{"id":"https://openalex.org/W2971952824","doi":"https://doi.org/10.1109/isi.2019.8823152","title":"NO-DOUBT: Attack Attribution Based On Threat Intelligence Reports","display_name":"NO-DOUBT: Attack Attribution Based On Threat Intelligence Reports","publication_year":2019,"publication_date":"2019-07-01","ids":{"openalex":"https://openalex.org/W2971952824","doi":"https://doi.org/10.1109/isi.2019.8823152","mag":"2971952824"},"language":"en","primary_location":{"id":"doi:10.1109/isi.2019.8823152","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isi.2019.8823152","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 IEEE International Conference on Intelligence and Security Informatics (ISI)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069891430","display_name":"Lior Perry","orcid":null},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Lior Perry","raw_affiliation_strings":["Information Systems Engineering, Ben-Gurion University of the Negev, Be\u2019er Sheva, Israel","Information Systems Engineering, Ben-Gurion University of the Negev, Be'er Sheva, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Systems Engineering, Ben-Gurion University of the Negev, Be\u2019er Sheva, Israel","institution_ids":["https://openalex.org/I124227911"]},{"raw_affiliation_string":"Information Systems Engineering, Ben-Gurion University of the Negev, Be'er Sheva, Israel","institution_ids":["https://openalex.org/I124227911"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086920790","display_name":"Bracha Shapira","orcid":"https://orcid.org/0000-0003-4943-9324"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Bracha Shapira","raw_affiliation_strings":["Information Systems Engineering, Ben-Gurion University of the Negev, Be\u2019er Sheva, Israel","Information Systems Engineering, Ben-Gurion University of the Negev, Be'er Sheva, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Systems Engineering, Ben-Gurion University of the Negev, Be\u2019er Sheva, Israel","institution_ids":["https://openalex.org/I124227911"]},{"raw_affiliation_string":"Information Systems Engineering, Ben-Gurion University of the Negev, Be'er Sheva, Israel","institution_ids":["https://openalex.org/I124227911"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5059447087","display_name":"Rami Puzis","orcid":"https://orcid.org/0000-0002-7229-3899"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Rami Puzis","raw_affiliation_strings":["Information Systems Engineering, Ben-Gurion University of the Negev, Be\u2019er Sheva, Israel","Information Systems Engineering, Ben-Gurion University of the Negev, Be'er Sheva, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Systems Engineering, Ben-Gurion University of the Negev, Be\u2019er Sheva, Israel","institution_ids":["https://openalex.org/I124227911"]},{"raw_affiliation_string":"Information Systems Engineering, Ben-Gurion University of the Negev, Be'er Sheva, Israel","institution_ids":["https://openalex.org/I124227911"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I124227911"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":31,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"80","last_page":"85"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9941999912261963,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8239088654518127},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8029335141181946},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5885025858879089},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.5673458576202393},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5425764322280884},{"id":"https://openalex.org/keywords/attribution","display_name":"Attribution","score":0.5319350957870483},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.49220314621925354},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4819900393486023},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4572526812553406},{"id":"https://openalex.org/keywords/natural-language-processing","display_name":"Natural language processing","score":0.4434674382209778},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.34154820442199707}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8239088654518127},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8029335141181946},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5885025858879089},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.5673458576202393},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5425764322280884},{"id":"https://openalex.org/C143299363","wikidata":"https://www.wikidata.org/wiki/Q900584","display_name":"Attribution","level":2,"score":0.5319350957870483},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.49220314621925354},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4819900393486023},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4572526812553406},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.4434674382209778},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.34154820442199707},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/isi.2019.8823152","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isi.2019.8823152","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 