{"id":"https://openalex.org/W4409432182","doi":"https://doi.org/10.3390/sym17040587","title":"A Novel Approach for Cyber Threat Analysis Systems Using BERT Model from Cyber Threat Intelligence Data","display_name":"A Novel Approach for Cyber Threat Analysis Systems Using BERT Model from Cyber Threat Intelligence Data","publication_year":2025,"publication_date":"2025-04-11","ids":{"openalex":"https://openalex.org/W4409432182","doi":"https://doi.org/10.3390/sym17040587"},"language":"en","primary_location":{"id":"doi:10.3390/sym17040587","is_oa":true,"landing_page_url":"https://doi.org/10.3390/sym17040587","pdf_url":"https://www.mdpi.com/2073-8994/17/4/587/pdf?version=1744384444","source":{"id":"https://openalex.org/S190787756","display_name":"Symmetry","issn_l":"2073-8994","issn":["2073-8994"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Symmetry","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2073-8994/17/4/587/pdf?version=1744384444","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5028763533","display_name":"Doygun Demirol","orcid":"https://orcid.org/0000-0002-3272-1078"},"institutions":[{"id":"https://openalex.org/I147699246","display_name":"Bing\u00f6l University","ror":"https://ror.org/03hx84x94","country_code":"TR","type":"education","lineage":["https://openalex.org/I147699246"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Doygun Demirol","raw_affiliation_strings":["Department of Computer Technologies, Bing\u00f6l University, 12000 Bing\u00f6l, T\u00fcrkiye"],"affiliations":[{"raw_affiliation_string":"Department of Computer Technologies, Bing\u00f6l University, 12000 Bing\u00f6l, T\u00fcrkiye","institution_ids":["https://openalex.org/I147699246"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088586681","display_name":"Resul Da\u015f","orcid":"https://orcid.org/0000-0002-6113-4649"},"institutions":[{"id":"https://openalex.org/I143396566","display_name":"F\u0131rat University","ror":"https://ror.org/05teb7b63","country_code":"TR","type":"education","lineage":["https://openalex.org/I143396566"]},{"id":"https://openalex.org/I97750245","display_name":"Software (Spain)","ror":"https://ror.org/02ethns06","country_code":"ES","type":"company","lineage":["https://openalex.org/I4210087817","https://openalex.org/I97750245"]}],"countries":["ES","TR"],"is_corresponding":true,"raw_author_name":"Resul Das","raw_affiliation_strings":["Department of Software Engineering, Technology Faculty, F\u0131rat University, 23119 Elaz\u0131\u011f, T\u00fcrkiye"],"affiliations":[{"raw_affiliation_string":"Department of Software Engineering, Technology Faculty, F\u0131rat University, 23119 Elaz\u0131\u011f, T\u00fcrkiye","institution_ids":["https://openalex.org/I143396566","https://openalex.org/I97750245"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5083111912","display_name":"Davut Hanbay","orcid":"https://orcid.org/0000-0003-2271-7865"},"institutions":[{"id":"https://openalex.org/I20126385","display_name":"Inonu University","ror":"https://ror.org/04asck240","country_code":"TR","type":"education","lineage":["https://openalex.org/I20126385"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Davut Hanbay","raw_affiliation_strings":["Department of Computer Engineering, Engineering Faculty, \u0130n\u00f6n\u00fc University, 44000 Malatya, T\u00fcrkiye"],"affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Engineering Faculty, \u0130n\u00f6n\u00fc University, 44000 Malatya, T\u00fcrkiye","institution_ids":["https://openalex.org/I20126385"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5088586681"],"corresponding_institution_ids":["https://openalex.org/I143396566","https://openalex.org/I97750245"],"apc_list":{"value":2000,"currency":"CHF","value_usd":2165},"apc_paid":{"value":2000,"currency":"CHF","value_usd":2165},"fwci":18.0155,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":{"value":0.98949653,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"17","issue":"4","first_page":"587","last_page":"587"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.984499990940094,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.984499990940094,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9828000068664551,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9660999774932861,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6420242190361023},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5701340436935425},{"id":"https://openalex.org/keywords/transformer","display_name":"Transformer","score":0.560089111328125},{"id":"https://openalex.org/keywords/cyber-threats","display_name":"Cyber threats","score":0.4362671375274658},{"id":"https://openalex.org/keywords/cyber-attack","display_name":"Cyber-attack","score":0.4327510595321655},{"id":"https://openalex.org/keywords/cyber-physical-system","display_name":"Cyber-physical system","score":0.4299846589565277},{"id":"https://openalex.org/keywords/encoder","display_name":"Encoder","score":0.42931675910949707},{"id":"https://openalex.org/keywords/electrical-engineering","display_name":"Electrical engineering","score":0.16227197647094727},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.12204283475875854}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6420242190361023},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5701340436935425},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.560089111328125},{"id":"https://openalex.org/C3018725008","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber