{"id":"https://openalex.org/W4388115911","doi":"https://doi.org/10.1109/isi58743.2023.10297134","title":"An Overview of Cybersecurity Knowledge Graphs Mapped to the MITRE ATT&CK Framework Domains","display_name":"An Overview of Cybersecurity Knowledge Graphs Mapped to the MITRE ATT&CK Framework Domains","publication_year":2023,"publication_date":"2023-10-02","ids":{"openalex":"https://openalex.org/W4388115911","doi":"https://doi.org/10.1109/isi58743.2023.10297134"},"language":"en","primary_location":{"id":"doi:10.1109/isi58743.2023.10297134","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isi58743.2023.10297134","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE International Conference on Intelligence and Security Informatics (ISI)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5031691002","display_name":"Joshua Bolton","orcid":"https://orcid.org/0000-0001-9033-1003"},"institutions":[{"id":"https://openalex.org/I79272384","display_name":"University of Maryland, Baltimore County","ror":"https://ror.org/02qskvh78","country_code":"US","type":"education","lineage":["https://openalex.org/I79272384"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Joshua Bolton","raw_affiliation_strings":["University of Maryland, Baltimore County,Dept. of Information Systems,Baltimore,USA","Dept. of Information Systems, University of Maryland, Baltimore County, Baltimore, USA"],"affiliations":[{"raw_affiliation_string":"University of Maryland, Baltimore County,Dept. of Information Systems,Baltimore,USA","institution_ids":["https://openalex.org/I79272384"]},{"raw_affiliation_string":"Dept. of Information Systems, University of Maryland, Baltimore County, Baltimore, USA","institution_ids":["https://openalex.org/I79272384"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047534464","display_name":"Lavanya Elluri","orcid":null},"institutions":[{"id":"https://openalex.org/I76756774","display_name":"Texas A&M University \u2013 Central Texas","ror":"https://ror.org/015hh0z25","country_code":"US","type":"education","lineage":["https://openalex.org/I76756774"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lavanya Elluri","raw_affiliation_strings":["Texas A&M University - Central Texas,Dept. of Computer Information Systems,Killeen,USA"],"affiliations":[{"raw_affiliation_string":"Texas A&M University - Central Texas,Dept. of Computer Information Systems,Killeen,USA","institution_ids":["https://openalex.org/I76756774"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5048245051","display_name":"Karuna Pande Joshi","orcid":"https://orcid.org/0000-0002-6354-1686"},"institutions":[{"id":"https://openalex.org/I79272384","display_name":"University of Maryland, Baltimore County","ror":"https://ror.org/02qskvh78","country_code":"US","type":"education","lineage":["https://openalex.org/I79272384"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Karuna Pande Joshi","raw_affiliation_strings":["University of Maryland, Baltimore County,Dept. of Information Systems,Baltimore,USA","Dept. of Information Systems, University of Maryland, Baltimore County, Baltimore, USA"],"affiliations":[{"raw_affiliation_string":"University of Maryland, Baltimore County,Dept. of Information Systems,Baltimore,USA","institution_ids":["https://openalex.org/I79272384"]},{"raw_affiliation_string":"Dept. of Information Systems, University of Maryland, Baltimore County, Baltimore, USA","institution_ids":["https://openalex.org/I79272384"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5031691002"],"corresponding_institution_ids":["https://openalex.org/I79272384"],"apc_list":null,"apc_paid":null,"fwci":2.749,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.9213365,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"01","last_page":"06"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.9865000247955322,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9858999848365784,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7366012334823608},{"id":"https://openalex.org/keywords/metadata","display_name":"Metadata","score":0.5433810353279114},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.48451417684555054},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4586044251918793},{"id":"https://openalex.org/keywords/semantic-web","display_name":"Semantic Web","score":0.45844459533691406},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.42067164182662964},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.36520394682884216}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7366012334823608},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.5433810353279114},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.48451417684555054},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4586044251918793},{"id":"https://openalex.org/C2129575","wikidata":"https://www.wikidata.org/wiki/Q54837","display_name":"Semantic Web","level":2,"score":0.45844459533691406},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.42067164182662964},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.36520394682884216},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/isi58743.2023.10297134","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isi58743.2023.10297134","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE