{"id":"https://openalex.org/W4294343684","doi":"https://doi.org/10.3390/a15090314","title":"CVE2ATT&CK: BERT-Based Mapping of CVEs to MITRE ATT&CK Techniques","display_name":"CVE2ATT&CK: BERT-Based Mapping of CVEs to MITRE ATT&CK Techniques","publication_year":2022,"publication_date":"2022-08-31","ids":{"openalex":"https://openalex.org/W4294343684","doi":"https://doi.org/10.3390/a15090314"},"language":"en","primary_location":{"id":"doi:10.3390/a15090314","is_oa":true,"landing_page_url":"https://doi.org/10.3390/a15090314","pdf_url":"https://www.mdpi.com/1999-4893/15/9/314/pdf?version=1663861609","source":{"id":"https://openalex.org/S190629608","display_name":"Algorithms","issn_l":"1999-4893","issn":["1999-4893"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Algorithms","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/1999-4893/15/9/314/pdf?version=1663861609","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5004269636","display_name":"Octavian Grigorescu","orcid":"https://orcid.org/0000-0002-8919-5718"},"institutions":[{"id":"https://openalex.org/I61641377","display_name":"Universitatea Na\u021bional\u0103 de \u0218tiin\u021b\u0103 \u0219i Tehnologie Politehnica Bucure\u0219ti","ror":"https://ror.org/0558j5q12","country_code":"RO","type":"education","lineage":["https://openalex.org/I61641377"]}],"countries":["RO"],"is_corresponding":false,"raw_author_name":"Octavian Grigorescu","raw_affiliation_strings":["Computer Science & Engineering Department, University Politehnica of Bucharest, 313 Splaiul Independentei, 060042 Bucharest, Romania"],"affiliations":[{"raw_affiliation_string":"Computer Science & Engineering Department, University Politehnica of Bucharest, 313 Splaiul Independentei, 060042 Bucharest, Romania","institution_ids":["https://openalex.org/I61641377"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111286257","display_name":"Andreea Nica","orcid":null},"institutions":[{"id":"https://openalex.org/I61641377","display_name":"Universitatea Na\u021bional\u0103 de \u0218tiin\u021b\u0103 \u0219i Tehnologie Politehnica Bucure\u0219ti","ror":"https://ror.org/0558j5q12","country_code":"RO","type":"education","lineage":["https://openalex.org/I61641377"]}],"countries":["RO"],"is_corresponding":false,"raw_author_name":"Andreea Nica","raw_affiliation_strings":["Computer Science & Engineering Department, University Politehnica of Bucharest, 313 Splaiul Independentei, 060042 Bucharest, Romania"],"affiliations":[{"raw_affiliation_string":"Computer Science & Engineering Department, University Politehnica of Bucharest, 313 Splaiul Independentei, 060042 Bucharest, Romania","institution_ids":["https://openalex.org/I61641377"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072192995","display_name":"Mihai Dasc\u0103lu","orcid":"https://orcid.org/0000-0002-4815-9227"},"institutions":[{"id":"https://openalex.org/I33800924","display_name":"Academia Oamenilor de \u0218tiin\u021b\u0103 din Rom\u00e2nia","ror":"https://ror.org/04ybnj478","country_code":"RO","type":"facility","lineage":["https://openalex.org/I33800924"]},{"id":"https://openalex.org/I61641377","display_name":"Universitatea Na\u021bional\u0103 de \u0218tiin\u021b\u0103 \u0219i Tehnologie Politehnica Bucure\u0219ti","ror":"https://ror.org/0558j5q12","country_code":"RO","type":"education","lineage":["https://openalex.org/I61641377"]}],"countries":["RO"],"is_corresponding":true,"raw_author_name":"Mihai Dascalu","raw_affiliation_strings":["Academy of Romanian Scientists, Str. Ilfov, Nr. 3, 050044 Bucharest, Romania","Computer Science & Engineering Department, University Politehnica of Bucharest, 313 Splaiul Independentei, 060042 Bucharest, Romania"],"affiliations":[{"raw_affiliation_string":"Academy of Romanian Scientists, Str. Ilfov, Nr. 3, 050044 Bucharest, Romania","institution_ids":["https://openalex.org/I33800924"]},{"raw_affiliation_string":"Computer Science & Engineering Department, University Politehnica of Bucharest, 313 Splaiul Independentei, 060042 Bucharest, Romania","institution_ids":["https://openalex.org/I61641377"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5071318126","display_name":"R\u0103zvan Rughini\u015f","orcid":"https://orcid.org/0000-0003-2794-280X"},"institutions":[{"id":"https://openalex.org/I33800924","display_name":"Academia Oamenilor de \u0218tiin\u021b\u0103 din Rom\u00e2nia","ror":"https://ror.org/04ybnj478","country_code":"RO","type":"facility","lineage":["https://openalex.org/I33800924"]},{"id":"https://openalex.org/I61641377","display_name":"Universitatea Na\u021bional\u0103 de \u0218tiin\u021b\u0103 \u0219i Tehnologie Politehnica