{"id":"https://openalex.org/W4324031750","doi":"https://doi.org/10.23919/wons57325.2023.10061921","title":"Using CTI Data to Understand Real World Cyberattacks","display_name":"Using CTI Data to Understand Real World Cyberattacks","publication_year":2023,"publication_date":"2023-01-30","ids":{"openalex":"https://openalex.org/W4324031750","doi":"https://doi.org/10.23919/wons57325.2023.10061921"},"language":"en","primary_location":{"id":"doi:10.23919/wons57325.2023.10061921","is_oa":false,"landing_page_url":"http://dx.doi.org/10.23919/wons57325.2023.10061921","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 18th Wireless On-Demand Network Systems and Services Conference (WONS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5032098108","display_name":"Mauro Allegretta","orcid":"https://orcid.org/0000-0002-2924-1639"},"institutions":[{"id":"https://openalex.org/I50357001","display_name":"Universidad Carlos III de Madrid","ror":"https://ror.org/03ths8210","country_code":"ES","type":"education","lineage":["https://openalex.org/I50357001"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Mauro Allegretta","raw_affiliation_strings":["Universidad Carlos III de Madrid,Spain","Universidad Carlos III de Madrid, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universidad Carlos III de Madrid,Spain","institution_ids":["https://openalex.org/I50357001"]},{"raw_affiliation_string":"Universidad Carlos III de Madrid, Spain","institution_ids":["https://openalex.org/I50357001"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022168600","display_name":"Giuseppe Siracusano","orcid":"https://orcid.org/0000-0002-8960-4622"},"institutions":[{"id":"https://openalex.org/I118347220","display_name":"NEC (Japan)","ror":"https://ror.org/04jndar25","country_code":"JP","type":"company","lineage":["https://openalex.org/I118347220"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Giuseppe Siracusano","raw_affiliation_strings":["NEC Laboratories,Germany","NEC Laboratories, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NEC Laboratories,Germany","institution_ids":["https://openalex.org/I118347220"]},{"raw_affiliation_string":"NEC Laboratories, Germany","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078489804","display_name":"Roberto Gonz\u00e1lez","orcid":"https://orcid.org/0000-0002-1824-6215"},"institutions":[{"id":"https://openalex.org/I118347220","display_name":"NEC (Japan)","ror":"https://ror.org/04jndar25","country_code":"JP","type":"company","lineage":["https://openalex.org/I118347220"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Roberto Gonzalez","raw_affiliation_strings":["NEC Laboratories,Germany","NEC Laboratories, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NEC Laboratories,Germany","institution_ids":["https://openalex.org/I118347220"]},{"raw_affiliation_string":"NEC Laboratories, Germany","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083690863","display_name":"Pelayo Vallina","orcid":"https://orcid.org/0000-0001-7551-7176"},"institutions":[{"id":"https://openalex.org/I2802499160","display_name":"IMDEA Networks","ror":"https://ror.org/04mm9fg30","country_code":"ES","type":"facility","lineage":["https://openalex.org/I105140100","https://openalex.org/I2802499160"]},{"id":"https://openalex.org/I50357001","display_name":"Universidad Carlos III de Madrid","ror":"https://ror.org/03ths8210","country_code":"ES","type":"education","lineage":["https://openalex.org/I50357001"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Pelayo Vallina","raw_affiliation_strings":["IMDEA Networks Institute,Spain","IMDEA Networks Institute, Spain","Universidad Carlos III de Madrid, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IMDEA Networks Institute,Spain","institution_ids":["https://openalex.org/I2802499160"]},{"raw_affiliation_string":"IMDEA Networks Institute, Spain","institution_ids":["https://openalex.org/I2802499160"]},{"raw_affiliation_string":"Universidad Carlos III de Madrid, Spain","institution_ids":["https://openalex.org/I50357001"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5059416594","display_name":"Marco Gramaglia","orcid":"https://orcid.org/0000-0001-9494-1853"},"institutions":[{"id":"https://openalex.org/I50357001","display_name":"Universidad Carlos III de Madrid","ror":"https://ror.org/03ths8210","country_code":"ES","type":"education","lineage":["https://openalex.org/I50357001"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Marco Gramaglia","raw_affiliation_strings":["Universidad