{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,9]],"date-time":"2026-06-09T15:59:02Z","timestamp":1781020742451,"version":"3.54.1"},"reference-count":42,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100010418","name":"Institute of Information and Communications Technology Planning and Evaluation (IITP) grant funded by Korean Government","doi-asserted-by":"publisher","award":["2022-0-00089"],"award-info":[{"award-number":["2022-0-00089"]}],"id":[{"id":"10.13039\/501100010418","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Development of Clustering and Analysis Technology to Identify Cyber Attack Groups Based on Life-Cycle","award":["RS-2023-00235509"],"award-info":[{"award-number":["RS-2023-00235509"]}]},{"name":"Development of Security Monitoring Technology Based Network Behavior Against Encrypted Cyber Threats in ICT Convergence Environment"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/access.2025.3645226","type":"journal-article","created":{"date-parts":[[2025,12,17]],"date-time":"2025-12-17T18:47:51Z","timestamp":1765997271000},"page":"217799-217810","source":"Crossref","is-referenced-by-count":1,"title":["Enhancing Incident Response Through Effective TTPs Analysis: A Design Approach"],"prefix":"10.1109","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0009-0006-6993-1526","authenticated-orcid":false,"given":"Tae-Hyun","family":"Han","sequence":"first","affiliation":[{"name":"Department of Information Security, Gachon University, Seongnam, Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-0429-3852","authenticated-orcid":false,"given":"Sang-Yeon","family":"Hwang","sequence":"additional","affiliation":[{"name":"SecuLayer Inc., Seongdong-gu, Seoul, Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3078-3459","authenticated-orcid":false,"given":"Tae-Jin","family":"Lee","sequence":"additional","affiliation":[{"name":"Department of Smart Security, Gachon University, Seongnam, Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/j.egyr.2021.08.126"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.3390\/electronics12061333"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.3390\/s23156666"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-44885-4_5"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-35264-5_21"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/comst.2019.2891891"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/s11227-016-1850-4"},{"key":"ref8","article-title":"Constructing unrestricted adversarial examples with generative models","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Song"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1080\/00396338.2011.555586"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/tpwrd.2010.2050340"},{"key":"ref11","volume-title":"Lockheedmartin","year":"2024"},{"key":"ref12","volume-title":"The-Pyramid-of-Pain","year":"2024"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.32604\/cmc.2021.014223"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.array.2019.100015"},{"key":"ref15","volume-title":"MITRE ATT&CK","year":"2024"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/comst.2023.3299519"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/access.2023.3344680"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CNS48642.2020.9162207"},{"key":"ref19","article-title":"Attack techniques and threat identification for vulnerabilities","author":"Adam","year":"2022","journal-title":"arXiv:2206.11171"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/DS-RT50469.2020.9213690"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.3390\/s22228745"},{"key":"ref22","article-title":"SoK: The MITRE ATT&CK framework in research and practice","author":"Roy","year":"2023","journal-title":"arXiv:2304.07411"},{"key":"ref23","volume-title":"4th Quarter Cyber Threat Trends Report","year":"2020"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-86"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2021.3054966"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/access.2023.3315121"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.icte.2023.05.008"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-021-00106-5"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3579375.3579391"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3097983.3098036"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.3115\/v1\/D14-1162"},{"key":"ref32","volume-title":"Common Vulnerabilities and Exposures (CVE)","year":"2024"},{"key":"ref33","volume-title":"Common Attack Pattern Enumeration and Classification (CAPEC)","year":"2024"},{"key":"ref34","volume-title":"IBM","year":"2024"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ISDFS58141.2023.10131867"},{"key":"ref36","volume-title":"C-TAS","year":"2025"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-17140-6_29"},{"key":"ref38","article-title":"ThreatWeaver: Automated kill chain generator based on MITRE ATT&CK and graph theory","author":"Belluccini"},{"key":"ref39","article-title":"KillChainGraph: ML framework for predicting and mapping ATT&CK techniques","author":"Singh","year":"2025","journal-title":"arXiv:2508.18230"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.23919\/cnsm62983.2024.10814501"},{"key":"ref41","volume-title":"MITRE Technique Inference Engine(TIE)","year":"2025"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.3390\/electronics14020257"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6287639\/10820123\/11303062.pdf?arnumber=11303062","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,2]],"date-time":"2026-01-02T05:44:20Z","timestamp":1767332660000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11303062\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":42,"URL":"https:\/\/doi.org\/10.1109\/access.2025.3645226","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}