{"id":"https://openalex.org/W2553036342","doi":"https://doi.org/10.1109/vizsec.2016.7739578","title":"Mixed method approach to identify analytic questions to be visualized for military cyber incident handlers","display_name":"Mixed method approach to identify analytic questions to be visualized for military cyber incident handlers","publication_year":2016,"publication_date":"2016-10-01","ids":{"openalex":"https://openalex.org/W2553036342","doi":"https://doi.org/10.1109/vizsec.2016.7739578","mag":"2553036342"},"language":"en","primary_location":{"id":"doi:10.1109/vizsec.2016.7739578","is_oa":false,"landing_page_url":"https://doi.org/10.1109/vizsec.2016.7739578","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 IEEE Symposium on Visualization for Cyber Security (VizSec)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003794241","display_name":"Laurin Buchanan","orcid":null},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Laurin Buchanan","raw_affiliation_strings":["Secure Decisions"],"affiliations":[{"raw_affiliation_string":"Secure Decisions","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111379268","display_name":"Anita D\u2018Amico","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Anita D'Amico","raw_affiliation_strings":["Secure Decisions"],"affiliations":[{"raw_affiliation_string":"Secure Decisions","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5023743755","display_name":"Drew Kirkpatrick","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Drew Kirkpatrick","raw_affiliation_strings":["Secure Decisions"],"affiliations":[{"raw_affiliation_string":"Secure Decisions","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5003794241"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.4066,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.73357132,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10525","display_name":"Human-Automation Interaction and Safety","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/3207","display_name":"Social Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10525","display_name":"Human-Automation Interaction and Safety","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/3207","display_name":"Social Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9894999861717224,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12000","display_name":"Systems Engineering Methodologies and Applications","score":0.980400025844574,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.8219882249832153},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6941218376159668},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.6294113993644714},{"id":"https://openalex.org/keywords/subject-matter-expert","display_name":"Subject-matter expert","score":0.5902358889579773},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.5153200030326843},{"id":"https://openalex.org/keywords/cognition","display_name":"Cognition","score":0.49285387992858887},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.4773711860179901},{"id":"https://openalex.org/keywords/data-visualization","display_name":"Data visualization","score":0.46819743514060974},{"id":"https://openalex.org/keywords/task-analysis","display_name":"Task analysis","score":0.46641620993614197},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.388483464717865},{"id":"https://openalex.org/keywords/systems-engineering","display_name":"Systems engineering","score":0.18810176849365234},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.18088620901107788},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.16651347279548645},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.11210981011390686}],"concepts":[{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.8219882249832153},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6941218376159668},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.6294113993644714},{"id":"https://openalex.org/C105002631","wikidata":"https://www.wikidata.org/wiki/Q4833645","display_name":"Subject-matter expert","level":3,"score":0.5902358889579773},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.5153200030326843},{"id":"https://openalex.org/C169900460","wikidata":"https://www.wikidata.org/wiki/Q2200417","display_name":"Cognition","level":2,"score":0.49285387992858887},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.4773711860179901},{"id":"https://openalex.org/C172367668","wikidata":"https://www.wikidata.org/wiki/Q6504956","display_name":"Data