{"id":"https://openalex.org/W2077993354","doi":"https://doi.org/10.1145/2746194.2746203","title":"An integrated computer-aided cognitive task analysis method for tracing cyber-attack analysis processes","display_name":"An integrated computer-aided cognitive task analysis method for tracing cyber-attack analysis processes","publication_year":2015,"publication_date":"2015-04-17","ids":{"openalex":"https://openalex.org/W2077993354","doi":"https://doi.org/10.1145/2746194.2746203","mag":"2077993354"},"language":"en","primary_location":{"id":"doi:10.1145/2746194.2746203","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2746194.2746203","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2015 Symposium and Bootcamp on the Science of Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101503013","display_name":"Chen Zhong","orcid":"https://orcid.org/0000-0003-2547-941X"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chen Zhong","raw_affiliation_strings":["Pennsylvania State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109056901","display_name":"John Yen","orcid":null},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"John Yen","raw_affiliation_strings":["Pennsylvania State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100346828","display_name":"Peng Liu","orcid":"https://orcid.org/0000-0002-5091-8464"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Peng Liu","raw_affiliation_strings":["Pennsylvania State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071137620","display_name":"Rob Erbacher","orcid":null},"institutions":[{"id":"https://openalex.org/I166416128","display_name":"DEVCOM Army Research Laboratory","ror":"https://ror.org/011hc8f90","country_code":"US","type":"government","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1330347796","https://openalex.org/I166416128","https://openalex.org/I2802705668","https://openalex.org/I4210154437"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rob Erbacher","raw_affiliation_strings":["Army Research Lab"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Army Research Lab","institution_ids":["https://openalex.org/I166416128"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039790969","display_name":"Ren\u00e9e E. Etoty","orcid":null},"institutions":[{"id":"https://openalex.org/I166416128","display_name":"DEVCOM Army Research Laboratory","ror":"https://ror.org/011hc8f90","country_code":"US","type":"government","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1330347796","https://openalex.org/I166416128","https://openalex.org/I2802705668","https://openalex.org/I4210154437"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Renee Etoty","raw_affiliation_strings":["Army Research Lab"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Army Research Lab","institution_ids":["https://openalex.org/I166416128"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5057366078","display_name":"Christopher J. Garneau","orcid":null},"institutions":[{"id":"https://openalex.org/I166416128","display_name":"DEVCOM Army Research Laboratory","ror":"https://ror.org/011hc8f90","country_code":"US","type":"government","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1330347796","https://openalex.org/I166416128","https://openalex.org/I2802705668","https://openalex.org/I4210154437"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christopher Garneau","raw_affiliation_strings":["Army Research Lab"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Army Research Lab","institution_ids":["https://openalex.org/I166416128"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.8961,"has_fulltext":false,"cited_by_count":16,"citation_normalized_percentile":{"value":0.91998096,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":"76","issue":null,"first_page":"1","last_page":"11"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9950000047683716,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9950000047683716,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10703","display_name":"Business Process Modeling and Analysis","score":0.9660999774932861,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9603000283241272,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7733438014984131},{"id":"https://openalex.org/keywords/tracing","display_name":"Tracing","score":0.7068119645118713},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.6444551944732666},{"id":"https://openalex.org/keywords/trace","display_name":"TRACE (psycholinguistics)","score":0.6219706535339355},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5957463383674622},{"id":"https://openalex.org/keywords/task-analysis","display_name":"Task analysis","score":0.559974193572998},{"id":"https://openalex.org/keywords/cognition","display_name":"Cognition","score":0.5224406123161316},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.4802998900413513},{"id":"https://openalex.org/keywords/process-tracing","display_name":"Process tracing","score":0.4619458317756653},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.4227529466152191},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.410075306892395},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.3753381371498108},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.11203166842460632},{"id":"https://openalex.org/keywords/systems-engineering","display_name":"Systems