{"id":"https://openalex.org/W7130581205","doi":"https://doi.org/10.1109/ictc66702.2025.11389030","title":"AMVS: Automated Mapping of Vulnerabilities to Security Standards in Military Software","display_name":"AMVS: Automated Mapping of Vulnerabilities to Security Standards in Military Software","publication_year":2025,"publication_date":"2025-10-14","ids":{"openalex":"https://openalex.org/W7130581205","doi":"https://doi.org/10.1109/ictc66702.2025.11389030"},"language":null,"primary_location":{"id":"doi:10.1109/ictc66702.2025.11389030","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ictc66702.2025.11389030","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 16th International Conference on Information and Communication Technology Convergence (ICTC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5002772963","display_name":"Sungjae Choi","orcid":null},"institutions":[{"id":"https://openalex.org/I196345858","display_name":"Chungnam National University","ror":"https://ror.org/0227as991","country_code":"KR","type":"education","lineage":["https://openalex.org/I196345858"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Sungjae Choi","raw_affiliation_strings":["Chungnam National University,Division of Computer Convergence,Daejeon,Republic of Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chungnam National University,Division of Computer Convergence,Daejeon,Republic of Korea","institution_ids":["https://openalex.org/I196345858"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126428399","display_name":"Dongkyun Yang","orcid":null},"institutions":[{"id":"https://openalex.org/I196345858","display_name":"Chungnam National University","ror":"https://ror.org/0227as991","country_code":"KR","type":"education","lineage":["https://openalex.org/I196345858"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Dongkyun Yang","raw_affiliation_strings":["Chungnam National University,Division of Computer Convergence,Daejeon,Republic of Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chungnam National University,Division of Computer Convergence,Daejeon,Republic of Korea","institution_ids":["https://openalex.org/I196345858"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089884918","display_name":"Sojin Na","orcid":"https://orcid.org/0000-0003-0240-3260"},"institutions":[{"id":"https://openalex.org/I196345858","display_name":"Chungnam National University","ror":"https://ror.org/0227as991","country_code":"KR","type":"education","lineage":["https://openalex.org/I196345858"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Sojin Na","raw_affiliation_strings":["Chungnam National University,Division of Computer Convergence,Daejeon,Republic of Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chungnam National University,Division of Computer Convergence,Daejeon,Republic of Korea","institution_ids":["https://openalex.org/I196345858"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5110087166","display_name":"Jinsoo Jang","orcid":null},"institutions":[{"id":"https://openalex.org/I196345858","display_name":"Chungnam National University","ror":"https://ror.org/0227as991","country_code":"KR","type":"education","lineage":["https://openalex.org/I196345858"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Jinsoo Jang","raw_affiliation_strings":["Chungnam National University,Division of Computer Convergence,Daejeon,Republic of Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chungnam National University,Division of Computer Convergence,Daejeon,Republic of Korea","institution_ids":["https://openalex.org/I196345858"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I196345858"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"62","last_page":"67"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.6552000045776367,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.6552000045776367,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.06549999862909317,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.02290000021457672,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.6556000113487244},{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.5521000027656555},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.48739999532699585},{"id":"https://openalex.org/keywords/security-controls","display_name":"Security controls","score":0.4465000033378601},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.42250001430511475},{"id":"https://openalex.org/keywords/nist","display_name":"NIST","score":0.41359999775886536},{"id":"https://openalex.org/keywords/application-security","display_name":"Application security","score":0.41280001401901245},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.41280001401901245},{"id":"https://openalex.org/keywords/security-testing","display_name":"Security testing","score":0.3847000002861023},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.3734999895095825}],"concepts":[{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.6556000113487244},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6171000003814697},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5978000164031982},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.5521000027656555},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.48739999532699585},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.4643000066280365},{"id":"https://openalex.org/C178148461","wikidata":"https://www.wikidata.org/wiki/Q1632136","display_name":"Security