{"id":"https://openalex.org/W3196839583","doi":"https://doi.org/10.1109/isi53945.2021.9624677","title":"Leveraging Open Threat Exchange (OTX) to Understand Spatio-Temporal Trends of Cyber Threats: Covid-19 Case Study","display_name":"Leveraging Open Threat Exchange (OTX) to Understand Spatio-Temporal Trends of Cyber Threats: Covid-19 Case Study","publication_year":2021,"publication_date":"2021-11-02","ids":{"openalex":"https://openalex.org/W3196839583","doi":"https://doi.org/10.1109/isi53945.2021.9624677","mag":"3196839583"},"language":"en","primary_location":{"id":"doi:10.1109/isi53945.2021.9624677","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isi53945.2021.9624677","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE International Conference on Intelligence and Security Informatics (ISI)","raw_type":"proceedings-article"},"type":"preprint","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2109.01251","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5066482633","display_name":"Othmane Cherqi","orcid":"https://orcid.org/0009-0006-2432-0385"},"institutions":[{"id":"https://openalex.org/I126477371","display_name":"Mohammed V University","ror":"https://ror.org/00r8w8f84","country_code":"MA","type":"education","lineage":["https://openalex.org/I126477371"]},{"id":"https://openalex.org/I4210106663","display_name":"International University of Rabat","ror":"https://ror.org/01t9czq80","country_code":"MA","type":"education","lineage":["https://openalex.org/I4210106663"]}],"countries":["MA"],"is_corresponding":true,"raw_author_name":"Othmane Cherqi","raw_affiliation_strings":["ENSIAS, Mohammed V University","TICLab, Faculty of Informatics and Logistics, Universit\u00e9 Internationale de Rabat","Mohammed V University, Rabat, Morocco"],"affiliations":[{"raw_affiliation_string":"ENSIAS, Mohammed V University","institution_ids":["https://openalex.org/I126477371"]},{"raw_affiliation_string":"TICLab, Faculty of Informatics and Logistics, Universit\u00e9 Internationale de Rabat","institution_ids":["https://openalex.org/I4210106663"]},{"raw_affiliation_string":"Mohammed V University, Rabat, Morocco","institution_ids":["https://openalex.org/I126477371"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012658403","display_name":"Hicham Hammouchi","orcid":"https://orcid.org/0000-0002-0572-218X"},"institutions":[{"id":"https://openalex.org/I4210106663","display_name":"International University of Rabat","ror":"https://ror.org/01t9czq80","country_code":"MA","type":"education","lineage":["https://openalex.org/I4210106663"]},{"id":"https://openalex.org/I126477371","display_name":"Mohammed V University","ror":"https://ror.org/00r8w8f84","country_code":"MA","type":"education","lineage":["https://openalex.org/I126477371"]},{"id":"https://openalex.org/I4210114414","display_name":"Phnom Penh International University","ror":"https://ror.org/0285m7689","country_code":"KH","type":"education","lineage":["https://openalex.org/I4210114414"]}],"countries":["KH","MA"],"is_corresponding":false,"raw_author_name":"Hicham Hammouchi","raw_affiliation_strings":["ENSIAS, Mohammed V University","TICLab, Faculty of Informatics and Logistics, Universit\u00e9 Internationale de Rabat","International University, Phnom Penh, Cambodia"],"affiliations":[{"raw_affiliation_string":"ENSIAS, Mohammed V University","institution_ids":["https://openalex.org/I126477371"]},{"raw_affiliation_string":"TICLab, Faculty of Informatics and Logistics, Universit\u00e9 Internationale de Rabat","institution_ids":["https://openalex.org/I4210106663"]},{"raw_affiliation_string":"International University, Phnom Penh, Cambodia","institution_ids":["https://openalex.org/I4210114414"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057324156","display_name":"Mounir Ghogho","orcid":"https://orcid.org/0000-0002-0055-7867"},"institutions":[{"id":"https://openalex.org/I4210106663","display_name":"International University of Rabat","ror":"https://ror.org/01t9czq80","country_code":"MA","type":"education","lineage":["https://openalex.org/I4210106663"]},{"id":"https://openalex.org/I4210114414","display_name":"Phnom Penh International University","ror":"https://ror.org/0285m7689","country_code":"KH","type":"education","lineage":["https://openalex.org/I4210114414"]}],"countries":["KH","MA"],"is_corresponding":false,"raw_author_name":"Mounir