{"id":"https://openalex.org/W4415423016","doi":"https://doi.org/10.1145/3772280","title":"A Comprehensive Survey of Threat Intelligence Research: A Measurement-Based Study","display_name":"A Comprehensive Survey of Threat Intelligence Research: A Measurement-Based Study","publication_year":2025,"publication_date":"2025-10-22","ids":{"openalex":"https://openalex.org/W4415423016","doi":"https://doi.org/10.1145/3772280"},"language":"en","primary_location":{"id":"doi:10.1145/3772280","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3772280","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"type":"review","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3772280","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078486804","display_name":"Keisuke Furumoto","orcid":"https://orcid.org/0000-0002-0699-5884"},"institutions":[{"id":"https://openalex.org/I90023481","display_name":"National Institute of Information and Communications Technology","ror":"https://ror.org/016bgq349","country_code":"JP","type":"facility","lineage":["https://openalex.org/I90023481"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Keisuke Furumoto","raw_affiliation_strings":["National Institute of Information and Communications Technology"],"raw_orcid":"https://orcid.org/0000-0002-0699-5884","affiliations":[{"raw_affiliation_string":"National Institute of Information and Communications Technology","institution_ids":["https://openalex.org/I90023481"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101610047","display_name":"Tomohiro Morikawa","orcid":"https://orcid.org/0000-0002-7822-3672"},"institutions":[{"id":"https://openalex.org/I180941496","display_name":"University of Hyogo","ror":"https://ror.org/0151bmh98","country_code":"JP","type":"education","lineage":["https://openalex.org/I180941496"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Tomohiro Morikawa","raw_affiliation_strings":["University of Hyogo"],"raw_orcid":"https://orcid.org/0000-0002-7822-3672","affiliations":[{"raw_affiliation_string":"University of Hyogo","institution_ids":["https://openalex.org/I180941496"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055131405","display_name":"Antti Kolehmainen","orcid":"https://orcid.org/0000-0002-8572-1266"},"institutions":[{"id":"https://openalex.org/I166825849","display_name":"Tampere University","ror":"https://ror.org/033003e23","country_code":"FI","type":"education","lineage":["https://openalex.org/I166825849"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Antti Kolehmainen","raw_affiliation_strings":["Tampere University"],"raw_orcid":"https://orcid.org/0000-0002-8572-1266","affiliations":[{"raw_affiliation_string":"Tampere University","institution_ids":["https://openalex.org/I166825849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091224399","display_name":"Bilhanan Silverajan","orcid":"https://orcid.org/0000-0001-6565-8776"},"institutions":[{"id":"https://openalex.org/I166825849","display_name":"Tampere University","ror":"https://ror.org/033003e23","country_code":"FI","type":"education","lineage":["https://openalex.org/I166825849"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Bilhanan Silverajan","raw_affiliation_strings":["Tampere University"],"raw_orcid":"https://orcid.org/0000-0001-6565-8776","affiliations":[{"raw_affiliation_string":"Tampere University","institution_ids":["https://openalex.org/I166825849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029032117","display_name":"Takeshi Takahashi","orcid":"https://orcid.org/0000-0002-6477-7770"},"institutions":[{"id":"https://openalex.org/I90023481","display_name":"National Institute of Information and Communications Technology","ror":"https://ror.org/016bgq349","country_code":"JP","type":"facility","lineage":["https://openalex.org/I90023481"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Takeshi Takahashi","raw_affiliation_strings":["National Institute of Information and Communications Technology"],"raw_orcid":"https://orcid.org/0000-0002-6477-7770","affiliations":[{"raw_affiliation_string":"National Institute of Information and Communications