{"id":"https://openalex.org/W3162974214","doi":"https://doi.org/10.3390/s21093267","title":"Assessing MITRE ATT&CK Risk Using a Cyber-Security Culture Framework","display_name":"Assessing MITRE ATT&CK Risk Using a Cyber-Security Culture Framework","publication_year":2021,"publication_date":"2021-05-09","ids":{"openalex":"https://openalex.org/W3162974214","doi":"https://doi.org/10.3390/s21093267","mag":"3162974214","pmid":"https://pubmed.ncbi.nlm.nih.gov/34065086"},"language":"en","primary_location":{"id":"doi:10.3390/s21093267","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s21093267","pdf_url":"https://www.mdpi.com/1424-8220/21/9/3267/pdf?version=1620550566","source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj","pubmed"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/1424-8220/21/9/3267/pdf?version=1620550566","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5025488036","display_name":"Anna Georgiadou","orcid":"https://orcid.org/0000-0002-0078-6969"},"institutions":[{"id":"https://openalex.org/I174458059","display_name":"National Technical University of Athens","ror":"https://ror.org/03cx6bg69","country_code":"GR","type":"education","lineage":["https://openalex.org/I174458059"]}],"countries":["GR"],"is_corresponding":true,"raw_author_name":"Anna Georgiadou","raw_affiliation_strings":["Decision Support Systems Laboratory, National Technical University of Athens, Iroon Polytechniou 9, 15780 Zografou, Greece"],"raw_orcid":"https://orcid.org/0000-0002-0078-6969","affiliations":[{"raw_affiliation_string":"Decision Support Systems Laboratory, National Technical University of Athens, Iroon Polytechniou 9, 15780 Zografou, Greece","institution_ids":["https://openalex.org/I174458059"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047316196","display_name":"Spiros Mouzakitis","orcid":"https://orcid.org/0000-0001-9616-447X"},"institutions":[{"id":"https://openalex.org/I174458059","display_name":"National Technical University of Athens","ror":"https://ror.org/03cx6bg69","country_code":"GR","type":"education","lineage":["https://openalex.org/I174458059"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Spiros Mouzakitis","raw_affiliation_strings":["Decision Support Systems Laboratory, National Technical University of Athens, Iroon Polytechniou 9, 15780 Zografou, Greece"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Decision Support Systems Laboratory, National Technical University of Athens, Iroon Polytechniou 9, 15780 Zografou, Greece","institution_ids":["https://openalex.org/I174458059"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5015748230","display_name":"Dimitris Askounis","orcid":"https://orcid.org/0000-0002-2618-5715"},"institutions":[{"id":"https://openalex.org/I174458059","display_name":"National Technical University of Athens","ror":"https://ror.org/03cx6bg69","country_code":"GR","type":"education","lineage":["https://openalex.org/I174458059"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Dimitris Askounis","raw_affiliation_strings":["Decision Support Systems Laboratory, National Technical University of Athens, Iroon Polytechniou 9, 15780 Zografou, Greece"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Decision Support Systems Laboratory, National Technical University of Athens, Iroon Polytechniou 9, 15780 Zografou, Greece","institution_ids":["https://openalex.org/I174458059"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5025488036"],"corresponding_institution_ids":["https://openalex.org/I174458059"],"apc_list":{"value":2400,"currency":"CHF","value_usd":2673},"apc_paid":{"value":2400,"currency":"CHF","value_usd":2673},"fwci":21.4716,"has_fulltext":true,"cited_by_count":107,"citation_normalized_percentile":{"value":0.9946463,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"21","issue":"9","first_page":"3267","last_page":"3267"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9929999709129333,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7747470140457153},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5804321765899658},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.5777854919433594},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.5069906711578369},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4794137179851532},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.47523263096809387},{"id":"https://openalex.org/keywords/interdependence","display_name":"Interdependence","score":0.460746169090271},{"id":"https://openalex.org/keywords/emulation","display_name":"Emulation","score":0.45687687397003174},{"id":"https://openalex.org/keywords/capability-maturity-model","display_name":"Capability