{"id":"https://openalex.org/W7129657437","doi":"https://doi.org/10.1145/3786160.3788465","title":"A Transfer Learning Approach to Unveil the Role of Windows Common Configuration Enumerations in IEC 62443 Compliance","display_name":"A Transfer Learning Approach to Unveil the Role of Windows Common Configuration Enumerations in IEC 62443 Compliance","publication_year":2026,"publication_date":"2026-04-12","ids":{"openalex":"https://openalex.org/W7129657437","doi":"https://doi.org/10.1145/3786160.3788465"},"language":null,"primary_location":{"id":"doi:10.1145/3786160.3788465","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3786160.3788465","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 ACM/IEEE 7th International Workshop on Engineering and Cybersecurity of Critical Systems","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3786160.3788465","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136188439","display_name":"Miguel Angelo Bicudo","orcid":"https://orcid.org/0000-0002-6266-4369"},"institutions":[{"id":"https://openalex.org/I122140584","display_name":"Universidade Federal do Rio de Janeiro","ror":"https://ror.org/03490as77","country_code":"BR","type":"education","lineage":["https://openalex.org/I122140584"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Miguel Angelo Bicudo","raw_affiliation_strings":["UFRJ, Rio de Janeiro, Brazil"],"raw_orcid":"https://orcid.org/0000-0002-6266-4369","affiliations":[{"raw_affiliation_string":"UFRJ, Rio de Janeiro, Brazil","institution_ids":["https://openalex.org/I122140584"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136188363","display_name":"Estevao Ussler Rabello","orcid":"https://orcid.org/0009-0002-7966-7723"},"institutions":[{"id":"https://openalex.org/I122140584","display_name":"Universidade Federal do Rio de Janeiro","ror":"https://ror.org/03490as77","country_code":"BR","type":"education","lineage":["https://openalex.org/I122140584"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Estevao Ussler Rabello","raw_affiliation_strings":["UFRJ, Rio de Janeiro, Brazil"],"raw_orcid":"https://orcid.org/0009-0002-7966-7723","affiliations":[{"raw_affiliation_string":"UFRJ, Rio de Janeiro, Brazil","institution_ids":["https://openalex.org/I122140584"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034604991","display_name":"Daniel Sadoc Menasch\u00e9","orcid":"https://orcid.org/0000-0002-8953-4003"},"institutions":[{"id":"https://openalex.org/I122140584","display_name":"Universidade Federal do Rio de Janeiro","ror":"https://ror.org/03490as77","country_code":"BR","type":"education","lineage":["https://openalex.org/I122140584"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Daniel Sadoc Menasche","raw_affiliation_strings":["UFRJ, Rio de Janeiro, Brazil"],"raw_orcid":"https://orcid.org/0000-0002-8953-4003","affiliations":[{"raw_affiliation_string":"UFRJ, Rio de Janeiro, Brazil","institution_ids":["https://openalex.org/I122140584"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136255841","display_name":"Paulo Marcos Durand Segal","orcid":"https://orcid.org/0009-0000-3265-3047"},"institutions":[{"id":"https://openalex.org/I161127581","display_name":"Universidade Federal Fluminense","ror":"https://ror.org/02rjhbb08","country_code":"BR","type":"education","lineage":["https://openalex.org/I161127581"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Paulo Marcos Durand Segal","raw_affiliation_strings":["UFF, Niteroi, Brazil"],"raw_orcid":"https://orcid.org/0009-0000-3265-3047","affiliations":[{"raw_affiliation_string":"UFF, Niteroi, Brazil","institution_ids":["https://openalex.org/I161127581"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136233406","display_name":"Claudio Marcos Durand Segal","orcid":"https://orcid.org/0009-0000-4101-4191"},"institutions":[{"id":"https://openalex.org/I161127581","display_name":"Universidade Federal Fluminense","ror":"https://ror.org/02rjhbb08","country_code":"BR","type":"education","lineage":["https://openalex.org/I161127581"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Claudio Marcos Durand Segal","raw_affiliation_strings":["UFF, Niteroi, Brazil"],"raw_orcid":"https://orcid.org/0009-0000-4101-4191","affiliations":[{"raw_affiliation_string":"UFF, Niteroi, Brazil","institution_ids":["https://openalex.org/I161127581"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052598260","display_name":"Anton Kocheturov","orcid":"https://orcid.org/0000-0003-2549-9146"},"institutions":[{"id":"https://openalex.org/I4210137693","display_name":"Siemens (United States)","ror":"https://ror.org/04axb7e79","country_code":"US","type":"company","lineage":["https://openalex.org/I1325886976","https://openalex.org/I4210137693"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anton Kocheturov","raw_affiliation_strings":["Siemens, Princeton, USA"],"raw_orcid":"https://orcid.org/0000-0003-2549-9146","affiliations":[{"raw_affiliation_string":"Siemens, Princeton, USA","institution_ids":["https://openalex.org/I4210137693"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101736769","display_name":"Priyanka Sharma","orcid":"https://orcid.org/0000-0002-6663-6517"},"institutions":[{"id":"https://openalex.org/I4210137693","display_name":"Siemens (United States)","ror":"https://ror.org/04axb7e79","country_code":"US","type":"company","lineage":["https://openalex.org/I1325886976","https://openalex.org/I4210137693"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Priyanjan