{"id":"https://openalex.org/W7134938817","doi":"https://doi.org/10.1109/icdmw69685.2025.00140","title":"ATT&CK to CVE: A Large-Scale Automated Knowledge Graph for Threat Intelligence","display_name":"ATT&CK to CVE: A Large-Scale Automated Knowledge Graph for Threat Intelligence","publication_year":2025,"publication_date":"2025-11-12","ids":{"openalex":"https://openalex.org/W7134938817","doi":"https://doi.org/10.1109/icdmw69685.2025.00140"},"language":null,"primary_location":{"id":"doi:10.1109/icdmw69685.2025.00140","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icdmw69685.2025.00140","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE International Conference on Data Mining Workshops (ICDMW)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5122109397","display_name":"Moqsadur Rahman","orcid":null},"institutions":[{"id":"https://openalex.org/I164936912","display_name":"The University of Texas at El Paso","ror":"https://ror.org/04d5vba33","country_code":"US","type":"education","lineage":["https://openalex.org/I164936912"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Moqsadur Rahman","raw_affiliation_strings":["The University of Texas at El Paso,USA"],"affiliations":[{"raw_affiliation_string":"The University of Texas at El Paso,USA","institution_ids":["https://openalex.org/I164936912"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125128615","display_name":"Monika Akbar","orcid":null},"institutions":[{"id":"https://openalex.org/I164936912","display_name":"The University of Texas at El Paso","ror":"https://ror.org/04d5vba33","country_code":"US","type":"education","lineage":["https://openalex.org/I164936912"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Monika Akbar","raw_affiliation_strings":["The University of Texas at El Paso,USA"],"affiliations":[{"raw_affiliation_string":"The University of Texas at El Paso,USA","institution_ids":["https://openalex.org/I164936912"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128699177","display_name":"Joseph T. Aguayo","orcid":null},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Joseph T. Aguayo","raw_affiliation_strings":["Pacific Northwest National Laboratory,USA"],"affiliations":[{"raw_affiliation_string":"Pacific Northwest National Laboratory,USA","institution_ids":["https://openalex.org/I142606810"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102234375","display_name":"M. Shahriar Hossain","orcid":null},"institutions":[{"id":"https://openalex.org/I164936912","display_name":"The University of Texas at El Paso","ror":"https://ror.org/04d5vba33","country_code":"US","type":"education","lineage":["https://openalex.org/I164936912"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mahmud Shahriar Hossain","raw_affiliation_strings":["The University of Texas at El Paso,USA"],"affiliations":[{"raw_affiliation_string":"The University of Texas at El Paso,USA","institution_ids":["https://openalex.org/I164936912"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075715593","display_name":"Tina M. Ellis","orcid":null},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tina M. Ellis","raw_affiliation_strings":["Pacific Northwest National Laboratory,USA"],"affiliations":[{"raw_affiliation_string":"Pacific Northwest National Laboratory,USA","institution_ids":["https://openalex.org/I142606810"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102677587","display_name":"Siddhartha Shankar Das","orcid":null},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Siddhartha Shankar Das","raw_affiliation_strings":["Pacific Northwest National Laboratory,USA"],"affiliations":[{"raw_affiliation_string":"Pacific Northwest National Laboratory,USA","institution_ids":["https://openalex.org/I142606810"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071253446","display_name":"Mohammad Fakhruddin Babar","orcid":"https://orcid.org/0000-0003-3557-8809"},"institutions":[{"id":"https://openalex.org/I72951846","display_name":"Washington State University","ror":"https://ror.org/05dk0ce17","country_code":"US","type":"education","lineage":["https://openalex.org/I72951846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mohammad F. Babar","raw_affiliation_strings":["Washington State University,USA"],"affiliations":[{"raw_affiliation_string":"Washington State University,USA","institution_ids":["https://openalex.org/I72951846"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128790240","display_name":"Monowar Hasan","orcid":null},"institutions":[{"id":"https://openalex.org/I72951846","display_name":"Washington