Technology","institution_ids":["https://openalex.org/I90023481"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5071687365","display_name":"Daisuke Inoue","orcid":"https://orcid.org/0000-0002-4373-0834"},"institutions":[{"id":"https://openalex.org/I90023481","display_name":"National Institute of Information and Communications Technology","ror":"https://ror.org/016bgq349","country_code":"JP","type":"facility","lineage":["https://openalex.org/I90023481"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Daisuke Inoue","raw_affiliation_strings":["National Institute of Information and Communications Technology"],"raw_orcid":"https://orcid.org/0000-0002-4373-0834","affiliations":[{"raw_affiliation_string":"National Institute of Information and Communications Technology","institution_ids":["https://openalex.org/I90023481"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.40421091,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"58","issue":"6","first_page":"1","last_page":"35"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10994","display_name":"Terrorism, Counterterrorism, and Political Violence","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intelligence-analysis","display_name":"Intelligence analysis","score":0.6323999762535095},{"id":"https://openalex.org/keywords/open-research","display_name":"Open research","score":0.5026999711990356},{"id":"https://openalex.org/keywords/business-intelligence","display_name":"Business intelligence","score":0.388700008392334},{"id":"https://openalex.org/keywords/cyber-threats","display_name":"Cyber threats","score":0.3407999873161316},{"id":"https://openalex.org/keywords/survey-research","display_name":"Survey research","score":0.26080000400543213}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7666000127792358},{"id":"https://openalex.org/C517642484","wikidata":"https://www.wikidata.org/wiki/Q2388514","display_name":"Intelligence analysis","level":2,"score":0.6323999762535095},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.5813999772071838},{"id":"https://openalex.org/C2778464652","wikidata":"https://www.wikidata.org/wiki/Q309849","display_name":"Open research","level":2,"score":0.5026999711990356},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4140999913215637},{"id":"https://openalex.org/C2767350","wikidata":"https://www.wikidata.org/wiki/Q6662173","display_name":"Business intelligence","level":2,"score":0.388700008392334},{"id":"https://openalex.org/C3018725008","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber threats","level":2,"score":0.3407999873161316},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.2766999900341034},{"id":"https://openalex.org/C173481278","wikidata":"https://www.wikidata.org/wiki/Q7257997","display_name":"Survey research","level":2,"score":0.26080000400543213},{"id":"https://openalex.org/C184356942","wikidata":"https://www.wikidata.org/wiki/Q830382","display_name":"Best practice","level":2,"score":0.25440001487731934}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3772280","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3772280","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},{"id":"pmh:oai:trepo.tuni.fi:10024/232669","is_oa":true,"landing_page_url":"https://trepo.tuni.fi/handle/10024/232669","pdf_url":null,"source":{"id":"https://openalex.org/S7407055260","display_name":"Trepo - Institutional Repository of Tampere University","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"reviewarticle"}],"best_oa_location":{"id":"doi:10.1145/3772280","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3772280","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":200,"referenced_works":["https://openalex.org/W77083600","https://openalex.org/W643044259","https://openalex.org/W1419517020","https://openalex.org/W1646476837","https://openalex.org/W1655081782","https://openalex.org/W1672113969","https://openalex.org/W1674074141","https://openalex.org/W1972791208","https://openalex.org/W1974077704","https://openalex.org/W1976339648","https://openalex.org/W1983551905","https://openalex.org/W1988894481","https://openalex.org/W2004360894","https://openalex.org/W2012644