{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,23]],"date-time":"2026-09-23T08:06:57Z","timestamp":1790150817106,"version":"4.0.1"},"reference-count":52,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2027,1,1]],"date-time":"2027-01-01T00:00:00Z","timestamp":1798761600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2027,1,1]],"date-time":"2027-01-01T00:00:00Z","timestamp":1798761600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,9,17]],"date-time":"2026-09-17T00:00:00Z","timestamp":1789603200000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Computers & Security"],"published-print":{"date-parts":[[2027,1]]},"DOI":"10.1016\/j.cose.2026.105170","type":"journal-article","created":{"date-parts":[[2026,9,17]],"date-time":"2026-09-17T23:36:55Z","timestamp":1789688215000},"page":"105170","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Multimodal cyber threat intelligence fusion for healthcare cybersecurity risk assessment: A systematic review"],"prefix":"10.1016","volume":"172","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-3773-0465","authenticated-orcid":false,"given":"Oluseun","family":"Akeredolu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Gregory","family":"Epiphaniou","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Carsten","family":"Maple","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.cose.2026.105170_bib0001","article-title":"Insights into Internet of Medical Things (IoMT): data fusion, security issues and potential solutions","volume":"92","author":"Ahmed","year":"2024","journal-title":"Information Fusion"},{"issue":"2","key":"10.1016\/j.cose.2026.105170_bib0003","doi-asserted-by":"crossref","first-page":"173","DOI":"10.1016\/j.eij.2021.12.001","article-title":"Cyber threat intelligence using PCA-DNN model to detect abnormal network behavior","volume":"23","author":"Al-Fawa'neh","year":"2022","journal-title":"Egypt. Inform. J."},{"issue":"11","key":"10.1016\/j.cose.2026.105170_bib0002","first-page":"2021","article-title":"Towards an AI-enhanced Cyber threat intelligence processing pipeline","volume":"13","author":"Alevizos","year":"2024","journal-title":"Electronics. (Basel)"},{"key":"10.1016\/j.cose.2026.105170_bib0005","doi-asserted-by":"crossref","first-page":"8049","DOI":"10.1038\/s41598-023-35198-1","article-title":"A holistic and proactive approach to forecasting cyber threats","volume":"13","author":"Almahmoud","year":"2023","journal-title":"Sci. Rep."},{"issue":"2","key":"10.1016\/j.cose.2026.105170_bib0006","first-page":"345","article-title":"Improving threat mitigation through a cybersecurity risk management framework: a computational design science approach","volume":"41","author":"Ampel","year":"2024","journal-title":"J. Manage. Inf. Syst."},{"key":"10.1016\/j.cose.2026.105170_bib0007","doi-asserted-by":"crossref","first-page":"82","DOI":"10.1016\/j.inffus.2019.12.012","article-title":"Explainable Artificial Intelligence (XAI): concepts, taxonomies, opportunities and challenges toward responsible AI","volume":"58","author":"Arrieta","year":"2020","journal-title":"Information Fusion"},{"issue":"4","key":"10.1016\/j.cose.2026.105170_bib0008","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3595181","article-title":"Intelligent AI-based Healthcare Cyber Security system using multi-source transfer learning method","volume":"19","author":"Chakraborty","year":"2023","journal-title":"ACM. Trans. Sens. Netw."},{"key":"10.1016\/j.cose.2026.105170_bib0009","doi-asserted-by":"crossref","first-page":"54","DOI":"10.1007\/s40747-024-01661-3","article-title":"Quality assessment of cyber threat intelligence knowledge graph based on adaptive joining of embedding model","volume":"11","author":"Chen","year":"2025","journal-title":"Complex. Intell. Systems."},{"key":"10.1016\/j.cose.2026.105170_bib0010","doi-asserted-by":"crossref","first-page":"84440","DOI":"10.1109\/ACCESS.2023.3299604","article-title":"Enhancing cyber threat identification in open-source intelligence feeds through an improved semi-supervised generative adversarial learning approach with contrastive learning","volume":"11","author":"Cherqi","year":"2023","journal-title":"IEEE Access."},{"issue":"5","key":"10.1016\/j.cose.2026.105170_bib0011","doi-asserted-by":"crossref","first-page":"323","DOI":"10.1037\/h0028106","article-title":"Large sample standard errors of kappa and weighted kappa","volume":"72","author":"Fleiss","year":"1969","journal-title":"Psychol. Bull."