{"id":"https://openalex.org/W4378554305","doi":"https://doi.org/10.1145/3590777.3590786","title":"Cyber Informedness: A New Metric using CVSS to Increase Trust in Intrusion Detection Systems","display_name":"Cyber Informedness: A New Metric using CVSS to Increase Trust in Intrusion Detection Systems","publication_year":2023,"publication_date":"2023-05-27","ids":{"openalex":"https://openalex.org/W4378554305","doi":"https://doi.org/10.1145/3590777.3590786"},"language":"en","primary_location":{"id":"doi:10.1145/3590777.3590786","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3590777.3590786","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"European Interdisciplinary Cybersecurity Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://hal.science/hal-04159578/document","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079202000","display_name":"Robin Duraz","orcid":"https://orcid.org/0000-0001-8364-2989"},"institutions":[{"id":"https://openalex.org/I161929037","display_name":"Universit\u00e9 de Bretagne Occidentale","ror":"https://ror.org/01b8h3982","country_code":"FR","type":"education","lineage":["https://openalex.org/I161929037"]},{"id":"https://openalex.org/I4210123702","display_name":"Laboratoire des Sciences et Techniques de l\u2019Information de la Communication et de la Connaissance","ror":"https://ror.org/0266kfd37","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I180375564","https://openalex.org/I201181511","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I4210123702","https://openalex.org/I4210127572","https://openalex.org/I4210145102","https://openalex.org/I4210148559","https://openalex.org/I4210159245","https://openalex.org/I4405260085"]},{"id":"https://openalex.org/I4210137815","display_name":"Naval Group (France)","ror":"https://ror.org/03rks9355","country_code":"FR","type":"company","lineage":["https://openalex.org/I4210137815"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Robin Duraz","raw_affiliation_strings":["Chaire of Naval Cyberdefense, France","Lab-STICC - Laboratoire des sciences et techniques de l'information, de la communication et de la connaissance (Technopole Brest Iroise CS 83818 29238 BREST cedex 3 - France)","Lab-STICC_MATHNET - Equipe Math & Net (France)"],"raw_orcid":"https://orcid.org/0000-0001-8364-2989","affiliations":[{"raw_affiliation_string":"Chaire of Naval Cyberdefense, France","institution_ids":["https://openalex.org/I4210137815"]},{"raw_affiliation_string":"Lab-STICC - Laboratoire des sciences et techniques de l'information, de la communication et de la connaissance (Technopole Brest Iroise CS 83818 29238 BREST cedex 3 - France)","institution_ids":["https://openalex.org/I161929037","https://openalex.org/I4210123702"]},{"raw_affiliation_string":"Lab-STICC_MATHNET - Equipe Math & Net (France)","institution_ids":["https://openalex.org/I161929037"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020780913","display_name":"David Esp\u00e8s","orcid":"https://orcid.org/0000-0003-3445-947X"},"institutions":[{"id":"https://openalex.org/I161929037","display_name":"Universit\u00e9 de Bretagne Occidentale","ror":"https://ror.org/01b8h3982","country_code":"FR","type":"education","lineage":["https://openalex.org/I161929037"]},{"id":"https://openalex.org/I4210123702","display_name":"Laboratoire des Sciences et Techniques de l\u2019Information de la Communication et de la Connaissance","ror":"https://ror.org/0266kfd37","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I180375564","https://openalex.org/I201181511","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I4210123702","https://openalex.org/I4210127572","https://openalex.org/I4210145102","https://openalex.org/I4210148559","https://openalex.org/I4210159245","https://openalex.org/I4405260085"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"David Espes","raw_affiliation_strings":["Lab-STICC, Universit\u00e9 Bretagne Occidentale, France","Lab-STICC - Laboratoire des sciences et techniques de l'information, de la communication et de la connaissance (Technopole Brest Iroise CS 83818 29238 BREST cedex 3 - France)","Lab-STICC_IRIS - Equipe SecurIty and Resilience of Information Systems (France)"],"raw_orcid":"https://orcid.org/0000-0003-3445-947X","affiliations":[{"raw_affiliation_string":"Lab-STICC, Universit\u00e9 Bretagne Occidentale, France","institution_ids":["https://openalex.org/I161929037","https://openalex.org/I4210123702"]},{"raw_affiliation_string":"Lab-STICC - Laboratoire des sciences et techniques de l'information, de la communication et de la connaissance (Technopole Brest