581","https://openalex.org/W2016336890","https://openalex.org/W2042251811","https://openalex.org/W2065126904","https://openalex.org/W2068462894","https://openalex.org/W2122551442","https://openalex.org/W2128180557","https://openalex.org/W2132929535","https://openalex.org/W2140941224","https://openalex.org/W2158427745","https://openalex.org/W2169239645","https://openalex.org/W2203841789","https://openalex.org/W2270414365","https://openalex.org/W2278919512","https://openalex.org/W2292425835","https://openalex.org/W2295939521","https://openalex.org/W2339166448","https://openalex.org/W2404532944","https://openalex.org/W2462449478","https://openalex.org/W2477560686","https://openalex.org/W2520050121","https://openalex.org/W2526931032","https://openalex.org/W2536179434","https://openalex.org/W2538057479","https://openalex.org/W2538865281","https://openalex.org/W2549564015","https://openalex.org/W2550781467","https://openalex.org/W2551868243","https://openalex.org/W2554200766","https://openalex.org/W2560810941","https://openalex.org/W2568683544","https://openalex.org/W2571173479","https://openalex.org/W2586235276","https://openalex.org/W2592177089","https://openalex.org/W2598491244","https://openalex.org/W2739470728","https://openalex.org/W2756675797","https://openalex.org/W2758108284","https://openalex.org/W2760313715","https://openalex.org/W2765732179","https://openalex.org/W2767521898","https://openalex.org/W2771963642","https://openalex.org/W2782101021","https://openalex.org/W2784152338","https://openalex.org/W2784295274","https://openalex.org/W2790557990","https://openalex.org/W2790843555","https://openalex.org/W2794571973","https://openalex.org/W2794988934","https://openalex.org/W2806278276","https://openalex.org/W2806820837","https://openalex.org/W2810348307","https://openalex.org/W2837911466","https://openalex.org/W2891270452","https://openalex.org/W2892774134","https://openalex.org/W2898642747","https://openalex.org/W2900045052","https://openalex.org/W2900914892","https://openalex.org/W2905097561","https://openalex.org/W2907165009","https://openalex.org/W2907977958","https://openalex.org/W2908121058","https://openalex.org/W2908520504","https://openalex.org/W2908909372","https://openalex.org/W2913949296","https://openalex.org/W2914630606","https://openalex.org/W2915700654","https://openalex.org/W2937937495","https://openalex.org/W2940125701","https://openalex.org/W2947745012","https://openalex.org/W2953482317","https://openalex.org/W2958860733","https://openalex.org/W2962703433","https://openalex.org/W2962892082","https://openalex.org/W2963341956","https://openalex.org/W2963843206","https://openalex.org/W2963980822","https://openalex.org/W2964051216","https://openalex.org/W2964522977","https://openalex.org/W2970612059","https://openalex.org/W2972276461","https://openalex.org/W2978956219","https://openalex.org/W2981018312","https://openalex.org/W2982413960","https://openalex.org/W2982788782","https://openalex.org/W2989609782","https://openalex.org/W2990671699","https://openalex.org/W2990994582","https://openalex.org/W2992252352","https://openalex.org/W2994903953","https://openalex.org/W3000539293","https://openalex.org/W3000666967","https://openalex.org/W3010977072","https://openalex.org/W3014343990","https://openalex.org/W3015650867","https://openalex.org/W3016038045","https://openalex.org/W3017733550","https://openalex.org/W3021121749","https://openalex.org/W3022088706","https://openalex.org/W3036658711","https://openalex.org/W3038151835","https://openalex.org/W3047662346","https://openalex.org/W3086579950","https://openalex.org/W3089585046","https://openalex.org/W3093734859","https://openalex.org/W3094016771","https://openalex.org/W3094069299","https://openalex.org/W3098102491","https://openalex.org/W3099203541","https://openalex.org/W3102850367","https://openalex.org/W3110889769","https://openalex.org/W3113026249","https://openalex.org/W3113358185","https://openalex.org/W3131542938","https://openalex.org/W3131634850","https://openalex.org/W3133650126","https://openalex.org/W3137205257","https://openalex.org/W3138047676","https://openalex.org/W3138099130","https