},{"issue":"2","key":"10.1016\/j.cose.2026.105170_bib0012","doi-asserted-by":"crossref","first-page":"708","DOI":"10.1109\/TKDE.2020.2987019","article-title":"HinCTI: a cyber threat intelligence modeling and identification system based on heterogeneous information network","volume":"34","author":"Gao","year":"2022","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"10.1016\/j.cose.2026.105170_bib0013","doi-asserted-by":"crossref","DOI":"10.1016\/j.imavis.2025.105509","article-title":"A systematic review of intermediate fusion in multimodal deep learning for biomedical applications","volume":"158","author":"Guarrasi","year":"2025","journal-title":"Image Vis. Comput."},{"key":"10.1016\/j.cose.2026.105170_bib0014","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2023.103371","article-title":"A framework for threat intelligence extraction and fusion","volume":"132","author":"Guo","year":"2023","journal-title":"Comput. Secur."},{"key":"10.1016\/j.cose.2026.105170_bib0015","article-title":"PRISMA2020: an R package and Shiny app for producing PRISMA 2020-compliant flow diagrams, with interactivity for optimised digital transparency and Open synthesis","volume":"18","author":"Haddaway","year":"2022","journal-title":"Campbell. Syst. Rev."},{"issue":"4","key":"10.1016\/j.cose.2026.105170_bib0016","doi-asserted-by":"crossref","first-page":"1008","DOI":"10.1046\/j.1365-2648.2000.t01-1-01567.x","article-title":"Research guidelines for the Delphi survey technique","volume":"32","author":"Hasson","year":"2000","journal-title":"J. Adv. Nurs."},{"issue":"4","key":"10.1016\/j.cose.2026.105170_bib0017","article-title":"Health care cybersecurity challenges and solutions under the climate of COVID-19: scoping review","volume":"23","author":"He","year":"2021","journal-title":"J. Med. Internet. Res."},{"issue":"8","key":"10.1016\/j.cose.2026.105170_bib0018","first-page":"7123","article-title":"Graph-based correlation analysis for clinical threat detection in IoMT networks","volume":"10","author":"He","year":"2023","journal-title":"IEEE Internet. Things. J."},{"issue":"1","key":"10.1016\/j.cose.2026.105170_bib0019","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3487890","article-title":"Artificial intelligence security: threats and countermeasures","volume":"55","author":"Hu","year":"2021","journal-title":"ACM. Comput. Surv."},{"issue":"4","key":"10.1016\/j.cose.2026.105170_bib0020","doi-asserted-by":"crossref","first-page":"4871","DOI":"10.1109\/TNSM.2024.3401200","article-title":"MITREtrieval: retrieving MITRE techniques from unstructured threat reports by fusion of deep learning and ontology","volume":"21","author":"Huang","year":"2024","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"issue":"1","key":"10.1016\/j.cose.2026.105170_bib0021","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3372823","article-title":"The AI-based cyber threat landscape: a survey","volume":"53","author":"Kaloudi","year":"2020","journal-title":"ACM. Comput. Surv."},{"key":"10.1016\/j.cose.2026.105170_bib0022","first-page":"102","article-title":"Key challenges for delivering clinical impact with artificial intelligence","volume":"21","author":"Kelly","year":"2023","journal-title":"BMC. Med."},{"issue":"1","key":"10.1016\/j.cose.2026.105170_bib0023","doi-asserted-by":"crossref","first-page":"159","DOI":"10.2307\/2529310","article-title":"The measurement of observer agreement for categorical data","volume":"33","author":"Landis","year":"1977","journal-title":"Biometrics"},{"key":"10.1016\/j.cose.2026.105170_bib0024","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2023.109736","article-title":"Correlation of cyber threat intelligence with sightings for intelligence assessment and augmentation","volume":"228","author":"Lin","year":"2023","journal-title":"Comput. Netw."},{"issue":"1","key":"10.1016\/j.cose.2026.105170_bib0025","first-page":"1","article-title":"TriCTI: an actionable cyber threat intelligence discovery system via trigger-enhanced neural network","volume":"5","author":"Liu","year":"2022","journal-title":"Cybersecur. (Singap)"},{"issue":"10","key":"10.1016\/j.cose.2026.105170_bib0026","doi-asserted-by":"crossref","DOI":"10.1016\/j.patter.2024.101046","article-title":"Avoiding common machine learning pitfalls","volume":"5","author":"Lones","year":"2024","journal-title":"Patterns"},{"key":"10.1016\/j.cose.2026.105170_bib0027","article-title":"Towards an explainable artificial intelligence approach for cyber threat intelligence","volume":"124","author":"McDermott","year":"2023","journal-title":"Comput. Secur."