{"id":"https://openalex.org/W3205117158","doi":"https://doi.org/10.1109/bigdata52589.2021.9671893","title":"On the Integration of Course of Action Playbooks into Shareable Cyber Threat Intelligence","display_name":"On the Integration of Course of Action Playbooks into Shareable Cyber Threat Intelligence","publication_year":2021,"publication_date":"2021-12-15","ids":{"openalex":"https://openalex.org/W3205117158","doi":"https://doi.org/10.1109/bigdata52589.2021.9671893","mag":"3205117158"},"language":"en","primary_location":{"id":"doi:10.1109/bigdata52589.2021.9671893","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata52589.2021.9671893","pdf_url":null,"source":{"id":"https://openalex.org/S4363607718","display_name":"2021 IEEE International Conference on Big Data (Big Data)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"},"type":"preprint","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2110.10540","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5051922069","display_name":"Vasileios Mavroeidis","orcid":"https://orcid.org/0000-0002-8188-3575"},"institutions":[{"id":"https://openalex.org/I184942183","display_name":"University of Oslo","ror":"https://ror.org/01xtthb56","country_code":"NO","type":"education","lineage":["https://openalex.org/I184942183"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Vasileios Mavroeidis","raw_affiliation_strings":["University of Oslo, Norway","University of Oslo"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Oslo, Norway","institution_ids":["https://openalex.org/I184942183"]},{"raw_affiliation_string":"University of Oslo","institution_ids":["https://openalex.org/I184942183"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007422609","display_name":"Pavel Eis","orcid":null},"institutions":[{"id":"https://openalex.org/I54634078","display_name":"CESNET, z\u00e1jmov\u00e9 sdru\u017een\u00ed pr\u00e1vnick\u00fdch osob","ror":"https://ror.org/050dkka69","country_code":"CZ","type":"other","lineage":["https://openalex.org/I54634078"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Pavel Eis","raw_affiliation_strings":["Cesnet, Czech Republic"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cesnet, Czech Republic","institution_ids":["https://openalex.org/I54634078"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005548272","display_name":"Martin \u017d\u00e1dn\u00edk","orcid":"https://orcid.org/0000-0002-2099-2348"},"institutions":[{"id":"https://openalex.org/I54634078","display_name":"CESNET, z\u00e1jmov\u00e9 sdru\u017een\u00ed pr\u00e1vnick\u00fdch osob","ror":"https://ror.org/050dkka69","country_code":"CZ","type":"other","lineage":["https://openalex.org/I54634078"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Martin Zadnik","raw_affiliation_strings":["Cesnet, Czech Republic"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cesnet, Czech Republic","institution_ids":["https://openalex.org/I54634078"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030501538","display_name":"Marco Caseli","orcid":null},"institutions":[{"id":"https://openalex.org/I1325886976","display_name":"Siemens (Germany)","ror":"https://ror.org/059mq0909","country_code":"DE","type":"company","lineage":["https://openalex.org/I1325886976"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Marco Caselli","raw_affiliation_strings":["Siemens, Germany","Siemens;"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Siemens, Germany","institution_ids":["https://openalex.org/I1325886976"]},{"raw_affiliation_string":"Siemens;","institution_ids":["https://openalex.org/I1325886976"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5039539742","display_name":"Bret Jordan","orcid":null},"institutions":[{"id":"https://openalex.org/I4210127325","display_name":"Broadcom (United States)","ror":"https://ror.org/035gt5s03","country_code":"US","type":"company","lineage":["https://openalex.org/I4210127325"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Bret Jordan","raw_affiliation_strings":["Broadcom, United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Broadcom, United States","institution_ids":["https://openalex.org/I4210127325"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.1544186,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2104","last_page":"2108"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9764000177383423,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9544000029563904,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/interoperability","display_name":"Interoperability","score":0.7724958062171936},{"id":"https://openalex.org/keywords/metadata","display_name":"Metadata","score":0.7580490112304688},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7507671117782593},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.6325417757034302},{"id":"https://openalex.org/keywords/action","display_name":"Action (physics)","score":0.6163190007209778},{"id":"https://openalex.org/keywords/ontology","display_name":"Ontology","score":0.6048911213874817},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5736305713653564},{"id":"https://openalex.org/keywords/open-standard","display_name":"Open standard","score":0.5209785103797913},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.44211283326148987},{"id":"https://openalex.org/keywords/knowledge-representation-and-reasoning","display_name":"Knowledge