{"id":"https://openalex.org/W3105226545","doi":"https://doi.org/10.1109/asonam49781.2020.9381356","title":"TenFor: A Tensor-Based Tool to Extract Interesting Events from Security Forums","display_name":"TenFor: A Tensor-Based Tool to Extract Interesting Events from Security Forums","publication_year":2020,"publication_date":"2020-12-07","ids":{"openalex":"https://openalex.org/W3105226545","doi":"https://doi.org/10.1109/asonam49781.2020.9381356","mag":"3105226545"},"language":"en","primary_location":{"id":"doi:10.1109/asonam49781.2020.9381356","is_oa":false,"landing_page_url":"https://doi.org/10.1109/asonam49781.2020.9381356","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining (ASONAM)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2011.07226","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038112158","display_name":"Risul Islam","orcid":"https://orcid.org/0000-0002-3238-4518"},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Risul Islam","raw_affiliation_strings":["UC Riverside","University of California, Riverside"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UC Riverside","institution_ids":["https://openalex.org/I103635307"]},{"raw_affiliation_string":"University of California, Riverside","institution_ids":["https://openalex.org/I103635307"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071823387","display_name":"Md Omar Faruk Rokon","orcid":"https://orcid.org/0000-0002-1385-9389"},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Md Omar Faruk Rokon","raw_affiliation_strings":["UC Riverside","University of California, Riverside"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UC Riverside","institution_ids":["https://openalex.org/I103635307"]},{"raw_affiliation_string":"University of California, Riverside","institution_ids":["https://openalex.org/I103635307"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054849323","display_name":"Evangelos E. Papalexakis","orcid":"https://orcid.org/0000-0002-3411-8483"},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Evangelos E. Papalexakis","raw_affiliation_strings":["UC Riverside","University of California, Riverside"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UC Riverside","institution_ids":["https://openalex.org/I103635307"]},{"raw_affiliation_string":"University of California, Riverside","institution_ids":["https://openalex.org/I103635307"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5018876909","display_name":"Michalis Faloutsos","orcid":"https://orcid.org/0000-0002-3882-9987"},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michalis Faloutsos","raw_affiliation_strings":["UC Riverside","University of California, Riverside"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UC Riverside","institution_ids":["https://openalex.org/I103635307"]},{"raw_affiliation_string":"University of California, Riverside","institution_ids":["https://openalex.org/I103635307"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I103635307"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"515","last_page":"522"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9943000078201294,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9943000078201294,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9810000061988831,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9781000018119812,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6725012063980103},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.670299768447876},{"id":"https://openalex.org/keywords/profiling","display_name":"Profiling (computer programming)","score":0.5873454809188843},{"id":"https://openalex.org/keywords/thread","display_name":"Thread (computing)","score":0.5186111927032471},{"id":"https://openalex.org/keywords/a-priori-and-a-posteriori","display_name":"A priori and a posteriori","score":0.5066908001899719},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.49025681614875793},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4795936644077301},{"id":"https://openalex.org/keywords/information-overload","display_name":"Information overload","score":0.4172835350036621},{"id":"https://openalex.org/keywords/unsupervised-learning","display_name":"Unsupervised learning","score":0.4104779362678528},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3622235655784607},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.3463331460952759},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.34254878759384155},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.2120944857597351},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.14661049842834473}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6725012063980103},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.670299768447876},{"id":"https://openalex.org/C187191949","wikidata":"https://www.wikidata.org/wiki/Q1138496","display_name":"Profiling (computer programming)","level":2,"score":0.5873454809188843},{"id":"https://openalex.org/C138101251","wikidata":"https://www.wikidata.org/wiki/Q213092","display_name":"Thread (computing)","level":2,"score":0.5186111927032471},{"id":"https://openalex.org/C75553542","wikidata":"https://www.wikidata.org/wiki/Q178161","display_name":"A priori and a posteriori","level":2,"score":0.5066908001899719},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.49025681614875793},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4795936644077301},{"id":"https://openalex.org/C186625053","wikidata":"https://www.wikidata.org/wiki/Q1130191","display_name":"Information