{"id":"https://openalex.org/W4210871527","doi":"https://doi.org/10.1109/tdsc.2022.3149208","title":"STRisk: A Socio-Technical Approach to Assess Hacking Breaches Risk","display_name":"STRisk: A Socio-Technical Approach to Assess Hacking Breaches Risk","publication_year":2022,"publication_date":"2022-02-07","ids":{"openalex":"https://openalex.org/W4210871527","doi":"https://doi.org/10.1109/tdsc.2022.3149208"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2022.3149208","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3149208","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2411.12435","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5012658403","display_name":"Hicham Hammouchi","orcid":"https://orcid.org/0000-0002-0572-218X"},"institutions":[{"id":"https://openalex.org/I4210106663","display_name":"International University of Rabat","ror":"https://ror.org/01t9czq80","country_code":"MA","type":"education","lineage":["https://openalex.org/I4210106663"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Hicham Hammouchi","raw_affiliation_strings":["College of Engineering & Architecture (TICLab), Université Internationale de Rabat, Rabat, Morocco"],"raw_orcid":"https://orcid.org/0000-0002-0572-218X","affiliations":[{"raw_affiliation_string":"College of Engineering & Architecture (TICLab), Université Internationale de Rabat, Rabat, Morocco","institution_ids":["https://openalex.org/I4210106663"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023615894","display_name":"Narjisse Nejjari","orcid":"https://orcid.org/0000-0003-1514-5686"},"institutions":[{"id":"https://openalex.org/I4210106663","display_name":"International University of Rabat","ror":"https://ror.org/01t9czq80","country_code":"MA","type":"education","lineage":["https://openalex.org/I4210106663"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Narjisse Nejjari","raw_affiliation_strings":["College of Engineering & Architecture (TICLab), Université Internationale de Rabat, Rabat, Morocco"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Engineering & Architecture (TICLab), Université Internationale de Rabat, Rabat, Morocco","institution_ids":["https://openalex.org/I4210106663"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103083194","display_name":"Ghita Mezzour","orcid":"https://orcid.org/0000-0002-4306-1589"},"institutions":[{"id":"https://openalex.org/I4210106663","display_name":"International University of Rabat","ror":"https://ror.org/01t9czq80","country_code":"MA","type":"education","lineage":["https://openalex.org/I4210106663"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Ghita Mezzour","raw_affiliation_strings":["College of Engineering & Architecture (TICLab), Université Internationale de Rabat, Rabat, Morocco"],"raw_orcid":"https://orcid.org/0000-0002-4306-1589","affiliations":[{"raw_affiliation_string":"College of Engineering & Architecture (TICLab), Université Internationale de Rabat, Rabat, Morocco","institution_ids":["https://openalex.org/I4210106663"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057324156","display_name":"Mounir Ghogho","orcid":"https://orcid.org/0000-0002-0055-7867"},"institutions":[{"id":"https://openalex.org/I4210106663","display_name":"International University of Rabat","ror":"https://ror.org/01t9czq80","country_code":"MA","type":"education","lineage":["https://openalex.org/I4210106663"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Mounir Ghogho","raw_affiliation_strings":["College of Engineering & Architecture (TICLab), Université Internationale de Rabat, Rabat, Morocco"],"raw_orcid":"https://orcid.org/0000-0002-0055-7867","affiliations":[{"raw_affiliation_string":"College of Engineering & Architecture (TICLab), Université Internationale de Rabat, Rabat, Morocco","institution_ids":["https://openalex.org/I4210106663"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065627637","display_name":"Houda Benbrahim","orcid":"https://orcid.org/0009-0005-2797-212X"},"institutions":[{"id":"https://openalex.org/I126477371","display_name":"Mohammed V University","ror":"https://ror.org/00r8w8f84","country_code":"MA","type":"education","lineage":["https://openalex.org/I126477371"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Houda Benbrahim","raw_affiliation_strings":["ENSIAS, Université Mohammed V, Rabat, Morocco"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ENSIAS, Université Mohammed