visualization","level":3,"score":0.46819743514060974},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.46641620993614197},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.388483464717865},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.18810176849365234},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.18088620901107788},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.16651347279548645},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.11210981011390686},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C58328972","wikidata":"https://www.wikidata.org/wiki/Q184609","display_name":"Expert system","level":2,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C169760540","wikidata":"https://www.wikidata.org/wiki/Q207011","display_name":"Neuroscience","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/vizsec.2016.7739578","is_oa":false,"landing_page_url":"https://doi.org/10.1109/vizsec.2016.7739578","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 IEEE Symposium on Visualization for Cyber Security (VizSec)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.5,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320332467","display_name":"U.S. Air Force","ror":"https://ror.org/006gmme17"},{"id":"https://openalex.org/F4320338294","display_name":"Air Force Research Laboratory","ror":"https://ror.org/02e2egq70"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W199490443","https://openalex.org/W625463995","https://openalex.org/W1494756088","https://openalex.org/W1536432326","https://openalex.org/W1926713316","https://openalex.org/W1996385088","https://openalex.org/W1999222617","https://openalex.org/W2020464294","https://openalex.org/W2045930576","https://openalex.org/W2064655388","https://openalex.org/W2149065950","https://openalex.org/W2161838365","https://openalex.org/W2478800122","https://openalex.org/W4249784990","https://openalex.org/W6649243392"],"related_works":["https://openalex.org/W2013728941","https://openalex.org/W4225274103","https://openalex.org/W2579659702","https://openalex.org/W2154046714","https://openalex.org/W1965329638","https://openalex.org/W1574055964","https://openalex.org/W2923661510","https://openalex.org/W2189613078","https://openalex.org/W2586219255","https://openalex.org/W2547096368"],"abstract_inverted_index":{"Our":[0],"multi-disciplinary":[1],"team":[2],"developed":[3],"and":[4,35,106,203,214],"applied":[5],"a":[6,25,57,81,91,145,176],"6-step":[7],"mixed":[8],"method":[9],"approach":[10],"to":[11,52,63,98,135,148,190],"efficiently":[12],"identify":[13],"the":[14,37,48,66,73,100,137,150,196],"cognitive":[15,74,166],"work":[16,29,75,167,179],"of":[17,27,59,69,76,110,130,152,165,187,198],"early":[18,111,155],"stage":[19,112,156],"military":[20],"cyber":[21,77,113],"incident":[22,114,157],"handlers,":[23],"extract":[24],"subset":[26],"that":[28,30,47,65],"could":[31],"benefit":[32],"from":[33],"visualization,":[34],"specify":[36],"information":[38],"needs":[39],"as":[40,185],"Analytic":[41],"Questions":[42],"(AQs)":[43],"posed":[44],"by":[45],"operators":[46],"visualizations":[49],"would":[50],"have":[51],"support.":[53],"The":[54,160],"methodology":[55],"included":[56],"survey":[58],"subject":[60],"matter":[61],"experts":[62],"validate":[64],"major":[67,101],"findings":[68],"prior":[70],"research":[71],"on":[72,154,195],"defenders,":[78],"conducted":[79],"over":[80],"decade":[82],"ago,":[83],"are":[84,121],"still":[85],"valid":[86],"today.":[87],"It":[88],"also":[89,208],"utilized":[90],"Goal":[92],"Directed":[93],"Task":[94],"Analysis":[95],"(GDTA)":[96],"structure":[97],"represent":[99,162],"task,":[102],"goals,":[103],"decisions,":[104],"AQs":[105,119,138,161],"data":[107,174],"source":[108],"requirements":[109,210],"handlers.":[115],"This":[116],"yielded":[117],"40":[118],"which":[120,168],"reported":[122],"in":[123,175,193],"this":[124],"paper.":[125],"Knowledge":[126],"Elicitation":[127],"(KE)":[128],"interviews":[129],"domain":[131],"practitioners":[132],"were":[133],"used":[134,192],"select":[136],"with":[139],"greatest":[140],"potential":[141],"for":[142,200,211],"incorporation":[143],"into":[144],"follow-on":[146],"project":[147],"measure":[149],"effects":[151],"visualization":[153,199,212],"handler":[158],"performance.":[159],"measurable":[163],"units":[164],"must":[169],"be":[170,191],"performed":[171],"using":[172],"available":[173],"severely":[177],"time-constrained":[178],"environment.":[180],"Thus,":[181],"they":[182],"can":[183,207],"serve":[184],"indicators":[186],"operator":[188],"performance":[189],"experiments":[194],"effectiveness":[197],"event":[201],"detection":[202],"preliminary":[204],"analysis.":[205],"They":[206],"provide":[209],"designers":[213],"security":[215],"products.":[216]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2018,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
