.7728163599967957,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W1966302589","https://openalex.org/W2067154271","https://openalex.org/W2510089447","https://openalex.org/W2889161681","https://openalex.org/W2945976633","https://openalex.org/W2948384692","https://openalex.org/W2979948296","https://openalex.org/W3003660400","https://openalex.org/W3082637665","https://openalex.org/W3095444354","https://openalex.org/W3143398491","https://openalex.org/W3195529690","https://openalex.org/W4206737206","https://openalex.org/W4212994613","https://openalex.org/W4213423307","https://openalex.org/W4385323581","https://openalex.org/W4387942615","https://openalex.org/W4396881408","https://openalex.org/W4404699345"],"related_works":[],"abstract_inverted_index":{"Connected":[0],"and":[1,38,60,74,93,129,170,174,183],"autonomous":[2],"vehicles":[3],"(CAVs)":[4],"rely":[5],"on":[6],"complex,":[7],"interconnected":[8],"communication":[9],"systems,":[10],"making":[11],"them":[12],"vulnerable":[13],"to":[14,41,47,58,82,156],"cybersecurity":[15],"threats.":[16],"Digital":[17],"forensics":[18],"offers":[19],"vital":[20],"tools":[21],"for":[22,90,114,140],"investigating":[23],"cyberattacks,":[24],"yet":[25],"investigators":[26],"encounter":[27],"substantial":[28],"obstacles.":[29],"A":[30],"key":[31],"challenge":[32],"is":[33,53,179],"the":[34,56,83,88,94],"hesitation":[35],"of":[36,85,97],"manufacturers":[37],"component":[39],"suppliers":[40],"provide":[42],"critical":[43],"logs,":[44],"restricting":[45],"access":[46],"essential":[48],"data.":[49],"Moreover,":[50],"analyzing":[51],"incidents":[52],"complicated":[54],"by":[55,144],"need":[57,89],"gather":[59],"process":[61],"heterogeneous":[62],"data":[63,122,154],"from":[64],"sources":[65,123],"like":[66],"Electronic":[67],"Control":[68],"Units":[69],"(ECUs),":[70],"sensors,":[71],"user":[72],"interactions,":[73],"contextual":[75],"knowledge.":[76],"Investigators":[77],"also":[78,163],"face":[79],"challenges":[80],"due":[81],"heterogeneity":[84],"forensic":[86,150],"data,":[87],"real-time":[91,149],"reasoning,":[92],"limited":[95,160],"interpretability":[96],"black-box":[98],"AI":[99],"models.":[100],"To":[101],"tackle":[102],"these":[103],"issues,":[104],"we":[105],"introduce":[106],"ForenSys,":[107],"a":[108,131],"semantic":[109,132],"rule-based":[110],"reasoning":[111,133],"system":[112],"tailored":[113],"cyberattack":[115,187],"investigations":[116],"in":[117,185],"CAVs.":[118],"ForenSys":[119,162],"integrates":[120],"varied":[121],"through":[124,181],"an":[125],"Information":[126],"Management":[127],"Module":[128],"employs":[130],"engine":[134],"aligned":[135],"with":[136,166],"MITRE":[137],"ATT&CK":[138],"techniques":[139],"automated":[141],"analysis.":[142,176],"Powered":[143],"AI,":[145],"it":[146],"supports":[147],"dynamic,":[148],"operations,":[151],"revealing":[152],"hidden":[153],"connections":[155],"reconstruct":[157],"events":[158],"despite":[159],"access.":[161],"correlates":[164],"cyberattacks":[165],"tactics,":[167],"techniques,":[168],"timing,":[169],"location,":[171],"delivering":[172],"transparent":[173],"explainable":[175],"Its":[177],"efficacy":[178],"validated":[180],"implementation":[182],"testing":[184],"vehicle":[186],"scenarios.":[188]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-08-13T07:04:57.449891","created_date":"2026-01-05T00:00:00"}