Sharma","raw_affiliation_strings":["Siemens, Princeton, USA"],"raw_orcid":"https://orcid.org/0009-0001-7343-4876","affiliations":[{"raw_affiliation_string":"Siemens, Princeton, USA","institution_ids":["https://openalex.org/I4210137693"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.1410484,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"62","last_page":"67"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.21690000593662262,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.21690000593662262,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.17579999566078186,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.15129999816417694,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5633999705314636},{"id":"https://openalex.org/keywords/bridge","display_name":"Bridge (graph theory)","score":0.5218999981880188},{"id":"https://openalex.org/keywords/clarity","display_name":"CLARITY","score":0.4187999963760376},{"id":"https://openalex.org/keywords/microsoft-windows","display_name":"Microsoft Windows","score":0.4162999987602234},{"id":"https://openalex.org/keywords/compliance","display_name":"Compliance (psychology)","score":0.37439998984336853},{"id":"https://openalex.org/keywords/transfer","display_name":"Transfer (computing)","score":0.36230000853538513}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6583999991416931},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5633999705314636},{"id":"https://openalex.org/C100776233","wikidata":"https://www.wikidata.org/wiki/Q2532492","display_name":"Bridge (graph theory)","level":2,"score":0.5218999981880188},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.46320000290870667},{"id":"https://openalex.org/C2777146004","wikidata":"https://www.wikidata.org/wiki/Q14949826","display_name":"CLARITY","level":2,"score":0.4187999963760376},{"id":"https://openalex.org/C508378895","wikidata":"https://www.wikidata.org/wiki/Q1406","display_name":"Microsoft Windows","level":3,"score":0.4162999987602234},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.37439998984336853},{"id":"https://openalex.org/C2776175482","wikidata":"https://www.wikidata.org/wiki/Q1195816","display_name":"Transfer (computing)","level":2,"score":0.36230000853538513},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.31929999589920044},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3192000091075897},{"id":"https://openalex.org/C198352243","wikidata":"https://www.wikidata.org/wiki/Q37105","display_name":"Line (geometry)","level":2,"score":0.3037000000476837},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2766999900341034},{"id":"https://openalex.org/C198140048","wikidata":"https://www.wikidata.org/wiki/Q10859422","display_name":"Software versioning","level":3,"score":0.2727999985218048},{"id":"https://openalex.org/C527868296","wikidata":"https://www.wikidata.org/wiki/Q11230","display_name":"Windows Vista","level":4,"score":0.2531999945640564},{"id":"https://openalex.org/C59488412","wikidata":"https://www.wikidata.org/wiki/Q187147","display_name":"Requirements analysis","level":3,"score":0.25189998745918274},{"id":"https://openalex.org/C156340839","wikidata":"https://www.wikidata.org/wiki/Q2704791","display_name":"Enumeration","level":2,"score":0.2515000104904175}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3786160.3788465","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3786160.3788465","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 ACM/IEEE 7th International Workshop on Engineering and Cybersecurity of Critical Systems","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2602.08165","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2602.08165","pdf_url":"https://arxiv.org/pdf/2602.08165","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"doi:10.1145/3786160.3788465","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3786160.3788465","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 ACM/IEEE 7th International Workshop on Engineering and Cybersecurity of Critical Systems","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.4972371757030487}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Industrial":[0],"control":[1],"systems":[2],"(ICS)":[3],"depend":[4],"on":[5],"highly":[6],"heterogeneous":[7],"environments":[8],"where":[9],"Linux,":[10],"proprietary":[11],"real-time":[12],"operating":[13],"systems,":[14,30],"and":[15,83,88,103,109],"Windows":[16,42,55,116],"coexist.":[17],"Although":[18],"the":[19,93],"IEC":[20,61,112],"62443-3-3":[21,62,113],"standard":[22],"provides":[23],"a":[24,49,98],"comprehensive":[25],"framework":[26],"for":[27,41,115],"securing":[28],"such":[29],"translating":[31],"its":[32],"requirements":[33],"into":[34],"concrete":[35,104],"configuration":[36],"checks":[37],"remains":[38],"challenging,":[39],"especially":[40],"platforms.":[43],"In":[44],"this":[45],"paper,":[46],"we":[47],"propose":[48],"transfer":[50],"learning":[51],"methodology":[52],"that":[53],"maps":[54],"Common":[56],"Configuration":[57],"Enumerations":[58],"(CCEs)":[59],"to":[60],"System":[63],"Security":[64],"Requirements":[65],"by":[66],"leveraging":[67],"labeled":[68,73],"Linux":[69],"datasets.":[70],"The":[71],"resulting":[72],"dataset":[74],"enables":[75],"automated":[76],"compliance":[77,114],"checks,":[78],"analysis":[79],"of":[80,85,95],"requirement":[81],"prevalence,":[82],"identification":[84],"cross-platform":[86],"similarities":[87],"divergences.":[89],"Our":[90],"results":[91],"highlight":[92],"role":[94],"CCEs":[96],"as":[97],"bridge":[99],"between":[100],"abstract":[101],"standards":[102],"configurations,":[105],"advancing":[106],"automation,":[107],"traceability,":[108],"clarity":[110],"in":[111],"environments.":[117]},"counts_by_year":[],"updated_date":"2026-08-05T07:39:15.569665","created_date":"2026-02-12T00:00:00"}