{"id":"https://openalex.org/W3012866219","doi":"https://doi.org/10.3390/info11030168","title":"Attacker Behaviour Forecasting Using Methods of Intelligent Data Analysis: A Comparative Review and Prospects","display_name":"Attacker Behaviour Forecasting Using Methods of Intelligent Data Analysis: A Comparative Review and Prospects","publication_year":2020,"publication_date":"2020-03-23","ids":{"openalex":"https://openalex.org/W3012866219","doi":"https://doi.org/10.3390/info11030168","mag":"3012866219"},"language":"en","primary_location":{"id":"doi:10.3390/info11030168","is_oa":true,"landing_page_url":"https://doi.org/10.3390/info11030168","pdf_url":"https://www.mdpi.com/2078-2489/11/3/168/pdf?version=1584961768","source":{"id":"https://openalex.org/S4210219776","display_name":"Information","issn_l":"2078-2489","issn":["2078-2489"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2078-2489/11/3/168/pdf?version=1584961768","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067954847","display_name":"Elena Doynikova","orcid":"https://orcid.org/0000-0001-6707-9153"},"institutions":[{"id":"https://openalex.org/I4210103826","display_name":"St. Petersburg Institute for Informatics and Automation","ror":"https://ror.org/01ccb9w37","country_code":"RU","type":"facility","lineage":["https://openalex.org/I4210103826"]}],"countries":["RU"],"is_corresponding":true,"raw_author_name":"Elena Doynikova","raw_affiliation_strings":["St. Petersburg Institute for Informatics and Automation of the Russian Academy of Sciences, St. Petersburg 199178, Russia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"St. Petersburg Institute for Informatics and Automation of the Russian Academy of Sciences, St. Petersburg 199178, Russia","institution_ids":["https://openalex.org/I4210103826"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082212670","display_name":"Evgenia Novikova","orcid":"https://orcid.org/0000-0003-2923-4954"},"institutions":[{"id":"https://openalex.org/I41518628","display_name":"Saint Petersburg State Electrotechnical University","ror":"https://ror.org/023bq8521","country_code":"RU","type":"education","lineage":["https://openalex.org/I41518628"]},{"id":"https://openalex.org/I4210103826","display_name":"St. Petersburg Institute for Informatics and Automation","ror":"https://ror.org/01ccb9w37","country_code":"RU","type":"facility","lineage":["https://openalex.org/I4210103826"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Evgenia Novikova","raw_affiliation_strings":["Saint Petersburg Electrotechnical University \u201cLETI\u201d, Department of computer science and technology, St. Petersburg 197022, Russia","St. Petersburg Institute for Informatics and Automation of the Russian Academy of Sciences, St. Petersburg 199178, Russia","Saint Petersburg Electrotechnical University \"LETI\", Department of computer science and technology, St. Petersburg 197022, Russia"],"raw_orcid":"https://orcid.org/0000-0003-2923-4954","affiliations":[{"raw_affiliation_string":"Saint Petersburg Electrotechnical University \u201cLETI\u201d, Department of computer science and technology, St. Petersburg 197022, Russia","institution_ids":["https://openalex.org/I41518628"]},{"raw_affiliation_string":"St. Petersburg Institute for Informatics and Automation of the Russian Academy of Sciences, St. Petersburg 199178, Russia","institution_ids":["https://openalex.org/I4210103826"]},{"raw_affiliation_string":"Saint Petersburg Electrotechnical University \"LETI\", Department of computer science and technology, St. Petersburg 197022, Russia","institution_ids":["https://openalex.org/I41518628"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5033986640","display_name":"Igor Kotenko","orcid":"https://orcid.org/0000-0001-6859-7120"},"institutions":[{"id":"https://openalex.org/I4210103826","display_name":"St. Petersburg Institute for Informatics and Automation","ror":"https://ror.org/01ccb9w37","country_code":"RU","type":"facility","lineage":["https://openalex.org/I4210103826"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Igor