{"id":"https://openalex.org/W2754972313","doi":"https://doi.org/10.1109/icccn.2017.8038527","title":"The Design of Cyber Threat Hunting Games: A Case Study","display_name":"The Design of Cyber Threat Hunting Games: A Case Study","publication_year":2017,"publication_date":"2017-07-01","ids":{"openalex":"https://openalex.org/W2754972313","doi":"https://doi.org/10.1109/icccn.2017.8038527","mag":"2754972313"},"language":"en","primary_location":{"id":"doi:10.1109/icccn.2017.8038527","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icccn.2017.8038527","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 26th International Conference on Computer Communication and Networks (ICCCN)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5098023925","display_name":"Md Nazmus Sakib Miazi","orcid":null},"institutions":[{"id":"https://openalex.org/I102149020","display_name":"University of North Carolina at Charlotte","ror":"https://ror.org/04dawnj30","country_code":"US","type":"education","lineage":["https://openalex.org/I102149020"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Md Nazmus Sakib Miazi","raw_affiliation_strings":["University of North Carolina at Charlotte, Charlotte, NC, US"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of North Carolina at Charlotte, Charlotte, NC, US","institution_ids":["https://openalex.org/I102149020"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048838140","display_name":"Mir Mehedi Ahsan Pritom","orcid":"https://orcid.org/0000-0002-1260-1829"},"institutions":[{"id":"https://openalex.org/I102149020","display_name":"University of North Carolina at Charlotte","ror":"https://ror.org/04dawnj30","country_code":"US","type":"education","lineage":["https://openalex.org/I102149020"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mir Mehedi A. Pritom","raw_affiliation_strings":["Department of Software and Information Systems, College of Computing and Informatics University of North Carolina at Charlotte, Charlotte, NC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Software and Information Systems, College of Computing and Informatics University of North Carolina at Charlotte, Charlotte, NC, USA","institution_ids":["https://openalex.org/I102149020"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013557688","display_name":"Mohamed Shehab","orcid":"https://orcid.org/0000-0002-4189-9118"},"institutions":[{"id":"https://openalex.org/I102149020","display_name":"University of North Carolina at Charlotte","ror":"https://ror.org/04dawnj30","country_code":"US","type":"education","lineage":["https://openalex.org/I102149020"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mohamed Shehab","raw_affiliation_strings":["Department of Software and Information Systems, College of Computing and Informatics University of North Carolina at Charlotte, Charlotte, NC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Software and Information Systems, College of Computing and Informatics University of North Carolina at Charlotte, Charlotte, NC, USA","institution_ids":["https://openalex.org/I102149020"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111575680","display_name":"Bill Chu","orcid":null},"institutions":[{"id":"https://openalex.org/I102149020","display_name":"University of North Carolina at Charlotte","ror":"https://ror.org/04dawnj30","country_code":"US","type":"education","lineage":["https://openalex.org/I102149020"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Bill Chu","raw_affiliation_strings":["Department of Software and Information Systems, College of Computing and Informatics University of North Carolina at Charlotte, Charlotte, NC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Software and Information Systems, College of Computing and Informatics University of North Carolina at Charlotte, Charlotte, NC, USA","institution_ids":["https://openalex.org/I102149020"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051564807","display_name":"Jinpeng Wei","orcid":"https://orcid.org/0000-0002-6982-7386"},"institutions":[{"id":"https://openalex.org/I102149020","display_name":"University of North Carolina at Charlotte","ror":"https://ror.org/04dawnj30","country_code":"US","type":"education","lineage":["https://openalex.org/I102149020"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jinpeng Wei","raw_affiliation_strings":["Department of Software and Information Systems, College of Computing and Informatics University of North Carolina at Charlotte, Charlotte, NC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Software and Information Systems, College of Computing and Informatics University of North Carolina at