representation and reasoning","score":0.41075950860977173},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.40274280309677124},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.3342565894126892},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.3198188841342926},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.11976143717765808}],"concepts":[{"id":"https://openalex.org/C20136886","wikidata":"https://www.wikidata.org/wiki/Q749647","display_name":"Interoperability","level":2,"score":0.7724958062171936},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.7580490112304688},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7507671117782593},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.6325417757034302},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.6163190007209778},{"id":"https://openalex.org/C25810664","wikidata":"https://www.wikidata.org/wiki/Q44325","display_name":"Ontology","level":2,"score":0.6048911213874817},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5736305713653564},{"id":"https://openalex.org/C67936045","wikidata":"https://www.wikidata.org/wiki/Q681263","display_name":"Open standard","level":3,"score":0.5209785103797913},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.44211283326148987},{"id":"https://openalex.org/C161301231","wikidata":"https://www.wikidata.org/wiki/Q3478658","display_name":"Knowledge representation and reasoning","level":2,"score":0.41075950860977173},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.40274280309677124},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.3342565894126892},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3198188841342926},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.11976143717765808},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.1109/bigdata52589.2021.9671893","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata52589.2021.9671893","pdf_url":null,"source":{"id":"https://openalex.org/S4363607718","display_name":"2021 IEEE International Conference on Big Data (Big Data)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2110.10540","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2110.10540","pdf_url":"https://arxiv.org/pdf/2110.10540","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:zenodo.org:7134852","is_oa":true,"landing_page_url":"https://zenodo.org/record/7134852","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferencePaper"},{"id":"doi:10.48550/arxiv.2110.10540","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2110.10540","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"},{"id":"mag:3205117158","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2110.10540","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2110.10540","pdf_url":"https://arxiv.org/pdf/2110.10540","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"score":0.44999998807907104,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320338440","display_name":"HORIZON EUROPE Health","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":6,"referenced_works":["https://openalex.org/W2533698187","https://openalex.org/W2617416222","https://openalex.org/W2758108284","https://openalex.org/W2795334192","https://openalex.org/W3047914937","https://openalex.org/W3133897466"],"related_works":["https://openalex.org/W2746119360","https://openalex.org/W1983551905","https://openalex.org/W2242481385","https://openalex.org/W243098173","https://openalex.org/W1513359149","https://openalex.org/W1536662675","https://openalex.org/W2957962980","https://openalex.org/W1978775994","https://openalex.org/W1590921973","https://openalex.org/W2960784831","https://openalex.org/W1879651716","https://openalex.org/W1545550430","https://openalex.org/W2907337292","https://openalex.org/W3003969337","https://openalex.org/W2122533735","https://openalex.org/W2611765139","https://openalex.org/W2979944436","https://openalex.org/W2011429871","https://openalex.org/W766526058","https://openalex.org/W2160760396"],"abstract_inverted_index":{"Motivated":[0],"by":[1],"the":[2,6,12,26,70,81,98,104],"introduction":[3],"of":[4,17,39,58,72,91],"CACAO,":[5,96],"first":[7],"open":[8],"standard":[9],"that":[10,52],"harmonizes":[11],"way":[13],"we":[14,46],"document":[15],"courses":[16],"action":[18,40,59,92],"in":[19],"a":[20,48],"machine-readable":[21],"format":[22],"for":[23,28],"interoperability,":[24],"and":[25,34,36,55,64,88,103],"benefits":[27],"cybersecurity":[29],"operations":[30],"derived":[31],"from":[32],"utilizing,":[33],"coupling":[35],"sharing":[37],"course":[38,57,90],"playbooks":[41,60],"with":[42],"cyber":[43],"threat":[44,100],"intelligence,":[45],"introduce":[47,86],"uniform":[49],"metadata":[50,83],"template":[51,84],"supports":[53],"managing":[54],"integrating":[56],"into":[61,97],"knowledge":[62,65],"representation":[63],"management":[66],"systems.":[67],"We":[68,79],"demonstrate":[69],"applicability":[71],"our":[73],"approach":[74],"through":[75],"two":[76],"use-case":[77],"implementations.":[78],"utilize":[80],"playbook":[82],"to":[85],"functionality":[87],"integrate":[89],"playbooks,":[93],"such":[94],"as":[95],"MISP":[99],"intelligence":[101],"platform":[102],"OASIS":[105],"Threat":[106],"Actor":[107],"Context":[108],"ontology.":[109]},"counts_by_year":[],"updated_date":"2026-07-03T08:13:44.112507","created_date":"2025-10-10T00:00:00"}