Kotenko","raw_affiliation_strings":["St. Petersburg Institute for Informatics and Automation of the Russian Academy of Sciences, St. Petersburg 199178, Russia"],"raw_orcid":"https://orcid.org/0000-0001-6859-7120","affiliations":[{"raw_affiliation_string":"St. Petersburg Institute for Informatics and Automation of the Russian Academy of Sciences, St. Petersburg 199178, Russia","institution_ids":["https://openalex.org/I4210103826"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5067954847"],"corresponding_institution_ids":["https://openalex.org/I4210103826"],"apc_list":{"value":1600,"currency":"CHF","value_usd":1782},"apc_paid":{"value":1600,"currency":"CHF","value_usd":1782},"fwci":6.4378,"has_fulltext":false,"cited_by_count":31,"citation_normalized_percentile":{"value":0.9666807,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"11","issue":"3","first_page":"168","last_page":"168"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9914000034332275,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9914000034332275,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13983","display_name":"Cybersecurity and Information Systems","score":0.9843000173568726,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13181","display_name":"Economic and Technological Systems Analysis","score":0.982200026512146,"subfield":{"id":"https://openalex.org/subfields/1405","display_name":"Management of Technology and Innovation"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7182168364524841},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.6424813270568848},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6000858545303345},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.4872230589389801},{"id":"https://openalex.org/keywords/cyber-threats","display_name":"Cyber threats","score":0.44751524925231934},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.4293564558029175}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7182168364524841},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.6424813270568848},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6000858545303345},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4872230589389801},{"id":"https://openalex.org/C3018725008","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber threats","level":2,"score":0.44751524925231934},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.4293564558029175},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.3390/info11030168","is_oa":true,"landing_page_url":"https://doi.org/10.3390/info11030168","pdf_url":"https://www.mdpi.com/2078-2489/11/3/168/pdf?version=1584961768","source":{"id":"https://openalex.org/S4210219776","display_name":"Information","issn_l":"2078-2489","issn":["2078-2489"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:6841f7e2c92e4d40b83cc17b96bb499f","is_oa":true,"landing_page_url":"https://doaj.org/article/6841f7e2c92e4d40b83cc17b96bb499f","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Information, Vol 11, Iss 3, p 168 (2020)","raw_type":"article"},{"id":"pmh:oai:mdpi.com:/2078-2489/11/3/168/","is_oa":true,"landing_page_url":"http://dx.doi.org/10.3390/info11030168","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Information","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.3390/info11030168","is_oa":true,"landing_page_url":"https://doi.org/10.3390/info11030168","pdf_url":"https://www.mdpi.com/2078-2489/11/3/168/pdf?version=1584961768","source":{"id":"https://openalex.org/S4210219776","display_name":"Information","issn_l":"2078-2489","issn":["2078-2489"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3012866219.pdf"},"referenced_works_count":54,"referenced_works":["https://openalex.org/W19881422","https://openalex.org/W178168142","https://openalex.org/W1564710742","https://openalex.org/W1687244664","https://openalex.org/W1929174408","https://openalex.org/W1993595248","https://openalex.org/W2007978799","https://openalex.org/W2042102899","https://openalex.org/W2048099096","https://openalex.org/W2059562799","https://openalex.org/W2099528623","https://openalex.org/W2109567464","https://openalex.org/W2111145992","https://openalex.org/W2112257544","https://openalex.org/W2115408253","https://openalex.org/W2121141821","https://openalex.org/W2125699281","https://openalex.org/W2149776446","https://openalex.org/W2191886897","https://openalex.org/W2256947274","https://openalex.org/W2477311466","https://openalex.org/W2478368853","https://openalex.org/W2491695530","https://openalex.org/W2496041542","https://openalex.org/W2512189246","https://openalex.org/W2519655440","https://openalex.org/W2536496467","https://openalex.org/W2538737552","https://openalex.org/W2555468998","https://openalex.org/W2561342496","https://openalex.org/W2584516112","https://openalex.org/W2605113521","https://openalex.org/W2769267310","https://openalex.org/W2795188356","https://openalex.org/W2892859754","https://openalex.org/W2895886088","https://openalex.org/W2902139703","https://openalex.org/W2902599638","https://openalex.org/W2908313600","https://openalex.org/W2911946897","https://openalex.org/W2914028805","https://openalex.org/W2921964485","https://openalex.org/W2947652115","https://openalex.org/W2986824091","https://openalex.org/W3118517595","https://openalex.org/W4229491272","https://openalex.org/W4252232290","https://openalex.org/W6678809675","https://openalex.org/W6692019976","https://openalex.org/W6730280463","https://openalex.org/W6755678232","https://openalex.org/W6770621812","https://openalex.org/W6788651489","https://openalex.org/W6885121220"],"related_works":["https://openalex.org/W3110311961","https://openalex.org/W2015462925","https://openalex.org/W4386107585","https://openalex.org/W3196431560","https://openalex.org/W2552246019","https://openalex.org/W2508779374","https://openalex.org/W2972971880","https://openalex.org/W4385452110","https://openalex.org/W1153919619","https://openalex.org/W3161368317"],"abstract_inverted_index":{"Early":[0],"detection":[1],"of":[2,9,27,62,83,91,97,114,122,136,151,188],"the":[3,10,14,17,28,36,44,49,53,56,84,89,92,95,98,104,115,123,126,134,137,146,152,166,183,186],"security":[4,110],"incidents":[5],"and":[6,19,40,69,71,78,94,100,130,149,157,163,181],"correct":[7],"forecasting":[8,135,156,172,192],"attack":[11,29,138,155,171],"development":[12,26,187],"is":[13,59,117,174,182],"basis":[15,184],"for":[16,133,170,185],"efficient":[18],"timely":[20],"response":[21],"to":[22,35,118,154],"cyber":[23],"threats.":[24],"The":[25,81,112,141,168],"depends":[30],"on":[31],"future":[32,139],"steps":[33,180],"available":[34],"attackers,":[37],"their":[38,41,131],"goals,":[39],"motivation\u2014that":[42],"is,":[43],"attacker":[45,105,190],"\u201cprofile\u201d":[46],"that":[47,176],"defines":[48],"malefactor":[50,93],"behaviour":[51,191],"in":[52,165],"system.":[54],"Usually,":[55],"\u201cattacker":[57],"profile\u201d":[58],"a":[60],"set":[61],"attacker\u2019s":[63,85,124,158],"attributes\u2014both":[64],"inner":[65],"such":[66,73],"as":[67,74],"motives":[68],"skills,":[70],"external":[72],"existing":[75,120,161],"financial":[76],"support":[77],"tools":[79],"used.":[80],"definition":[82],"profile":[86,128,159],"allows":[87],"determining":[88],"type":[90],"complexity":[96],"countermeasures,":[99],"may":[101],"significantly":[102],"simplify":[103],"attribution":[106],"process":[107],"when":[108],"investigating":[109],"incidents.":[111],"goal":[113],"paper":[116],"analyze":[119],"techniques":[121],"behaviour,":[125],"attacker\u2019":[127],"specifications,":[129],"application":[132],"steps.":[140],"implemented":[142],"analysis":[143],"allowed":[144],"outlining":[145],"main":[147],"advantages":[148],"limitations":[150],"approaches":[153],"constructing,":[160],"challenges,":[162],"prospects":[164],"area.":[167],"approach":[169],"implementation":[173],"suggested":[175],"specifies":[177],"further":[178],"research":[179],"an":[189],"technique.":[193]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":9},{"year":2020,"cited_by_count":2}],"updated_date":"2026-07-30T17:31:21.811387","created_date":"2025-10-10T00:00:00"}