{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,26]],"date-time":"2026-02-26T15:25:04Z","timestamp":1772119504689,"version":"3.50.1"},"reference-count":20,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T00:00:00Z","timestamp":1750118400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T00:00:00Z","timestamp":1750118400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"name":"AIT Austrian Institute of Technology GmbH"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2025,8]]},"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>Many businesses rely on open-source software modules to build their technology stacks. However, those who lack domain expertise may struggle to find the right software due to unfamiliar terminology and specific names. As a consequence, search engines and other platforms often cannot be utilized effectively to discover appropriate solutions. There is thus a need for a more applicable approach to assist non-domain experts in navigating the vastness of available repositories, enabling them to efficiently discover and select the right solution for their business needs. To overcome these gaps, we introduce an approach that supports finding unpopular yet important open-source software repositories on GitHub using advanced machine learning techniques. For this purpose, we propose novel strategies for information gathering and data pre-processing that resolve scalability issues of existing solutions and enable clustering of repositories even when topics, descriptions, or repository names are unclear or absent. For our evaluation, we gathered a dataset of 221,971 repositories using GitHub search and keywords related to incident detection. We show that our approach is able to separate threat detection repositories from others with an F1-score of 0.93.<\/jats:p>","DOI":"10.1007\/s10207-025-01069-1","type":"journal-article","created":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T10:54:03Z","timestamp":1750157643000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Identifying Open-Source Threat Detection Resources on GitHub: A Scalable Machine Learning Approach"],"prefix":"10.1007","volume":"24","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6538-2527","authenticated-orcid":false,"given":"Manuel","family":"Kern","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3813-3151","authenticated-orcid":false,"given":"Max","family":"Landauer","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1922-7892","authenticated-orcid":false,"given":"Florian","family":"Skopik","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0665-6126","authenticated-orcid":false,"given":"Edgar","family":"Weippl","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,6,17]]},"reference":[{"issue":"4","key":"1069_CR1","doi-asserted-by":"publisher","first-page":"363","DOI":"10.1002\/jsc.2137","volume":"26","author":"S Dhir","year":"2017","unstructured":"Dhir, S., Dhir, S.: Adoption of open-source software versus proprietary software: An exploratory study. Strategic Change 26(4), 363 (2017)","journal-title":"Strategic Change"},{"key":"1069_CR2","doi-asserted-by":"publisher","unstructured":"Widyasari, R., Zhao, Z., Cong, T.L., Kang, H.J., Lo, D.: Topic Recommendation for GitHub Repositories : How Far Can Extreme Multi-Label Learning Go ?, 2023 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER) pp. 167\u2013178 (2023). https:\/\/doi.org\/10.1109\/SANER56733.2023.00025","DOI":"10.1109\/SANER56733.2023.00025"},{"key":"1069_CR3","unstructured":"Grootendorst, M.: Bertopic: Neural topic modeling with a class-based tf-idf procedure, arXiv preprint arXiv:2203.05794 (2022). https:\/\/arxiv.org\/abs\/2203.05794. Accessed: 2025-04-05"},{"key":"1069_CR4","doi-asserted-by":"publisher","DOI":"10.1145\/3382494.3410690","author":"JD Rocco","year":"2020","unstructured":"Rocco, J.D., Ruscio, D.D., Sipio, C.D., Nguyen, P., Rubei, R.: TopFilter: An approach to recommend relevant GitHub topics. International Symposium on Empirical Software Engineering and Measurement (2020). https:\/\/doi.org\/10.1145\/3382494.3410690","journal-title":"International Symposium on Empirical Software Engineering and Measurement"},{"key":"1069_CR5","doi-asserted-by":"publisher","unstructured":"Di Sipio, C., Rubei, R., Di Ruscio, D., Nguyen, P.T.: in Proceedings of the Evaluation and Assessment in Software Engineering (Association for Computing Machinery, New York, NY, USA, 2020), EASE \u201920, p. 71-80. https:\/\/doi.org\/10.1145\/3383219.3383227. https:\/\/doi.org\/10.1145\/3383219.3383227","DOI":"10.1145\/3383219.3383227"},{"key":"1069_CR6","doi-asserted-by":"publisher","unstructured":"Zhou, Y., Wu, J., Sun, Y.: GHTRec : A Personalized Service to Recommend GitHub Trending Repositories for Developers, 2021 IEEE International Conference on Web Services (ICWS) pp. 314\u2013323 (2021). https:\/\/doi.org\/10.1109\/ICWS53863.2021.00049","DOI":"10.1109\/ICWS53863.2021.00049"},{"issue":"8","key":"1069_CR7","doi-asserted-by":"publisher","first-page":"9708","DOI":"10.1007\/s10489-022-03864-y","volume":"53","author":"J Di Rocco","year":"2023","unstructured":"Di Rocco, J., Di Ruscio, D., Di Sipio, C., Nguyen, P.T., Rubei, R.: Hybridrec: A recommender system for tagging github repositories. Appl Intell 53(8), 9708\u20139730 (2023). https:\/\/doi.org\/10.1007\/s10489-022-03864-y","journal-title":"Appl Intell"},{"key":"1069_CR8","doi-asserted-by":"publisher","unstructured":"Zhang, Y., Lo, D., Kochhar, P.S., Xia, X., Li, Q., Sun, J.: Detecting similar repositories on GitHub, SANER 2017 - 24th IEEE International Conference on Software Analysis, Evolution, and Reengineering pp. 13\u201323 (2017). https:\/\/doi.org\/10.1109\/SANER.2017.7884605","DOI":"10.1109\/SANER.2017.7884605"},{"issue":"May","key":"1069_CR9","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2022.106961","volume":"150","author":"S Bai","year":"2022","unstructured":"Bai, S., Liu, L., Liu, H., Zhang, M., Meng, C., Zhang, P.: Find potential partners: A GitHub user recommendation method based on event data. Information and Software Technology 150(May), 106961 (2022). https:\/\/doi.org\/10.1016\/j.infsof.2022.106961","journal-title":"Information and Software Technology"},{"key":"1069_CR10","doi-asserted-by":"publisher","unstructured":"Borges, H., Hora, A., Valente, M.T.: Understanding the factors that impact the popularity of GitHub repositories, Proceedings - 2016 IEEE International Conference on Software Maintenance and Evolution, ICSME 2016 pp. 334\u2013344 (2017). https:\/\/doi.org\/10.1109\/ICSME.2016.31","DOI":"10.1109\/ICSME.2016.31"},{"key":"1069_CR11","doi-asserted-by":"publisher","unstructured":"Zhou, S., Vasilescu, B., K\u00e4stner, C.: How has forking changed in the last 20 years? a study of hard forks on github, Proceedings of the ACM\/IEEE 42nd International Conference on Software Engineering p. 445-456 (2020). https:\/\/doi.org\/10.1145\/3377811.3380412","DOI":"10.1145\/3377811.3380412"},{"key":"1069_CR12","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2024.107425","volume":"169","author":"ASM Venigalla","year":"2024","unstructured":"Venigalla, A.S.M., Chimalakonda, S.: An exploratory study of software artifacts on github from the lens of documentation. Information and Software Technology 169, 107425 (2024). https:\/\/doi.org\/10.1016\/j.infsof.2024.107425. (https:\/\/www.sciencedirect.com\/science\/article\/pii\/S0950584924000302)","journal-title":"Information and Software Technology"},{"key":"1069_CR13","unstructured":"Zanartu, F., Treude, C., Cartaxo, B., Borges, H.S., Moura, P., Wagner, M., Pinto, G.: Automatically categorising github repositories by application domain, arXiv preprint arXiv:2208.00269 (2022). https:\/\/arxiv.org\/abs\/2208.00269. Accessed: 2025-04-05"},{"key":"1069_CR14","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.1271","author":"A Mahn","year":"2021","unstructured":"Mahn, A., Topper, D., Quinn, S., Marron, J.: Getting started with the nist cybersecurity framework: A quick start guide (2021). https:\/\/doi.org\/10.6028\/NIST.SP.1271. (https:\/\/tsapps.nist.gov\/publication\/get_pdf.cfm?pub_id=932713)","journal-title":"Getting started with the nist cybersecurity framework: A quick start guide"},{"key":"1069_CR15","unstructured":"Wang, S., Manning, C.D.: Baselines and bigrams: Simple, good sentiment and topic classification, The 50th Annual Meeting of the Association for Computational Linguistics, Proceedings of the Conference, July 8-14, Volume 2: Short Papers pp. 90\u201394 (2012). https:\/\/aclanthology.org\/P12-2018\/"},{"key":"1069_CR16","unstructured":"McInnes, L., Healy, J., Melville, J.: Umap: Uniform manifold approximation and projection for dimension reduction, arXiv preprint arXiv:1802.03426 (2020). https:\/\/arxiv.org\/abs\/1802.03426. Accessed: 2025-04-05"},{"key":"1069_CR17","doi-asserted-by":"publisher","unstructured":"Campello, R.J.G.B., Moulavi, D., Zimek, A., Sander, J.: Hierarchical density estimates for data clustering, visualization, and outlier detection, ACM Trans. Knowl. Discov. Data 10(1) (2015). https:\/\/doi.org\/10.1145\/2733381","DOI":"10.1145\/2733381"},{"key":"1069_CR18","doi-asserted-by":"crossref","unstructured":"Hartigan, J.A., Wong, M.A.: Algorithm as 136: A k-means clustering algorithm, Journal of the Royal Statistical Society. Series C (Applied Statistics) 28(1), 100 (1979). http:\/\/www.jstor.org\/stable\/2346830","DOI":"10.2307\/2346830"},{"key":"1069_CR19","volume-title":"Introduction to information retrieval","author":"H Sch\u00fctze","year":"2008","unstructured":"Sch\u00fctze, H., Manning, C.D., Raghavan, P.: Introduction to information retrieval, vol. 39. Cambridge University Press Cambridge, Cambridge, England (2008)"},{"key":"1069_CR20","unstructured":"Ye, J., Chen, X., Xu, N., Zu, C., Shao, Z., Liu, S., Cui, Y., Zhou, Z., Gong, C., Shen, Y., Zhou, J., Chen, S., Gui, T., Zhang, Q., Huang, X.: A comprehensive capability analysis of gpt-3 and gpt-3.5 series models, arXiv preprint arXiv:2303.10420 (2023). https:\/\/arxiv.org\/abs\/2303.10420. Accessed: 2025-04-05"}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-025-01069-1.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10207-025-01069-1\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-025-01069-1.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,5]],"date-time":"2025-09-05T11:32:27Z","timestamp":1757071947000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10207-025-01069-1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,17]]},"references-count":20,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2025,8]]}},"alternative-id":["1069"],"URL":"https:\/\/doi.org\/10.1007\/s10207-025-01069-1","relation":{"has-preprint":[{"id-type":"doi","id":"10.21203\/rs.3.rs-5664665\/v1","asserted-by":"object"}]},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,6,17]]},"assertion":[{"value":"17 June 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"Financial support, administrative support, and article publishing charges were provided by Austrian Research Promotion Agency.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Financial Support and Administrative Support"}},{"value":"The authors declare that they have no known competing financial interests or personal relationships that could have appeared to influence the work reported in this paper.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"158"}}