overload","level":2,"score":0.4172835350036621},{"id":"https://openalex.org/C8038995","wikidata":"https://www.wikidata.org/wiki/Q1152135","display_name":"Unsupervised learning","level":2,"score":0.4104779362678528},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3622235655784607},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.3463331460952759},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.34254878759384155},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2120944857597351},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.14661049842834473},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1109/asonam49781.2020.9381356","is_oa":false,"landing_page_url":"https://doi.org/10.1109/asonam49781.2020.9381356","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining (ASONAM)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2011.07226","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2011.07226","pdf_url":"https://arxiv.org/pdf/2011.07226","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"mag:3105226545","is_oa":true,"landing_page_url":"https://arxiv.org/pdf/2011.07226.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"doi:10.48550/arxiv.2011.07226","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2011.07226","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2011.07226","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2011.07226","pdf_url":"https://arxiv.org/pdf/2011.07226","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3105226545.pdf","grobid_xml":"https://content.openalex.org/works/W3105226545.grobid-xml"},"referenced_works_count":26,"referenced_works":["https://openalex.org/W1964669181","https://openalex.org/W2001964924","https://openalex.org/W2024165284","https://openalex.org/W2125245404","https://openalex.org/W2133012565","https://openalex.org/W2503316197","https://openalex.org/W2576928147","https://openalex.org/W2591357180","https://openalex.org/W2604955674","https://openalex.org/W2738669462","https://openalex.org/W2789429023","https://openalex.org/W2798110387","https://openalex.org/W2800663042","https://openalex.org/W2805108821","https://openalex.org/W2892297442","https://openalex.org/W2944891992","https://openalex.org/W2946762810","https://openalex.org/W2963715839","https://openalex.org/W2963999633","https://openalex.org/W2972591618","https://openalex.org/W2997960816","https://openalex.org/W3000231607","https://openalex.org/W3095312831","https://openalex.org/W6772524323","https://openalex.org/W6784880316","https://openalex.org/W6784987881"],"related_works":["https://openalex.org/W3184538654","https://openalex.org/W2575047204","https://openalex.org/W2060323176","https://openalex.org/W1195910088","https://openalex.org/W2922648861","https://openalex.org/W1253113140","https://openalex.org/W2542188028","https://openalex.org/W2997225381","https://openalex.org/W3176758015","https://openalex.org/W2243991213","https://openalex.org/W1928793892","https://openalex.org/W2953100092","https://openalex.org/W2085849439","https://openalex.org/W3169843875","https://openalex.org/W2624164732","https://openalex.org/W3013859134","https://openalex.org/W2800736402","https://openalex.org/W2240456204","https://openalex.org/W2165432920","https://openalex.org/W2108598807"],"abstract_inverted_index":{"How":[0],"can":[1],"we":[2,21,127,140,155,166],"get":[3],"a":[4,18,29,34,84,102,123,145,190],"security":[5,50],"forum":[6,191],"to":[7,23,38,52,78,172],"\u201ctell\u201d":[8],"us":[9],"its":[10],"activities":[11,26,186],"and":[12,91,118,121,131,147,165,177],"events":[13,82,135,164],"of":[14,40,63,97,136,159,187],"interest?":[15],"We":[16,71],"take":[17],"unique":[19],"angle:":[20],"want":[22],"identify":[24,80,128],"these":[25],"without":[27],"any":[28],"priori":[30],"knowledge,":[31],"which":[32],"is":[33],"key":[35,129],"difference":[36],"compared":[37,171],"most":[39,62],"the":[41,106,134],"previous":[42,173],"problem":[43],"formulations.":[44],"Despite":[45],"some":[46],"recent":[47],"efforts,":[48],"mining":[49],"forums":[51],"extract":[53],"useful":[54],"information":[55],"has":[56],"received":[57],"relatively":[58],"little":[59],"attention,":[60],"while":[61],"them":[64],"are":[65],"usually":[66],"searching":[67],"for":[68,150],"specific":[69],"information.":[70],"propose":[72],"TenFor,":[73],"an":[74,110,181,193],"unsupervised":[75,194],"tensor-based":[76,103],"approach,":[77],"systematically":[79],"important":[81,182],"in":[83,192,197],"three-dimensional":[85],"space:":[86],"(a)":[87,101],"user,":[88],"(b)":[89,109],"thread,":[90],"(c)":[92,122],"time.":[93],"Our":[94,175],"method":[95],"consists":[96],"three":[98,107],"high-level":[99],"steps:":[100],"clustering":[104],"across":[105],"dimensions,":[108],"extensive":[111],"cluster":[112],"profiling":[113],"that":[114,157],"uses":[115],"both":[116],"content":[117],"behavioral":[119],"features,":[120],"deeper":[124],"investigation,":[125],"where":[126],"users":[130],"threads":[132],"within":[133],"interest.":[137],"In":[138,152],"addition,":[139],"implement":[141],"our":[142,153,160,178],"approach":[143,176],"as":[144],"powerful":[146],"easy-to-use":[148],"platform":[149,179],"practitioners.":[151],"evaluation,":[154],"find":[156,167],"83%":[158],"clusters":[161,170],"capture":[162],"meaningful":[163,169],"more":[168],"approaches.":[174],"constitute":[180],"step":[183],"towards":[184],"detecting":[185],"interest":[188],"from":[189],"learning":[195],"fashion":[196],"practice.":[198]},"counts_by_year":[{"year":2021,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}
