{"id":"https://openalex.org/W4411446663","doi":"https://doi.org/10.1109/tnsm.2025.3581463","title":"THREATIFY: APT Threat Variant Generation Using Graph-Based Machine Learning","display_name":"THREATIFY: APT Threat Variant Generation Using Graph-Based Machine Learning","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4411446663","doi":"https://doi.org/10.1109/tnsm.2025.3581463"},"language":"en","primary_location":{"id":"doi:10.1109/tnsm.2025.3581463","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2025.3581463","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5073380087","display_name":"Boubakr Nour","orcid":"https://orcid.org/0000-0001-5609-856X"},"institutions":[{"id":"https://openalex.org/I4210094041","display_name":"Ericsson (Canada)","ror":"https://ror.org/00nas2c56","country_code":"CA","type":"company","lineage":["https://openalex.org/I1306339040","https://openalex.org/I4210094041"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Boubakr Nour","raw_affiliation_strings":["Ericsson Security Research, Ericsson, Montréal, QC, Canada"],"raw_orcid":"https://orcid.org/0000-0001-5609-856X","affiliations":[{"raw_affiliation_string":"Ericsson Security Research, Ericsson, Montréal, QC, Canada","institution_ids":["https://openalex.org/I4210094041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077892893","display_name":"Makan Pourzandi","orcid":"https://orcid.org/0000-0001-9775-6231"},"institutions":[{"id":"https://openalex.org/I4210094041","display_name":"Ericsson (Canada)","ror":"https://ror.org/00nas2c56","country_code":"CA","type":"company","lineage":["https://openalex.org/I1306339040","https://openalex.org/I4210094041"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Makan Pourzandi","raw_affiliation_strings":["Ericsson Security Research, Ericsson, Montréal, QC, Canada"],"raw_orcid":"https://orcid.org/0000-0001-9775-6231","affiliations":[{"raw_affiliation_string":"Ericsson Security Research, Ericsson, Montréal, QC, Canada","institution_ids":["https://openalex.org/I4210094041"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028605138","display_name":"Mourad Debbabi","orcid":"https://orcid.org/0000-0003-3015-3043"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Mourad Debbabi","raw_affiliation_strings":["Concordia Institute for Information Systems Engineering, Gina Cody School of Engineering and Computer Science, Concordia University, Montréal, QC, Canada"],"raw_orcid":"https://orcid.org/0000-0003-3015-3043","affiliations":[{"raw_affiliation_string":"Concordia Institute for Information Systems Engineering, Gina Cody School of Engineering and Computer Science, Concordia University, Montréal, QC, Canada","institution_ids":["https://openalex.org/I60158472"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.5663,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.88900245,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"1"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10994","display_name":"Terrorism, Counterterrorism, and Political Violence","score":0.789900004863739,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10994","display_name":"Terrorism, Counterterrorism, and Political Violence","score":0.789900004863739,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.7897999882698059,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.7854999899864197,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8236591219902039},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.4655953347682953},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.35651952028274536},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.35615140199661255}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8236591219902039},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4655953347682953},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.35651952028274536},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.35615140199661255}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnsm.2025.3581463","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2025.3581463","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Ensuring":[0],"cybersecurity":[1,113],"in":[2,42,192,214],"an":[3],"ever-evolving":[4],"threat":[5,44,65,81,142,202,219],"landscape":[6],"requires":[7],"proactive":[8],"identification":[9],"and":[10,17,39,70,95,112,118,134,164,188,197,217,233],"understanding":[11],"of":[12,80,108,122,211,225,228,231,236],"potential":[13,123],"threats.":[14],"Conventional":[15],"detection":[16,51],"prediction":[18],"solutions":[19],"often":[20],"fall":[21],"short":[22],"as":[23],"they":[24],"predominantly":[25],"focus":[26],"on":[27,88,169],"known":[28],"attack":[29,73,90,93,110,179],"vectors.":[30],"Advanced":[31],"Persistent":[32],"Threats":[33],"(APTs)":[34],"are":[35,47],"becoming":[36],"increasingly":[37],"sophisticated":[38],"stealthy,":[40],"resulting":[41],"new":[43,120,178],"variants":[45,66,82,220],"that":[46,149,240],"undetectable":[48],"by":[49,126,141],"these":[50],"solutions.":[52],"This":[53],"paper":[54],"introduces":[55],"THREATIFY,":[56],"a":[57,104,162,222],"novel":[58,218],"approach":[59,76,213],"to":[60,115,147,176,184],"predicting":[61],"the":[62,78,89,96,130,193,209],"most":[63],"probable":[64],"from":[67,156],"existing":[68],"APTs":[69,190],"previously":[71,200],"seen":[72],"campaigns.":[74],"Our":[75,204],"automates":[77],"generation":[79],"using":[83],"graph-based":[84],"machine":[85],"learning":[86],"based":[87,168],"definition,":[91],"past":[92],"campaigns,":[94],"security":[97,105,171,195],"context":[98],"between":[99,136],"different":[100,137,157],"techniques.":[101],"THREATIFY":[102,150,173],"leverages":[103],"knowledge":[106],"base":[107],"realistic":[109],"scenarios":[111],"expertise":[114],"model,":[116],"generate,":[117],"predict":[119,177],"forms":[121],"future":[124],"threats":[125],"combining":[127],"inter-(i.e.":[128],"within":[129],"same":[131],"APT":[132],"attack)":[133],"intra-(i.e.":[135],"APTs)":[138],"techniques":[139,155,183,191],"used":[140],"actors.":[143],"It":[144],"is":[145,174],"crucial":[146],"emphasize":[148],"does":[151],"not":[152],"merely":[153],"mix":[154],"APTs;":[158],"rather,":[159],"it":[160],"constructs":[161],"logical":[163],"pragmatic":[165],"kill":[166],"chain":[167],"their":[170],"context.":[172],"able":[175],"steps,":[180],"find":[181],"relevant":[182,216],"be":[185],"substituted":[186],"by,":[187],"merge":[189],"current":[194],"context,":[196],"thus":[198],"create":[199],"unexplored":[201],"variants.":[203],"extensive":[205],"experimental":[206],"results":[207],"demonstrate":[208],"efficacy":[210],"our":[212],"generating":[215],"with":[221],"similarity":[223],"score":[224],"92%,":[226],"uniqueness":[227],"82%,":[229],"validity":[230],"95%,":[232],"reduction":[234],"rate":[235],"96%,":[237],"including":[238],"those":[239],"have":[241],"never":[242],"occurred":[243],"before.":[244]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}