engineering","score":0.08256632089614868},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.08103203773498535}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7733438014984131},{"id":"https://openalex.org/C138673069","wikidata":"https://www.wikidata.org/wiki/Q322229","display_name":"Tracing","level":2,"score":0.7068119645118713},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.6444551944732666},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.6219706535339355},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5957463383674622},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.559974193572998},{"id":"https://openalex.org/C169900460","wikidata":"https://www.wikidata.org/wiki/Q2200417","display_name":"Cognition","level":2,"score":0.5224406123161316},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.4802998900413513},{"id":"https://openalex.org/C2776970286","wikidata":"https://www.wikidata.org/wiki/Q7247309","display_name":"Process tracing","level":3,"score":0.4619458317756653},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.4227529466152191},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.410075306892395},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.3753381371498108},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.11203166842460632},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.08256632089614868},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.08103203773498535},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C169760540","wikidata":"https://www.wikidata.org/wiki/Q207011","display_name":"Neuroscience","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2746194.2746203","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2746194.2746203","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2015 Symposium and Bootcamp on the Science of Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W1494756088","https://openalex.org/W1495304983","https://openalex.org/W1524917549","https://openalex.org/W1595348505","https://openalex.org/W1664374833","https://openalex.org/W1779611882","https://openalex.org/W1826106524","https://openalex.org/W1950644452","https://openalex.org/W1999705655","https://openalex.org/W2015434614","https://openalex.org/W2016994431","https://openalex.org/W2020929023","https://openalex.org/W2041656211","https://openalex.org/W2061078001","https://openalex.org/W2064655388","https://openalex.org/W2086341391","https://openalex.org/W2104733168","https://openalex.org/W2108073531","https://openalex.org/W2148727360","https://openalex.org/W2149617571","https://openalex.org/W2150485981","https://openalex.org/W2161243549","https://openalex.org/W2175659677","https://openalex.org/W4230172260","https://openalex.org/W4250691401","https://openalex.org/W6631593251"],"related_works":["https://openalex.org/W2115308562","https://openalex.org/W2789571330","https://openalex.org/W4299652732","https://openalex.org/W2963744171","https://openalex.org/W2133304975","https://openalex.org/W2362901774","https://openalex.org/W3122226325","https://openalex.org/W4248091533","https://openalex.org/W4321607860","https://openalex.org/W2050247947"],"abstract_inverted_index":{"As":[0],"cyber-attacks":[1],"become":[2],"more":[3],"sophisticated,":[4],"cyber-attack":[5,69,99,122],"analysts":[6,141,159],"are":[7],"required":[8],"to":[9,17,53,62,138,179],"process":[10,106],"large":[11],"amounts":[12],"of":[13,24,40,96,115,189],"network":[14],"data":[15,80,176],"and":[16,28,46,51,108,131,145,160,184],"reason":[18],"under":[19],"uncertainty":[20],"with":[21],"the":[22,30,73,97,174,181,190],"aim":[23],"detecting":[25],"cyber-attacks.":[26],"Capturing":[27],"studying":[29],"fine-grained":[31,98],"analysts'":[32,116,185],"cognitive":[33,64,84,117],"processes":[34,118],"helps":[35],"researchers":[36],"gain":[37],"deep":[38],"understanding":[39],"how":[41],"they":[42],"conduct":[43,63],"analytical":[44],"reasoning":[45],"elicit":[47],"their":[48,56,143],"procedure":[49],"knowledge":[50],"experience":[52],"further":[54],"improve":[55],"performance.":[57],"However,":[58],"it's":[59],"very":[60],"challenging":[61],"task":[65,85],"analysis":[66,86,100,123,177,193],"studies":[67],"in":[68,119,134,165,168],"analysis.":[70],"To":[71],"address":[72],"problem,":[74],"we":[75,154],"propose":[76],"an":[77],"integrated":[78],"computer-aided":[79],"collection":[81],"method":[82,127,178],"for":[83,112],"(CTA)":[87],"which":[88],"has":[89],"three":[90],"building":[91],"blocks:":[92],"a":[93,102,109,121,135],"trace":[94,192],"representation":[95],"process,":[101],"computer":[103],"tool":[104],"supporting":[105],"tracing":[107],"laboratory":[110],"experiment":[111],"collecting":[113],"traces":[114,183],"conducting":[120],"task.":[124],"This":[125],"CTA":[126],"integrates":[128],"automatic":[129],"capture":[130],"situated":[132],"self-reports":[133],"novel":[136],"way":[137],"avoiding":[139],"distracting":[140],"from":[142],"work":[144,149],"adding":[146],"much":[147],"extra":[148],"load.":[150],"With":[151],"IRB":[152],"approval,":[153],"recruited":[155],"thirteen":[156],"full-time":[157],"professional":[158],"seventeen":[161],"doctoral":[162],"students":[163],"specialized":[164],"cyber":[166],"security":[167],"our":[169],"experiment.":[170],"We":[171],"mainly":[172],"employ":[173],"qualitative":[175],"analyze":[180],"collected":[182],"comments.":[186],"The":[187],"results":[188],"preliminary":[191],"turn":[194],"out":[195],"highly":[196],"promising.":[197]},"counts_by_year":[{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":4},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":3},{"year":2015,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}