Maturity Model","score":0.43644657731056213},{"id":"https://openalex.org/keywords/hacker","display_name":"Hacker","score":0.4339458644390106},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.4328484535217285},{"id":"https://openalex.org/keywords/sociology","display_name":"Sociology","score":0.12657392024993896},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.12278664112091064},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.09640923142433167}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7747470140457153},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5804321765899658},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.5777854919433594},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.5069906711578369},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4794137179851532},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.47523263096809387},{"id":"https://openalex.org/C185874996","wikidata":"https://www.wikidata.org/wiki/Q269699","display_name":"Interdependence","level":2,"score":0.460746169090271},{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.45687687397003174},{"id":"https://openalex.org/C85890633","wikidata":"https://www.wikidata.org/wiki/Q929673","display_name":"Capability Maturity Model","level":3,"score":0.43644657731056213},{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.4339458644390106},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.4328484535217285},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.12657392024993896},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.12278664112091064},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.09640923142433167},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C50522688","wikidata":"https://www.wikidata.org/wiki/Q189833","display_name":"Economic growth","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.3390/s21093267","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s21093267","pdf_url":"https://www.mdpi.com/1424-8220/21/9/3267/pdf?version=1620550566","source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},{"id":"pmid:34065086","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/34065086","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors (Basel, Switzerland)","raw_type":null},{"id":"pmh:oai:doaj.org/article:5a11fe17f2b749968c441099e712a642","is_oa":true,"landing_page_url":"https://doaj.org/article/5a11fe17f2b749968c441099e712a642","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Sensors, Vol 21, Iss 9, p 3267 (2021)","raw_type":"article"},{"id":"pmh:oai:mdpi.com:/1424-8220/21/9/3267/","is_oa":true,"landing_page_url":"https://dx.doi.org/10.3390/s21093267","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Sensors; Volume 21; Issue 9; Pages: 3267","raw_type":"Text"},{"id":"pmh:oai:pubmedcentral.nih.gov:8125987","is_oa":true,"landing_page_url":"https://www.ncbi.nlm.nih.gov/pmc/articles/8125987","pdf_url":null,"source":{"id":"https://openalex.org/S2764455111","display_name":"PubMed Central","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Sensors (Basel)","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.3390/s21093267","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s21093267","pdf_url":"https://www.mdpi.com/1424-8220/21/9/3267/pdf?version=1620550566","source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.6399999856948853}],"awards":[{"id":"https://openalex.org/G6952452859","display_name":null,"funder_award_id":"832907","funder_id":"https://openalex.org/F4320337664","funder_display_name":"H2020 Societal Challenges"},{"id":"https://openalex.org/G8447366620","display_name":"Integrated Cybersecurity Solution for the Vulnerability Assessment, Monitoring and Protection of Critical Energy Infrastructures","funder_award_id":"832907","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320337664","display_name":"H2020 Societal