State University","ror":"https://ror.org/05dk0ce17","country_code":"US","type":"education","lineage":["https://openalex.org/I72951846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Monowar Hasan","raw_affiliation_strings":["Washington State University,USA"],"affiliations":[{"raw_affiliation_string":"Washington State University,USA","institution_ids":["https://openalex.org/I72951846"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5122126313","display_name":"Aaron Sanchez","orcid":null},"institutions":[{"id":"https://openalex.org/I72951846","display_name":"Washington State University","ror":"https://ror.org/05dk0ce17","country_code":"US","type":"education","lineage":["https://openalex.org/I72951846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aaron Sanchez","raw_affiliation_strings":["Washington State University,USA"],"affiliations":[{"raw_affiliation_string":"Washington State University,USA","institution_ids":["https://openalex.org/I72951846"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128773575","display_name":"Luis Fernando de la Torre","orcid":null},"institutions":[{"id":"https://openalex.org/I72951846","display_name":"Washington State University","ror":"https://ror.org/05dk0ce17","country_code":"US","type":"education","lineage":["https://openalex.org/I72951846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Luis Fernando de la Torre","raw_affiliation_strings":["Washington State University,USA"],"affiliations":[{"raw_affiliation_string":"Washington State University,USA","institution_ids":["https://openalex.org/I72951846"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5128798245","display_name":"Mahantesh Halappanavar","orcid":null},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mahantesh Halappanavar","raw_affiliation_strings":["Pacific Northwest National Laboratory,USA"],"affiliations":[{"raw_affiliation_string":"Pacific Northwest National Laboratory,USA","institution_ids":["https://openalex.org/I142606810"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":11,"corresponding_author_ids":["https://openalex.org/A5122109397"],"corresponding_institution_ids":["https://openalex.org/I164936912"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.88344578,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1044","last_page":"1054"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.31520000100135803,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.31520000100135803,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.0794999971985817,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.03709999844431877,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.4198000133037567},{"id":"https://openalex.org/keywords/knowledge-representation-and-reasoning","display_name":"Knowledge representation and reasoning","score":0.3409000039100647},{"id":"https://openalex.org/keywords/knowledge-graph","display_name":"Knowledge graph","score":0.32749998569488525},{"id":"https://openalex.org/keywords/knowledge-based-systems","display_name":"Knowledge-based systems","score":0.3009999990463257},{"id":"https://openalex.org/keywords/knowledge-acquisition","display_name":"Knowledge acquisition","score":0.2969000041484833},{"id":"https://openalex.org/keywords/intelligence-analysis","display_name":"Intelligence analysis","score":0.2904999852180481}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.657800018787384},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4198000133037567},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.38530001044273376},{"id":"https://openalex.org/C161301231","wikidata":"https://www.wikidata.org/wiki/Q3478658","display_name":"Knowledge representation and reasoning","level":2,"score":0.3409000039100647},{"id":"https://openalex.org/C2987255567","wikidata":"https://www.wikidata.org/wiki/Q33002955","display_name":"Knowledge graph","level":2,"score":0.32749998569488525},{"id":"https://openalex.org/C115925183","wikidata":"https://www.wikidata.org/wiki/Q1412694","display_name":"Knowledge-based systems","level":2,"score":0.3009999990463257},{"id":"https://openalex.org/C2777220311","wikidata":"https://www.wikidata.org/wiki/Q6423340","display_name":"Knowledge acquisition","level":2,"score":0.2969000041484833},{"id":"https://openalex.org/C517642484","wikidata":"https://www.wikidata.org/wiki/Q2388514","display_name":"Intelligence analysis","level":2,"score":0.2904999852180481},{"id":"https://openalex.org/C4554734","wikidata":"https://www.wikidata.org/wiki/Q593744","display_name":"Knowledge