{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,13]],"date-time":"2026-05-13T17:27:53Z","timestamp":1778693273115,"version":"3.51.4"},"reference-count":17,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,9,30]],"date-time":"2025-09-30T00:00:00Z","timestamp":1759190400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,9,30]],"date-time":"2025-09-30T00:00:00Z","timestamp":1759190400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,9,30]]},"DOI":"10.1109\/nof66640.2025.11223332","type":"proceedings-article","created":{"date-parts":[[2025,11,5]],"date-time":"2025-11-05T18:37:39Z","timestamp":1762367859000},"page":"91-95","source":"Crossref","is-referenced-by-count":2,"title":["Extracting Attack Testflows from Unstructured Cyber Threat Reports using Contextual Analysis"],"prefix":"10.1109","author":[{"given":"Faissal","family":"Ahmadou","sequence":"first","affiliation":[{"name":"Concordia University,Montréal,Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sepehr","family":"Ghaffarzadegan","sequence":"additional","affiliation":[{"name":"Concordia University,Montréal,Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Boubakr","family":"Nour","sequence":"additional","affiliation":[{"name":"Ericsson Security Research,Montréal,Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Makan","family":"Pourzandi","sequence":"additional","affiliation":[{"name":"Ericsson Security Research,Montréal,Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mourad","family":"Debbabi","sequence":"additional","affiliation":[{"name":"Concordia University,Montréal,Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chadi","family":"Assi","sequence":"additional","affiliation":[{"name":"Concordia University,Montréal,Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","year":"2024","journal-title":"APT41 Initiates Global Intrusion Campaign Using Multiple Exploits"},{"key":"ref2","year":"2023","journal-title":"Game Over: Detecting and Stopping an APT41 Operation"},{"key":"ref3","year":"2022","journal-title":"Double Dragon APT41, a dual espionage and cyber crime operation"},{"key":"ref4","volume-title":"Threat Horizons - April 2023 Threat Horizons Report","year":"2023"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.103815"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-37586-6_15"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2019.2891891"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3607199.3607208"},{"key":"ref9","article-title":"Secure: Benchmarking generative large language models for cybersecurity advisory","author":"Bhusal","year":"2024","journal-title":"arXiv"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP51992.2021.00046"},{"key":"ref11","article-title":"IC-SECURE: Intelligent System for Assisting Security Experts in Generating Playbooks for Automated Incident Response","author":"Kremer","year":"2023","journal-title":"arXiv"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE51399.2021.00024"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134646"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCI56745.2023.10128641"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/CSECS60003.2023.10428218"},{"key":"ref16","article-title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","author":"Devlin","year":"2018","journal-title":"arXiv"},{"key":"ref17","year":"2023","journal-title":"Apt41 us state governments: Threat intelligence insights"}],"event":{"name":"2025 16th International Conference on Network of the Future (NoF)","location":"Montreal, QC, Canada","start":{"date-parts":[[2025,9,30]]},"end":{"date-parts":[[2025,10,3]]}},"container-title":["2025 16th International Conference on Network of the Future (NoF)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11223274\/11223287\/11223332.pdf?arnumber=11223332","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,6]],"date-time":"2025-11-06T06:08:16Z","timestamp":1762409296000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11223332\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,30]]},"references-count":17,"URL":"https:\/\/doi.org\/10.1109\/nof66640.2025.11223332","relation":{},"subject":[],"published":{"date-parts":[[2025,9,30]]}}}