{"id":"https://openalex.org/W4413679793","doi":"https://doi.org/10.1109/csr64739.2025.11130094","title":"Informed Defense: How Attacker Profiles Transform Vulnerability Assessments","display_name":"Informed Defense: How Attacker Profiles Transform Vulnerability Assessments","publication_year":2025,"publication_date":"2025-08-04","ids":{"openalex":"https://openalex.org/W4413679793","doi":"https://doi.org/10.1109/csr64739.2025.11130094"},"language":"en","primary_location":{"id":"doi:10.1109/csr64739.2025.11130094","is_oa":false,"landing_page_url":"https://doi.org/10.1109/csr64739.2025.11130094","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE International Conference on Cyber Security and Resilience (CSR)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5007066085","display_name":"Muhammad Zeshan Naseer","orcid":null},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":true,"raw_author_name":"Muhammad Zeshan Naseer","raw_affiliation_strings":["KTH Royal Institute of Technology,Stockholm,Sweden"],"affiliations":[{"raw_affiliation_string":"KTH Royal Institute of Technology,Stockholm,Sweden","institution_ids":["https://openalex.org/I86987016"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035223116","display_name":"Viktoria Fodor","orcid":"https://orcid.org/0000-0002-4571-9292"},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Viktoria Fodor","raw_affiliation_strings":["KTH Royal Institute of Technology,Stockholm,Sweden"],"affiliations":[{"raw_affiliation_string":"KTH Royal Institute of Technology,Stockholm,Sweden","institution_ids":["https://openalex.org/I86987016"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102842661","display_name":"Mathias Ekstedt","orcid":"https://orcid.org/0000-0003-3922-9606"},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Mathias Ekstedt","raw_affiliation_strings":["KTH Royal Institute of Technology,Stockholm,Sweden"],"affiliations":[{"raw_affiliation_string":"KTH Royal Institute of Technology,Stockholm,Sweden","institution_ids":["https://openalex.org/I86987016"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5007066085"],"corresponding_institution_ids":["https://openalex.org/I86987016"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.37717939,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"453","last_page":"460"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9927999973297119,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9927999973297119,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9769999980926514,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10994","display_name":"Terrorism, Counterterrorism, and Political Violence","score":0.9620000123977661,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.7202274203300476},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5997704267501831},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5341094732284546},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.49985742568969727},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.32570797204971313},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.21896836161613464},{"id":"https://openalex.org/keywords/social-psychology","display_name":"Social psychology","score":0.14696213603019714}],"concepts":[{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.7202274203300476},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5997704267501831},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5341094732284546},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.49985742568969727},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.32570797204971313},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.21896836161613464},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.14696213603019714},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/csr64739.2025.11130094","is_oa":false,"landing_page_url":"https://doi.org/10.1109/csr64739.2025.11130094","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE International Conference on Cyber Security and Resilience (CSR)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321030","display_name":"VINNOVA","ror":"https://ror.org/01kd5m353"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W1521415124","https://openalex.org/W1971114459","https://openalex.org/W1990414757","https://openalex.org/W1996655273","https://openalex.org/W2083658929","https://openalex.org/W2090983143","https://openalex.org/W2133467501","https://openalex.org/W2808844959","https://openalex.org/W2921968294","https://openalex.org/W2982335203","https://openalex.org/W3105284751","https://openalex.org/W3198843271","https://openalex.org/W4206939701","https://openalex.org/W4281711018","https://openalex.org/W4281719253","https://openalex.org/W4285266025","https://openalex.org/W4312559172","https://openalex.org/W4362704786","https://openalex.org/W4388323202","https://openalex.org/W4401568896","https://openalex.org/W4402513958"],"related_works":["https://openalex.org/W1883246888","https://openalex.org/W2370114625","https://openalex.org/W1756374135","https://openalex.org/W2062873522","https://openalex.org/W2947584067","https://openalex.org/W2280562859","https://openalex.org/W230721595","https://openalex.org/W3157230915","https://openalex.org/W1496728123","https://openalex.org/W2789975780"],"abstract_inverted_index":{"In":[0],"the":[1,20,45,59,63,75,79,99,121,125],"face":[2],"of":[3,22,48,78,120,127],"an":[4,32],"evolving":[5],"and":[6,18,66,103,124],"increasingly":[7],"complex":[8],"threat":[9,76,114,122],"landscape,":[10],"organizations":[11],"must":[12],"adopt":[13],"proactive":[14],"approaches":[15],"to":[16,35,43,58,74],"assess":[17],"improve":[19],"resilience":[21],"their":[23],"IT":[24,85],"infrastructures":[25],"against":[26],"potential":[27],"adversaries.":[28,49],"Attack":[29],"graphs":[30],"are":[31],"effective":[33],"tool":[34],"illustrate":[36],"adversarial":[37],"actions,":[38],"but":[39],"they":[40],"often":[41],"fail":[42],"capture":[44],"decision-making":[46,93],"process":[47],"To":[50],"address":[51],"this":[52],"limitation,":[53],"we":[54,87],"map":[55],"MITRE":[56],"techniques":[57],"attack":[60,64],"steps":[61],"in":[62,91],"graph":[65],"weight":[67],"attempt":[68],"probabilities":[69],"at":[70],"decision":[71],"points":[72],"according":[73],"profile":[77],"attacker.":[80],"Considering":[81],"a":[82],"realistic,":[83],"large":[84],"infrastructure,":[86],"analyze":[88],"how":[89],"variations":[90],"attacker":[92,111],"impact":[94],"success":[95],"rates,":[96],"path":[97],"diversity,":[98],"most":[100],"frequent":[101],"paths,":[102],"applied":[104],"techniques.":[105],"Our":[106],"findings":[107],"show":[108],"that":[109],"integrating":[110],"profiles":[112],"into":[113],"modeling":[115],"can":[116],"support":[117],"accurate":[118],"identification":[119],"landscape":[123],"optimization":[126],"defense":[128],"strategies.":[129]},"counts_by_year":[],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}