IEEE International Conference on Intelligence and Security Informatics (ISI)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5400000214576721,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W54929040","https://openalex.org/W154046626","https://openalex.org/W1594990268","https://openalex.org/W1614298861","https://openalex.org/W1666731339","https://openalex.org/W2008324060","https://openalex.org/W2098262260","https://openalex.org/W2121746769","https://openalex.org/W2143891693","https://openalex.org/W2295598076","https://openalex.org/W2516577067","https://openalex.org/W2564822508","https://openalex.org/W2766677542","https://openalex.org/W2920145666","https://openalex.org/W2950577311","https://openalex.org/W2963626623","https://openalex.org/W3102476541","https://openalex.org/W3103387846","https://openalex.org/W4300446049","https://openalex.org/W6636510571","https://openalex.org/W6719819555","https://openalex.org/W6731243579"],"related_works":["https://openalex.org/W4313315004","https://openalex.org/W1827256152","https://openalex.org/W2961085424","https://openalex.org/W4306674287","https://openalex.org/W4205985752","https://openalex.org/W2980605179","https://openalex.org/W2617467194","https://openalex.org/W4224009465","https://openalex.org/W4366249425","https://openalex.org/W2968586400"],"abstract_inverted_index":{"The":[0],"task":[1],"of":[2,20,95,111,118,124,133,153,168,176,183],"attack":[3,29,72,112],"attribution,":[4],"i.e.,":[5],"identifying":[6],"the":[7,18,40,57,67,79,93,96,101,125,131,151,154,194,201,210,218],"entity":[8],"responsible":[9],"for":[10],"an":[11,21,71,86],"attack,":[12],"is":[13],"complicated":[14],"and":[15,43,66,128,136,156,179,231],"usually":[16],"requires":[17,157],"involvement":[19],"experienced":[22],"security":[23,185],"expert.":[24],"Prior":[25],"attempts":[26],"to":[27,47,100,193,224],"automate":[28],"attribution":[30,113],"apply":[31],"various":[32],"machine":[33,134],"learning":[34,135],"techniques":[35],"on":[36,115,164],"features":[37],"extracted":[38],"from":[39,78,130,172],"malware's":[41,80],"code":[42],"behavior":[44],"in":[45,98],"order":[46],"identify":[48,225,232],"other":[49],"similar":[50],"malware":[51,59,75,102],"whose":[52],"authors":[53],"are":[54],"known.":[55],"However,":[56],"same":[58],"can":[60,204,221],"be":[61,222],"reused":[62],"by":[63],"multiple":[64],"actors,":[65],"actor":[68],"who":[69],"performed":[70],"using":[73,122],"a":[74,109,144,173,180],"might":[76],"differ":[77],"author.":[81],"Moreover,":[82],"information":[83],"collected":[84],"during":[85],"incident":[87,169],"may":[88],"contain":[89],"many":[90],"clues":[91],"about":[92],"identity":[94],"attacker":[97],"addition":[99],"used.":[103],"In":[104,213],"this":[105],"paper,":[106],"we":[107,215],"propose":[108],"method":[110],"based":[114],"textual":[116],"analysis":[117],"threat":[119,229,236],"intelligence":[120],"reports,":[121],"state":[123],"art":[126],"algorithms":[127],"models":[129],"fields":[132],"natural":[137],"language":[138],"processing":[139],"(NLP).":[140],"We":[141],"have":[142,189],"developed":[143],"new":[145],"text":[146],"representation":[147,167,203],"algorithm":[148],"which":[149],"captures":[150],"context":[152],"words":[155],"minimal":[158],"feature":[159],"engineering.":[160],"Our":[161],"approach":[162,220],"relies":[163],"vector":[165],"space":[166],"reports":[170,178],"derived":[171],"small":[174],"collection":[175],"labeled":[177],"large":[181],"corpus":[182],"general":[184],"literature.":[186],"Both":[187],"datasets":[188],"been":[190],"made":[191],"available":[192],"research":[195],"community.":[196],"Experimental":[197],"results":[198],"show":[199,216],"that":[200],"proposed":[202,219],"attribute":[205],"attacks":[206],"more":[207],"accurately":[208],"than":[209],"baselines'":[211],"representations.":[212],"addition,":[214],"how":[217],"used":[223],"novel":[226],"previously":[227],"unseen":[228],"actors":[230],"similarities":[233],"between":[234],"known":[235],"actors.":[237]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":10},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}