{"id":"https://openalex.org/W3204342889","doi":"https://doi.org/10.1109/comst.2021.3117338","title":"A Comparative Study on Cyber Threat Intelligence: The Security Incident Response Perspective","display_name":"A Comparative Study on Cyber Threat Intelligence: The Security Incident Response Perspective","publication_year":2021,"publication_date":"2021-01-01","ids":{"openalex":"https://openalex.org/W3204342889","doi":"https://doi.org/10.1109/comst.2021.3117338","mag":"3204342889"},"language":"en","primary_location":{"id":"doi:10.1109/comst.2021.3117338","is_oa":false,"landing_page_url":"https://doi.org/10.1109/comst.2021.3117338","pdf_url":null,"source":{"id":"https://openalex.org/S23688054","display_name":"IEEE Communications Surveys & Tutorials","issn_l":"1553-877X","issn":["1553-877X","2373-745X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Communications Surveys & Tutorials","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.1109/COMST.2021.3117338","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5065992739","display_name":"Daniel Schlette","orcid":"https://orcid.org/0000-0002-4847-522X"},"institutions":[{"id":"https://openalex.org/I1325886976","display_name":"Siemens (Germany)","ror":"https://ror.org/059mq0909","country_code":"DE","type":"company","lineage":["https://openalex.org/I1325886976"]},{"id":"https://openalex.org/I60668342","display_name":"University of Regensburg","ror":"https://ror.org/01eezs655","country_code":"DE","type":"education","lineage":["https://openalex.org/I60668342"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Daniel Schlette","raw_affiliation_strings":["Chair of Information Systems, University of Regensburg, Universit\u00e4tsstr. 31, 93053 Regensburg, Germany. (e-mail: daniel.schlette@ur.de)","Chair of Information Systems, University of Regensburg, Universit\u00e4tsstr. 31, 93053 Regensburg, Germany","Siemens AG, Otto-Hahn-Ring 6, 81739 Munich, Ger-many"],"affiliations":[{"raw_affiliation_string":"Chair of Information Systems, University of Regensburg, Universit\u00e4tsstr. 31, 93053 Regensburg, Germany. (e-mail: daniel.schlette@ur.de)","institution_ids":["https://openalex.org/I60668342"]},{"raw_affiliation_string":"Chair of Information Systems, University of Regensburg, Universit\u00e4tsstr. 31, 93053 Regensburg, Germany","institution_ids":["https://openalex.org/I60668342"]},{"raw_affiliation_string":"Siemens AG, Otto-Hahn-Ring 6, 81739 Munich, Ger-many","institution_ids":["https://openalex.org/I1325886976"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103253596","display_name":"Marco Caselli","orcid":"https://orcid.org/0000-0003-4883-797X"},"institutions":[{"id":"https://openalex.org/I1325886976","display_name":"Siemens (Germany)","ror":"https://ror.org/059mq0909","country_code":"DE","type":"company","lineage":["https://openalex.org/I1325886976"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Marco Caselli","raw_affiliation_strings":["Siemens AG, Otto-Hahn-Ring 6, 81739 Munich, Germany"],"affiliations":[{"raw_affiliation_string":"Siemens AG, Otto-Hahn-Ring 6, 81739 Munich, Germany","institution_ids":["https://openalex.org/I1325886976"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5068820890","display_name":"G\u00fcnther Pernul","orcid":null},"institutions":[{"id":"https://openalex.org/I60668342","display_name":"University of Regensburg","ror":"https://ror.org/01eezs655","country_code":"DE","type":"education","lineage":["https://openalex.org/I60668342"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Gunther Pernul","raw_affiliation_strings":["Chair of Information Systems, University of Regensburg, Universit\u00e4tsstr. 31, 93053 Regensburg, Germany"],"affiliations":[{"raw_affiliation_string":"Chair of Information Systems, University of Regensburg, Universit\u00e4tsstr. 31, 93053 Regensburg, Germany","institution_ids":["https://openalex.org/I60668342"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5065992739"],"corresponding_institution_ids":["https://openalex.org/I1325886976","https://openalex.org/I60668342"],"apc_list":null,"apc_paid":null,"fwci":11.0384,"has_fulltext":false,"cited_by_count":114,"citation_normalized_percentile":{"value":0.98754947,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":"23","issue":"4","first_page":"2525","last_page":"2556"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.7287580966949463},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5436704158782959},{"id":"https://openalex.org/keywords/incident-response","display_name":"Incident response","score":0.42181697487831116},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.3623462915420532},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.33365777134895325},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.1407577395439148}],"concepts":[{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.7287580966949463},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5436704158782959},{"id":"https://openalex.org/C2985105721","wikidata":"https://www.wikidata.org/wiki/Q13479512","display_name":"Incident response","level":2,"score":0.42181697487831116},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3623462915420532},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.33365777134895325},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.1407577395439148}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/comst.2021.3117338","is_oa":false,"landing_page_url":"https://doi.org/10.1109/comst.2021.3117338","pdf_url":null,"source":{"id":"https://openalex.org/S23688054","display_name":"IEEE Communications Surveys & Tutorials","issn_l":"1553-877X","issn":["1553-877X","2373-745X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Communications Surveys & Tutorials","raw_type":"journal-article"},{"id":"pmh:oai:epub.uni-regensburg.de:52721","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4306401229","display_name":"University of