threats","level":2,"score":0.4362671375274658},{"id":"https://openalex.org/C201307755","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber-attack","level":2,"score":0.4327510595321655},{"id":"https://openalex.org/C179768478","wikidata":"https://www.wikidata.org/wiki/Q1120057","display_name":"Cyber-physical system","level":2,"score":0.4299846589565277},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.42931675910949707},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.16227197647094727},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.12204283475875854},{"id":"https://openalex.org/C165801399","wikidata":"https://www.wikidata.org/wiki/Q25428","display_name":"Voltage","level":2,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3390/sym17040587","is_oa":true,"landing_page_url":"https://doi.org/10.3390/sym17040587","pdf_url":"https://www.mdpi.com/2073-8994/17/4/587/pdf?version=1744384444","source":{"id":"https://openalex.org/S190787756","display_name":"Symmetry","issn_l":"2073-8994","issn":["2073-8994"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Symmetry","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.3390/sym17040587","is_oa":true,"landing_page_url":"https://doi.org/10.3390/sym17040587","pdf_url":"https://www.mdpi.com/2073-8994/17/4/587/pdf?version=1744384444","source":{"id":"https://openalex.org/S190787756","display_name":"Symmetry","issn_l":"2073-8994","issn":["2073-8994"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Symmetry","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320327128","display_name":"In\u00f6n\u00fc \u00dcniversitesi","ror":"https://ror.org/04asck240"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4409432182.pdf","grobid_xml":"https://content.openalex.org/works/W4409432182.grobid-xml"},"referenced_works_count":36,"referenced_works":["https://openalex.org/W1986203139","https://openalex.org/W2487152776","https://openalex.org/W2771963642","https://openalex.org/W2810758612","https://openalex.org/W2837911466","https://openalex.org/W2884561390","https://openalex.org/W2914662937","https://openalex.org/W2916835129","https://openalex.org/W2959224760","https://openalex.org/W2965363108","https://openalex.org/W2977721195","https://openalex.org/W2997634552","https://openalex.org/W2999814310","https://openalex.org/W3013136547","https://openalex.org/W3021121749","https://openalex.org/W3023882301","https://openalex.org/W3037691379","https://openalex.org/W3038151835","https://openalex.org/W3120229371","https://openalex.org/W3128916430","https://openalex.org/W3164269180","https://openalex.org/W3198980504","https://openalex.org/W3214329506","https://openalex.org/W4205199446","https://openalex.org/W4253280542","https://openalex.org/W4281478262","https://openalex.org/W4293863996","https://openalex.org/W4296342837","https://openalex.org/W4296545269","https://openalex.org/W4318570535","https://openalex.org/W4382405221","https://openalex.org/W4388441710","https://openalex.org/W4393253320","https://openalex.org/W4404278858","https://openalex.org/W6795281908","https://openalex.org/W6805600658"],"related_works":["https://openalex.org/W2358245908","https://openalex.org/W2803684864","https://openalex.org/W2974890647","https://openalex.org/W4401664841","https://openalex.org/W3215166534","https://openalex.org/W4385452087","https://openalex.org/W3205687007","https://openalex.org/W4401705120","https://openalex.org/W4304097726","https://openalex.org/W4304097727"],"abstract_inverted_index":{"As":[0],"today\u2019s":[1],"cybersecurity":[2],"environment":[3],"is":[4,9,44],"becoming":[5],"increasingly":[6],"complex,":[7],"it":[8],"crucial":[10],"to":[11,26,48,71],"analyse":[12,72],"threats":[13],"quickly":[14],"and":[15,31,52,66,90,96,111,123,139,143,153,164],"effectively.":[16],"A":[17,104],"delayed":[18],"response":[19],"or":[20],"lack":[21],"of":[22,134,155],"foresight":[23],"can":[24,38],"lead":[25],"data":[27],"loss,":[28],"reputational":[29],"damage,":[30],"operational":[32],"disruptions.":[33],"Therefore,":[34],"developing":[35],"methods":[36],"that":[37,62],"rapidly":[39],"extract":[40],"valuable":[41],"threat":[42,74,86,94,151],"intelligence":[43,75],"a":[45,67,112,124],"critical":[46],"need":[47],"strengthen":[49],"defence":[50],"strategies":[51],"minimise":[53],"potential":[54,156],"damage.":[55],"This":[56,159],"paper":[57],"presents":[58],"an":[59,101,131],"innovative":[60],"approach":[61,160],"integrates":[63],"knowledge":[64,146,167],"graphs":[65],"fine-tuned":[68],"BERT-based":[69,113],"model":[70,114],"cyber":[73,82],"(CTI)":[76],"data.":[77],"The":[78,136],"proposed":[79],"system":[80],"extracts":[81],"entities":[83,138],"such":[84],"as":[85],"actors,":[87],"malware,":[88],"campaigns,":[89],"targets":[91],"from":[92],"unstructured":[93],"reports":[95],"establishes":[97],"their":[98],"relationships":[99,140],"using":[100,145],"ontology-driven":[102],"framework.":[103],"named":[105],"entity":[106],"recognition":[107],"dataset":[108],"was":[109,115],"created":[110],"trained.":[116],"To":[117],"address":[118],"the":[119,149],"class":[120],"imbalance,":[121],"oversampling":[122],"focal":[125],"loss":[126],"function":[127],"were":[128,141],"applied,":[129],"achieving":[130],"F1":[132],"score":[133],"96%.":[135],"extracted":[137],"visualised":[142],"analysed":[144],"graphs,":[147],"enabling":[148],"advanced":[150],"analysis":[152],"prediction":[154,163],"attack":[157],"targets.":[158],"enhances":[161],"cyber-attack":[162],"prevention":[165],"through":[166],"graphs.":[168]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":5}],"updated_date":"2026-03-24T08:02:53.985720","created_date":"2025-10-10T00:00:00"}