controls","level":3,"score":0.4465000033378601},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.42250001430511475},{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.41359999775886536},{"id":"https://openalex.org/C77109596","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Application security","level":5,"score":0.41280001401901245},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.41280001401901245},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.3847000002861023},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.3734999895095825},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.3707999885082245},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.34459999203681946},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.3328999876976013},{"id":"https://openalex.org/C149091818","wikidata":"https://www.wikidata.org/wiki/Q2429814","display_name":"Software system","level":3,"score":0.3310999870300293},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.3215000033378601},{"id":"https://openalex.org/C120617098","wikidata":"https://www.wikidata.org/wiki/Q559486","display_name":"Systems development life cycle","level":5,"score":0.31610000133514404},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.3066999912261963},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.2976999878883362},{"id":"https://openalex.org/C13159133","wikidata":"https://www.wikidata.org/wiki/Q365674","display_name":"Security engineering","level":5,"score":0.2953000068664551},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.2946000099182129},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.28040000796318054},{"id":"https://openalex.org/C180152950","wikidata":"https://www.wikidata.org/wiki/Q2904257","display_name":"Software development process","level":4,"score":0.2782999873161316},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2759000062942505},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.26510000228881836},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2635999917984009},{"id":"https://openalex.org/C76518257","wikidata":"https://www.wikidata.org/wiki/Q271680","display_name":"Software framework","level":5,"score":0.2619999945163727},{"id":"https://openalex.org/C114869243","wikidata":"https://www.wikidata.org/wiki/Q133735","display_name":"Security through obscurity","level":5,"score":0.2587999999523163},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.250900000333786}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ictc66702.2025.11389030","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ictc66702.2025.11389030","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 16th International Conference on Information and Communication Technology Convergence (ICTC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/12","score":0.540266215801239,"display_name":"Responsible consumption and production"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":2,"referenced_works":["https://openalex.org/W2369295637","https://openalex.org/W3183469243"],"related_works":[],"abstract_inverted_index":{"As":[0],"software":[1,20,40,51,161],"plays":[2],"a":[3],"critical":[4],"role":[5],"in":[6],"the":[7,19,53,77,138,144,149,154],"performance":[8],"and":[9,65,72,92,109,126,146,158],"security":[10,16,44,74,104,128],"of":[11,148,156,164],"modern":[12],"weapon":[13],"systems,":[14],"integrating":[15],"engineering":[17],"throughout":[18],"development":[21,155],"life":[22],"cycle":[23],"is":[24],"becoming":[25],"increasingly":[26],"essential.":[27],"This":[28],"paper":[29],"introduces":[30],"AMVS,":[31],"an":[32],"automated":[33],"framework":[34,81],"that":[35],"systematically":[36],"maps":[37,102],"responses":[38],"to":[39,42,69,96,106,118,124,167],"vulnerabilities":[41],"international":[43],"standards.":[45],"AMVS":[46,152],"leverages":[47],"ISO/IEC":[48],"25023":[49],"for":[50],"quality,":[52],"Risk":[54],"Management":[55],"Framework":[56],"(RMF)":[57],"based":[58],"on":[59,137],"NIST":[60],"SP":[61],"800-53":[62],"Rev.":[63],"5,":[64],"real-time":[66],"CVE/CWE":[67],"data":[68,84],"establish":[70],"traceable":[71],"quantifiable":[73],"requirements":[75],"from":[76],"design":[78,120],"stage.":[79],"The":[80],"collects":[82],"CVE":[83],"through":[85],"web":[86],"crawling,":[87],"classifies":[88],"them":[89],"by":[90],"CWE,":[91],"assigns":[93],"severity-based":[94],"weights":[95],"each":[97],"vulnerability.":[98],"It":[99],"then":[100],"automatically":[101],"optimal":[103],"measures":[105],"corresponding":[107],"ISO":[108],"RMF":[110],"control":[111,141],"items.":[112],"These":[113],"mappings":[114],"are":[115],"applied":[116],"directly":[117],"system":[119],"documents,":[121],"enabling":[122],"developers":[123],"prioritize":[125],"implement":[127],"controls":[129],"with":[130],"minimal":[131],"manual":[132],"effort.":[133],"A":[134],"case":[135],"study":[136],"PX4":[139],"flight":[140],"platform":[142],"demonstrates":[143],"effectiveness":[145],"scalability":[147],"proposed":[150],"framework.":[151],"enhances":[153],"resilient":[157],"standards-compliant":[159],"military":[160],"systems":[162],"capable":[163],"proactively":[165],"responding":[166],"emerging":[168],"cyber":[169],"threats.":[170]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-02-20T00:00:00"}