{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T15:15:13Z","timestamp":1783610113871,"version":"3.55.0"},"reference-count":45,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"18","license":[{"start":{"date-parts":[[2025,9,15]],"date-time":"2025-09-15T00:00:00Z","timestamp":1757894400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,9,15]],"date-time":"2025-09-15T00:00:00Z","timestamp":1757894400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,9,15]],"date-time":"2025-09-15T00:00:00Z","timestamp":1757894400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Guangdong S&T Program","award":["2024B0101010002"],"award-info":[{"award-number":["2024B0101010002"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U2436208"],"award-info":[{"award-number":["U2436208"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62372129"],"award-info":[{"award-number":["62372129"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Project of Guangdong Key Laboratory of Industrial Control System Security","award":["2024B1212020010"],"award-info":[{"award-number":["2024B1212020010"]}]},{"name":"Special Funds for the Cultivation of Guangdong College Students\u2019 Scientific and Technological Innovation","award":["pdjh2025bk172"],"award-info":[{"award-number":["pdjh2025bk172"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Internet Things J."],"published-print":{"date-parts":[[2025,9,15]]},"DOI":"10.1109\/jiot.2025.3586658","type":"journal-article","created":{"date-parts":[[2025,7,7]],"date-time":"2025-07-07T13:52:00Z","timestamp":1751896320000},"page":"38493-38508","source":"Crossref","is-referenced-by-count":2,"title":["APT-KG2QA: An Intelligent Fine-Tuning Strategy for Large Language Models Utilizing the APT Knowledge Graph"],"prefix":"10.1109","volume":"12","author":[{"ORCID":"https:\/\/orcid.org\/0009-0001-1014-2294","authenticated-orcid":false,"given":"Bingqi","family":"Ma","sequence":"first","affiliation":[{"name":"Cyberspace Institute of Advanced Technology and the Huangpu Research School, Guangzhou University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9424-8282","authenticated-orcid":false,"given":"Yinghai","family":"Zhou","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology and the Huangpu Research School, Guangzhou University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Si","family":"Wu","sequence":"additional","affiliation":[{"name":"Network Security Protection Department, China Aerospace Science and Technology Corporation, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-5494-1513","authenticated-orcid":false,"given":"Ziyu","family":"Wang","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology and the Huangpu Research School, Guangzhou University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-2380-9317","authenticated-orcid":false,"given":"Yanjun","family":"Xiao","sequence":"additional","affiliation":[{"name":"PINGXING Lab, Nsfocus Technology Group Company, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yu","family":"Cui","sequence":"additional","affiliation":[{"name":"Cyber Range Department, Range-Soft, Surfilter Network Technology, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0246-0778","authenticated-orcid":false,"given":"Yuan","family":"Liu","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangdong Key Laboratory of Industrial Control System Security, and Huangpu Research School of Guangzhou University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9409-5359","authenticated-orcid":false,"given":"Zhihong","family":"Tian","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, the Guangdong Key Laboratory of Industrial Control System Security, and the Huangpu Research School, Guangzhou University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2022.3175719"},{"key":"ref2","volume-title":"2024 Global Advanced Persistent Threat (APT) Research Report","year":"2025"},{"key":"ref3","first-page":"27730","article-title":"Training language models to follow instructions with human feedback","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"35","author":"Ouyang"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TSUSC.2023.3240411"},{"key":"ref5","volume-title":"ATT&CK\u00ae is a Globally-Accessible Knowledge Base of Adversary Tactics and Techniques Based on Real-World Observations","year":"2025"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/BigData59044.2023.10386611"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-17140-6_29"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW61312.2024.00018"},{"key":"ref9","article-title":"KGV: Integrating large language models with knowledge graphs for Cyber threat intelligence credibility assessment","author":"Wu","year":"2024","journal-title":"arXiv:2408.08088"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/CSECS60003.2023.10428218"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i21.30362"},{"key":"ref12","article-title":"Cyber