{"id":"https://openalex.org/W7160401595","doi":"https://doi.org/10.1109/saner-c67878.2026.00048","title":"From Threat Reports to Security Knowledge: Building an LLM-Based Pipeline for AI Systems","display_name":"From Threat Reports to Security Knowledge: Building an LLM-Based Pipeline for AI Systems","publication_year":2026,"publication_date":"2026-03-17","ids":{"openalex":"https://openalex.org/W7160401595","doi":"https://doi.org/10.1109/saner-c67878.2026.00048"},"language":null,"primary_location":{"id":"doi:10.1109/saner-c67878.2026.00048","is_oa":false,"landing_page_url":"https://doi.org/10.1109/saner-c67878.2026.00048","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE International Conference on Software Analysis, Evolution and Reengineering - Companion (SANER-C)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5089554516","display_name":"Takuma Tsuchida","orcid":null},"institutions":[{"id":"https://openalex.org/I150744194","display_name":"Waseda University","ror":"https://ror.org/00ntfnx83","country_code":"JP","type":"education","lineage":["https://openalex.org/I150744194"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Takuma Tsuchida","raw_affiliation_strings":["Waseda University,Tokyo,Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Waseda University,Tokyo,Japan","institution_ids":["https://openalex.org/I150744194"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135468429","display_name":"Yuya Fujiwara","orcid":null},"institutions":[{"id":"https://openalex.org/I150744194","display_name":"Waseda University","ror":"https://ror.org/00ntfnx83","country_code":"JP","type":"education","lineage":["https://openalex.org/I150744194"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Yuya Fujiwara","raw_affiliation_strings":["Waseda University,Tokyo,Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Waseda University,Tokyo,Japan","institution_ids":["https://openalex.org/I150744194"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129083492","display_name":"Hironori Washizaki","orcid":null},"institutions":[{"id":"https://openalex.org/I150744194","display_name":"Waseda University","ror":"https://ror.org/00ntfnx83","country_code":"JP","type":"education","lineage":["https://openalex.org/I150744194"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Hironori Washizaki","raw_affiliation_strings":["Waseda University,Tokyo,Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Waseda University,Tokyo,Japan","institution_ids":["https://openalex.org/I150744194"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5003574134","display_name":"Naoyasu Ubayashi","orcid":"https://orcid.org/0000-0003-1578-7195"},"institutions":[{"id":"https://openalex.org/I150744194","display_name":"Waseda University","ror":"https://ror.org/00ntfnx83","country_code":"JP","type":"education","lineage":["https://openalex.org/I150744194"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Naoyasu Ubayashi","raw_affiliation_strings":["Waseda University,Tokyo,Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Waseda University,Tokyo,Japan","institution_ids":["https://openalex.org/I150744194"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I150744194"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.4160929,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"309","last_page":"316"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.11980000138282776,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.11980000138282776,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.07680000364780426,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.04439999908208847,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.5853000283241272},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.2915000021457672},{"id":"https://openalex.org/keywords/pipeline-transport","display_name":"Pipeline transport","score":0.2750999927520752},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.24169999361038208},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.2304999977350235}],"concepts":[{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.5853000283241272},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4837000072002411},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.35659998655319214},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.3271999955177307},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2915000021457672},{"id":"https://openalex.org/C175309249","wikidata":"https://www.wikidata.org/wiki/Q725864","display_name":"Pipeline transport","level":2,"score":0.2750999927520752},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.24169999361038208},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.2304999977350235},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.22779999673366547},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.22100000083446503}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/saner-c67878.2026.00048","is_oa":false,"landing_page_url":"https://doi.org/10.1109/saner-c67878.2026.00048","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE International Conference on Software Analysis, Evolution and Reengineering - Companion (SANER-C)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/13","score":0.4359070658683777,"display_name":"Climate action"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W2771963642","https://openalex.org/W3164269180","https://openalex.org/W3211888892","https://openalex.org/W4311313865","https://openalex.org/W4324031781","https://openalex.org/W4376606841","https://openalex.org/W4378977274","https://openalex.org/W4387298166","https://openalex.org/W4400681271","https://openalex.org/W4402622967","https://openalex.org/W4407938123","https://openalex.org/W4408566170","https://openalex.org/W4410553264"],"related_works":[],"abstract_inverted_index":{"Building":[0],"structured":[1,97,122],"and":[2,13,39,47,64,89,120,177],"reusable":[3],"security":[4,20,35,98,181],"knowledge":[5,123],"from":[6,93],"unstructured":[7],"threat":[8,62,91,117,147],"reports":[9,95],"is":[10],"a":[11,77,81],"challenging":[12],"predominantly":[14],"manual":[15,32],"task":[16],"in":[17,132],"the":[18,45,59,69,162,166,171],"AI":[19,73,180],"domain.":[21],"Although":[22],"existing":[23],"knowledgebases":[24,51],"systematically":[25],"organize":[26],"adversarial":[27],"threats,":[28],"their":[29],"reliance":[30],"on":[31,80],"curation":[33],"by":[34],"experts":[36],"limits":[37],"scalability":[38,55],"responsiveness":[40],"to":[41,114,145,158],"new":[42],"threats.":[43],"Automating":[44],"structuring":[46],"maintenance":[48,178],"of":[49,72,165,179],"such":[50],"not":[52],"only":[53],"improves":[54],"but":[56],"also":[57,150],"bridges":[58],"gap":[60],"between":[61],"intelligence":[63],"software":[65],"engineering":[66],"practices,":[67],"facilitating":[68],"secure-by-design":[70],"development":[71],"systems.":[74],"We":[75],"propose":[76],"pipeline":[78,101],"based":[79],"large":[82],"language":[83],"model":[84],"that":[85,155],"automatically":[86],"extracts,":[87],"refines,":[88],"classifies":[90],"actions":[92,144],"incident":[94],"into":[96],"knowledge.":[99,182],"Our":[100],"encompasses":[102],"four":[103],"critical":[104],"phases:":[105],"(1)":[106],"threat-action":[107],"extraction,":[108,133],"(2)":[109],"quality-guided":[110],"refinement,":[111],"(3)":[112],"mapping":[113],"an":[115],"established":[116],"classification":[118,140],"framework,":[119],"(4)":[121],"construction":[124,176],"with":[125,134],"metadata":[126],"generation.":[127],"Evaluation":[128],"shows":[129],"0.85":[130],"precision":[131],"refinement":[135],"further":[136],"enhancing":[137],"coverage.":[138],"The":[139],"phase":[141],"effectively":[142],"maps":[143],"known":[146],"patterns":[148],"while":[149],"identifying":[151],"potentially":[152],"novel":[153],"threats":[154],"have":[156],"yet":[157],"be":[159],"documented,":[160],"supporting":[161],"continuous":[163],"evolution":[164],"knowledgebase.":[167],"These":[168],"results":[169],"lay":[170],"groundwork":[172],"for":[173],"scalable,":[174],"automated":[175]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-05-07T00:00:00"}
