{"id":"https://openalex.org/W7117106500","doi":"https://doi.org/10.1145/3773276.3775245","title":"Design and Development of a Predictive Security Threat Management System Leveraging CWEs, CVEs, and CAPECs","display_name":"Design and Development of a Predictive Security Threat Management System Leveraging CWEs, CVEs, and CAPECs","publication_year":2025,"publication_date":"2025-12-01","ids":{"openalex":"https://openalex.org/W7117106500","doi":"https://doi.org/10.1145/3773276.3775245"},"language":null,"primary_location":{"id":"doi:10.1145/3773276.3775245","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3773276.3775245","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 12th International Conference on Big Data Computing, Applications and Technologies","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5121165855","display_name":"Joaqu\u00edn Sierra-Granados","orcid":null},"institutions":[{"id":"https://openalex.org/I79189158","display_name":"University of Castilla-La Mancha","ror":"https://ror.org/05r78ng12","country_code":"ES","type":"education","lineage":["https://openalex.org/I79189158"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Joaqu\u00edn Sierra-Granados","raw_affiliation_strings":["GSyA Research Group, University of Castilla-La Mancha, Ciudad Real, Spain"],"raw_orcid":"https://orcid.org/0009-0003-5968-8022","affiliations":[{"raw_affiliation_string":"GSyA Research Group, University of Castilla-La Mancha, Ciudad Real, Spain","institution_ids":["https://openalex.org/I79189158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121213597","display_name":"Jos\u00e9 L. Ruiz-Catal\u00e1n","orcid":null},"institutions":[{"id":"https://openalex.org/I79189158","display_name":"University of Castilla-La Mancha","ror":"https://ror.org/05r78ng12","country_code":"ES","type":"education","lineage":["https://openalex.org/I79189158"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Jos\u00e9 L. Ruiz-Catal\u00e1n","raw_affiliation_strings":["GSyA Research Group, University of Castilla-La Mancha, Ciudad Real, Spain"],"raw_orcid":"https://orcid.org/0009-0008-5722-7261","affiliations":[{"raw_affiliation_string":"GSyA Research Group, University of Castilla-La Mancha, Ciudad Real, Spain","institution_ids":["https://openalex.org/I79189158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032305592","display_name":"David G. Rosado","orcid":"https://orcid.org/0000-0003-4613-5501"},"institutions":[{"id":"https://openalex.org/I79189158","display_name":"University of Castilla-La Mancha","ror":"https://ror.org/05r78ng12","country_code":"ES","type":"education","lineage":["https://openalex.org/I79189158"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"David G. Rosado","raw_affiliation_strings":["GSyA Research Group, University of Castilla-La Mancha, Ciudad Real, Spain"],"raw_orcid":"https://orcid.org/0000-0003-4613-5501","affiliations":[{"raw_affiliation_string":"GSyA Research Group, University of Castilla-La Mancha, Ciudad Real, Spain","institution_ids":["https://openalex.org/I79189158"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5121225199","display_name":"Manuel A. Serrano","orcid":null},"institutions":[{"id":"https://openalex.org/I79189158","display_name":"University of Castilla-La Mancha","ror":"https://ror.org/05r78ng12","country_code":"ES","type":"education","lineage":["https://openalex.org/I79189158"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Manuel A. Serrano","raw_affiliation_strings":["Alarcos Research Group, University of Castilla-La Mancha, Ciudad Real, Spain"],"raw_orcid":"https://orcid.org/0000-0003-0962-5659","affiliations":[{"raw_affiliation_string":"Alarcos Research Group, University of Castilla-La Mancha, Ciudad Real, Spain","institution_ids":["https://openalex.org/I79189158"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I79189158"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.44339999556541443,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.44339999556541443,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.06289999932050705,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11864","display_name":"Supply Chain Resilience and Risk Management","score":0.04560000076889992,"subfield":{"id":"https://openalex.org/subfields/1408","display_name":"Strategy and Management"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6442000269889832},{"id":"https://openalex.org/keywords/risk-management","display_name":"Risk management","score":0.5583999752998352},{"id":"https://openalex.org/keywords/prioritization","display_name":"Prioritization","score":0.44339999556541443},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.4339999854564667},{"id":"https://openalex.org/keywords/criticality","display_name":"Criticality","score":0.39820000529289246},{"id":"https://openalex.org/keywords/risk-assessment","display_name":"Risk assessment","score":0.388700008392334},{"id":"https://openalex.org/keywords/incident-management","display_name":"Incident management","score":0.38370001316070557},{"id":"https://openalex.org/keywords/data-breach","display_name":"Data breach","score":0.37389999628067017},{"id":"https://openalex.org/keywords/risk-management-information-systems","display_name":"Risk management information systems","score":0.3474999964237213},{"id":"https://openalex.org/keywords/management-system","display_name":"Management