knowledge completion using large language models","author":"Webb","year":"2024","journal-title":"arXiv:2409.16176"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3652594"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CSR61664.2024.10679494"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2024.3352100"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom60117.2023.00076"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1609\/aaaiss.v3i1.31186"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2024.124912"},{"issue":"5","key":"ref19","first-page":"1230","article-title":"Development of deception defense technology and exploration of its large language model applications","volume":"61","author":"Wang","year":"2024","journal-title":"J. Comput. Res. Develop."},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/s10922-024-09831-x"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1016\/j.hcc.2024.100211"},{"key":"ref22","article-title":"360 security large model.","year":"2024"},{"key":"ref23","article-title":"Dongfangtong deep security large model accelerates the decoding of new\u2014Quality productivity","year":"2024"},{"key":"ref24","article-title":"Trend micro launches trend cybertron, the first AI\u2014Driven, full\u2014Stack solution for enterprise cybersecurity workloads.","author":"Micro","year":"2025"},{"key":"ref25","volume-title":"Security-enhanced deepseek","year":"2025"},{"key":"ref26","article-title":"Asiainfo security launches its self-developed large model \u2018Xinlifang\u2019 in the network security industry","year":"2025"},{"key":"ref27","article-title":"Seccorpus: Technical practice of building data for security domain large models","year":"2025"},{"key":"ref28","article-title":"Sangfor security GPT."},{"key":"ref29","article-title":"Qax-GPT security large model.","year":"2025"},{"key":"ref30","article-title":"Hengnao security vertical domain large model system.","year":"2024"},{"issue":"2","key":"ref31","first-page":"36","article-title":"LLM-based method for threat intelligence entity-relation extraction","volume":"2","author":"Ma","year":"2024","journal-title":"J. Cyberspace Security Sci."},{"key":"ref32","article-title":"The Cyber kill chain","author":"Martin","year":"2011"},{"key":"ref33","article-title":"Sigma\u2014Generic signature format for SIEM systems","year":"2023"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.acl-demos.38"},{"key":"ref35","article-title":"Qwen2.5-math technical report: Toward mathematical expert model via self-improvement","volume-title":"arXiv:2409.12122","author":"Yang","year":"2024"},{"key":"ref36","article-title":"Baichuan 2: Open large-scale language models","author":"Yang","year":"2023","journal-title":"arXiv:2309.10305"},{"key":"ref37","article-title":"DeepSeek-R1: Incentivizing reasoning capability in LLMs via reinforcement learning","author":"Guo","year":"2025","journal-title":"arXiv:2501.12948"},{"key":"ref38","article-title":"The Llama 3 herd of models","author":"Dubey","year":"2024","journal-title":"arXiv:2407.21783"},{"key":"ref39","first-page":"3","article-title":"LoRa: Low-rank adaptation of large language models","volume-title":"Proc. ICLR","volume":"1","author":"Hu"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.3115\/1073083.1073135"},{"key":"ref41","first-page":"74","article-title":"ROUGE: A package for automatic evaluation of summaries","volume-title":"Text Summarization Branches Out","author":"Lin","year":"2004"},{"key":"ref42","article-title":"Large language models are state-of-the-art evaluators of translation quality","author":"Kocmi","year":"2023","journal-title":"arXiv:2302.14520"},{"key":"ref43","article-title":"Trustworthy LLMs: A survey and guideline for evaluating large language models\u2019 alignment","author":"Liu","year":"2023","journal-title":"arXiv:2308.05374"},{"key":"ref44","article-title":"Gpt-4o system card","author":"Hurst","year":"2024","journal-title":"arXiv:2410.21276"},{"key":"ref45","article-title":"DeepSeek-V3 technical report","volume-title":"arXiv:2412.19437","author":"Liu","year":"2024"}],"container-title":["IEEE Internet of Things Journal"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6488907\/11153580\/11072442.pdf?arnumber=11072442","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,10]],"date-time":"2025-09-10T05:56:57Z","timestamp":1757483817000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11072442\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,15]]},"references-count":45,"journal-issue":{"issue":"18"},"URL":"https:\/\/doi.org\/10.1109\/jiot.2025.3586658","relation":{},"ISSN":["2327-4662","2372-2541"],"issn-type":[{"value":"2327-4662","type":"electronic"},{"value":"2372-2541","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,9,15]]}}}