{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,17]],"date-time":"2026-05-17T01:09:58Z","timestamp":1778980198316,"version":"3.51.4"},"reference-count":48,"publisher":"Springer Science and Business Media LLC","issue":"5","license":[{"start":{"date-parts":[[2022,8,3]],"date-time":"2022-08-03T00:00:00Z","timestamp":1659484800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2022,8,3]],"date-time":"2022-08-03T00:00:00Z","timestamp":1659484800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"funder":[{"DOI":"10.13039\/100010676","name":"H2020 Societal Challenges","doi-asserted-by":"publisher","award":["740829"],"award-info":[{"award-number":["740829"]}],"id":[{"id":"10.13039\/100010676","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2022,10]]},"DOI":"10.1007\/s10207-022-00599-2","type":"journal-article","created":{"date-parts":[[2022,8,3]],"date-time":"2022-08-03T05:02:36Z","timestamp":1659502956000},"page":"1091-1106","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["The SAINT observatory subsystem: an open-source intelligence tool for uncovering cybersecurity threats"],"prefix":"10.1007","volume":"21","author":[{"given":"Vasileios","family":"Vlachos","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8925-9427","authenticated-orcid":false,"given":"Yannis C.","family":"Stamatiou","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pantelis","family":"Tzamalis","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sotiris","family":"Nikoletseas","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2022,8,3]]},"reference":[{"key":"599_CR1","first-page":"265","volume-title":"Measuring the cost of cybercrime","author":"R Anderson","year":"2013","unstructured":"Anderson, R., Barton, C., B\u00f6hme, R., Clayton, R., van Eeten, M.J.G., Levi, M., Moore, T., Savage, S.: Measuring the cost of cybercrime, pp. 265\u2013300. Springer, Berlin, Heidelberg (2013)"},{"key":"599_CR2","volume-title":"Zero day threat","author":"B Acohido","year":"2008","unstructured":"Acohido, B., Swartz, J.: Zero day threat. Sterling Publishing, New York (2008)"},{"key":"599_CR3","doi-asserted-by":"crossref","unstructured":"Armin, J., Foti, P., Cremonini, M.: 0-day vulnerabilities and cybercrime. In: Proceedings of the 2015 10th International Conference on Availability, Reliability and Security, ARES \u201915, Washington, DC, USA, IEEE Computer Society, 711\u2013718 2015","DOI":"10.1109\/ARES.2015.55"},{"issue":"5","key":"599_CR4","doi-asserted-by":"publisher","first-page":"589","DOI":"10.1108\/IntR-06-2012-0115","volume":"23","author":"A Jungherr","year":"2013","unstructured":"Jungherr, A., J\u00fcrgens, P.: Forecasting the pulse: How deviations from regular patterns in online data can identify offline phenomena. Internet Res. 23(5), 589\u2013607 (2013)","journal-title":"Internet Res."},{"key":"599_CR5","unstructured":"Ritterman, J., Osborne, M., Klein, E.: Using prediction markets and twitter to predict a swine flu pandemic. In: Proceedings of the 1st International Workshop on Mining Social, 2009"},{"issue":"5","key":"599_CR6","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1371\/journal.pone.0019467","volume":"6","author":"A Signorini","year":"2011","unstructured":"Signorini, A., Segre, A.M., Polgreen, P.M.: The use of twitter to track levels of disease activity and public concern in the u.s. during the influenza a h1n1 pandemic. Plos One 6(5), 1\u201310 (2011)","journal-title":"Plos One"},{"issue":"10","key":"599_CR7","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1371\/journal.pcbi.1004513","volume":"11","author":"M Santillana","year":"2015","unstructured":"Santillana, M., Nguyen, A.T., Dredze, M., Paul, M.J., Nsoesie, E.O., Brownstein, J.S.: Combining search, social media, and traditional data sources to improve influenza surveillance. PLOS Comput. Biol. 11(10), 1\u201315 (2015)","journal-title":"PLOS Comput. Biol."},{"issue":"10","key":"599_CR8","doi-asserted-by":"publisher","first-page":"e236","DOI":"10.2196\/jmir.3416","volume":"16","author":"R Nagar","year":"2014","unstructured":"Nagar, R., Yuan, Q., Freifeld, C.C., Santillana, M., Nojima, A., Chunara, R., Brownstein, J.S.: A case study of the new york city 2012-2013 influenza season with daily geocoded twitter data from temporal and spatiotemporal perspectives. J. Med. Internet Res. 16(10), e236 (2014)","journal-title":"J. Med. Internet Res."