Carlos III de Madrid,Spain","Universidad Carlos III de Madrid, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universidad Carlos III de Madrid,Spain","institution_ids":["https://openalex.org/I50357001"]},{"raw_affiliation_string":"Universidad Carlos III de Madrid, Spain","institution_ids":["https://openalex.org/I50357001"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"100","last_page":"103"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7497995495796204},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5801543593406677},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4865109324455261},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.46710577607154846}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7497995495796204},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5801543593406677},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4865109324455261},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.46710577607154846},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.23919/wons57325.2023.10061921","is_oa":false,"landing_page_url":"http://dx.doi.org/10.23919/wons57325.2023.10061921","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 18th Wireless On-Demand Network Systems and Services Conference (WONS)","raw_type":"proceedings-article"},{"id":"pmh:oai:e-archivo.uc3m.es:10016/37100","is_oa":false,"landing_page_url":"http://hdl.handle.net/10016/37100","pdf_url":null,"source":{"id":"https://openalex.org/S4306400817","display_name":"e-Archivo (Carlos III University of Madrid)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I50357001","host_organization_name":"Universidad Carlos III de Madrid","host_organization_lineage":["https://openalex.org/I50357001"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"conference paper"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7099999785423279}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W2487152776","https://openalex.org/W2748868501","https://openalex.org/W2810758612","https://openalex.org/W2964522977","https://openalex.org/W3017733550","https://openalex.org/W3092184926","https://openalex.org/W3139856449","https://openalex.org/W6661564250","https://openalex.org/W6743493502","https://openalex.org/W6775968264","https://openalex.org/W6784322088"],"related_works":["https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W2382290278","https://openalex.org/W2350741829","https://openalex.org/W2530322880","https://openalex.org/W1596801655","https://openalex.org/W2359140296"],"abstract_inverted_index":{"The":[0],"forensic":[1,144],"analysis":[2,145],"of":[3,10,32,89,111,121],"Cyber":[4],"Threat":[5],"Intelligence":[6],"(CTI)":[7],"data":[8,58,138],"is":[9,139],"capital":[11],"importance":[12],"for":[13,108,143],"businesses":[14],"and":[15,105,131],"enterprises":[16],"to":[17,43,55,69,72,151],"understand":[18],"what":[19],"has":[20,49],"possibly":[21],"gone":[22],"wrong":[23],"in":[24,59,77,92,125],"a":[25,60,100],"cybersecurity":[26],"system.":[27],"Moreover,":[28],"the":[29,33,52,67,74,78,87,109,126,137,153],"fast":[30],"evolution":[31],"techniques":[34],"used":[35,150],"by":[36],"cybercriminals":[37],"requires":[38],"collaboration":[39],"among":[40,96],"multiple":[41],"partners":[42],"provide":[44],"efficient":[45],"security":[46],"mechanisms.":[47],"STIX":[48,103],"emerged":[50],"as":[51],"industrial":[53],"standard":[54],"share":[56],"CTI":[57,112],"structured":[61],"format,":[62],"allowing":[63],"entities":[64],"from":[65],"over":[66],"world":[68],"exchange":[70],"information":[71,90],"broaden":[73],"knowledge":[75],"base":[76],"area.":[79],"In":[80],"this":[81],"work,":[82],"we":[83,115],"shed":[84],"light":[85],"on":[86],"type":[88],"contained":[91],"these":[93],"datasets":[94],"shared":[95],"partners.":[97],"We":[98,135],"analyze":[99],"large":[101],"real-world":[102],"dataset":[104],"identify":[106],"trends":[107],"reporting":[110],"data.":[113],"Then,":[114],"deep":[116],"dive":[117],"into":[118],"two":[119],"kinds":[120],"attack":[122],"patterns":[123],"found":[124,136],"dataset:":[127],"Command":[128],"&":[129],"Control":[130],"Malicious":[132],"Software":[133],"Download.":[134],"not":[140],"only":[141],"useful":[142],"but":[146],"can":[147],"also":[148],"be":[149],"improve":[152],"protection":[154],"against":[155],"new":[156],"attacks.":[157]},"counts_by_year":[{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-25T15:57:00.446498","created_date":"2025-10-10T00:00:00"}