Ghogho","raw_affiliation_strings":["TICLab, Faculty of Informatics and Logistics, Universit\u00e9 Internationale de Rabat","International University, Phnom Penh, Cambodia"],"affiliations":[{"raw_affiliation_string":"TICLab, Faculty of Informatics and Logistics, Universit\u00e9 Internationale de Rabat","institution_ids":["https://openalex.org/I4210106663"]},{"raw_affiliation_string":"International University, Phnom Penh, Cambodia","institution_ids":["https://openalex.org/I4210114414"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065627637","display_name":"Houda Benbrahim","orcid":"https://orcid.org/0009-0005-2797-212X"},"institutions":[{"id":"https://openalex.org/I126477371","display_name":"Mohammed V University","ror":"https://ror.org/00r8w8f84","country_code":"MA","type":"education","lineage":["https://openalex.org/I126477371"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Houda Benbrahim","raw_affiliation_strings":["ENSIAS, Mohammed V University","Mohammed V University, Rabat, Morocco"],"affiliations":[{"raw_affiliation_string":"ENSIAS, Mohammed V University","institution_ids":["https://openalex.org/I126477371"]},{"raw_affiliation_string":"Mohammed V University, Rabat, Morocco","institution_ids":["https://openalex.org/I126477371"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5066482633"],"corresponding_institution_ids":["https://openalex.org/I126477371","https://openalex.org/I4210106663"],"apc_list":null,"apc_paid":null,"fwci":0.2839,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.63101374,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9941999912261963,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9939000010490417,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6154102087020874},{"id":"https://openalex.org/keywords/coronavirus-disease-2019","display_name":"Coronavirus disease 2019 (COVID-19)","score":0.6138491034507751},{"id":"https://openalex.org/keywords/cyber-threats","display_name":"Cyber threats","score":0.5090731978416443},{"id":"https://openalex.org/keywords/cyber-attack","display_name":"Cyber-attack","score":0.48667699098587036},{"id":"https://openalex.org/keywords/exploratory-analysis","display_name":"Exploratory analysis","score":0.4662937521934509},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.45792776346206665},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.4366809129714966},{"id":"https://openalex.org/keywords/outbreak","display_name":"Outbreak","score":0.4317713677883148},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.42648160457611084},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.33544886112213135},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.2822858691215515}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6154102087020874},{"id":"https://openalex.org/C3008058167","wikidata":"https://www.wikidata.org/wiki/Q84263196","display_name":"Coronavirus disease 2019 (COVID-19)","level":4,"score":0.6138491034507751},{"id":"https://openalex.org/C3018725008","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber threats","level":2,"score":0.5090731978416443},{"id":"https://openalex.org/C201307755","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber-attack","level":2,"score":0.48667699098587036},{"id":"https://openalex.org/C3018260909","wikidata":"https://www.wikidata.org/wiki/Q1322871","display_name":"Exploratory analysis","level":2,"score":0.4662937521934509},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.45792776346206665},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.4366809129714966},{"id":"https://openalex.org/C116675565","wikidata":"https://www.wikidata.org/wiki/Q3241045","display_name":"Outbreak","level":2,"score":0.4317713677883148},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.42648160457611084},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.33544886112213135},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2822858691215515},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C524204448","wikidata":"https://www.wikidata.org/wiki/Q788926","display_name":"Infectious disease (medical