{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,7]],"date-time":"2026-08-07T16:52:32Z","timestamp":1786121552825,"version":"build-2736575974"},"reference-count":34,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1109\/eurospw72509.2026.00028","type":"proceedings-article","created":{"date-parts":[[2026,8,6]],"date-time":"2026-08-06T19:11:11Z","timestamp":1786043471000},"page":"187-194","source":"Crossref","is-referenced-by-count":0,"title":["Graph-Based Modelling and Prediction of Adversary Behaviour from Honeypot Traces"],"prefix":"10.1109","author":[{"given":"David","family":"Guilherme","sequence":"first","affiliation":[{"name":"Universidade de Lisboa"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Miguel","family":"Fa\u00edsco","sequence":"additional","affiliation":[{"name":"Universidade de Lisboa"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hans P.","family":"Reiser","sequence":"additional","affiliation":[{"name":"Reykjavik University","place":["Reykjavik, Iceland"],"department":["Department of Computer Science"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ib\u00e9ria","family":"Medeiros","sequence":"additional","affiliation":[{"name":"Universidade de Lisboa"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Common attack pattern enumeration and classification","year":"2020"},{"key":"ref2","article-title":"Know your adversary: insights for a better adversarial behavioral model","volume-title":"Proceedings of the Annual Meeting of the Cognitive Science Society","volume":"38","author":"Abbasi"},{"key":"ref3","article-title":"MITRE ATT&CK","year":"2015"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-023-10465-9"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3447772"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3640313"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-93417-4_38"},{"key":"ref8","article-title":"Recent advances in recurrent neural networks","author":"Salehinejad","year":"2017","journal-title":"arXiv preprint arXiv:1801.01078"},{"key":"ref9","doi-asserted-by":"crossref","first-page":"103737","DOI":"10.1016\/j.jnca.2023.103737","article-title":"A survey of contemporary open-source honeypots, frameworks, and tools","volume":"220","author":"Ilg","year":"2023","journal-title":"Journal of Network and Computer Applications"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485353"},{"key":"ref11","first-page":"29","article-title":"Building a cybersecurity knowledge graph with cybergraph","volume-title":"Proceedings of the 2024 ACM\/IEEE 4th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS) and 2024 IEEE\/ACM Second International Workshop on Software Vulnerability","author":"Falcarin"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3701716.3715454"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2025.127888"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2023.109031"},{"key":"ref15","article-title":"Probabilistic prediction of the behaviour of cyber attackers","author":"Camacho Gonzalez","year":"2020","journal-title":"Degree project in Computer Science and Engineering, second cycle, KTH, School of Electrical Engineering and Computer Science (EECS)"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3609510.3609818"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2025.3603403"},{"key":"ref18","article-title":"Cowrie: SSH\/Telnet Honeypot","year":"2026"},{"key":"ref19","article-title":"T-Pot 24.04.1","year":"2024"},{"key":"ref20","article-title":"Virusshare","year":"2007"},{"key":"ref21","article-title":"A survey on honeypot software and data analysis","author":"Nawrocki","year":"2016","journal-title":"arXiv preprint arXiv:1608.06249"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3558482.3590195"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3600160.3604984"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-032-11539-3_14"},{"key":"ref25","article-title":"eBPF for Windows"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1631\/fitee.1601325"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.23919\/DATE.2017.7926977"},{"issue":"3","key":"ref28","doi-asserted-by":"crossref","DOI":"10.3390\/sym15030677","article-title":"Artificial intelligence-based malware detection, analysis, and mitigation","volume":"15","author":"Djenna","year":"2023","journal-title":"Symmetry"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2906934"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3638552"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2970466"},{"key":"ref32","article-title":"Virusshare","author":"Greenhill","year":"2026"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2019.04.018"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1049\/cmu2.12736"}],"event":{"name":"2026 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW)","location":"Lisbon, Portugal","start":{"date-parts":[[2026,7,6]]},"end":{"date-parts":[[2026,7,10]]}},"container-title":["2026 IEEE European Symposium on Security and Privacy Workshops (EuroS&amp;PW)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11631844\/11631895\/11631929.pdf?arnumber=11631929","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,7]],"date-time":"2026-08-07T04:52:23Z","timestamp":1786078343000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11631929\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":34,"URL":"https:\/\/doi.org\/10.1109\/eurospw72509.2026.00028","relation":{},"subject":[],"published":{"date-parts":[[2026,7]]}}}