},{"key":"599_CR9","doi-asserted-by":"crossref","unstructured":"Tzamalis, P., Vikatos, P., Nikoletseas, S.: A hybridization of mobile crowdsensing, twitter analytics, and sensor data for the holistic approach of pollen onsets detection. In: 2019 15th International Conference on Distributed Computing in Sensor Systems (DCOSS). IEEE, 188\u2013191 (2019)","DOI":"10.1109\/DCOSS.2019.00051"},{"key":"599_CR10","doi-asserted-by":"crossref","unstructured":"Priedhorsky, R., Osthus, D., Daughton, A.R., Moran, K.R., Generous, N., Fairchild, G., Deshpande, A., Del\u00a0Valle, S.Y.: Measuring global disease with wikipedia: success, failure, and a research agenda. In: Proceedings of the 2017 ACM Conference on Computer Supported Cooperative Work and Social Computing, CSCW \u201917, New York, NY, USA. ACM, 1812\u20131834 2017","DOI":"10.1145\/2998181.2998183"},{"key":"599_CR11","unstructured":"Rao, T., Srivastava, S.: Analyzing stock market movements using twitter sentiment analysis. In: roceedings of the 2012 International Conference on Advances in Social Networks Analysis and Mining (ASONAM 2012), ASONAM \u201912, Washington, DC, USA. IEEE Computer Society, 119\u2013123 2012"},{"key":"599_CR12","doi-asserted-by":"crossref","unstructured":"Mao, Y., Wei, W., Wang, B., Liu, B.: Correlating s &p 500 stocks with twitter data. In: Proceedings of the First ACM International Workshop on Hot Topics on Interdisciplinary Social Networks Research, HotSocial \u201912, New York, NY, USA, ACM, 69\u201372 2012","DOI":"10.1145\/2392622.2392634"},{"key":"599_CR13","doi-asserted-by":"publisher","first-page":"355","DOI":"10.1007\/978-3-642-40669-0_31","volume-title":"Progress in artificial intelligence","author":"N Oliveira","year":"2013","unstructured":"Oliveira, N., Cortez, P., Areal, N.: On the predictability of stock market behavior using stocktwits sentiment and posting volume. In: Lu\u00eds, C., Lu\u00eds, P.R., Jos\u00e9, C. (eds.) Progress in artificial intelligence, pp. 355\u2013365. Springer, Berlin, Heidelberg (2013)"},{"key":"599_CR14","doi-asserted-by":"crossref","unstructured":"Kollias, S., Vlachos, V., Papanikolaou, A., Assimakopoulos, V.: Adapting econometric models, technical analysis and correlation data to computer security data. In: 2011 First SysSec Workshop, 59\u201362, (2011)","DOI":"10.1109\/SysSec.2011.18"},{"issue":"1","key":"599_CR15","doi-asserted-by":"publisher","first-page":"40","DOI":"10.1109\/MSP.2005.30","volume":"3","author":"S Schechter","year":"2005","unstructured":"Schechter, S.: Towards econometric models of the security risk from remote attacks. IEEE Secur. Priv. 3(1), 40\u201344 (2005)","journal-title":"IEEE Secur. Priv."},{"key":"599_CR16","unstructured":"Tumasjan, A., Sprenger, T., Sandner, P., Welpe, I.: Predicting elections with twitter: What 140 characters reveal about political sentiment. In: Proceedings of the International AAAI Conference on Web and Social Media, 4(1), 2010"},{"issue":"1","key":"599_CR17","doi-asserted-by":"publisher","first-page":"2","DOI":"10.1109\/MIS.2015.16","volume":"30","author":"V Kagan","year":"2015","unstructured":"Kagan, V., Stevens, A., Subrahmanian, V.S.: Using twitter sentiment to forecast the 2013 pakistani election and the 2014 indian election. IEEE Intell. Syst. 30(1), 2\u20135 (2015)","journal-title":"IEEE Intell. Syst."},{"key":"599_CR18","first-page":"139","volume-title":"Twitter and 2013 Pakistan general election: the case of david 2.0 against goliaths","author":"S Ahmed","year":"2015","unstructured":"Ahmed, S., Skoric, M.: Twitter and 2013 Pakistan general election: the case of david 2.0 against goliaths, pp. 139\u2013161. Springer, Berlin (2015)"},{"key":"599_CR19","unstructured":"Choy, M., Cheong, M.L.F, Laik, M.N., Shung, K.P.: A sentiment analysis of singapore presidential election 2011 using twitter data with census correction. CoRR, abs\/1108.5520, (2011)"},{"key":"599_CR20","unstructured":"Choy, M., Cheong, M.L.F., Laik, M.N., Shung, K.P.: US presidential election 2012 prediction using census corrected twitter model. CoRR, abs\/1211.0938, (2012)"},{"key":"599_CR21","unstructured":"Bovet, A., Morone, F., Makse, H.: Predicting election trends with twitter: Hillary clinton versus donald trump. CoRR, abs\/1610.01587, (2016)"},{"key":"599_CR22","doi-asserted-by":"crossref","unstructured":"Burnap, P., Gibson, R., Sloan, L., Southern, R., Williams, M.: 140 