Iroise CS 83818 29238 BREST cedex 3 - France)","institution_ids":["https://openalex.org/I161929037","https://openalex.org/I4210123702"]},{"raw_affiliation_string":"Lab-STICC_IRIS - Equipe SecurIty and Resilience of Information Systems (France)","institution_ids":["https://openalex.org/I161929037"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047750057","display_name":"Julien Francq","orcid":"https://orcid.org/0000-0002-4604-4522"},"institutions":[{"id":"https://openalex.org/I4210137815","display_name":"Naval Group (France)","ror":"https://ror.org/03rks9355","country_code":"FR","type":"company","lineage":["https://openalex.org/I4210137815"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Julien Francq","raw_affiliation_strings":["Naval Cyber Laboratory (NCL), Naval Group, France"],"raw_orcid":"https://orcid.org/0000-0002-4604-4522","affiliations":[{"raw_affiliation_string":"Naval Cyber Laboratory (NCL), Naval Group, France","institution_ids":["https://openalex.org/I4210137815"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043411973","display_name":"Sandrine Vaton","orcid":"https://orcid.org/0000-0001-8940-6004"},"institutions":[{"id":"https://openalex.org/I161929037","display_name":"Universit\u00e9 de Bretagne Occidentale","ror":"https://ror.org/01b8h3982","country_code":"FR","type":"education","lineage":["https://openalex.org/I161929037"]},{"id":"https://openalex.org/I4210123702","display_name":"Laboratoire des Sciences et Techniques de l\u2019Information de la Communication et de la Connaissance","ror":"https://ror.org/0266kfd37","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I180375564","https://openalex.org/I201181511","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I4210123702","https://openalex.org/I4210127572","https://openalex.org/I4210145102","https://openalex.org/I4210148559","https://openalex.org/I4210159245","https://openalex.org/I4405260085"]},{"id":"https://openalex.org/I4210127572","display_name":"IMT Atlantique","ror":"https://ror.org/030hj3061","country_code":"FR","type":"education","lineage":["https://openalex.org/I205703379","https://openalex.org/I4210127572"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Sandrine Vaton","raw_affiliation_strings":["Lab-STICC, IMT Atlantique, France","Lab-STICC_MATHNET - Equipe Math & Net (France)","Lab-STICC - Laboratoire des sciences et techniques de l'information, de la communication et de la connaissance (Technopole Brest Iroise CS 83818 29238 BREST cedex 3 - France)"],"raw_orcid":"https://orcid.org/0000-0001-8940-6004","affiliations":[{"raw_affiliation_string":"Lab-STICC, IMT Atlantique, France","institution_ids":["https://openalex.org/I161929037","https://openalex.org/I4210123702","https://openalex.org/I4210127572"]},{"raw_affiliation_string":"Lab-STICC_MATHNET - Equipe Math & Net (France)","institution_ids":["https://openalex.org/I161929037"]},{"raw_affiliation_string":"Lab-STICC - Laboratoire des sciences et techniques de l'information, de la communication et de la connaissance (Technopole Brest Iroise CS 83818 29238 BREST cedex 3 - France)","institution_ids":["https://openalex.org/I161929037","https://openalex.org/I4210123702"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"53","last_page":"58"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8001672029495239},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7558653354644775},{"id":"https://openalex.org/keywords/metric","display_name":"Metric (unit)","score":0.7096530199050903},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6061776876449585},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5406162142753601},{"id":"https://openalex.org/keywords/de-facto","display_name":"De facto","score":0.5217165350914001},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.392235666513443},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.08555075526237488}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8001672029495239},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7558653354644775},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.7096530199050903},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6061776876449585},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5406162142753601},{"id":"https://openalex.org/C2992317946","wikidata":"https://www.wikidata.org/wiki/Q712144","display_name":"De facto","level":2,"score":0.5217165350914001},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.392235666513443},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.08555075526237488},{"id":"https://openalex.org/C21547014","wikidata":"https://www.wikidata.org/wiki/Q1423657","display_name":"Operations