specialty)","level":3,"score":0.0},{"id":"https://openalex.org/C159047783","wikidata":"https://www.wikidata.org/wiki/Q7215","display_name":"Virology","level":1,"score":0.0},{"id":"https://openalex.org/C2779134260","wikidata":"https://www.wikidata.org/wiki/Q12136","display_name":"Disease","level":2,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1109/isi53945.2021.9624677","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isi53945.2021.9624677","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE International Conference on Intelligence and Security Informatics (ISI)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2109.01251","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2109.01251","pdf_url":"https://arxiv.org/pdf/2109.01251","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"mag:3196839583","is_oa":true,"landing_page_url":"https://arxiv.org/pdf/2109.01251v1","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"doi:10.48550/arxiv.2109.01251","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2109.01251","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2109.01251","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2109.01251","pdf_url":"https://arxiv.org/pdf/2109.01251","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3196839583.pdf"},"referenced_works_count":15,"referenced_works":["https://openalex.org/W30736379","https://openalex.org/W1954463725","https://openalex.org/W2156279557","https://openalex.org/W2592042192","https://openalex.org/W2783245716","https://openalex.org/W2800346278","https://openalex.org/W2887127196","https://openalex.org/W2964522977","https://openalex.org/W3034498955","https://openalex.org/W3036035276","https://openalex.org/W3047945431","https://openalex.org/W3088234625","https://openalex.org/W3090473955","https://openalex.org/W6640650116","https://openalex.org/W6734100528"],"related_works":["https://openalex.org/W3171888483","https://openalex.org/W1419517020","https://openalex.org/W3159145696","https://openalex.org/W2897204469","https://openalex.org/W3198184073","https://openalex.org/W2005604419","https://openalex.org/W187525181","https://openalex.org/W2743635080","https://openalex.org/W2739036510","https://openalex.org/W2946293155","https://openalex.org/W3203867453","https://openalex.org/W2808465824","https://openalex.org/W2914662937","https://openalex.org/W1999206795","https://openalex.org/W3161980074","https://openalex.org/W2904014272","https://openalex.org/W2036154322","https://openalex.org/W3120410282","https://openalex.org/W3016154938","https://openalex.org/W2024158339"],"abstract_inverted_index":{"Understanding":[0],"the":[1,47,65,71,79,115,125,136],"properties":[2],"exhibited":[3],"by":[4,50,84,124,132],"Spatial-temporal":[5],"evolution":[6],"of":[7,43,64,81,105],"cyber":[8,11,26,67,119],"attacks":[9,82],"improve":[10],"threat":[12],"intelligence.":[13],"In":[14,36],"addition,":[15],"better":[16],"understanding":[17],"on":[18],"threats":[19,27,45,120],"patterns":[20,91],"is":[21],"a":[22,108],"key":[23],"feature":[24],"for":[25,33],"prevention,":[28],"detection,":[29],"and":[30,32,78,128],"management":[31],"enhancing":[34],"defenses.":[35],"this":[37],"work,":[38],"we":[39,58,87,113],"study":[40],"different":[41],"aspects":[42],"emerging":[44],"in":[46],"wild":[48],"shared":[49],"160,000":[51],"global":[52],"participants":[53],"form":[54],"all":[55],"industries.":[56],"First,":[57],"perform":[59],"an":[60],"exploratory":[61],"data":[62],"analysis":[63],"collected":[66],"threats.":[68],"We":[69,95],"investigate":[70],"most":[72,75],"targeted":[73],"countries,":[74],"common":[76],"malwares":[77],"distribution":[80],"frequency":[83],"localisation.":[85],"Second,":[86],"extract":[88],"attacks\u2019":[89],"spreading":[90],"at":[92],"country":[93,109],"level.":[94],"model":[96],"these":[97],"behaviors":[98],"using":[99],"transition":[100],"graphs":[101],"decorated":[102],"with":[103],"probabilities":[104],"switching":[106],"from":[107,138],"to":[110,117,134],"another.":[111],"Finally,":[112],"analyse":[114],"extent":[116],"which":[118],"have":[121],"been":[122],"affected":[123],"COVID-19":[126],"outbreak":[127],"sanitary":[129],"measures":[130],"imposed":[131],"governments":[133],"prevent":[135],"virus":[137],"spreading.":[139]},"counts_by_year":[{"year":2024,"cited_by_count":1}],"updated_date":"2026-03-20T23:20:44.827607","created_date":"2025-10-10T00:00:00"}