{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,6]],"date-time":"2026-01-06T05:47:54Z","timestamp":1767678474321,"version":"3.48.0"},"reference-count":34,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T00:00:00Z","timestamp":1760832000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T00:00:00Z","timestamp":1760832000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,10,19]]},"DOI":"10.1109\/aiccsa66935.2025.11315325","type":"proceedings-article","created":{"date-parts":[[2026,1,5]],"date-time":"2026-01-05T18:35:55Z","timestamp":1767638155000},"page":"1-8","source":"Crossref","is-referenced-by-count":0,"title":["Attack Classification Using Retrieval-Augmented Generation and Large Language Models"],"prefix":"10.1109","author":[{"given":"Ivan","family":"Kawaminami","sequence":"first","affiliation":[{"name":"University of Arizona"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mohammad Wali Ur","family":"Rahman","sequence":"additional","affiliation":[{"name":"University of Arizona"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jin","family":"Bai","sequence":"additional","affiliation":[{"name":"Autonomic Computing Laboratory"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Salim","family":"Hariri","sequence":"additional","affiliation":[{"name":"University of Arizona"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3723158"},{"issue":"3","key":"ref2","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3663761","article-title":"PCAM: A Data-driven Probabilistic Cyber-alert Management Framework","volume":"25","author":"Ahmed","year":"2022","journal-title":"ACM Trans. Priv. Secur"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3695462"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.findings-emnlp.833"},{"key":"ref5","article-title":"On the Uses of Large Language Models to Interpret Ambiguous Cyberattack Descriptions","author":"Fayyazi","year":"2023","journal-title":"arXiv preprint"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.104016"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.3390\/app14093829"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/access.2023.3256979"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102788"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/infocomwkshps51825.2021.9484622"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/jiot.2024.3360294"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/access.2022.3152577"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.13052\/jwe1540-9589.21413"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/jiot.2022.3144127"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/csr51186.2021.9527957"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/dcoss-iot61029.2024.00026"},{"issue":"9","key":"ref17","first-page":"15810","article-title":"Revolutionizing Cyber Threat Detection With Large Language Models: A Privacy-Preserving BERT-Based Lightweight Model for IoT\/IIoT Devices","volume":"11","author":"Alqahtani","year":"2024","journal-title":"IEEE Internet of Things Journal"},{"key":"ref18","article-title":"Cyber-Attack Technique Classification Using Two-Stage Trained Large Language Models","author":"You","year":"2024","journal-title":"arXiv preprint arXiv:2411.18755"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.3390\/app14093829"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/access.2025.3541146"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3650105.3652299"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/icaiic64266.2025.10920868"},{"journal-title":"Red Canary","article-title":"Atomic Red Team","year":"2018","key":"ref23"},{"year":"2021","key":"ref25","article-title":"AA21-048A: AppleJeus: Analysis of North Korea\u2019s Cryptocurrency Malware"},{"key":"ref26","article-title":"Kimsuky APT continues to target South Korean government using AppleSeed backdoor","author":"Stockley","year":"2023","journal-title":"ThreatDown Blog"},{"journal-title":"Statista","article-title":"Annual ransomware revenue worldwide 2016-2023","year":"2025","key":"ref28"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/aiccsa53542.2021.9686823"},{"year":"2021","key":"ref30","article-title":"About WMI-Win32 apps"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.33168\/jsms.2022.0602"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/TIM.2022.3220286"},{"key":"ref33","first-page":"507","article-title":"Laplacian score for feature selection","volume":"19","author":"He","year":"2006","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2019.2909204"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/mnet.2024.3401159"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/tse.2024.3440503"}],"event":{"name":"2025 IEEE\/ACS 22nd International Conference on Computer Systems and Applications (AICCSA)","start":{"date-parts":[[2025,10,19]]},"location":"Doha, Qatar","end":{"date-parts":[[2025,10,22]]}},"container-title":["2025 IEEE\/ACS 22nd International Conference on Computer Systems and Applications (AICCSA)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11315137\/11315140\/11315325.pdf?arnumber=11315325","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,6]],"date-time":"2026-01-06T05:45:03Z","timestamp":1767678303000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11315325\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,19]]},"references-count":34,"URL":"https:\/\/doi.org\/10.1109\/aiccsa66935.2025.11315325","relation":{},"subject":[],"published":{"date-parts":[[2025,10,19]]}}}