{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,19]],"date-time":"2026-06-19T02:52:19Z","timestamp":1781837539003,"version":"3.54.5"},"publisher-location":"Cham","reference-count":24,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032293718","type":"print"},{"value":"9783032293725","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-29372-5_13","type":"book-chapter","created":{"date-parts":[[2026,6,19]],"date-time":"2026-06-19T02:46:39Z","timestamp":1781837199000},"page":"182-190","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["From Threat Intelligence to\u00a0Firewall Rules: Semantic Relations in\u00a0Hybrid AI Agent and\u00a0Expert System Architectures"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-8015-7786","authenticated-orcid":false,"given":"Chiara","family":"Bonfanti","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-1761-5218","authenticated-orcid":false,"given":"Davide","family":"Colaiacomo","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7185-5247","authenticated-orcid":false,"given":"Luca","family":"Cagliero","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8016-1490","authenticated-orcid":false,"given":"Cataldo","family":"Basile","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,6,20]]},"reference":[{"key":"13_CR1","doi-asserted-by":"crossref","unstructured":"Alharbi, R., Al-Muhtaseb, H., Helmy, T.: Hypernymy relation in NLP: tasks, approaches, resources, and future directions - a systematic literature review. IEEE Access 1\u20131 (2025)","DOI":"10.1109\/ACCESS.2025.3639391"},{"key":"13_CR2","unstructured":"Anderson, R.: Why information security is hard \u2013 an economic perspective. In: Proceedings of the 17th Annual Computer Security Applications Conference (2001)"},{"key":"13_CR3","doi-asserted-by":"publisher","first-page":"1659","DOI":"10.1109\/TON.2025.3629574","volume":"34","author":"C Basile","year":"2026","unstructured":"Basile, C., Gatti, G., Settanni, F.: A formal model of security controls\u2019 capabilities and its applications to policy refinement and incident management. IEEE Trans. Netw. 34, 1659\u20131673 (2026)","journal-title":"IEEE Trans. Netw."},{"key":"13_CR4","unstructured":"Bonfanti, C., Colombino, M., Coucourde, G., Memari, F., Pinardi, S., Meo, R.: A comparison of pipelines for the translation of a low resource language based on transformers (2025). https:\/\/arxiv.org\/abs\/2509.12514"},{"key":"13_CR5","unstructured":"Bonfanti, C., Druetto, A., Basile, C., Ranasinghe, T., Zampieri, M.: A neuro-symbolic multi-agent approach to legal-cybersecurity knowledge integration (2025)"},{"issue":"3","key":"13_CR6","doi-asserted-by":"publisher","first-page":"379","DOI":"10.1016\/S0952-1976(99)00003-2","volume":"12","author":"Z Chen","year":"1999","unstructured":"Chen, Z.: Knowledge acquisition assisted by clips programming. Eng. Appl. Artif. Intell. 12(3), 379\u2013387 (1999)","journal-title":"Eng. Appl. Artif. Intell."},{"key":"13_CR7","doi-asserted-by":"crossref","unstructured":"Della\u00a0Penna, S., Natella, R., Orbinato, V., Parracino, L., Pianese, L.: CTI-HAL: a human-annotated dataset for cyber threat intelligence analysis. In: 2025 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW), pp. 69\u201378 (2025)","DOI":"10.1109\/EuroSPW67616.2025.00014"},{"key":"13_CR8","doi-asserted-by":"crossref","unstructured":"G\u00e1bor, K., Buscaldi, D., Schumann, A.K., QasemiZadeh, B., Zargayouna, H., Charnois, T.: SemEval-2018 task 7: semantic relation extraction and classification in scientific papers. In: Apidianaki, M., Mohammad, S.M., May, J., Shutova, E., Bethard, S., Carpuat, M. (eds.) Proceedings of the 12th International Workshop on Semantic Evaluation, pp. 679\u2013688. Association for Computational Linguistics, New Orleans, Louisiana (2018)","DOI":"10.18653\/v1\/S18-1111"},{"key":"13_CR9","doi-asserted-by":"crossref","unstructured":"Grigorescu, O., Nica, A., Dascalu, M., Rughinis, R.: CVE2ATT&CK: BERT-based mapping of CVEs to MITRE ATT&CK techniques. Algorithms 15(9) (2022)","DOI":"10.3390\/a15090314"},{"key":"13_CR10","doi-asserted-by":"crossref","unstructured":"Jiang, J., et al.: KG-agent: an efficient autonomous agent framework for complex reasoning over knowledge graph. In: Che, W., Nabende, J., Shutova, E., Pilehvar, M.T. (eds.) Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers), pp. 9505\u20139523. Association for Computational Linguistics, Vienna, Austria (2025)","DOI":"10.18653\/v1\/2025.acl-long.468"},{"key":"13_CR11","unstructured":"Lazer, S.J., Aryal, K., Gupta, M., Bertino, E.: A survey of agentic AI and cybersecurity: Challenges, opportunities and use-case prototypes (2026). https:\/\/arxiv.org\/abs\/2601.05293"},{"key":"13_CR12","doi-asserted-by":"crossref","unstructured":"Liang, X., et al.: Self-evolving agents with reflective and memory-augmented abilities (2025)","DOI":"10.2139\/ssrn.5182425"},{"key":"13_CR13","doi-asserted-by":"crossref","unstructured":"Lunt, T.F.: A real-time intrusion detection expert system (IDES)-final report (1992)","DOI":"10.1016\/0960-2593(92)90034-K"},{"key":"13_CR14","doi-asserted-by":"crossref","unstructured":"Meconi, D., Stirpe, S., Martelli, F., Lavalle, L., Navigli, R.: Do large language models understand word senses? In: Christodoulopoulos, C., Chakraborty, T., Rose, C., Peng, V. (eds.) Proceedings of the 2025 Conference on Empirical Methods in Natural Language Processing, pp. 33897\u201333916. Association for Computational Linguistics, Suzhou, China (2025)","DOI":"10.18653\/v1\/2025.emnlp-main.1720"},{"key":"13_CR15","doi-asserted-by":"publisher","first-page":"343","DOI":"10.1007\/978-3-032-00627-1_17","volume-title":"Availability, Reliability and Security","author":"E Mezzi","year":"2025","unstructured":"Mezzi, E., Massacci, F., Tuma, K.: Large language models are unreliable for cyber threat intelligence. In: Dalla Preda, M., Schrittwieser, S., Naessens, V., De Sutter, B. (eds.) Availability, Reliability and Security, pp. 343\u2013364. Springer Nature Switzerland, Cham (2025)"},{"key":"13_CR16","doi-asserted-by":"publisher","unstructured":"Sarumathy, P., Rajasree, S., Chandrasekar, A.: An AI-based intrusion prevention system to enhance cloud security. In: 2025 4th International Conference on Sentiment Analysis and Deep Learning (ICSADL), pp. 313\u2013320 (2025). https:\/\/doi.org\/10.1109\/ICSADL65848.2025.10933485","DOI":"10.1109\/ICSADL65848.2025.10933485"},{"key":"13_CR17","doi-asserted-by":"publisher","first-page":"25645","DOI":"10.18653\/v1\/2025.findings-emnlp.1398","volume-title":"Findings of the Association for Computational Linguistics: EMNLP 2025","author":"S Sarangi","year":"2025","unstructured":"Sarangi, S., Talele, C., Salam, H.: Agentic-ToM: cognition-inspired agentic processing for enhancing theory of mind reasoning. In: Christodoulopoulos, C., Chakraborty, T., Rose, C., Peng, V. (eds.) Findings of the Association for Computational Linguistics: EMNLP 2025, pp. 25645\u201325661. Association for Computational Linguistics, Suzhou, China (Nov (2025)"},{"key":"13_CR18","unstructured":"Sumers, T.R., Yao, S., Narasimhan, K., Griffiths, T.L.: Cognitive architectures for language agents (2024)"},{"key":"13_CR19","unstructured":"team, T.I.: Disrupting the first reported ai-orchestrated cyber espionage campaign. Tech. rep., Anthropic (2025)"},{"key":"13_CR20","unstructured":"Tikhomirov, M., Loukachevitch, N.: Exploring prompt-based methods for zero-shot hypernym prediction with large language models (2024)"},{"key":"13_CR21","unstructured":"Wei, J., et al.: Chain-of-thought prompting elicits reasoning in large language models. In: Proceedings of the 36th International Conference on Neural Information Processing Systems. NIPS \u201922, Curran Associates Inc, Red Hook, NY, USA (2022)"},{"key":"13_CR22","doi-asserted-by":"crossref","unstructured":"Wu, C., Ke, W., Wang, P., Luo, Z., Li, G., Chen, W.: ConsistNER: towards instructive NER demonstrations for LLMs with the consistency of ontology and context. In: Proceedings of the Thirty-Eighth AAAI Conference on Artificial Intelligence. AAAI\u201924, AAAI Press (2024)","DOI":"10.1609\/aaai.v38i17.29892"},{"key":"13_CR23","doi-asserted-by":"crossref","unstructured":"Zhong, W., Guo, L., Gao, Q., Ye, H., Wang, Y.: MemoryBank: enhancing large language models with long-term memory. In: Proceedings of the Thirty-Eighth AAAI Conference on Artificial Intelligence. AAAI\u201924, AAAI Press (2024)","DOI":"10.1609\/aaai.v38i17.29946"},{"key":"13_CR24","doi-asserted-by":"crossref","unstructured":"Zhou, R., Pan, J., Tan, X., Xi, H.: Application of clips expert system to malware detection system. Int. Conf. Comput. Intell. Secur. 1, 309\u2013314 (2008)","DOI":"10.1109\/CIS.2008.100"}],"container-title":["Lecture Notes in Computer Science","Web Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-29372-5_13","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,19]],"date-time":"2026-06-19T02:46:47Z","timestamp":1781837207000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-29372-5_13"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032293718","9783032293725"],"references-count":24,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-29372-5_13","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"20 June 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICWE","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Web Engineering","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Lyon","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"France","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2026","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"9 June 2026","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"12 June 2026","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"icwe2026","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/icwe2026.webengineering.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}