{"id":"https://openalex.org/W2904754882","doi":"https://doi.org/10.1186/s42400-018-0016-5","title":"Forecasting cyberattacks with incomplete, imbalanced, and insignificant data","display_name":"Forecasting cyberattacks with incomplete, imbalanced, and insignificant data","publication_year":2018,"publication_date":"2018-12-01","ids":{"openalex":"https://openalex.org/W2904754882","doi":"https://doi.org/10.1186/s42400-018-0016-5","mag":"2904754882"},"language":"en","primary_location":{"id":"doi:10.1186/s42400-018-0016-5","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-018-0016-5","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-018-0016-5","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-018-0016-5","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Ahmet Okutan","orcid":"https://orcid.org/0000-0001-8990-6869"},"institutions":[{"id":"https://openalex.org/I155173764","display_name":"Rochester Institute of Technology","ror":"https://ror.org/00v4yb702","country_code":"US","type":"education","lineage":["https://openalex.org/I155173764"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Ahmet Okutan","raw_affiliation_strings":["Computer Engineering, Rochester Institute of Technology, Rochester, NY, USA"],"raw_orcid":"https://orcid.org/0000-0001-8990-6869","affiliations":[{"raw_affiliation_string":"Computer Engineering, Rochester Institute of Technology, Rochester, NY, USA","institution_ids":["https://openalex.org/I155173764"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007151854","display_name":"Gordon Werner","orcid":null},"institutions":[{"id":"https://openalex.org/I155173764","display_name":"Rochester Institute of Technology","ror":"https://ror.org/00v4yb702","country_code":"US","type":"education","lineage":["https://openalex.org/I155173764"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gordon Werner","raw_affiliation_strings":["Computer Engineering, Rochester Institute of Technology, Rochester, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Engineering, Rochester Institute of Technology, Rochester, NY, USA","institution_ids":["https://openalex.org/I155173764"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022627080","display_name":"Shanchieh Jay Yang","orcid":"https://orcid.org/0009-0004-5503-2082"},"institutions":[{"id":"https://openalex.org/I155173764","display_name":"Rochester Institute of Technology","ror":"https://ror.org/00v4yb702","country_code":"US","type":"education","lineage":["https://openalex.org/I155173764"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shanchieh Jay Yang","raw_affiliation_strings":["Computer Engineering, Rochester Institute of Technology, Rochester, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Engineering, Rochester Institute of Technology, Rochester, NY, USA","institution_ids":["https://openalex.org/I155173764"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5071531819","display_name":"Katie McConky","orcid":"https://orcid.org/0000-0002-8280-1105"},"institutions":[{"id":"https://openalex.org/I155173764","display_name":"Rochester Institute of Technology","ror":"https://ror.org/00v4yb702","country_code":"US","type":"education","lineage":["https://openalex.org/I155173764"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Katie McConky","raw_affiliation_strings":["Industrial & Systems Engineering, Rochester Institute of Technology, Rochester, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Industrial & Systems Engineering, Rochester Institute of Technology, Rochester, NY, USA","institution_ids":["https://openalex.org/I155173764"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I155173764"],"apc_list":{"value":1230,"currency":"USD","value_usd":1230},"apc_paid":{"value":1230,"currency":"USD","value_usd":1230},"fwci":2.399,"has_fulltext":true,"cited_by_count":26,"citation_normalized_percentile":{"value":0.89746666,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":"1","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9936000108718872,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7364417314529419},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6887723207473755},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6236060857772827},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5978786945343018},{"id":"https://openalex.org/keywords/cyber-attack","display_name":"Cyber-attack","score":0.5459808111190796},{"id":"https://openalex.org/keywords/imputation","display_name":"Imputation (statistics)","score":0.5377846360206604},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.43501555919647217},{"id":"https://openalex.org/keywords/aggregate","display_name":"Aggregate (composite)","score":0.4204452931880951},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3095628023147583},{"id":"https://openalex.org/keywords/missing-data","display_name":"Missing data","score":0.2503238916397095}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7364417314529419},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6887723207473755},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6236060857772827},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5978786945343018},{"id":"https://openalex.org/C201307755","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber-attack","level":2,"score":0.5459808111190796},{"id":"https://openalex.org/C58041806","wikidata":"https://www.wikidata.org/wiki/Q1660484","display_name":"Imputation (statistics)","level":3,"score":0.5377846360206604},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.43501555919647217},{"id":"https://openalex.org/C4679612","wikidata":"https://www.wikidata.org/wiki/Q866298","display_name":"Aggregate (composite)","level":2,"score":0.4204452931880951},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3095628023147583},{"id":"https://openalex.org/C9357733","wikidata":"https://www.wikidata.org/wiki/Q6878417","display_name":"Missing data","level":2,"score":0.2503238916397095},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C192562407","wikidata":"https://www.wikidata.org/wiki/Q228736","display_name":"Materials