},{"key":"10.1016\/j.cose.2026.105170_bib0029","series-title":"2020 International Conference on Computational Science and Computational Intelligence (CSCI)","first-page":"109","article-title":"A survey of artificial intelligence in cybersecurity","author":"Morovat","year":"2020"},{"issue":"3","key":"10.1016\/j.cose.2026.105170_bib0030","first-page":"4128","article-title":"Edge computing for healthcare IoT: a comprehensive review of architectures, frameworks, and security challenges","volume":"11","author":"Nazari","year":"2024","journal-title":"IEEE Internet. Things. J."},{"key":"10.1016\/j.cose.2026.105170_bib0031","article-title":"A cyber risk prediction model using common vulnerabilities and exposures","volume":"232","author":"Negahdari Kia","year":"2023","journal-title":"Expert. Syst. Appl."},{"key":"10.1016\/j.cose.2026.105170_bib0032","article-title":"*DCB0129: clinical Risk Management\u2014Its application in the manufacture of Health IT systems (Amd 39\/2022)*","year":"2022","journal-title":"NHS England"},{"key":"10.1016\/j.cose.2026.105170_bib0033","article-title":"*DCB0160: clinical Risk Management\u2014Its application in the deployment and use of Health IT systems (Amd 40\/2022)*","year":"2022","journal-title":"NHS England"},{"key":"10.1016\/j.cose.2026.105170_bib0035","doi-asserted-by":"crossref","first-page":"n71","DOI":"10.1136\/bmj.n71","article-title":"The PRISMA 2020 statement: an updated guideline for reporting systematic reviews","volume":"372","author":"Page","year":"2021","journal-title":"BMJ"},{"key":"10.1016\/j.cose.2026.105170_bib0036","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1109\/ACCESS.2024.3444703","article-title":"SSOLV: real-time AI\/ML-based cybersecurity via statistical analysis","volume":"12","author":"Powell","year":"2024","journal-title":"IEEE Access."},{"issue":"6","key":"10.1016\/j.cose.2026.105170_bib0037","doi-asserted-by":"crossref","first-page":"5695","DOI":"10.1109\/TKDE.2022.3175719","article-title":"CSKG4APT: a cybersecurity knowledge graph for advanced persistent threat organisation attribution","volume":"35","author":"Ren","year":"2023","journal-title":"IEEE Trans. Knowl. Data Eng."},{"issue":"1","key":"10.1016\/j.cose.2026.105170_bib0038","doi-asserted-by":"crossref","first-page":"39","DOI":"10.1186\/s13643-020-01542-z","article-title":"PRISMA-S: an extension to the PRISMA statement for reporting literature searches in systematic reviews","volume":"10","author":"Rethlefsen","year":"2021","journal-title":"Syst. Rev."},{"key":"10.1016\/j.cose.2026.105170_bib0039","first-page":"218","article-title":"Cross-domain threat detection using federated learning in healthcare IoT environments","volume":"142","author":"Rivas","year":"2023","journal-title":"Future Gener. Comput. Syst."},{"issue":"16","key":"10.1016\/j.cose.2026.105170_bib0040","doi-asserted-by":"crossref","first-page":"7273","DOI":"10.3390\/s23167273","article-title":"A systematic literature review on cyber threat intelligence for organisational cybersecurity resilience","volume":"23","author":"Saeed","year":"2023","journal-title":"Sensors"},{"issue":"4","key":"10.1016\/j.cose.2026.105170_bib0041","doi-asserted-by":"crossref","first-page":"2149","DOI":"10.1109\/TDSC.2022.3168187","article-title":"Explainable artificial intelligence for cyber threat intelligence (XAI-CTI)","volume":"19","author":"Samtani","year":"2022","journal-title":"IEEE Trans. Dependable Secure Comput."},{"issue":"4","key":"10.1016\/j.cose.2026.105170_bib0042","doi-asserted-by":"crossref","first-page":"2525","DOI":"10.1109\/COMST.2021.3117338","article-title":"A comparative study on cyber threat intelligence: the security incident response perspective","volume":"23","author":"Schlette","year":"2021","journal-title":"IEEE Commun. Surv. Tutorials."},{"key":"10.1016\/j.cose.2026.105170_bib0043","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1109\/TAI.2025.3527398","article-title":"Cyber shadows: neutralizing security threats with AI and targeted policy measures","volume":"6","author":"Schmitt","year":"2025","journal-title":"IEEE Trans. Artif. Intell."