base","level":2,"score":0.26899999380111694},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.262800008058548},{"id":"https://openalex.org/C157170001","wikidata":"https://www.wikidata.org/wiki/Q4781507","display_name":"Applications of artificial intelligence","level":2,"score":0.2606000006198883},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2581999897956848},{"id":"https://openalex.org/C58328972","wikidata":"https://www.wikidata.org/wiki/Q184609","display_name":"Expert system","level":2,"score":0.2567000091075897}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icdmw69685.2025.00140","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icdmw69685.2025.00140","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE International Conference on Data Mining Workshops (ICDMW)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":6,"referenced_works":["https://openalex.org/W2980659949","https://openalex.org/W3117274285","https://openalex.org/W3210162706","https://openalex.org/W4391026296","https://openalex.org/W4401878138","https://openalex.org/W4403854698"],"related_works":[],"abstract_inverted_index":{"Cyber":[0],"threat":[1,50,213],"intelligence":[2],"(CTI)":[3],"includes":[4],"collecting":[5],"and":[6,12,59,76,85,90,93,109,111,122,143,180,189,219,239,245],"analyzing":[7],"cybersecurity-related":[8],"information":[9],"across":[10],"diverse":[11],"heterogeneous":[13],"sources.":[14],"Those":[15],"sources":[16,41],"may":[17],"include":[18,185],"repositories":[19],"that":[20,73,184,199],"curate":[21],"vulnerabilities,":[22,156,179],"weaknesses,":[23],"attack":[24,153,160],"pattern":[25],"related":[26],"data":[27,78],"in":[28,148,212,242],"different":[29],"formats":[30],"with":[31,129],"varying":[32],"degrees":[33],"of":[34,47,107,138,140,166],"detail.":[35],"Analysts":[36],"must":[37],"continuously":[38,228],"reconcile":[39],"these":[40],"to":[42,155,159,177],"gain":[43],"a":[44,66,97,104,226],"coherent":[45],"view":[46],"the":[48,80,164,167],"evolving":[49],"landscape,":[51],"yet":[52],"this":[53,62],"process":[54],"is":[55],"often":[56],"manual,":[57],"incomplete,":[58],"error-prone.":[60],"In":[61],"work,":[63],"we":[64],"present":[65],"fully":[67],"automated":[68],"cybersecurity":[69],"knowledge":[70,134,168,223],"graph":[71,99,135,169,201,224,243],"pipeline":[72],"systematically":[74],"ingests":[75],"normalizes":[77],"from":[79,114,152,157],"National":[81],"Vulnerability":[82],"Database":[83],"(CVE":[84],"CVSS),":[86],"MITRE":[87],"CWE,":[88],"CAPEC,":[89],"ATT&CK":[91],"frameworks,":[92],"integrates":[94],"them":[95],"into":[96],"Neo4j":[98],"database.":[100],"Our":[101,192],"system":[102],"extracts":[103],"rich":[105],"set":[106],"properties":[108],"inter-":[110],"intra-entity":[112],"relationships":[113],"each":[115],"dataset,":[116],"including":[117],"hierarchical":[118,200],"links,":[119],"cross-domain":[120],"mappings,":[121],"temporal":[123],"metadata,":[124],"while":[125],"ensuring":[126],"daily":[127],"synchronization":[128],"upstream":[130],"feeds.":[131],"The":[132],"resulting":[133],"contains":[136],"hundreds":[137],"thousands":[139],"interconnected":[141],"entities":[142],"edges,":[144],"enabling":[145],"multi-hop":[146],"analysis":[147],"various":[149],"directions":[150],"(e.g.,":[151],"techniques":[154],"vulnerabilities":[158],"techniques).":[161],"We":[162],"demonstrate":[163],"usefulness":[165],"for":[170,231],"comprehensive":[171],"weakness":[172],"analysis,":[173],"linking":[174],"adversary":[175],"groups":[176],"exploited":[178],"graph-based":[181],"inference":[182],"tasks":[183],"variable-length":[186],"path":[187],"traversal":[188],"link":[190],"discovery.":[191],"case":[193],"studies":[194],"on":[195],"CISA":[196],"advisories":[197],"show":[198],"traversals":[202],"uncover":[203],"CVEs":[204],"beyond":[205],"those":[206],"explicitly":[207],"listed,":[208],"bridging":[209],"critical":[210],"gaps":[211],"intelligence.":[214],"By":[215],"combining":[216],"automation,":[217],"completeness,":[218],"semantic":[220],"richness,":[221],"our":[222],"provides":[225],"scalable,":[227],"updated":[229],"foundation":[230],"cyber":[232],"defense":[233],"analytics,":[234],"supporting":[235],"both":[236],"operational":[237],"decisionmaking":[238],"advanced":[240],"research":[241],"learning":[244],"reasoning":[246],"over":[247],"CTI.":[248]},"counts_by_year":[],"updated_date":"2026-03-13T14:20:09.374765","created_date":"2026-03-12T00:00:00"}