://openalex.org/W3157029757","https://openalex.org/W3159596254","https://openalex.org/W3160032723","https://openalex.org/W3165561349","https://openalex.org/W3172754339","https://openalex.org/W3173622057","https://openalex.org/W3176367300","https://openalex.org/W3176372534","https://openalex.org/W3179788886","https://openalex.org/W3183953540","https://openalex.org/W3185103244","https://openalex.org/W3185233965","https://openalex.org/W3186276894","https://openalex.org/W3193579626","https://openalex.org/W3198980504","https://openalex.org/W3201235053","https://openalex.org/W3206958873","https://openalex.org/W3210383695","https://openalex.org/W3211661740","https://openalex.org/W3211888892","https://openalex.org/W3214329506","https://openalex.org/W3215769872","https://openalex.org/W4205199446","https://openalex.org/W4205911522","https://openalex.org/W4206299091","https://openalex.org/W4206638433","https://openalex.org/W4210403337","https://openalex.org/W4221062327","https://openalex.org/W4224224716","https://openalex.org/W4226109607","https://openalex.org/W4226346873","https://openalex.org/W4229028905","https://openalex.org/W4238948521","https://openalex.org/W4239319433","https://openalex.org/W4280574230","https://openalex.org/W4281478262","https://openalex.org/W4288057803","https://openalex.org/W4292995118","https://openalex.org/W4296885206","https://openalex.org/W4298872063","https://openalex.org/W4307254762","https://openalex.org/W4312017092","https://openalex.org/W4318185166","https://openalex.org/W4319863510","https://openalex.org/W4375787811","https://openalex.org/W4381137026","https://openalex.org/W4385015260","https://openalex.org/W4385819961","https://openalex.org/W4399039481","https://openalex.org/W4399074932","https://openalex.org/W4399317055","https://openalex.org/W4399563042","https://openalex.org/W4399665649","https://openalex.org/W4400410434","https://openalex.org/W4400489146","https://openalex.org/W4400490022","https://openalex.org/W4400579335","https://openalex.org/W4400579607","https://openalex.org/W4400728513","https://openalex.org/W4402158164","https://openalex.org/W4402427032","https://openalex.org/W4402811916","https://openalex.org/W4403329963","https://openalex.org/W4404515039","https://openalex.org/W4404731747","https://openalex.org/W4408566170","https://openalex.org/W6903735680","https://openalex.org/W6929288817"],"related_works":[],"abstract_inverted_index":{"Multiple":[0],"cyber-security-related":[1],"sources,":[2,8,35],"referred":[3],"to":[4,12,30,61,85,108,127,135,152],"as":[5,18,88],"threat":[6,21,33,63],"intelligence":[7,34,64],"are":[9,82,96],"commonly":[10],"used":[11],"counter":[13],"sophisticated":[14],"cyber":[15,62],"attacks":[16,22],"such":[17,87],"advanced":[19],"persistent":[20],"and":[23,48,68,70,148],"ransomware.":[24],"In":[25],"this":[26,122],"article,":[27],"in":[28,98,155],"addition":[29],"describing":[31],"various":[32],"we":[36,102],"analyze":[37],"research":[38,44,46,49],"trends":[39,73],"based":[40],"on":[41,93,132],"taxonomies":[42],"for":[43,138],"purpose,":[45],"approach,":[47],"datasets.":[50,115],"We":[51,143],"provide":[52,109],"an":[53],"extensive":[54],"review":[55],"of":[56,74,113,119],"over":[57],"200":[58],"studies":[59],"related":[60,84],"published":[65],"between":[66],"2001":[67],"2025":[69],"examine":[71],"the":[72,89,99,117,124,156],"representative":[75],"research.":[76],"The":[77],"survey":[78],"shows":[79],"that":[80,150],"there":[81],"issues":[83,147],"datasets,":[86],"evaluation":[90],"results":[91],"depending":[92],"which":[94],"vendors":[95],"included":[97],"dataset.":[100,142],"Therefore,":[101],"also":[103,144],"conduct":[104,128],"a":[105,110,129,133,140],"measurement":[106,130],"study":[107,126,131],"detailed":[111],"description":[112],"collected":[114],"To":[116],"best":[118],"our":[120],"knowledge,":[121],"is":[123],"first":[125],"dataset":[134],"uncover":[136],"insights":[137],"constructing":[139],"well-balanced":[141],"identify":[145],"open":[146],"challenges":[149],"need":[151],"be":[153],"addressed":[154],"future.":[157]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-24T00:00:00"}