Charlotte, Charlotte, NC, USA","institution_ids":["https://openalex.org/I102149020"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I102149020"],"apc_list":null,"apc_paid":null,"fwci":1.5193,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":{"value":0.87657383,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/analytics","display_name":"Analytics","score":0.6336849927902222},{"id":"https://openalex.org/keywords/competition","display_name":"Competition (biology)","score":0.5910366773605347},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.561485767364502},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5484985113143921},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4664060175418854},{"id":"https://openalex.org/keywords/cyber-threats","display_name":"Cyber threats","score":0.44941458106040955},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.42301803827285767},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.41395968198776245},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.4113844931125641},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.2234731912612915}],"concepts":[{"id":"https://openalex.org/C79158427","wikidata":"https://www.wikidata.org/wiki/Q485396","display_name":"Analytics","level":2,"score":0.6336849927902222},{"id":"https://openalex.org/C91306197","wikidata":"https://www.wikidata.org/wiki/Q45767","display_name":"Competition (biology)","level":2,"score":0.5910366773605347},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.561485767364502},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5484985113143921},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4664060175418854},{"id":"https://openalex.org/C3018725008","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber threats","level":2,"score":0.44941458106040955},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.42301803827285767},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.41395968198776245},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.4113844931125641},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2234731912612915},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icccn.2017.8038527","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icccn.2017.8038527","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 26th International Conference on Computer Communication and Networks (ICCCN)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W77112667","https://openalex.org/W145006793","https://openalex.org/W1515292501","https://openalex.org/W1543388142","https://openalex.org/W1562926986","https://openalex.org/W1985987493","https://openalex.org/W1999448603","https://openalex.org/W2010573219","https://openalex.org/W2014316112","https://openalex.org/W2020831675","https://openalex.org/W2088307662","https://openalex.org/W2122646361","https://openalex.org/W2126513753","https://openalex.org/W2478464102","https://openalex.org/W2488833067","https://openalex.org/W2556800116","https://openalex.org/W4205747509","https://openalex.org/W4251199811","https://openalex.org/W6603139054","https://openalex.org/W6632547301"],"related_works":["https://openalex.org/W2362333699","https://openalex.org/W2790607559","https://openalex.org/W4389473457","https://openalex.org/W2351179085","https://openalex.org/W2373882509","https://openalex.org/W2363603946","https://openalex.org/W2170002292","https://openalex.org/W2371342277","https://openalex.org/W2322771277","https://openalex.org/W4388008218"],"abstract_inverted_index":{"Cyber":[0],"Threat":[1],"Hunting":[2,72],"is":[3],"an":[4],"emerging":[5],"cyber":[6,87],"security":[7,26,40,55],"activity.":[8],"Recent":[9],"studies":[10],"show":[11],"that,":[12],"although":[13],"similar":[14],"actions":[15],"like":[16],"threat":[17,62,88,104],"hunting":[18,63,105],"are":[19,31],"being":[20,34],"actively":[21],"practiced":[22],"in":[23,44],"some":[24],"organization,":[25],"administrator":[27],"and":[28],"policy":[29],"makers":[30],"far":[32],"from":[33],"satisfied":[35],"with":[36,50,76],"their":[37],"effectiveness.":[38],"Most":[39],"professionals":[41],"lack":[42,54],"expertise":[43],"data":[45,51,92],"analytics":[46,52],"while":[47],"most":[48],"people":[49],"skills":[53,84],"knowledge.":[56],"To":[57],"understand":[58],"the":[59,91,98],"necessity":[60],"of":[61,100],"education":[64],"at":[65,106],"university":[66],"level,":[67],"we":[68,82],"organized":[69],"a":[70],"\\textit{Threat":[71],"Competition}":[73],"on":[74],"campus":[75],"generated":[77],"logs.":[78],"In":[79],"this":[80],"paper,":[81],"identify":[83],"needed":[85],"for":[86],"hunting,":[89],"describe":[90],"generation":[93],"process":[94],"as":[95,97],"well":[96],"usage":[99],"logs":[101],"to":[102],"teach":[103],"universities.":[107]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":4},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":2}],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2025-10-10T00:00:00"}