Regensburg Publication Server (University of Regensburg)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I60668342","host_organization_name":"University of Regensburg","host_organization_lineage":["https://openalex.org/I60668342"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:zenodo.org:5654497","is_oa":true,"landing_page_url":"https://doi.org/10.1109/COMST.2021.3117338","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Communications Surveys & Tutorials, 1-1, (2021-10-04)","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"pmh:oai:zenodo.org:5654497","is_oa":true,"landing_page_url":"https://doi.org/10.1109/COMST.2021.3117338","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Communications Surveys & Tutorials, 1-1, (2021-10-04)","raw_type":"info:eu-repo/semantics/article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6399999856948853,"id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G6544309567","display_name":null,"funder_award_id":"830927","funder_id":"https://openalex.org/F4320337663","funder_display_name":"H2020 Industrial Leadership"}],"funders":[{"id":"https://openalex.org/F4320321114","display_name":"Bundesministerium f\u00fcr Bildung und Forschung","ror":"https://ror.org/04pz7b180"},{"id":"https://openalex.org/F4320337663","display_name":"H2020 Industrial Leadership","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":67,"referenced_works":["https://openalex.org/W38991701","https://openalex.org/W1494351124","https://openalex.org/W1499966149","https://openalex.org/W1575376224","https://openalex.org/W1974911291","https://openalex.org/W1980794459","https://openalex.org/W2003744325","https://openalex.org/W2014211033","https://openalex.org/W2014900555","https://openalex.org/W2015410758","https://openalex.org/W2026546793","https://openalex.org/W2034623212","https://openalex.org/W2108389203","https://openalex.org/W2109361508","https://openalex.org/W2113272630","https://openalex.org/W2118355922","https://openalex.org/W2119668875","https://openalex.org/W2339166448","https://openalex.org/W2342408547","https://openalex.org/W2489620843","https://openalex.org/W2533698187","https://openalex.org/W2533908554","https://openalex.org/W2580012760","https://openalex.org/W2592042192","https://openalex.org/W2623492889","https://openalex.org/W2758108284","https://openalex.org/W2760313715","https://openalex.org/W2767148420","https://openalex.org/W2768034912","https://openalex.org/W2773235317","https://openalex.org/W2787824439","https://openalex.org/W2795334192","https://openalex.org/W2843669218","https://openalex.org/W2906835933","https://openalex.org/W2909493932","https://openalex.org/W2937017738","https://openalex.org/W2943546107","https://openalex.org/W2964522977","https://openalex.org/W2965837624","https://openalex.org/W2972007171","https://openalex.org/W2981908090","https://openalex.org/W2994405706","https://openalex.org/W2999472659","https://openalex.org/W3004456242","https://openalex.org/W3004908285","https://openalex.org/W3005602423","https://openalex.org/W3008111862","https://openalex.org/W3009066821","https://openalex.org/W3010451506","https://openalex.org/W3022088706","https://openalex.org/W3024317787","https://openalex.org/W3036588308","https://openalex.org/W3046351330","https://openalex.org/W3047914937","https://openalex.org/W3084623238","https://openalex.org/W3111749540","https://openalex.org/W3112196969","https://openalex.org/W3133897466","https://openalex.org/W3149878498","https://openalex.org/W4248198585","https://openalex.org/W4256531287","https://openalex.org/W6629566846","https://openalex.org/W6629614302","https://openalex.org/W6734100528","https://openalex.org/W6757915536","https://openalex.org/W6766930077","https://openalex.org/W6769175622"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W4251008024","https://openalex.org/W2170135113","https://openalex.org/W4403882784","https://openalex.org/W136373522","https://openalex.org/W1996967322","https://openalex.org/W4206206623","https://openalex.org/W3088911518"],"abstract_inverted_index":{"Cyber":[0],"Threat":[1],"Intelligence":[2],"(CTI)":[3],"is":[4],"threat":[5],"information":[6],"intended":[7],"for":[8,13,82],"security":[9,23],"purposes.":[10],"However,":[11],"use":[12,85,109],"incident":[14,24,52,95,129],"response":[15,25,53,96,130],"demands":[16],"standardization.":[17],"This":[18],"study":[19],"examines":[20],"the":[21,44],"broader":[22],"perspective.":[26],"Introducing":[27],"18":[28],"core":[29,72],"concepts,":[30],"we":[31,56,60,69,121],"assist":[32],"efforts":[33],"to":[34,62,77,105,126],"establish":[35],"and":[36,64,116],"assess":[37],"current":[38],"standardization":[39],"approaches.":[40],"We":[41],"further":[42],"provide":[43],"reader":[45],"with":[46],"a":[47,79,83,91],"detailed":[48],"analysis":[49],"of":[50],"6":[51],"formats.":[54,100,119],"While":[55],"synthesize":[57],"structural":[58],"elements,":[59],"point":[61],"characteristics":[63],"show":[65],"format":[66,81],"deficiencies.":[67],"Also,":[68],"describe":[70],"how":[71],"concepts":[73],"can":[74,114],"be":[75],"used":[76,104],"determine":[78],"suitable":[80],"given":[84],"case.":[86],"Our":[87],"surveys\u2019":[88],"findings":[89],"indicate":[90],"consistent":[92],"focus":[93],"on":[94],"actions":[97],"within":[98],"all":[99],"Besides,":[101],"playbooks":[102],"are":[103],"represent":[106],"procedures.":[107],"Different":[108],"cases":[110],"suggest":[111],"that":[112],"organizations":[113],"leverage":[115],"combine":[117],"multiple":[118],"Finally,":[120],"discuss":[122],"open":[123],"research":[124],"challenges":[125],"fully":[127],"realize":[128],"potentials.":[131]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":38},{"year":2024,"cited_by_count":35},{"year":2023,"cited_by_count":20},{"year":2022,"cited_by_count":13},{"year":2021,"cited_by_count":1}],"updated_date":"2026-04-05T17:49:38.594831","created_date":"2025-10-10T00:00:00"}