{"id":"https://openalex.org/W4403935786","doi":"https://doi.org/10.1145/3652620.3687804","title":"From Attack Trees to Attack-Defense Trees with Generative AI & Natural Language Processing","display_name":"From Attack Trees to Attack-Defense Trees with Generative AI & Natural Language Processing","publication_year":2024,"publication_date":"2024-09-22","ids":{"openalex":"https://openalex.org/W4403935786","doi":"https://doi.org/10.1145/3652620.3687804"},"language":"en","primary_location":{"id":"doi:10.1145/3652620.3687804","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3652620.3687804","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3652620.3687804?download=true","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM/IEEE 27th International Conference on Model Driven Engineering Languages and Systems","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3652620.3687804?download=true","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5088515565","display_name":"Alan Birchler De Allende","orcid":null},"institutions":[{"id":"https://openalex.org/I12356871","display_name":"T\u00e9l\u00e9com Paris","ror":"https://ror.org/01naq7912","country_code":"FR","type":"education","lineage":["https://openalex.org/I12356871","https://openalex.org/I205703379","https://openalex.org/I4210145102"]},{"id":"https://openalex.org/I4210145102","display_name":"Institut Polytechnique de Paris","ror":"https://ror.org/042tfbd02","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210145102"]}],"countries":["FR"],"is_corresponding":true,"raw_author_name":"Alan Birchler De Allende","raw_affiliation_strings":["T\u00e9l\u00e9com Paris, Sophia Antipolis, France","IP Paris - Institut Polytechnique de Paris (Route de Saclay, 91120 Palaiseau Cedex, France - France)"],"affiliations":[{"raw_affiliation_string":"T\u00e9l\u00e9com Paris, Sophia Antipolis, France","institution_ids":["https://openalex.org/I12356871"]},{"raw_affiliation_string":"IP Paris - Institut Polytechnique de Paris (Route de Saclay, 91120 Palaiseau Cedex, France - France)","institution_ids":["https://openalex.org/I4210145102"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000041192","display_name":"Bastien Sultan","orcid":"https://orcid.org/0000-0002-5031-5794"},"institutions":[{"id":"https://openalex.org/I12356871","display_name":"T\u00e9l\u00e9com Paris","ror":"https://ror.org/01naq7912","country_code":"FR","type":"education","lineage":["https://openalex.org/I12356871","https://openalex.org/I205703379","https://openalex.org/I4210145102"]},{"id":"https://openalex.org/I4210145102","display_name":"Institut Polytechnique de Paris","ror":"https://ror.org/042tfbd02","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210145102"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Bastien Sultan","raw_affiliation_strings":["T\u00e9l\u00e9com Paris, Paris, France","IP Paris - Institut Polytechnique de Paris (Route de Saclay, 91120 Palaiseau Cedex, France - France)"],"affiliations":[{"raw_affiliation_string":"T\u00e9l\u00e9com Paris, Paris, France","institution_ids":["https://openalex.org/I12356871"]},{"raw_affiliation_string":"IP Paris - Institut Polytechnique de Paris (Route de Saclay, 91120 Palaiseau Cedex, France - France)","institution_ids":["https://openalex.org/I4210145102"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5058794408","display_name":"Ludovic Apvrille","orcid":"https://orcid.org/0000-0002-1167-4639"},"institutions":[{"id":"https://openalex.org/I12356871","display_name":"T\u00e9l\u00e9com Paris","ror":"https://ror.org/01naq7912","country_code":"FR","type":"education","lineage":["https://openalex.org/I12356871","https://openalex.org/I205703379","https://openalex.org/I4210145102"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Ludovic Apvrille","raw_affiliation_strings":["T\u00e9l\u00e9com Paris, Sophia Antipolis, France"],"affiliations":[{"raw_affiliation_string":"T\u00e9l\u00e9com Paris, Sophia Antipolis, France","institution_ids":["https://openalex.org/I12356871"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5088515565"],"corresponding_institution_ids":["https://openalex.org/I12356871","https://openalex.org/I4210145102"],"apc_list":null,"apc_paid":null,"fwci":0.725,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.73834512,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"561","last_page":"569"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9934999942779541,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.723657488822937},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.4722135663032532},{"id":"https://openalex.org/keywords/natural","display_name":"Natural (archaeology)","score":0.4661392569541931},{"id":"https://openalex.org/keywords/natural-language","display_name":"Natural language","score":0.4525827169418335},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.41403257846832275},{"id":"https://openalex.org/keywords/natural-language-processing","display_name":"Natural language processing","score":0.3985230326652527},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.37961623072624207},{"id":"https://openalex.org/keywords/geology","display_name":"Geology","score":0.06033506989479065}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.723657488822937},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.4722135663032532},{"id":"https://openalex.org/C2776608160","wikidata":"https://www.wikidata.org/wiki/Q4785462","display_name":"Natural (archaeology)","level":2,"score":0.4661392569541931},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.4525827169418335},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.41403257846832275},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.3985230326652527},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.37961623072624207},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.06033506989479065},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3652620.3687804","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3652620.3687804","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3652620.3687804?download=true","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM/IEEE 27th International Conference on Model Driven Engineering Languages and Systems","raw_type":"proceedings-article"},{"id":"pmh:oai:HAL:hal-04770307v1","is_oa":false,"landing_page_url":"https://telecom-paris.hal.science/hal-04770307","pdf_url":null,"source":{"id":"https://openalex.org/S4406922461","display_name":"SPIRE - Sciences Po Institutional REpository","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"MODELS Companion '24: ACM/IEEE 27th International Conference on Model Driven Engineering Languages and Systems, Sep 2024, Linz (AUSTRIA), Australia. pp.561-569, ⟨10.1145/3652620.3687804⟩","raw_type":"Conference papers"}],"best_oa_location":{"id":"doi:10.1145/3652620.3687804","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3652620.3687804","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3652620.3687804?download=true","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM/IEEE 27th International Conference on Model Driven Engineering Languages and Systems","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Quality Education","id":"https://metadata.un.org/sdg/4","score":0.6600000262260437}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4403935786.pdf","grobid_xml":"https://content.openalex.org/works/W4403935786.grobid-xml"},"referenced_works_count":15,"referenced_works":["https://openalex.org/W2142527556","https://openalex.org/W2902515791","https://openalex.org/W2970641574","https://openalex.org/W3046554645","https://openalex.org/W3129692962","https://openalex.org/W3188982559","https://openalex.org/W4232975446","https://openalex.org/W4233543946","https://openalex.org/W4383900630","https://openalex.org/W4385560609","https://openalex.org/W4386803648","https://openalex.org/W4392142005","https://openalex.org/W4400734594","https://openalex.org/W6781344849","https://openalex.org/W6812742317"],"related_works":["https://openalex.org/W2380075625","https://openalex.org/W4390718435","https://openalex.org/W4390549206","https://openalex.org/W3137171911","https://openalex.org/W4379540039","https://openalex.org/W4237784285","https://openalex.org/W2374712251","https://openalex.org/W4226226396","https://openalex.org/W3153750606","https://openalex.org/W4308854837"],"abstract_inverted_index":{"Attack-defense":[0],"trees,":[1,6,124],"an":[2,63,72,106,130,167],"extension":[3],"of":[4,38,58,98,146,202,239,244],"attack":[5,51,81,108,123,232],"are":[7],"extensively":[8],"used":[9],"by":[10,85,166],"security":[11,18,208],"engineers":[12,224],"to":[13,94,129,139,163,199],"document":[14],"potential":[15],"countermeasures":[16,59,99,230],"for":[17,35,60,231,263],"threats":[19,128],"present":[20],"in":[21,43,49,225],"a":[22,75,96,207],"system's":[23,268],"design.":[24],"These":[25],"trees":[26,103,120,158,173,183,195,204,233],"help":[27],"integrate":[28],"initial":[29,56,257],"system":[30,132],"models":[31,89],"with":[32],"countermeasures,":[33,240],"allowing":[34],"early":[36],"testing":[37],"their":[39],"efficiency":[40],"and":[41,74,90,100,144,169,177],"impact":[42],"the":[44,55,79,141,147,156,200,211,236,242,256,261,267],"design":[45,258],"cycle.":[46],"Despite":[47],"advancements":[48],"automating":[50],"tree":[52,65,82],"construction,":[53],"selecting":[54],"set":[57,97],"conversion":[61],"into":[62],"attack-defense":[64,102,119,149,157,172,203],"remains":[66],"largely":[67],"manual.":[68],"This":[69],"paper":[70],"proposes":[71],"approach":[73,115,193,249],"tool":[76],"that":[77,171,191,196,219],"extends":[78],"TTool-AI":[80],"generation":[83],"feature":[84],"leveraging":[86],"large":[87],"language":[88,92],"natural":[91],"processing":[93],"create":[95],"generate":[101],"based":[104],"on":[105],"input":[107],"tree.":[109],"To":[110],"evaluate":[111],"our":[112,114,154,161,220,248],"contribution,":[113],"is":[116],"tested":[117],"using":[118,153,175,186],"generated":[121,148,194,205],"from":[122,160,206],"each":[125],"representing":[126],"possible":[127],"associated":[131],"specification.":[133],"In":[134],"addition,":[135],"we":[136,217],"introduce":[137],"metrics":[138],"assess":[140],"semantic":[142],"correctness":[143],"completeness":[145],"trees.":[150],"We":[151,188],"compared,":[152],"metrics,":[155],"created":[159,165,174],"methodology":[162],"those":[164],"engineer":[168,209],"found":[170],"AI":[176],"secondary":[178],"mitigation":[179],"data":[180],"provided":[181],"better":[182],"than":[184],"solely":[185],"AI.":[187],"also":[189,235],"discovered":[190],"this":[192],"were":[197],"comparable":[198],"quality":[201],"at":[210],"associate":[212],"level.":[213],"From":[214],"these":[215],"results,":[216],"believe":[218],"contribution":[221],"could":[222],"aid":[223],"identifying":[226],"not":[227],"only":[228],"appropriate":[229],"but":[234],"optimal":[237],"number":[238],"avoiding":[241],"complexity":[243],"redundant":[245],"mitigations.":[246],"Furthermore,":[247],"complements":[250],"standard":[251],"modeling":[252],"practices,":[253],"particularly":[254],"during":[255],"phase,":[259],"reducing":[260],"need":[262],"time-consuming":[264],"re-engineering":[265],"throughout":[266],"lifecycle.":[269]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-03-11T06:11:40.159057","created_date":"2025-10-10T00:00:00"}