International Conference on Intelligence and Security Informatics (ISI)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6146864066","display_name":null,"funder_award_id":"1747724","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":59,"referenced_works":["https://openalex.org/W1487060125","https://openalex.org/W1968127891","https://openalex.org/W1976339648","https://openalex.org/W2150519657","https://openalex.org/W2461768767","https://openalex.org/W2472414028","https://openalex.org/W2487152776","https://openalex.org/W2515002390","https://openalex.org/W2611574730","https://openalex.org/W2884137358","https://openalex.org/W2886119610","https://openalex.org/W2892748737","https://openalex.org/W2898219643","https://openalex.org/W2900152885","https://openalex.org/W2903086587","https://openalex.org/W2910590187","https://openalex.org/W2911100824","https://openalex.org/W2934660855","https://openalex.org/W2944104031","https://openalex.org/W2946369177","https://openalex.org/W2964696108","https://openalex.org/W2969089304","https://openalex.org/W2972798975","https://openalex.org/W2996629306","https://openalex.org/W2997634552","https://openalex.org/W2998233576","https://openalex.org/W3037451859","https://openalex.org/W3042262594","https://openalex.org/W3081145649","https://openalex.org/W3089585046","https://openalex.org/W3110206688","https://openalex.org/W3111713623","https://openalex.org/W3112693483","https://openalex.org/W3134625909","https://openalex.org/W3160743305","https://openalex.org/W3174973922","https://openalex.org/W3185233965","https://openalex.org/W3194103138","https://openalex.org/W3196464482","https://openalex.org/W3200196715","https://openalex.org/W3205925097","https://openalex.org/W3208710908","https://openalex.org/W3212330586","https://openalex.org/W4200144839","https://openalex.org/W4205814501","https://openalex.org/W4206245037","https://openalex.org/W4206245198","https://openalex.org/W4206662640","https://openalex.org/W4206787002","https://openalex.org/W4220948165","https://openalex.org/W4224442812","https://openalex.org/W4226125263","https://openalex.org/W4238948521","https://openalex.org/W4239319433","https://openalex.org/W4244301268","https://openalex.org/W4253735685","https://openalex.org/W4287180154","https://openalex.org/W6629025635","https://openalex.org/W6783230211"],"related_works":["https://openalex.org/W2392768766","https://openalex.org/W2058118494","https://openalex.org/W2095118173","https://openalex.org/W2382021449","https://openalex.org/W2104269053","https://openalex.org/W2106424170","https://openalex.org/W2501188010","https://openalex.org/W4299935056","https://openalex.org/W2768810474","https://openalex.org/W4206575749"],"abstract_inverted_index":{"A":[0,43],"large":[1,29,57],"volume":[2],"of":[3,45,56,69,89,99,113,183],"cybersecurity-related":[4],"data":[5,30,59,120,153],"sets":[6,49],"are":[7,50],"generated":[8],"daily":[9],"from":[10],"systems":[11],"following":[12],"disparate":[13],"protocols":[14],"and":[15,35,47,75,80,121,133,140,146,156,167],"standards.":[16],"It":[17],"is":[18,107,160],"humanly":[19],"impossible":[20],"for":[21,71],"cybersecurity":[22,70,172,189],"experts":[23],"to":[24,37,52,115,125,151],"manually":[25],"sieve":[26],"through":[27],"these":[28],"sets,":[31],"with":[32,149],"different":[33],"schema":[34],"metadata,":[36],"determine":[38],"potential":[39],"attacks":[40],"or":[41],"issues.":[42],"myriad":[44],"applications":[46,169],"tool":[48],"offered":[51],"automate":[53],"the":[54,67,90,171,181,194],"analysis":[55],"cyber":[58,100],"sets.":[60],"Semantic":[61],"Web's":[62],"community":[63],"has":[64],"been":[65],"studying":[66],"field":[68],"over":[72],"a":[73,96,110],"decade":[74],"produced":[76],"numerous":[77],"knowledge":[78,92,165,190],"graphs":[79,166,191],"frameworks.":[81],"The":[82,138],"Unified":[83],"Cybersecurity":[84],"Ontology":[85],"(UCO)":[86],"connected":[87],"many":[88],"leading":[91],"representation":[93],"frameworks,":[94],"providing":[95],"holistic":[97],"mapping":[98],"data,":[101],"beginning":[102],"in":[103,170],"2016.":[104],"MITRE":[105,141,196],"ATT&CK":[106,142,197],"used":[108],"by":[109],"wide":[111],"variety":[112],"practitioners":[114],"understand":[116],"how":[117,163],"their":[118,168],"current":[119,164,188],"tooling":[122],"prepare":[123],"them":[124],"defend":[126],"against":[127],"both":[128],"Advanced":[129],"Persistent":[130],"Threats":[131],"(APTs)":[132],"less":[134],"formal":[135],"threat":[136],"actors.":[137],"UCO":[139],"have":[143,192],"provided":[144],"researchers":[145],"practitioners,":[147],"respectively,":[148],"tools":[150],"standardize":[152],"collection,":[154],"correlation,":[155],"analysis.":[157],"However,":[158],"it":[159],"not":[161],"apparent":[162],"domain":[173],"utilize":[174],"ATT&CK.":[175],"In":[176],"this":[177],"paper,":[178],"we":[179],"present":[180],"results":[182],"our":[184],"study":[185],"on":[186],"whether":[187],"mapped":[193],"main":[195],"matrices.":[198]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}