V, Rabat, Morocco","institution_ids":["https://openalex.org/I126477371"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.6189,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.70829304,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"20","issue":"2","first_page":"1074","last_page":"1087"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/hacker","display_name":"Hacker","score":0.8316178321838379},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.755348801612854},{"id":"https://openalex.org/keywords/dimension","display_name":"Dimension (graph theory)","score":0.6584925651550293},{"id":"https://openalex.org/keywords/social-media","display_name":"Social media","score":0.5814105272293091},{"id":"https://openalex.org/keywords/variety","display_name":"Variety (cybernetics)","score":0.5792509317398071},{"id":"https://openalex.org/keywords/scope","display_name":"Scope (computer science)","score":0.5662612318992615},{"id":"https://openalex.org/keywords/feature-engineering","display_name":"Feature engineering","score":0.565450131893158},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.5194813013076782},{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.5089662075042725},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.49283838272094727},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.44867560267448425},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.42934712767601013},{"id":"https://openalex.org/keywords/social-engineering","display_name":"Social engineering (security)","score":0.42878738045692444},{"id":"https://openalex.org/keywords/sociotechnical-system","display_name":"Sociotechnical system","score":0.41865235567092896},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4124601483345032},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3488476574420929},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.1521829068660736},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.14655554294586182},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.1413259506225586}],"concepts":[{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.8316178321838379},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.755348801612854},{"id":"https://openalex.org/C33676613","wikidata":"https://www.wikidata.org/wiki/Q13415176","display_name":"Dimension (graph theory)","level":2,"score":0.6584925651550293},{"id":"https://openalex.org/C518677369","wikidata":"https://www.wikidata.org/wiki/Q202833","display_name":"Social media","level":2,"score":0.5814105272293091},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.5792509317398071},{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.5662612318992615},{"id":"https://openalex.org/C2778827112","wikidata":"https://www.wikidata.org/wiki/Q22245680","display_name":"Feature engineering","level":3,"score":0.565450131893158},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.5194813013076782},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.5089662075042725},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.49283838272094727},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.44867560267448425},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.42934712767601013},{"id":"https://openalex.org/C70118762","wikidata":"https://www.wikidata.org/wiki/Q376934","display_name":"Social engineering (security)","level":2,"score":0.42878738045692444},{"id":"https://openalex.org/C127627568","wikidata":"https://www.wikidata.org/wiki/Q1639361","display_name":"Sociotechnical system","level":2,"score":0.41865235567092896},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4124601483345032},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3488476574420929},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.1521829068660736},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.14655554294586182},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.1413259506225586},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.0},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tdsc.2022.3149208","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3149208","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2411.12435","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2411.12435","pdf_url":"https://arxiv.org/pdf/2411.12435","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2411.12435","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2411.12435","pdf_url":"https://arxiv.org/pdf/2411.12435","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"score":0.8199999928474426,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320313934","display_name":"Institut national de recherche en informatique et en automatique (INRIA)","ror":"https://ror.org/02kvxyf05"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4210871527.pdf","grobid_xml":"https://content.openalex.org/works/W4210871527.grobid-xml"},"referenced_works_count":53,"referenced_works":["https://openalex.org/W1158334875","https://openalex.org/W1415990210","https://openalex.org/W1533444565","https://openalex.org/W1707806712","https://openalex.org/W2101234009","https://openalex.org/W2108644943","https://openalex.org/W2123958887","https://openalex.org/W2171468534","https://openalex.org/W2270414365","https://openalex.org/W2295598076","https://openalex.org/W2322673779","https://openalex.org/W2508605860","https://openalex.org/W2561247258","https://openalex.org/W2565682512","https://openalex.org/W2599194031","https://openalex.org/W2767011015","https://openalex.org/W2768348081","https://openalex.org/W2769000698","https://openalex.org/W2794774228","https://openalex.org/W2799040008","https://openalex.org/W2803655257","https://openalex.org/W2804048727","https://openalex.org/W2804365752","https://openalex.org/W2807660458","https://openalex.org/W2808134786","https://openalex.org/W2808465824","https://openalex.org/W2901726102","https://openalex.org/W2904754882","https://openalex.org/W2941175079","https://openalex.org/W2945722434","https://openalex.org/W2962862931","https://openalex.org/W2964022491","https://openalex.org/W2964325050","https://openalex.org/W2981018312","https://openalex.org/W2998091506","https://openalex.org/W2999615587","https://openalex.org/W3033604319","https://openalex.org/W3156588337","https://openalex.org/W3156669901","https://openalex.org/W3174086521","https://openalex.org/W4298872063","https://openalex.org/W6627397845","https://openalex.org/W6628371068","https://openalex.org/W6637554470","https://openalex.org/W6675354045","https://openalex.org/W6677082149","https://openalex.org/W6737947904","https://openalex.org/W6745609711","https://openalex.org/W6750729320","https://openalex.org/W6752050897","https://openalex.org/W6757062915","https://openalex.org/W6762331978","https://openalex.org/W6769257084"],"related_works":["https://openalex.org/W2965315138","https://openalex.org/W3040987670","https://openalex.org/W1650884151","https://openalex.org/W4230908098","https://openalex.org/W1977551466","https://openalex.org/W4254113635","https://openalex.org/W4404010250","https://openalex.org/W4379619964","https://openalex.org/W2081232361","https://openalex.org/W2913485775"],"abstract_inverted_index":{"Data":[0],"breaches":[1],"have":[2],"begun":[3],"to":[4,17,103,113,122,133,140],"take":[5],"on":[6],"new":[7],"dimensions":[8],"and":[9,30,79,98,116,149,183,193],"their":[10],"prediction":[11,60],"is":[12,49,138,163],"becoming":[13],"of":[14,58,90,93],"great":[15],"importance":[16,177],"organizations.":[18,81,125],"Prior":[19],"work":[20],"has":[21],"addressed":[22],"this":[23,43],"issue":[24],"mainly":[25],"from":[26],"a":[27,50,87,91,118,142,154],"technical":[28,96,148,172,189],"perspective":[29],"neglected":[31],"other":[32],"interfering":[33],"aspects":[34],"such":[35],"as":[36],"the":[37,56,59,66,110,167,187,196],"social":[38,67,99,150,198],"media":[39,68],"dimension.":[40,69],"To":[41],"fill":[42],"gap,":[44],"we":[45,54,85,108,152],"propose":[46,117],"STRisk":[47],"which":[48,162],"predictive":[51],"system":[52],"where":[53],"expand":[55],"scope":[57],"task":[61],"by":[62],"bringing":[63],"into":[64],"play":[65],"We":[70,126],"study":[71],"over":[72],"3800":[73],"US":[74],"organizations":[75],"including":[76],"both":[77,147],"victim":[78],"non-victim":[80,111],"For":[82],"each":[83],"organization,":[84],"design":[86],"profile":[88],"composed":[89],"variety":[92],"externally":[94],"measured":[95],"indicators":[97],"factors.":[100],"In":[101],"addition,":[102],"account":[104],"for":[105],"unreported":[106],"incidents,":[107],"consider":[109],"sample":[112],"be":[114],"noisy":[115],"noise":[119],"correction":[120],"approach":[121],"correct":[123],"mislabeled":[124],"then":[127],"build":[128],"several":[129],"machine":[130],"learning":[131],"models":[132],"predict":[134],"whether":[135],"an":[136],"organization":[137],"exposed":[139],"experience":[141],"hacking":[143],"breach.":[144],"By":[145],"exploiting":[146],"features,":[151],"achieve":[153],"Area":[155],"Under":[156],"Curve":[157],"(AUC)":[158],"score":[159],"exceeding":[160],"98%,":[161],"12%":[164],"higher":[165],"than":[166],"AUC":[168],"achieved":[169],"using":[170],"only":[171],"features.":[173],"Furthermore,":[174],"our":[175],"feature":[176],"analysis":[178],"reveals":[179],"that":[180],"open":[181],"ports":[182],"expired":[184],"certificates":[185],"are":[186,195],"best":[188,197],"predictors,":[190],"while":[191],"spreadability":[192],"agreeability":[194],"predictors.":[199]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2023,"cited_by_count":2}],"updated_date":"2026-07-03T08:13:44.112507","created_date":"2025-10-10T00:00:00"}