management","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3590777.3590786","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3590777.3590786","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"European Interdisciplinary Cybersecurity Conference","raw_type":"proceedings-article"},{"id":"pmh:oai:HAL:hal-04159578v1","is_oa":true,"landing_page_url":"https://hal.science/hal-04159578","pdf_url":"https://hal.science/hal-04159578/document","source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"EICC 2023: European Interdisciplinary Cybersecurity Conference, Jun 2023, Stavanger, Norway. ⟨10.1145/3590777.3590786⟩","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"pmh:oai:HAL:hal-04159578v1","is_oa":true,"landing_page_url":"https://hal.science/hal-04159578","pdf_url":"https://hal.science/hal-04159578/document","source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"EICC 2023: European Interdisciplinary Cybersecurity Conference, Jun 2023, Stavanger, Norway. ⟨10.1145/3590777.3590786⟩","raw_type":"info:eu-repo/semantics/conferenceObject"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.6299999952316284,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320319752","display_name":"Naval Group","ror":"https://ror.org/03rks9355"}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4378554305.pdf"},"referenced_works_count":22,"referenced_works":["https://openalex.org/W1647645866","https://openalex.org/W1981738628","https://openalex.org/W2068258779","https://openalex.org/W2099940443","https://openalex.org/W2296509296","https://openalex.org/W2382109857","https://openalex.org/W2401501243","https://openalex.org/W2597441556","https://openalex.org/W2605497964","https://openalex.org/W2732560875","https://openalex.org/W2771169143","https://openalex.org/W2789828921","https://openalex.org/W2803881474","https://openalex.org/W2890988085","https://openalex.org/W2922628727","https://openalex.org/W2958285686","https://openalex.org/W2991507433","https://openalex.org/W3008202598","https://openalex.org/W3030391949","https://openalex.org/W3033213260","https://openalex.org/W3038955483","https://openalex.org/W3133235094"],"related_works":["https://openalex.org/W2807906686","https://openalex.org/W2794909825","https://openalex.org/W4247715995","https://openalex.org/W2594962586","https://openalex.org/W2518047880","https://openalex.org/W3175075103","https://openalex.org/W2364419519","https://openalex.org/W2360767377","https://openalex.org/W2017948608","https://openalex.org/W2360951146"],"abstract_inverted_index":{"Intrusion":[0],"Detection":[1],"Systems":[2],"(IDSs)":[3],"are":[4],"essential":[5],"cybersecurity":[6,51,68],"components.":[7],"Previous":[8],"cyberattack":[9],"detection":[10],"methods":[11],"relied":[12],"more":[13,38,73],"on":[14,102,128],"signatures":[15],"and":[16,40,152],"rules":[17],"to":[18,49,70],"detect":[19],"cyberattacks,":[20],"although":[21],"there":[22],"has":[23],"been":[24],"a":[25,62,72,89],"change":[26],"in":[27,29,93],"paradigm":[28],"the":[30,80,83,95,148],"last":[31],"decade,":[32],"with":[33,114,135],"Machine":[34],"Learning":[35],"(ML)":[36],"enabling":[37],"efficient":[39],"flexible":[41],"statistical":[42],"methods.":[43],"However,":[44],"ML":[45,151],"is":[46,132],"currently":[47],"unable":[48],"integrate":[50],"information":[52,69],"into":[53,66],"its":[54],"inner":[55],"workings.":[56],"This":[57,86],"paper":[58],"introduces":[59],"Cyber":[60],"Informedness,":[61],"new":[63,109,119,140],"metric":[64,87,110,120,141],"taking":[65],"account":[67],"give":[71],"informed":[74],"representation":[75],"of":[76,82],"performance,":[77],"influenced":[78],"by":[79,146],"severity":[81],"attacks":[84],"encountered.":[85],"uses":[88],"de":[90],"facto":[91],"standard":[92],"cybersecurity:":[94],"Common":[96],"Vulnerability":[97],"Scoring":[98],"System":[99],"(CVSS).":[100],"Results":[101],"two":[103],"public":[104],"datasets":[105],"show":[106],"that":[107,124],"this":[108,118,139],"validates":[111],"results":[112],"obtained":[113],"generic":[115,136,144],"metrics.":[116,137],"Furthermore,":[117],"highlights":[121],"ML-based":[122],"IDSs":[123],"prioritize":[125],"high":[126],"performance":[127],"severe":[129],"attacks,":[130],"which":[131],"not":[133],"visible":[134],"Consequently,":[138],"nicely":[142],"completes":[143],"metrics":[145],"bridging":[147],"gap":[149],"between":[150],"cybersecurity.":[153]},"counts_by_year":[{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-27T08:26:11.824852","created_date":"2025-10-10T00:00:00"}