Bucure\u0219ti","ror":"https://ror.org/0558j5q12","country_code":"RO","type":"education","lineage":["https://openalex.org/I61641377"]}],"countries":["RO"],"is_corresponding":false,"raw_author_name":"Razvan Rughinis","raw_affiliation_strings":["Academy of Romanian Scientists, Str. Ilfov, Nr. 3, 050044 Bucharest, Romania","Computer Science & Engineering Department, University Politehnica of Bucharest, 313 Splaiul Independentei, 060042 Bucharest, Romania"],"affiliations":[{"raw_affiliation_string":"Academy of Romanian Scientists, Str. Ilfov, Nr. 3, 050044 Bucharest, Romania","institution_ids":["https://openalex.org/I33800924"]},{"raw_affiliation_string":"Computer Science & Engineering Department, University Politehnica of Bucharest, 313 Splaiul Independentei, 060042 Bucharest, Romania","institution_ids":["https://openalex.org/I61641377"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5072192995"],"corresponding_institution_ids":["https://openalex.org/I33800924","https://openalex.org/I61641377"],"apc_list":{"value":1400,"currency":"CHF","value_usd":1515},"apc_paid":{"value":1400,"currency":"CHF","value_usd":1515},"fwci":8.778,"has_fulltext":false,"cited_by_count":64,"citation_normalized_percentile":{"value":0.9866176,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":"15","issue":"9","first_page":"314","last_page":"314"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9959999918937683,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.836925745010376},{"id":"https://openalex.org/keywords/metadata","display_name":"Metadata","score":0.5183502435684204},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.4646531939506531},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.444631427526474},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.42917728424072266},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.37611255049705505},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3252963423728943},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.2746571898460388},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.10940712690353394}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.836925745010376},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.5183502435684204},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.4646531939506531},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.444631427526474},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.42917728424072266},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.37611255049705505},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3252963423728943},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2746571898460388},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.10940712690353394}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.3390/a15090314","is_oa":true,"landing_page_url":"https://doi.org/10.3390/a15090314","pdf_url":"https://www.mdpi.com/1999-4893/15/9/314/pdf?version=1663861609","source":{"id":"https://openalex.org/S190629608","display_name":"Algorithms","issn_l":"1999-4893","issn":["1999-4893"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Algorithms","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:94a89f3a48b8471b85f4bbc0a7291f3c","is_oa":true,"landing_page_url":"https://doaj.org/article/94a89f3a48b8471b85f4bbc0a7291f3c","pdf_url":null,"source":{"id":"https://openalex.org/S112646816","display_name":"SHILAP Revista de lepidopterolog\u00eda","issn_l":"0300-5267","issn":["0300-5267","2340-4078"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Algorithms, Vol 15, Iss 9, p 314 (2022)","raw_type":"article"},{"id":"pmh:oai:mdpi.com:/1999-4893/15/9/314/","is_oa":true,"landing_page_url":"https://dx.doi.org/10.3390/a15090314","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Algorithms; Volume 15; Issue 9; Pages: 314","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.3390/a15090314","is_oa":true,"landing_page_url":"https://doi.org/10.3390/a15090314","pdf_url":"https://www.mdpi.com/1999-4893/15/9/314/pdf?version=1663861609","source":{"id":"https://openalex.org/S190629608","display_name":"Algorithms","issn_l":"1999-4893","issn":["1999-4893"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Algorithms","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.6100000143051147,"id":"https://metadata.un.org/sdg/9"}],"awards":[{"id":"https://openalex.org/G2792357945","display_name":null,"funder_award_id":"2PTE2020","funder_id":"https://openalex.org/F4320323983","funder_display_name":"Unitatea Executiva pentru Finantarea Invatamantului Superior, a Cercetarii, Dezvoltarii si Inovarii"}],"funders":[{"id":"https://openalex.org/F4320323983","display_name":"Unitatea Executiva pentru