characters to victory?: using twitter to predict the UK 2015 general election. CoRR, abs\/1505.01511, (2015)","DOI":"10.2139\/ssrn.2603433"},{"key":"599_CR23","unstructured":"Gayo-Avello, D.: \u201cI wanted to predict elections with twitter and all i got was this lousy paper\u201d - a balanced survey on election prediction using twitter data. CoRR, abs\/1204.6441, (2012)"},{"key":"599_CR24","doi-asserted-by":"publisher","first-page":"231","DOI":"10.1007\/978-3-642-29047-3_28","volume-title":"Social Computing Behavioral - Cultural Modeling and Prediction","author":"X Wang","year":"2012","unstructured":"Wang, X., Gerber, M.S., Brown, D.E.: Automatic crime prediction using events extracted from twitter posts. In: Shanchieh, J.Y., Ariel, M.G., Mica, E. (eds.) Social Computing Behavioral - Cultural Modeling and Prediction, pp. 231\u2013238. Springer, Berlin (2012)"},{"key":"599_CR25","unstructured":"Bendler, J., Ratku, A., Neumann, D.: Crime mapping through geo-spatial social media activity. In: Proceedings of the International Conference on Information Systems - Building a Better World through Information Systems, ICIS 2014, Auckland, New Zealand, December 14\u201317 2014"},{"key":"599_CR26","doi-asserted-by":"publisher","first-page":"73","DOI":"10.1016\/j.dss.2018.07.003","volume":"113","author":"L Vomfell","year":"2018","unstructured":"Vomfell, L., H\u00e4rdle, W.K., Lessmann, S.: Improving crime count forecasts using twitter and taxi data. Decis. Support Syst. 113, 73\u201385 (2018)","journal-title":"Decis. Support Syst."},{"key":"599_CR27","unstructured":"Zhongqing, W., Yue, Z.: DDoS event forecasting using twitter data. In: Proceedings of the 26th International Joint Conference on Artificial Intelligence (IJCAI-17), Melbourne, Australia, 4151\u20134157 2017"},{"key":"599_CR28","unstructured":"Sabottke, C., Suciu, O., Dumitra\u015f, T.: Vulnerability disclosure in the age of social media: exploiting twitter for predicting real-world exploits. SEC\u201915, USA. USENIX Association, 1041\u20131056 2015"},{"key":"599_CR29","doi-asserted-by":"publisher","first-page":"217","DOI":"10.1007\/978-3-030-58951-6_11","volume-title":"Computer security - ESORICS 2020","author":"F Alves","year":"2020","unstructured":"Alves, F., Andongabo, A., Gashi, I., Ferreira, P.M., Bessani, A.: Follow the blue bird: A study on threat data published on twitter. In: Chen, L., Li, N., Liang, K., Schneider, S. (eds.) Computer security - ESORICS 2020, pp. 217\u2013236. Springer, Cham (2020)"},{"key":"599_CR30","doi-asserted-by":"crossref","unstructured":"Le\u00a0Sceller, Q., Karbab, E.B., Debbabi, M., Iqbal, F.: Sonar: automatic detection of cyber security events over the twitter stream. ARES \u201917, New York, NY, USA, Association for Computing Machinery (2017)","DOI":"10.1145\/3098954.3098992"},{"key":"599_CR31","doi-asserted-by":"crossref","unstructured":"Khandpur, R.P., Ji, T., Jan, S., Wang, G., Lu, C.-T., Ramakrishnan, N.: Crowdsourcing cybersecurity: cyber attack detection using social media. In: Proceedings of the 2017 ACM on Conference on Information and Knowledge Management, CIKM \u201917, New York, NY, USA, 2017. Association for Computing Machinery, 1049\u20131057 2017","DOI":"10.1145\/3132847.3132866"},{"key":"599_CR32","doi-asserted-by":"publisher","first-page":"101586","DOI":"10.1016\/j.is.2020.101586","volume":"95","author":"F Alves","year":"2021","unstructured":"Alves, F., Bettini, A., Ferreira, P.M., Bessani, A.: Processing tweets for cybersecurity threat awareness. Inf. Syst. 95, 101586 (2021)","journal-title":"Inf. Syst."},{"key":"599_CR33","doi-asserted-by":"crossref","unstructured":"Liao, X., Yuan, K., Wang, X., Li, Z., Xing, L., Beyah, R.: Acing the ioc game: toward automatic discovery and analysis of open-source cyber threat intelligence. In: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, CCS \u201916, New York, NY, USA, Association for Computing Machinery, 755\u2013766 2016","DOI":"10.1145\/2976749.2978315"},{"key":"599_CR34","unstructured":"Douligeris, C., Raghimi, O., Louren\u00e7o, M.B., Marinos, L., Sfakianakis, A., Doerr, C., Armin, J., Riccardi, M., Wim, M., Thaker, N., Stirparo, P., Samwel, P., Paganini, P., Adachi, S., Lingris, S., Hemker, T.: List of top15 threats. ENISA threat landscape. techreport, ENISA, (2020)"},{"key":"599_CR35","doi-asserted-by":"crossref","unstructured":"Egelman, S., Herley, C., van