{"id":"https://openalex.org/W4407202598","doi":"https://doi.org/10.1587/transinf.2024dak0001","title":"VATH: A System for Extracting Relationships between Vulnerabilities and Attackers to Support Threat Hunting","display_name":"VATH: A System for Extracting Relationships between Vulnerabilities and Attackers to Support Threat Hunting","publication_year":2025,"publication_date":"2025-02-06","ids":{"openalex":"https://openalex.org/W4407202598","doi":"https://doi.org/10.1587/transinf.2024dak0001"},"language":"en","primary_location":{"id":"doi:10.1587/transinf.2024dak0001","is_oa":true,"landing_page_url":"https://doi.org/10.1587/transinf.2024dak0001","pdf_url":"https://www.jstage.jst.go.jp/article/transinf/E108.D/8/E108.D_2024DAK0001/_pdf","source":{"id":"https://openalex.org/S2486202937","display_name":"IEICE Transactions on Information and Systems","issn_l":"0916-8532","issn":["0916-8532","1745-1361"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Information and Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://www.jstage.jst.go.jp/article/transinf/E108.D/8/E108.D_2024DAK0001/_pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5116172808","display_name":"Masayuki HIRAYABU","orcid":null},"institutions":[{"id":"https://openalex.org/I65837984","display_name":"Kobe University","ror":"https://ror.org/03tgsfw79","country_code":"JP","type":"education","lineage":["https://openalex.org/I65837984"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Masayuki HIRAYABU","raw_affiliation_strings":["Department of Electrical and Electronic Engineering, Kobe University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Electronic Engineering, Kobe University","institution_ids":["https://openalex.org/I65837984"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5046849842","display_name":"Yoshiaki Shiraishi","orcid":null},"institutions":[{"id":"https://openalex.org/I65837984","display_name":"Kobe University","ror":"https://ror.org/03tgsfw79","country_code":"JP","type":"education","lineage":["https://openalex.org/I65837984"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Yoshiaki SHIRAISHI","raw_affiliation_strings":["Department of Electrical and Electronic Engineering, Kobe University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Electronic Engineering, Kobe University","institution_ids":["https://openalex.org/I65837984"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I65837984"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.01806992,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"E108.D","issue":"8","first_page":"917","last_page":"932"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9884999990463257,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9884999990463257,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9660999774932861,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10994","display_name":"Terrorism, Counterterrorism, and Political Violence","score":0.9435999989509583,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8381778597831726},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7799500226974487},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.5372158885002136}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8381778597831726},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7799500226974487},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5372158885002136}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1587/transinf.2024dak0001","is_oa":true,"landing_page_url":"https://doi.org/10.1587/transinf.2024dak0001","pdf_url":"https://www.jstage.jst.go.jp/article/transinf/E108.D/8/E108.D_2024DAK0001/_pdf","source":{"id":"https://openalex.org/S2486202937","display_name":"IEICE Transactions on Information and Systems","issn_l":"0916-8532","issn":["0916-8532","1745-1361"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Information and Systems","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1587/transinf.2024dak0001","is_oa":true,"landing_page_url":"https://doi.org/10.1587/transinf.2024dak0001","pdf_url":"https://www.jstage.jst.go.jp/article/transinf/E108.D/8/E108.D_2024DAK0001/_pdf","source":{"id":"https://openalex.org/S2486202937","display_name":"IEICE Transactions on Information and Systems","issn_l":"0916-8532","issn":["0916-8532","1745-1361"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Information and Systems","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1613875913","display_name":null,"funder_award_id":"JPJ000254\u201d","funder_id":"https://openalex.org/F4320325628","funder_display_name":"Ministry of Internal Affairs and Communications"}],"funders":[{"id":"https://openalex.org/F4320325628","display_name":"Ministry of Internal Affairs and Communications","ror":"https://ror.org/00vs1pz50"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4407202598.pdf"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Given":[0],"the":[1,27,41,68,105,117,132,147],"finite":[2],"nature":[3],"of":[4,29,33,71],"an":[5],"organization\u2019s":[6],"security":[7,30,37,72],"resources,":[8],"effectively":[9],"countering":[10],"all":[11],"risks":[12],"can":[13,157],"be":[14,110,158],"quite":[15],"challenging.":[16],"Threat":[17],"hunting":[18,63],"involves":[19],"gathering":[20],"information":[21,140],"to":[22,60,103,166],"make":[23],"informed":[24],"decisions":[25],"about":[26],"allocation":[28],"resources.":[31,73],"Part":[32],"this":[34,76],"responsibility":[35],"for":[36],"personnel":[38],"includes":[39],"investigating":[40],"attack":[42,55,106,152],"methods":[43,107,153],"made":[44],"possible":[45],"by":[46,112,135],"existing":[47],"vulnerabilities,":[48],"identifying":[49],"potential":[50,118,155],"attackers,":[51],"and":[52,90,96,116,154],"understanding":[53],"their":[54],"strategies.":[56],"This":[57,99],"study":[58],"aims":[59],"support":[61],"threat":[62],"efforts,":[64],"ultimately":[65],"aiding":[66],"in":[67],"optimal":[69],"distribution":[70],"To":[74],"achieve":[75],"goal,":[77],"we":[78,128],"propose":[79],"a":[80],"system":[81,100,137],"that":[82,108,131],"combines":[83],"data":[84],"from":[85,142],"NVD":[86],"(National":[87],"Vulnerability":[88],"Database)":[89],"MITRE":[91],"ATT&CK":[92],"(Adversarial":[93],"Tactics,":[94],"Techniques,":[95],"Common":[97],"Knowledge).":[98],"enables":[101],"us":[102],"identify":[104],"could":[109],"executed":[111],"exploiting":[113],"specific":[114],"vulnerabilities":[115],"attackers":[119,156],"who":[120],"may":[121],"leverage":[122],"these":[123],"methods.":[124],"Through":[125],"several":[126],"examples,":[127],"have":[129],"verified":[130],"insights":[133],"provided":[134],"our":[136],"align":[138],"with":[139],"available":[141],"other":[143],"sources.":[144],"By":[145],"leveraging":[146],"proposed":[148],"system,":[149],"investigations":[150],"into":[151],"conducted":[159],"more":[160],"efficiently,":[161],"requiring":[162],"fewer":[163],"steps":[164],"compared":[165],"manual":[167],"investigations.":[168]},"counts_by_year":[],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}