{"id":"https://openalex.org/W4402957761","doi":"https://doi.org/10.1145/3678890.3678909","title":"ADAPT it! Automating APT Campaign and Group Attribution by Leveraging and Linking Heterogeneous Files","display_name":"ADAPT it! Automating APT Campaign and Group Attribution by Leveraging and Linking Heterogeneous Files","publication_year":2024,"publication_date":"2024-09-29","ids":{"openalex":"https://openalex.org/W4402957761","doi":"https://doi.org/10.1145/3678890.3678909"},"language":"en","primary_location":{"id":"doi:10.1145/3678890.3678909","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3678890.3678909","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The 27th International Symposium on Research in Attacks, Intrusions and Defenses","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3678890.3678909","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5084493304","display_name":"Aakanksha Saha","orcid":"https://orcid.org/0009-0005-7161-9964"},"institutions":[{"id":"https://openalex.org/I145847075","display_name":"TU Wien","ror":"https://ror.org/04d836q62","country_code":"AT","type":"education","lineage":["https://openalex.org/I145847075"]}],"countries":["AT"],"is_corresponding":true,"raw_author_name":"Aakanksha Saha","raw_affiliation_strings":["TU Wien, Austria"],"affiliations":[{"raw_affiliation_string":"TU Wien, Austria","institution_ids":["https://openalex.org/I145847075"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043279954","display_name":"Jorge Blasco","orcid":"https://orcid.org/0000-0003-4392-9023"},"institutions":[{"id":"https://openalex.org/I88060688","display_name":"Universidad Polit\u00e9cnica de Madrid","ror":"https://ror.org/03n6nwv02","country_code":"ES","type":"education","lineage":["https://openalex.org/I88060688"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Jorge Blasco","raw_affiliation_strings":["Universidad Polit\u00e9cnica de Madrid, Spain"],"affiliations":[{"raw_affiliation_string":"Universidad Polit\u00e9cnica de Madrid, Spain","institution_ids":["https://openalex.org/I88060688"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036908366","display_name":"Lorenzo Cavallaro","orcid":"https://orcid.org/0000-0002-3878-2680"},"institutions":[{"id":"https://openalex.org/I45129253","display_name":"University College London","ror":"https://ror.org/02jx3x895","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I45129253"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Lorenzo Cavallaro","raw_affiliation_strings":["University College London, United Kingdom"],"affiliations":[{"raw_affiliation_string":"University College London, United Kingdom","institution_ids":["https://openalex.org/I45129253"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5009694552","display_name":"Martina Lindorfer","orcid":"https://orcid.org/0000-0001-7001-4481"},"institutions":[{"id":"https://openalex.org/I145847075","display_name":"TU Wien","ror":"https://ror.org/04d836q62","country_code":"AT","type":"education","lineage":["https://openalex.org/I145847075"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Martina Lindorfer","raw_affiliation_strings":["TU Wien, Austria"],"affiliations":[{"raw_affiliation_string":"TU Wien, Austria","institution_ids":["https://openalex.org/I145847075"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5084493304"],"corresponding_institution_ids":["https://openalex.org/I145847075"],"apc_list":null,"apc_paid":null,"fwci":6.1722,"has_fulltext":true,"cited_by_count":8,"citation_normalized_percentile":{"value":0.96509968,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"114","last_page":"129"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12016","display_name":"Web Data Mining and Analysis","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12016","display_name":"Web Data Mining and Analysis","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6863932609558105},{"id":"https://openalex.org/keywords/attribution","display_name":"Attribution","score":0.6473500728607178},{"id":"https://openalex.org/keywords/authorship-attribution","display_name":"Authorship attribution","score":0.5067782998085022},{"id":"https://openalex.org/keywords/group","display_name":"Group (periodic table)","score":0.4811202585697174},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4195397198200226},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.25025108456611633},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.09499871730804443}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6863932609558105},{"id":"https://openalex.org/C143299363","wikidata":"https://www.wikidata.org/wiki/Q900584","display_name":"Attribution","level":2,"score":0.6473500728607178},{"id":"https://openalex.org/C3020202489","wikidata":"https://www.wikidata.org/wiki/Q2032038","display_name":"Authorship attribution","level":2,"score":0.5067782998085022},{"id":"https://openalex.org/C2781311116","wikidata":"https://www.wikidata.org/wiki/Q83306","display_name":"Group (periodic table)","level":2,"score":0.4811202585697174},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4195397198200226},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.25025108456611633},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.09499871730804443},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C178790620","wikidata":"https://www.wikidata.org/wiki/Q11351","display_name":"Organic chemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3678890.3678909","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3678890.3678909","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The 27th International Symposium on Research in Attacks, Intrusions and Defenses","raw_type":"proceedings-article"},{"id":"pmh:oai:eprints.ucl.ac.uk.OAI2:10212286","is_oa":true,"landing_page_url":"https://discovery.ucl.ac.uk/id/eprint/10212286/","pdf_url":"https://discovery.ucl.ac.uk/id/eprint/10212286/1/raid2024-19.pdf","source":{"id":"https://openalex.org/S4306400024","display_name":"UCL Discovery (University College London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I45129253","host_organization_name":"University College London","host_organization_lineage":["https://openalex.org/I45129253"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"In:  Proceedings of RAID '24: Proceedings of the 27th International Symposium on Research in Attacks, Intrusions and Defenses.  (pp. pp. 114-129).  ACM (2024)","raw_type":"Proceedings paper"}],"best_oa_location":{"id":"doi:10.1145/3678890.3678909","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3678890.3678909","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The 27th International Symposium on Research in Attacks, Intrusions and Defenses","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G163384878","display_name":null,"funder_award_id":"ICT19-056","funder_id":"https://openalex.org/F4320321003","funder_display_name":"Vienna Science and Technology Fund"}],"funders":[{"id":"https://openalex.org/F4320321003","display_name":"Vienna Science and Technology Fund","ror":"https://ror.org/01f9mc681"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W54929040","https://openalex.org/W191656338","https://openalex.org/W1581009051","https://openalex.org/W1827212170","https://openalex.org/W1983133445","https://openalex.org/W1985527534","https://openalex.org/W1992419399","https://openalex.org/W2008324060","https://openalex.org/W2052854541","https://openalex.org/W2101234009","https://openalex.org/W2130525565","https://openalex.org/W2223334785","https://openalex.org/W2267635142","https://openalex.org/W2560932476","https://openalex.org/W2766445325","https://openalex.org/W2766677542","https://openalex.org/W2794801050","https://openalex.org/W2818789173","https://openalex.org/W2884157903","https://openalex.org/W2886307859","https://openalex.org/W2887799690","https://openalex.org/W2962688774","https://openalex.org/W2965263711","https://openalex.org/W2970641574","https://openalex.org/W2998038410","https://openalex.org/W3007484256","https://openalex.org/W3008443984","https://openalex.org/W3083528243","https://openalex.org/W3103387846","https://openalex.org/W3125415690","https://openalex.org/W3178062611","https://openalex.org/W4226079614","https://openalex.org/W4226139354","https://openalex.org/W4286375281","https://openalex.org/W4294238081","https://openalex.org/W4388481469","https://openalex.org/W4389779304","https://openalex.org/W4393183467","https://openalex.org/W4402158659","https://openalex.org/W6675354045"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2035546108","https://openalex.org/W2376361520","https://openalex.org/W2133328864","https://openalex.org/W2093949997","https://openalex.org/W3213969421","https://openalex.org/W4205570701","https://openalex.org/W2975078241","https://openalex.org/W2623063325"],"abstract_inverted_index":{"Recent":[0],"years":[1],"have":[2,37],"witnessed":[3],"a":[4],"surge":[5],"in":[6,68],"the":[7,18,32],"growth":[8],"of":[9,29,34],"Advanced":[10],"Persistent":[11],"Threats":[12],"(APTs),":[13],"with":[14,71],"significant":[15],"challenges":[16],"to":[17,43,57,64],"security":[19],"landscape,":[20],"affecting":[21],"industry,":[22],"governance,":[23],"and":[24,31,45,75],"democracy.":[25],"The":[26],"ever-growing":[27],"number":[28],"actors":[30],"complexity":[33],"their":[35],"campaigns":[36,70],"made":[38],"it":[39],"difficult":[40],"for":[41],"defenders":[42],"track":[44,58],"attribute":[46],"these":[47],"malicious":[48],"activities":[49],"effectively.":[50],"Traditionally,":[51],"researchers":[52],"relied":[53],"on":[54],"threat":[55,73],"intelligence":[56],"APTs.":[59],"However,":[60],"this":[61],"often":[62],"led":[63],"fragmented":[65],"information,":[66],"delays":[67],"connecting":[69],"specific":[72],"groups,":[74],"misattribution.":[76]},"counts_by_year":[{"year":2025,"cited_by_count":8}],"updated_date":"2026-04-04T16:13:02.066488","created_date":"2025-10-10T00:00:00"}