{"id":"https://openalex.org/W2947600276","doi":"https://doi.org/10.1186/s42400-019-0032-0","title":"ASSERT: attack synthesis and separation with entropy redistribution towards predictive cyber defense","display_name":"ASSERT: attack synthesis and separation with entropy redistribution towards predictive cyber defense","publication_year":2019,"publication_date":"2019-05-14","ids":{"openalex":"https://openalex.org/W2947600276","doi":"https://doi.org/10.1186/s42400-019-0032-0","mag":"2947600276"},"language":"en","primary_location":{"id":"doi:10.1186/s42400-019-0032-0","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-019-0032-0","pdf_url":"https://link.springer.com/content/pdf/10.1186/s42400-019-0032-0.pdf","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://link.springer.com/content/pdf/10.1186/s42400-019-0032-0.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5040805050","display_name":"Ahmet Okutan","orcid":"https://orcid.org/0000-0001-6664-515X"},"institutions":[{"id":"https://openalex.org/I155173764","display_name":"Rochester Institute of Technology","ror":"https://ror.org/00v4yb702","country_code":"US","type":"education","lineage":["https://openalex.org/I155173764"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Ahmet Okutan","raw_affiliation_strings":["Computer Engineering, Rochester Institute of Technology, Rochester, NY, USA"],"raw_orcid":"https://orcid.org/0000-0001-8990-6869","affiliations":[{"raw_affiliation_string":"Computer Engineering, Rochester Institute of Technology, Rochester, NY, USA","institution_ids":["https://openalex.org/I155173764"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022627080","display_name":"Shanchieh Jay Yang","orcid":"https://orcid.org/0009-0004-5503-2082"},"institutions":[{"id":"https://openalex.org/I155173764","display_name":"Rochester Institute of Technology","ror":"https://ror.org/00v4yb702","country_code":"US","type":"education","lineage":["https://openalex.org/I155173764"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shanchieh Jay Yang","raw_affiliation_strings":["Computer Engineering, Rochester Institute of Technology, Rochester, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Engineering, Rochester Institute of Technology, Rochester, NY, USA","institution_ids":["https://openalex.org/I155173764"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5040805050"],"corresponding_institution_ids":["https://openalex.org/I155173764"],"apc_list":{"value":1230,"currency":"USD","value_usd":1230},"apc_paid":{"value":1230,"currency":"USD","value_usd":1230},"fwci":1.7164,"has_fulltext":true,"cited_by_count":18,"citation_normalized_percentile":{"value":0.85702165,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":"2","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9957000017166138,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12761","display_name":"Data Stream Mining Techniques","score":0.989300012588501,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7137715220451355},{"id":"https://openalex.org/keywords/predictability","display_name":"Predictability","score":0.5843172669410706},{"id":"https://openalex.org/keywords/sophistication","display_name":"Sophistication","score":0.544498860836029},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4741216003894806},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.4668242335319519},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.4179021418094635},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3347741961479187}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7137715220451355},{"id":"https://openalex.org/C197640229","wikidata":"https://www.wikidata.org/wiki/Q2534066","display_name":"Predictability","level":2,"score":0.5843172669410706},{"id":"https://openalex.org/C168725872","wikidata":"https://www.wikidata.org/wiki/Q991663","display_name":"Sophistication","level":2,"score":0.544498860836029},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4741216003894806},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.4668242335319519},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.4179021418094635},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3347741961479187},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1186/s42400-019-0032-0","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-019-0032-0","pdf_url":"https://link.springer.com/content/pdf/10.1186/s42400-019-0032-0.pdf","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:d098d8ffbe9940698660eb1da3192883","is_oa":true,"landing_page_url":"https://doaj.org/article/d098d8ffbe9940698660eb1da3192883","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cybersecurity, Vol 2, Iss 1, Pp 1-18 (2019)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s42400-019-0032-0","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-019-0032-0","pdf_url":"https://link.springer.com/content/pdf/10.1186/s42400-019-0032-0.pdf","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.47999998927116394}],"awards":[{"id":"https://openalex.org/G7402638869","display_name":"TWC: