{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,5]],"date-time":"2026-07-05T04:23:10Z","timestamp":1783225390746,"version":"3.54.6"},"reference-count":47,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["NSF-2149969"],"award-info":[{"award-number":["NSF-2149969"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["NSF-1849113"],"award-info":[{"award-number":["NSF-1849113"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["(NSF) DUE-1303362 (Scholarship-for-Service)"],"award-info":[{"award-number":["(NSF) DUE-1303362 (Scholarship-for-Service)"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["(NSF) OIA-2218046"],"award-info":[{"award-number":["(NSF) OIA-2218046"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Army Research Laboratory","award":["W56KGU-20-C0002"],"award-info":[{"award-number":["W56KGU-20-C0002"]}]},{"name":"Consejo Nacional de Ciencia y Tecnolog\u00eda (CONACyT) for the Ph.D. Fellowship Program","award":["786773"],"award-info":[{"award-number":["786773"]}]},{"name":"University of North Dakota\u2019s Early Career Scholars Program Award"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/access.2026.3653365","type":"journal-article","created":{"date-parts":[[2026,1,12]],"date-time":"2026-01-12T22:02:28Z","timestamp":1768255348000},"page":"11560-11581","source":"Crossref","is-referenced-by-count":1,"title":["Attack Classification and Response Framework (ACR) Based on Machine Learning and CAPEC Ontology"],"prefix":"10.1109","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5206-4693","authenticated-orcid":false,"given":"Ivan","family":"Kawaminami","sequence":"first","affiliation":[{"name":"NSF Center for Cloud and Autonomic Computing, The University of Arizona, Tucson, AZ, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1205-3890","authenticated-orcid":false,"given":"Sicong","family":"Shao","sequence":"additional","affiliation":[{"name":"School of Electrical Engineering and Computer Science, University of North Dakota, Grand Forks, ND, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3956-3401","authenticated-orcid":false,"given":"Salim","family":"Hariri","sequence":"additional","affiliation":[{"name":"NSF Center for Cloud and Autonomic Computing, The University of Arizona, Tucson, AZ, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Cihan","family":"Tunc","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, University of North Texas, Denton, TX, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"2024 Unit 42 Incident Response Report","year":"2024"},{"key":"ref2","volume-title":"2023 Internet Crime Report","year":"2023"},{"key":"ref3","volume-title":"APWG Q1 Report: Phone-Based Phishing Grows Explosively, Shifting the Cybercrime Threatscape","year":"2024"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/access.2023.3268535"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/icai52893.2021.9639550"},{"key":"ref6","volume-title":"Attack Pattern Ontology: A Common Language for Attack Information Sharing Between Organizations","author":"Zhu","year":"2015"},{"key":"ref7","volume-title":"Common Attack Pattern Enumeration and Classification (CAPEC)","year":"2012"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/access.2023.3322427"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/cse53436.2021.00030"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/tcyb.2021.3054923"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/tsg.2021.3067896"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/tits.2023.3297527"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/hicss.2014.600"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/jiot.2021.3079916"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/access.2024.3403197"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/access.2023.3256979"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102788"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/infocomwkshps51825.2021.9484622"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/jiot.2024.3360294"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/access.2022.3152577"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.13052\/jwe1540-9589.21413"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/jiot.2022.3144127"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/jiot.2023.3237797"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/csr51186.2021.9527957"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/tem.2020.2998741"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/access.2021.3116870"},{"key":"ref27","volume-title":"Ed Canary","year":"2018"},{"key":"ref28","volume-title":"MITRE ATT&CK","year":"2022"},{"key":"ref29","volume-title":"AA21-048A: AppleJeus: Analysis of North Korea\u2019s Cryptocurrency Malware","year":"2021"},{"key":"ref30","volume-title":"Kimsuky APT Continues To Target South Korean Government Using AppleSeed Backdoor","author":"Stockley","year":"2023"},{"key":"ref31","volume-title":"APT38","year":"2022"},{"key":"ref32","volume-title":"Annual Ransomware Revenue Worldwide 2016\u20132023","year":"2025"},{"key":"ref33","first-page":"507","article-title":"Laplacian score for feature selection","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"18","author":"He"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/aiccsa53542.2021.9686823"},{"key":"ref35","volume-title":"About WMI-Win32 Apps","year":"2021"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.33168\/jsms.2022.0602"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/tim.2022.3220286"},{"key":"ref38","first-page":"1","article-title":"Analysis of a random forests model","volume-title":"J. Mach. Learn. Res.","volume":"13","year":"2012"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/1961189.1961199"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939785"},{"key":"ref41","first-page":"3146","article-title":"Lightgbm: A highly efficient gradient boosting decision tree","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Ke"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2020.103770"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/TRO.2011.2127110"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2016.2615622"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/tsc.2020.3030211"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/tem.2020.2979832"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/access.2024.3417182"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/6287639\/11323511\/11346846-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6287639\/11323511\/11346846.pdf?arnumber=11346846","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,7]],"date-time":"2026-02-07T05:41:16Z","timestamp":1770442876000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11346846\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":47,"URL":"https:\/\/doi.org\/10.1109\/access.2026.3653365","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}