{"id":"https://openalex.org/W2903086587","doi":"https://doi.org/10.1109/cybersa.2018.8551486","title":"CoCoa: An Ontology for Cybersecurity Operations Centre Analysis Process","display_name":"CoCoa: An Ontology for Cybersecurity Operations Centre Analysis Process","publication_year":2018,"publication_date":"2018-06-01","ids":{"openalex":"https://openalex.org/W2903086587","doi":"https://doi.org/10.1109/cybersa.2018.8551486","mag":"2903086587"},"language":"en","primary_location":{"id":"doi:10.1109/cybersa.2018.8551486","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cybersa.2018.8551486","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (Cyber SA)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023134129","display_name":"Cyril Onwubiko","orcid":"https://orcid.org/0000-0003-0174-8232"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Cyril Onwubiko","raw_affiliation_strings":["E-Security Group, Cyber Security Intelligence, London, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"E-Security Group, Cyber Security Intelligence, London, UK","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5023134129"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":31,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9957000017166138,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10679","display_name":"Service-Oriented Architecture and Web Services","score":0.9599999785423279,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ontology","display_name":"Ontology","score":0.8400972485542297},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7264493107795715},{"id":"https://openalex.org/keywords/situation-awareness","display_name":"Situation awareness","score":0.6342635154724121},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.6119025349617004},{"id":"https://openalex.org/keywords/nist","display_name":"NIST","score":0.510464072227478},{"id":"https://openalex.org/keywords/situation-analysis","display_name":"Situation analysis","score":0.4716312885284424},{"id":"https://openalex.org/keywords/intelligence-analysis","display_name":"Intelligence analysis","score":0.4618450999259949},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4031587839126587},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.14668512344360352},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.08393794298171997}],"concepts":[{"id":"https://openalex.org/C25810664","wikidata":"https://www.wikidata.org/wiki/Q44325","display_name":"Ontology","level":2,"score":0.8400972485542297},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7264493107795715},{"id":"https://openalex.org/C145804949","wikidata":"https://www.wikidata.org/wiki/Q478123","display_name":"Situation awareness","level":2,"score":0.6342635154724121},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.6119025349617004},{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.510464072227478},{"id":"https://openalex.org/C14911803","wikidata":"https://www.wikidata.org/wiki/Q7532148","display_name":"Situation analysis","level":2,"score":0.4716312885284424},{"id":"https://openalex.org/C517642484","wikidata":"https://www.wikidata.org/wiki/Q2388514","display_name":"Intelligence analysis","level":2,"score":0.4618450999259949},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4031587839126587},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.14668512344360352},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.08393794298171997},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cybersa.2018.8551486","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cybersa.2018.8551486","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (Cyber SA)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":10,"referenced_works":["https://openalex.org/W149532529","https://openalex.org/W1589448825","https://openalex.org/W2100381313","https://openalex.org/W2134594539","https://openalex.org/W2487152776","https://openalex.org/W2580012760","https://openalex.org/W2620229640","https://openalex.org/W6606018872","https://openalex.org/W6661564250","https://openalex.org/W6680021345"],"related_works":["https://openalex.org/W154550377","https://openalex.org/W1865476398","https://openalex.org/W4312988603","https://openalex.org/W2742088440","https://openalex.org/W2134038533","https://openalex.org/W2899357592","https://openalex.org/W2186832478","https://openalex.org/W2950308098","https://openalex.org/W1602671176","https://openalex.org/W2903086587"],"abstract_inverted_index":{"A":[0],"cybersecurity":[1,15,30],"operations":[2],"centre":[3],"ontology":[4,21,44,114],"for":[5,22],"analysis":[6,25,54],"(CoCoa)":[7],"is":[8,18,115],"proposed,":[9],"which":[10,80],"aligns":[11],"to":[12,52,85,118],"the":[13,23,29,36,40,53,83,112],"NIST":[14],"framework.":[16],"CoCoa":[17],"a":[19,46],"process":[20,43],"CSOC":[24,84],"processes":[26],"that":[27,96],"provides":[28],"analysts":[31],"operational":[32],"situational":[33],"awareness":[34],"of":[35,39,55,90],"vital":[37],"aspects":[38],"CSOC.":[41],"The":[42],"offers":[45],"fundamental":[47],"shift":[48],"from":[49],"log":[50],"collection":[51],"five":[56],"overarching":[57],"threat":[58,78],"intelligence":[59],"and":[60,66,74,77,93,106,109,126],"information":[61],"sources":[62],"(namely":[63],"-":[64],"events":[65,105],"logs,":[67],"network":[68],"information,":[69],"structured":[70],"digital":[71],"feed,":[72],"semi":[73],"un-structured":[75],"feed":[76],"intelligence),":[79],"should":[81],"allow":[82],"provide":[86],"proactive":[87],"monitoring,":[88],"detection":[89],"inflight,":[91],"emerging":[92],"complex":[94],"threats":[95],"would":[97],"not":[98],"have":[99],"ordinarily":[100],"been":[101],"detected":[102,127],"through":[103,128],"only":[104],"logs.":[107],"Further,":[108],"most":[110],"importantly,":[111],"proposed":[113],"then":[116],"used":[117],"identify":[119],"how":[120],"cyber":[121],"incidents":[122],"can":[123],"be":[124],"realised":[125],"ontology-based":[129],"knowledge":[130],"graph.":[131]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":7},{"year":2019,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}