Challenges","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3162974214.pdf","grobid_xml":"https://content.openalex.org/works/W3162974214.grobid-xml"},"referenced_works_count":35,"referenced_works":["https://openalex.org/W1863670505","https://openalex.org/W1902264846","https://openalex.org/W2001566875","https://openalex.org/W2501928971","https://openalex.org/W2743635080","https://openalex.org/W2745043520","https://openalex.org/W2758108284","https://openalex.org/W2784054170","https://openalex.org/W2902330413","https://openalex.org/W2907611437","https://openalex.org/W2914662937","https://openalex.org/W2952280772","https://openalex.org/W2952851282","https://openalex.org/W2997828523","https://openalex.org/W3006249124","https://openalex.org/W3011422375","https://openalex.org/W3021130993","https://openalex.org/W3033923639","https://openalex.org/W3048012689","https://openalex.org/W3097904228","https://openalex.org/W3110276721","https://openalex.org/W3128018419","https://openalex.org/W3128518894","https://openalex.org/W3133897466","https://openalex.org/W3138686850","https://openalex.org/W3159239323","https://openalex.org/W3162974214","https://openalex.org/W3167327157","https://openalex.org/W4233382079","https://openalex.org/W6772736602","https://openalex.org/W6790267033","https://openalex.org/W6790340043","https://openalex.org/W6792155167","https://openalex.org/W6796853724","https://openalex.org/W7006178185"],"related_works":["https://openalex.org/W2921504876","https://openalex.org/W2183730421","https://openalex.org/W2154523322","https://openalex.org/W1982580243","https://openalex.org/W2083200807","https://openalex.org/W2551868243","https://openalex.org/W1603137082","https://openalex.org/W2364195017","https://openalex.org/W2348153269","https://openalex.org/W2502115930"],"abstract_inverted_index":{"The":[0,163,230],"MITRE":[1,132,137,213],"ATT&CK":[2,133,214],"(Adversarial":[3],"Tactics,":[4],"Techniques,":[5],"and":[6,13,20,32,53,74,108,128,152,189,197,217,226,266],"Common":[7],"Knowledge)":[8],"Framework":[9],"provides":[10],"a":[11,50,82,103,141,155,187,203,224],"rich":[12],"actionable":[14],"repository":[15],"of":[16,88,106,183,192,232,242,248],"adversarial":[17],"tactics,":[18],"techniques,":[19],"procedures.":[21],"Its":[22,38],"innovative":[23],"approach":[24],"has":[25,63,145],"been":[26,64,148],"broadly":[27],"welcomed":[28],"by":[29,259],"both":[30,89],"vendors":[31],"enterprise":[33],"customers":[34],"in":[35,238],"the":[36,86,131,179,193,211,245],"industry.":[37],"usage":[39],"extends":[40],"from":[41],"adversary":[42,126],"emulation,":[43],"red":[44],"teaming,":[45],"behavioral":[46],"analytics":[47],"development":[48],"to":[49,79,124,158,171],"defensive":[51,153],"gap":[52],"SOC":[54],"(Security":[55],"Operations":[56],"Center)":[57],"maturity":[58],"assessment.":[59],"While":[60],"extensive":[61,240],"research":[62,99,234],"done":[65],"on":[66,85,101,114,210],"analyzing":[67],"specific":[68,71,125],"attacks":[69],"or":[70],"organizational":[72,107],"culture":[73,110,118,166],"human":[75],"behavior":[76,127],"factors":[77,111],"leading":[78],"such":[80],"attacks,":[81],"holistic":[83,228],"view":[84],"association":[87],"is":[90],"currently":[91],"missing.":[92],"In":[93],"this":[94],"paper,":[95],"we":[96,205],"present":[97],"our":[98,115,207,233],"results":[100,231,258],"associating":[102],"comprehensive":[104],"set":[105,241],"individual":[109],"(as":[112],"described":[113],"developed":[116],"cyber-security":[117,165],"framework)":[119],"with":[120],"security":[121,150,249,255,267],"vulnerabilities":[122],"mapped":[123],"patterns":[129],"utilizing":[130],"framework.":[134],"Thus,":[135],"exploiting":[136],"ATT&CK's":[138],"possibilities":[139],"towards":[140],"scientific":[142,208],"direction":[143],"that":[144],"not":[146],"yet":[147],"explored:":[149],"assessment":[151],"design,":[154],"step":[156],"prior":[157],"its":[159],"current":[160],"application":[161],"domain.":[162],"suggested":[164],"framework":[167],"was":[168],"originally":[169],"designed":[170],"aim":[172],"at":[173],"critical":[174],"infrastructures":[175],"and,":[176],"more":[177,227,261],"specifically,":[178],"energy":[180],"sector.":[181],"Organizations":[182],"these":[184],"domains":[185],"exhibit":[186],"co-existence":[188],"strong":[190],"interaction":[191],"IT":[194],"(Information":[195],"Technology)":[196,200],"OT":[198],"(Operational":[199],"networks.":[201],"As":[202],"result,":[204],"emphasize":[206],"effort":[209],"hybrid":[212],"for":[215],"Enterprise":[216],"ICS":[218],"(Industrial":[219],"Control":[220],"Systems)":[221],"model":[222],"as":[223,251,253],"broader":[225],"approach.":[229],"can":[235],"be":[236],"utilized":[237],"an":[239],"applications,":[243],"including":[244],"efficient":[246],"organization":[247],"procedures":[250],"well":[252],"enhancing":[254],"readiness":[256],"evaluation":[257],"providing":[260],"insights":[262],"into":[263],"imminent":[264],"threats":[265],"risks.":[268]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":26},{"year":2024,"cited_by_count":29},{"year":2023,"cited_by_count":27},{"year":2022,"cited_by_count":13},{"year":2021,"cited_by_count":7}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2021-05-24T00:00:00"}