},{"issue":"2","key":"10.1016\/j.cose.2026.105170_bib0044","doi-asserted-by":"crossref","first-page":"651","DOI":"10.3390\/s23020651","article-title":"A machine learning approach for the NLP-based analysis of cyber threats and vulnerabilities of the healthcare ecosystem","volume":"23","author":"Silvestri","year":"2023","journal-title":"Sensors"},{"issue":"3","key":"10.1016\/j.cose.2026.105170_bib0046","doi-asserted-by":"crossref","first-page":"1748","DOI":"10.1109\/COMST.2023.3273282","article-title":"Cyber threat intelligence mining for proactive cybersecurity defense: a survey and new perspectives","volume":"25","author":"Sun","year":"2023","journal-title":"IEEE Commun. Surv. Tutorials."},{"issue":"4","key":"10.1016\/j.cose.2026.105170_bib0048","doi-asserted-by":"crossref","first-page":"e216","DOI":"10.1016\/S2589-7500(22)00030-9","article-title":"Building an evidence standards framework for artificial intelligence-enabled digital health technologies","volume":"4","author":"Unsworth","year":"2022","journal-title":"Lancet Digit. Health"},{"key":"10.1016\/j.cose.2026.105170_bib0049","doi-asserted-by":"crossref","first-page":"54029","DOI":"10.1109\/ACCESS.2022.3175886","article-title":"An AI-powered network Threat Detection System","volume":"10","author":"Wang","year":"2022","journal-title":"IEEE Access."},{"issue":"1","key":"10.1016\/j.cose.2026.105170_bib0050","first-page":"1","article-title":"Artificial intelligence for system security assurance: a systematic literature review","volume":"24","author":"Wen","year":"2024","journal-title":"Int. J. Inf. Secur."},{"key":"10.1016\/j.cose.2026.105170_bib0051","doi-asserted-by":"crossref","first-page":"146598","DOI":"10.1109\/ACCESS.2020.3013145","article-title":"Artificial intelligence for cybersecurity: a systematic mapping of literature","volume":"8","author":"Wiafe","year":"2020","journal-title":"IEEE Access."},{"key":"10.1016\/j.cose.2026.105170_bib0052","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.103960","article-title":"APT-MMF: an advanced persistent threat actor attribution method based on multimodal and multilevel feature fusion","volume":"144","author":"Xiao","year":"2024","journal-title":"Comput. Secur."},{"key":"10.1016\/j.cose.2026.105170_bib0053","article-title":"An automated dynamic quality assessment method for cyber threat intelligence","volume":"148","author":"Yang","year":"2024","journal-title":"Comput. Secur."},{"key":"10.1016\/j.cose.2026.105170_bib0055","doi-asserted-by":"crossref","first-page":"23817","DOI":"10.1109\/ACCESS.2020.2968045","article-title":"Harnessing artificial intelligence capabilities to improve cybersecurity","volume":"8","author":"Zeadally","year":"2020","journal-title":"IEEE Access."},{"issue":"3","key":"10.1016\/j.cose.2026.105170_bib0057","first-page":"28","article-title":"Cybersecurity challenges in connected healthcare systems: a systematic review","volume":"47","author":"Zhang","year":"2023","journal-title":"J. Med. Syst."},{"key":"10.1016\/j.cose.2026.105170_bib0056","doi-asserted-by":"crossref","first-page":"1029","DOI":"10.1007\/s10462-021-09976-0","article-title":"Artificial intelligence in cyber security: research advances, challenges, and opportunities","volume":"55","author":"Zhang","year":"2021","journal-title":"Artif. Intell. Rev."},{"key":"10.1016\/j.cose.2026.105170_bib0058","doi-asserted-by":"crossref","DOI":"10.1016\/j.knosys.2021.108086","article-title":"Cyber threat prediction using dynamic heterogeneous graph learning","volume":"240","author":"Zhao","year":"2022","journal-title":"Knowl. Based. Syst."}],"container-title":["Computers & Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0167404826003469?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0167404826003469?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,9,23]],"date-time":"2026-09-23T07:33:31Z","timestamp":1790148811000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0167404826003469"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2027,1]]},"references-count":52,"alternative-id":["S0167404826003469"],"URL":"https:\/\/doi.org\/10.1016\/j.cose.2026.105170","relation":{},"ISSN":["0167-4048"],"issn-type":[{"value":"0167-4048","type":"print"}],"subject":[],"published":{"date-parts":[[2027,1]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Multimodal cyber threat intelligence fusion for healthcare cybersecurity risk assessment: A systematic review","name":"articletitle","label":"Article Title"},{"value":"Computers & Security","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.cose.2026.105170","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 The Authors. Published by Elsevier Ltd.","name":"copyright","label":"Copyright"}],"article-number":"105170"}}