Oorschot, P.C.: Markets for zero-day exploits: Ethics and implications. In: Proceedings of the 2013 New Security Paradigms Workshop, NSPW \u201913, New York, NY, USA, ACM, 41\u201346 2013","DOI":"10.1145\/2535813.2535818"},{"key":"599_CR36","unstructured":"Zhao, M., Laszka, A., Maillart, T., Grossklags, J.: Crowdsourced security vulnerability discovery: Modeling and organizing bug-bounty programs. In: HCOMP Workshop on Mathematical Foundations of Human Computation, November (2016)"},{"key":"599_CR37","unstructured":"Peeters, G.: Strengthening the digital achilles heel of the european union: Make use of ethical hackers to find vulnerabilities in information systems? Master\u2019s thesis, Leiden University, (2017)"},{"key":"599_CR38","volume-title":"Epidemic modelling","author":"D Daley","year":"1999","unstructured":"Daley, D., Gani, J.: Epidemic modelling. Cambridge University Press, Cambridge (1999)"},{"key":"599_CR39","unstructured":"ACHE documentation. Current on-line (December 2020): https:\/\/ache.readthedocs.io\/en\/latest\/, (2020)"},{"key":"599_CR40","doi-asserted-by":"crossref","unstructured":"Stupples, D.: Security challenge of TOR and the deep web. In: 8th International Conference for Internet Technology and Secured Transactions, ICITST 2013, London, United Kingdom, December 9-12, 2013. IEEE, 14 2013","DOI":"10.1109\/ICITST.2013.6750149"},{"key":"599_CR41","unstructured":"Miller, C.: The legitimate vulnerability market: Inside the secretive world of 0-day exploit sales. In: In Sixth Workshop on the Economics of Information Security, (2007)"},{"key":"599_CR42","volume-title":"Manning, Prabhakar Raghavan, and Hinrich Sch\u00fctze. Introduction to Information Retrieval","author":"D Christopher","year":"2008","unstructured":"Christopher, D.: Manning, Prabhakar Raghavan, and Hinrich Sch\u00fctze. Introduction to Information Retrieval. Cambridge University Press, Cambridge (2008)"},{"key":"599_CR43","doi-asserted-by":"crossref","unstructured":"Joshi, P.M., Liu, S.: Web document text and images extraction using dom analysis and natural language processing. In: Proceedings of the 9th ACM symposium on Document engineering, 218\u2013221 2009","DOI":"10.1145\/1600193.1600241"},{"key":"599_CR44","doi-asserted-by":"crossref","unstructured":"Radianti, J.: A study of a social behavior inside the online black markets. In: 2010 Fourth International Conference on Emerging Security Information, Systems and Technologies, 189\u2013194, 2010","DOI":"10.1109\/SECURWARE.2010.38"},{"issue":"3","key":"599_CR45","first-page":"515","volume":"12","author":"RA Hardy","year":"2016","unstructured":"Hardy, R.A., Norgaard, J.R.: Reputation in the internet black market: an empirical and theoretical analysis of the deep web. J. Inst. Econ. 12(3), 515\u2013539 (2016)","journal-title":"J. Inst. Econ."},{"key":"599_CR46","unstructured":"Finklea, K.M.: Dark web. Congressional Research Service, (2015)"},{"key":"599_CR47","doi-asserted-by":"publisher","first-page":"477","DOI":"10.1162\/tacl_a_00197","volume":"2","author":"G Durrett","year":"2014","unstructured":"Durrett, G., Klein, D.: A joint model for entity analysis: coreference, typing, and linking. Trans. Assoc. Comput. Linguist. 2, 477\u2013490 (2014)","journal-title":"Trans. Assoc. Comput. Linguist."},{"key":"599_CR48","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-52452-8","volume-title":"Time series analysis and its applications: with R examples","author":"RH Shumway","year":"2017","unstructured":"Shumway, R.H., Stoffer, D.S.: Time series analysis and its applications: with R examples. Springer, Berlin (2017)"}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-022-00599-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10207-022-00599-2\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-022-00599-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,30]],"date-time":"2024-09-30T15:41:08Z","timestamp":1727710868000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10207-022-00599-2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,8,3]]},"references-count":48,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2022,10]]}},"alternative-id":["599"],"URL":"https:\/\/doi.org\/10.1007\/s10207-022-00599-2","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,8,3]]},"assertion":[{"value":"3 August 2022","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}