TTP Option: Small: Automating Attack Strategy Recognition to Enhance Cyber Threat Prediction","funder_award_id":"1526383","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2947600276.pdf","grobid_xml":"https://content.openalex.org/works/W2947600276.grobid-xml"},"referenced_works_count":40,"referenced_works":["https://openalex.org/W200400002","https://openalex.org/W1153501282","https://openalex.org/W1278625838","https://openalex.org/W1415990210","https://openalex.org/W1481277647","https://openalex.org/W1489574895","https://openalex.org/W1628238922","https://openalex.org/W1780088415","https://openalex.org/W1901395146","https://openalex.org/W1947393375","https://openalex.org/W1949687736","https://openalex.org/W1965555277","https://openalex.org/W1978779053","https://openalex.org/W1990079212","https://openalex.org/W1991716261","https://openalex.org/W2010685537","https://openalex.org/W2013736495","https://openalex.org/W2014171012","https://openalex.org/W2066226535","https://openalex.org/W2084678671","https://openalex.org/W2087119637","https://openalex.org/W2089961292","https://openalex.org/W2100537916","https://openalex.org/W2101492723","https://openalex.org/W2111350651","https://openalex.org/W2117667893","https://openalex.org/W2122269808","https://openalex.org/W2123509976","https://openalex.org/W2133467501","https://openalex.org/W2146950091","https://openalex.org/W2152449272","https://openalex.org/W2318628205","https://openalex.org/W2345512142","https://openalex.org/W2508613954","https://openalex.org/W2526931032","https://openalex.org/W2536179434","https://openalex.org/W2562836854","https://openalex.org/W2742031432","https://openalex.org/W2767011015","https://openalex.org/W4252232290"],"related_works":["https://openalex.org/W2726467123","https://openalex.org/W2064726690","https://openalex.org/W4252678288","https://openalex.org/W4254065731","https://openalex.org/W1607297154","https://openalex.org/W4210820789","https://openalex.org/W4237782192","https://openalex.org/W2317823609","https://openalex.org/W4241263575","https://openalex.org/W3130462184"],"abstract_inverted_index":{"The":[0],"sophistication":[1],"of":[2,46,56,63,72,90,174,188,201,205,208,216],"cyberattacks":[3],"penetrating":[4],"into":[5],"enterprise":[6],"networks":[7],"has":[8],"called":[9],"for":[10],"predictive":[11,36],"defense":[12],"beyond":[13],"intrusion":[14],"detection,":[15],"where":[16,114],"different":[17],"attack":[18,48,112,121,136,143,154],"strategies":[19,49],"can":[20],"be":[21],"analyzed":[22],"and":[23,59,70,81,107,119,140,159,178,213],"used":[24],"to":[25,86,103,111,131,164],"anticipate":[26],"next":[27],"malicious":[28,96],"actions,":[29],"especially":[30],"the":[31,54,60,68,109,161,172,175,186,199,206,209,214,220],"unusual":[32],"ones.":[33],"Unfortunately,":[34],"traditional":[35],"analytics":[37],"or":[38],"machine":[39],"learning":[40],"techniques":[41],"that":[42],"require":[43],"training":[44],"data":[45,58],"known":[47],"are":[50],"not":[51],"practical,":[52],"given":[53],"scarcity":[55],"representative":[57],"evolving":[61],"nature":[62],"cyberattacks.":[64],"This":[65],"paper":[66],"describes":[67],"design":[69],"evaluation":[71],"a":[73,117,125,134,147,180],"novel":[74],"automated":[75],"system,":[76],"ASSERT,":[77],"which":[78],"continuously":[79,170],"synthesizes":[80],"separates":[82],"cyberattack":[83],"behavior":[84,105,137],"models":[85,144,155,163,212],"enable":[87],"better":[88],"prediction":[89],"future":[91,167,217],"actions.":[92],"It":[93,123,169],"takes":[94],"streaming":[95],"event":[97],"evidences":[98,158],"as":[99],"inputs,":[100],"abstracts":[101],"them":[102],"edge-based":[104],"aggregates,":[106],"associates":[108],"edges":[110],"models,":[113],"each":[115],"represents":[116],"unique":[118],"collective":[120],"behavior.":[122],"follows":[124],"dynamic":[126],"Bayesian-based":[127],"model":[128,176],"generation":[129],"approach":[130],"determine":[132],"when":[133,183],"new":[135,142],"is":[138],"present,":[139],"creates":[141],"by":[145,156],"maximizing":[146],"cluster":[148],"validity":[149],"index.":[150],"ASSERT":[151,202],"generates":[152],"empirical":[153,211],"separating":[157],"use":[160,187],"generated":[162,210],"predict":[165],"unseen":[166],"incidents.":[168],"evaluates":[171],"quality":[173,207],"separation":[177],"triggers":[179],"re-clustering":[181],"process":[182],"needed.":[184],"Through":[185],"2017":[189],"National":[190],"Collegiate":[191],"Penetration":[192],"Testing":[193],"Competition":[194],"data,":[195],"this":[196],"work":[197],"demonstrates":[198],"effectiveness":[200],"in":[203],"terms":[204],"predictability":[215],"actions":[218],"using":[219],"models.":[221]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":3}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}