system","score":0.34689998626708984}],"concepts":[{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.6549000144004822},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6442000269889832},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6003999710083008},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.5583999752998352},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5291000008583069},{"id":"https://openalex.org/C2777615720","wikidata":"https://www.wikidata.org/wiki/Q11888847","display_name":"Prioritization","level":2,"score":0.44339999556541443},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.4339999854564667},{"id":"https://openalex.org/C125611927","wikidata":"https://www.wikidata.org/wiki/Q17008131","display_name":"Criticality","level":2,"score":0.39820000529289246},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.388700008392334},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.38830000162124634},{"id":"https://openalex.org/C2780952636","wikidata":"https://www.wikidata.org/wiki/Q13479512","display_name":"Incident management","level":2,"score":0.38370001316070557},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.37389999628067017},{"id":"https://openalex.org/C81146079","wikidata":"https://www.wikidata.org/wiki/Q7336283","display_name":"Risk management information systems","level":4,"score":0.3474999964237213},{"id":"https://openalex.org/C198783460","wikidata":"https://www.wikidata.org/wiki/Q629173","display_name":"Management system","level":2,"score":0.34689998626708984},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.335099995136261},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.3328999876976013},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.32330000400543213},{"id":"https://openalex.org/C107327155","wikidata":"https://www.wikidata.org/wiki/Q330268","display_name":"Decision support system","level":2,"score":0.3192000091075897},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3190000057220459},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.311599999666214},{"id":"https://openalex.org/C2780851881","wikidata":"https://www.wikidata.org/wiki/Q1141276","display_name":"Crisis management","level":2,"score":0.30820000171661377},{"id":"https://openalex.org/C62555980","wikidata":"https://www.wikidata.org/wiki/Q1460420","display_name":"Emergency management","level":2,"score":0.3077999949455261},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.29980000853538513},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.2994000017642975},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.2809999883174896},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.2791000008583069},{"id":"https://openalex.org/C2780609101","wikidata":"https://www.wikidata.org/wiki/Q17156588","display_name":"Resource management (computing)","level":2,"score":0.2734000086784363},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.26919999718666077},{"id":"https://openalex.org/C1668388","wikidata":"https://www.wikidata.org/wiki/Q1149776","display_name":"Data management","level":2,"score":0.26840001344680786},{"id":"https://openalex.org/C8816202","wikidata":"https://www.wikidata.org/wiki/Q4476407","display_name":"Systems management","level":2,"score":0.25690001249313354},{"id":"https://openalex.org/C121017731","wikidata":"https://www.wikidata.org/wiki/Q11661","display_name":"Information technology","level":2,"score":0.2558000087738037},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.251800000667572},{"id":"https://openalex.org/C83209312","wikidata":"https://www.wikidata.org/wiki/Q1053367","display_name":"Predictive analytics","level":2,"score":0.25119999051094055}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3773276.3775245","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3773276.3775245","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 12th International Conference on Big Data Computing, Applications and Technologies","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.44923892617225647}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W2913459835","https://openalex.org/W2994175110","https://openalex.org/W3025204993","https://openalex.org/W3127863293","https://openalex.org/W4205109526","https://openalex.org/W4298625430","https://openalex.org/W4317748910","https://openalex.org/W4328030948","https://openalex.org/W4378905207","https://openalex.org/W4384931357","https://openalex.org/W4385274673","https://openalex.org/W4386556345","https://openalex.org/W4390497390","https://openalex.org/W4391934842","https://openalex.org/W4401315548","https://openalex.org/W4403931611","https://openalex.org/W4409249112","https://openalex.org/W4412130377"],"related_works":[],"abstract_inverted_index":{"Organizations":[0],"increasingly":[1],"rely":[2],"on":[3,94],"digital":[4],"platforms":[5],"to":[6,25,47,82],"support":[7,48],"their":[8,23,83],"operations,":[9],"decision-making":[10,116],"processes,":[11],"and":[12,34,52,69,117],"the":[13,30,49,73,77,87,101,108],"delivery":[14],"of":[15,37,54,79,99,105],"critical":[16],"services.":[17],"This":[18,40,111],"growing":[19],"dependence":[20],"has":[21],"expanded":[22],"exposure":[24],"cyber":[26],"threats":[27],"that":[28],"jeopardize":[29],"confidentiality,":[31],"integrity,":[32],"avail-ability,":[33],"operational":[35],"continuity":[36],"information":[38],"systems.":[39],"paper":[41],"presents":[42],"a":[43,90],"system":[44,88],"specifically":[45],"designed":[46],"identi-":[50],"fication":[51],"management":[53,122],"risks":[55,80],"in":[56],"technological":[57],"infrastructures.":[58],"The":[59],"proposed":[60],"solution":[61],"collects":[62],"vulnerability":[63],"data":[64],"daily":[65],"from":[66],"official":[67],"sources":[68],"correlates":[70],"it":[71],"with":[72],"organization\u2019s":[74],"assets,":[75],"enabling":[76],"prioritization":[78],"according":[81],"criticality":[84],"level.":[85],"Further-more,":[86],"integrates":[89],"prediction":[91],"module":[92],"based":[93],"machine":[95],"learning":[96],"techniques,":[97],"capable":[98],"estimating":[100],"aggregated":[102],"evolu-":[103],"tion":[104],"risk":[106,121],"for":[107],"following":[109],"month.":[110],"predictive":[112],"capability":[113],"facilitates":[114],"preventive":[115],"strengthens":[118],"proactive":[119],"cybersecurity":[120],"strategies.":[123]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-12-24T00:00:00"}