Finantarea Invatamantului Superior, a Cercetarii, Dezvoltarii si Inovarii","ror":"https://ror.org/01q7jq182"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4294343684.pdf","grobid_xml":"https://content.openalex.org/works/W4294343684.grobid-xml"},"referenced_works_count":24,"referenced_works":["https://openalex.org/W55768394","https://openalex.org/W1928278792","https://openalex.org/W1941659294","https://openalex.org/W1953606363","https://openalex.org/W2120615054","https://openalex.org/W2251143283","https://openalex.org/W2546696880","https://openalex.org/W2896457183","https://openalex.org/W2944378183","https://openalex.org/W2964738734","https://openalex.org/W2970771982","https://openalex.org/W2971296908","https://openalex.org/W3014813097","https://openalex.org/W3023211159","https://openalex.org/W3105604018","https://openalex.org/W3111578068","https://openalex.org/W3193361787","https://openalex.org/W3197944870","https://openalex.org/W3208270664","https://openalex.org/W4213292645","https://openalex.org/W6607259140","https://openalex.org/W6680007464","https://openalex.org/W6762744983","https://openalex.org/W6962463610"],"related_works":["https://openalex.org/W2392768766","https://openalex.org/W2058118494","https://openalex.org/W2095118173","https://openalex.org/W2382021449","https://openalex.org/W4387985143","https://openalex.org/W4362599004","https://openalex.org/W2808242528","https://openalex.org/W1567638270","https://openalex.org/W4285163392","https://openalex.org/W3110049015"],"abstract_inverted_index":{"Since":[0],"cyber-attacks":[1],"are":[2],"ever-increasing":[3],"in":[4,32,192,201],"number,":[5],"intensity,":[6],"and":[7,26,38,46,64,106,139,189,209],"variety,":[8],"a":[9,13,22,51,94,112,130,178,198],"strong":[10,131],"need":[11],"for":[12,68],"global,":[14],"standardized":[15],"cyber-security":[16],"knowledge":[17],"database":[18],"has":[19],"emerged":[20],"as":[21,165],"means":[23],"to":[24,109,114,185],"prevent":[25],"fight":[27],"cybercrime.":[28],"Attempts":[29],"already":[30],"exist":[31],"this":[33],"regard.":[34],"The":[35,57],"Common":[36],"Vulnerabilities":[37],"Exposures":[39],"(CVE)":[40],"list":[41],"documents":[42],"numerous":[43],"reported":[44,70],"software":[45],"hardware":[47],"vulnerabilities,":[48],"thus":[49],"building":[50],"community-based":[52],"dictionary":[53],"of":[54,96,172,213,229],"existing":[55],"threats.":[56],"MITRE":[58,103],"ATT&CK":[59,104],"Framework":[60],"describes":[61],"adversary":[62],"behavior":[63],"offers":[65],"mitigation":[66],"strategies":[67,155],"each":[69],"attack":[71],"pattern.":[72],"While":[73],"extremely":[74],"powerful":[75],"on":[76,120,157],"their":[77],"own,":[78],"the":[79,121,125,147,158,166,211,217,227],"tremendous":[80],"extra":[81],"benefit":[82],"gained":[83],"when":[84],"linking":[85],"these":[86],"tools":[87],"cannot":[88],"be":[89],"overlooked.":[90],"This":[91],"paper":[92],"introduces":[93],"dataset":[95,228],"1813":[97],"CVEs":[98],"annotated":[99,230],"with":[100,152,226],"all":[101],"corresponding":[102],"techniques":[105,118],"proposes":[107],"models":[108,138,144],"automatically":[110],"link":[111],"CVE":[113,126,193,214],"one":[115],"or":[116],"more":[117],"based":[119,156],"text":[122],"description":[123],"from":[124],"metadata.":[127],"We":[128,161,220],"establish":[129],"baseline":[132],"that":[133,181],"considers":[134],"classical":[135],"machine":[136],"learning":[137],"state-of-the-art":[140],"pre-trained":[141],"BERT-based":[142],"language":[143],"while":[145],"counteracting":[146],"highly":[148],"imbalanced":[149],"training":[150],"set":[151],"data":[153],"augmentation":[154],"TextAttack":[159],"framework.":[160],"obtain":[162],"promising":[163],"results,":[164],"best":[167],"model":[168,196],"achieved":[169],"an":[170],"F1-score":[171],"47.84%.":[173],"In":[174],"addition,":[175],"we":[176],"perform":[177],"qualitative":[179],"analysis":[180],"uses":[182],"Lime":[183],"explanations":[184],"point":[186],"out":[187],"limitations":[188],"potential":[190],"inconsistencies":[191],"descriptions.":[194],"Our":[195],"plays":[197],"critical":[199],"role":[200],"finding":[202],"kill":[203],"chain":[204],"scenarios":[205],"inside":[206],"complex":[207],"infrastructures":[208],"enables":[210],"prioritization":[212],"patching":[215],"by":[216],"threat":[218],"level.":[219],"publicly":[221],"release":[222],"our":[223],"code":[224],"together":[225],"CVEs.":[231]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":19},{"year":2024,"cited_by_count":30},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":1}],"updated_date":"2026-03-27T14:29:43.386196","created_date":"2022-09-02T00:00:00"}