science","level":0,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C159985019","wikidata":"https://www.wikidata.org/wiki/Q181790","display_name":"Composite material","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1186/s42400-018-0016-5","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-018-0016-5","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-018-0016-5","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:46ed0df6598246ff8797a84078c3897c","is_oa":false,"landing_page_url":"https://doaj.org/article/46ed0df6598246ff8797a84078c3897c","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cybersecurity, Vol 1, Iss 1, Pp 1-16 (2018)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s42400-018-0016-5","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-018-0016-5","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-018-0016-5","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.8199999928474426}],"awards":[],"funders":[{"id":"https://openalex.org/F4320312530","display_name":"Office of the Director of National Intelligence","ror":"https://ror.org/01v3fsc55"},{"id":"https://openalex.org/F4320333051","display_name":"Intelligence Advanced Research Projects Activity","ror":"https://ror.org/01v3fsc55"},{"id":"https://openalex.org/F4320337349","display_name":"NIH Office of the Director","ror":"https://ror.org/00fj8a872"},{"id":"https://openalex.org/F4320338294","display_name":"Air Force Research Laboratory","ror":"https://ror.org/02e2egq70"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2904754882.pdf","grobid_xml":"https://content.openalex.org/works/W2904754882.grobid-xml"},"referenced_works_count":45,"referenced_works":["https://openalex.org/W129255736","https://openalex.org/W1415990210","https://openalex.org/W1527483126","https://openalex.org/W1571313647","https://openalex.org/W1986959058","https://openalex.org/W1999529874","https://openalex.org/W2008906462","https://openalex.org/W2009933590","https://openalex.org/W2014171012","https://openalex.org/W2015452969","https://openalex.org/W2051171366","https://openalex.org/W2063100141","https://openalex.org/W2072750586","https://openalex.org/W2101156862","https://openalex.org/W2102720558","https://openalex.org/W2118978333","https://openalex.org/W2120618638","https://openalex.org/W2122284941","https://openalex.org/W2123170466","https://openalex.org/W2133990480","https://openalex.org/W2147169507","https://openalex.org/W2148143831","https://openalex.org/W2156909104","https://openalex.org/W2160554939","https://openalex.org/W2162210260","https://openalex.org/W2164330572","https://openalex.org/W2170939707","https://openalex.org/W2189324756","https://openalex.org/W2338318698","https://openalex.org/W2339570520","https://openalex.org/W2470983934","https://openalex.org/W2507541756","https://openalex.org/W2508213574","https://openalex.org/W2542806636","https://openalex.org/W2593589299","https://openalex.org/W2606833268","https://openalex.org/W2609731728","https://openalex.org/W2626814927","https://openalex.org/W2765608980","https://openalex.org/W2767011015","https://openalex.org/W2774398706","https://openalex.org/W2782808593","https://openalex.org/W2783994105","https://openalex.org/W2794938816","https://openalex.org/W2962892082"],"related_works":["https://openalex.org/W2097492617","https://openalex.org/W2753240997","https://openalex.org/W1764168690","https://openalex.org/W2537959205","https://openalex.org/W2740895074","https://openalex.org/W2772446090","https://openalex.org/W3152891574","https://openalex.org/W2249809453","https://openalex.org/W4284893819","https://openalex.org/W4316881845"],"abstract_inverted_index":{"Having":[0],"the":[1,12,33,97,101,105,110,124,146],"ability":[2],"to":[3,41,45,51,73,80,129,151],"forecast":[4],"cyberattacks":[5,43],"before":[6,32],"they":[7],"happen":[8],"will":[9],"unquestionably":[10],"change":[11],"landscape":[13],"of":[14,25,58,77,90,96,109,115,168],"cyber":[15,18,91,117],"warfare":[16],"and":[17,48,54,68,88,100,107,132,139,160],"crime.":[19],"This":[20,60],"work":[21],"predicts":[22],"specific":[23],"types":[24],"attacks":[26],"on":[27,63],"a":[28],"potential":[29],"victim":[30,122],"network":[31],"actual":[34],"malicious":[35],"actions":[36],"take":[37],"place.":[38],"The":[39,162],"challenge":[40],"forecasting":[42,136],"is":[44],"extract":[46],"relevant":[47,87],"reliable":[49],"signals":[50,82,171],"treat":[52],"sporadic":[53],"seemingly":[55],"random":[56],"acts":[57],"adversaries.":[59],"paper":[61],"builds":[62],"multi-faceted":[64],"machine":[65],"learning":[66],"solutions":[67],"develops":[69],"an":[70,120,166],"integrated":[71,102,125],"system":[72],"transform":[74],"large":[75],"volumes":[76],"public":[78],"data":[79],"aggregate":[81],"with":[83],"imputation":[84],"that":[85],"are":[86,172],"predictive":[89],"incidents.":[92],"A":[93],"comprehensive":[94],"analysis":[95],"individual":[98],"parts":[99],"whole":[103],"demonstrates":[104],"effectiveness":[106],"trade-offs":[108],"proposed":[111,147],"approach.":[112],"Using":[113],"16-months":[114],"reported":[116],"incidents":[118],"by":[119],"anonymized":[121],"organization,":[123],"approach":[126,148],"achieves":[127],"up":[128],"87%,":[130],"90%,":[131],"96%":[133],"AUC":[134],"for":[135,174],"endpoint-malware,":[137],"malicious-destination,":[138],"malicious-email":[140],"attacks,":[141],"respectively.":[142],"When":[143],"assessed":[144],"month-by-month,":[145],"shows":[149],"robustness":[150],"perform":[152],"consistently":[153],"well,":[154],"achieving":[155],"F":[156],"-Measure":[157],"between":[158],"0.6":[159],"1.0.":[161],"framework":[163],"also":[164],"enables":[165],"examination":[167],"which":[169],"unconventional":[170],"meaningful":[173],"cyberattack":[175],"forecasting.":[176]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":6},{"year":2019,"cited_by_count":3}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}