{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T07:21:03Z","timestamp":1790839263308,"version":"4.1.0"},"publisher-location":"New York, NY, USA","reference-count":30,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,6,14]],"date-time":"2023-06-14T00:00:00Z","timestamp":1686700800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,6,14]]},"DOI":"10.1145\/3590777.3590804","type":"proceedings-article","created":{"date-parts":[[2023,5,27]],"date-time":"2023-05-27T06:11:40Z","timestamp":1685167900000},"page":"159-166","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":5,"title":["RADAR: A TTP-based Extensible, Explainable, and Effective System for Network Traffic Analysis and Malware Detection"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0054-9610","authenticated-orcid":false,"given":"Yashovardhan","family":"Sharma","sequence":"first","affiliation":[{"name":"University of Oxford, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2275-7026","authenticated-orcid":false,"given":"Simon","family":"Birnbach","sequence":"additional","affiliation":[{"name":"University of Oxford, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2340-3040","authenticated-orcid":false,"given":"Ivan","family":"Martinovic","sequence":"additional","affiliation":[{"name":"University of Oxford, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,6,14]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Learning the Associations of MITRE ATT&CK Adversarial Techniques. In IEEE Conference on Communications and Network Security (CNS). IEEE.","author":"Al-Shaer Rawan","year":"2020","unstructured":"Rawan Al-Shaer , Jonathan\u00a0 M Spring , and Eliana Christou . 2020 . Learning the Associations of MITRE ATT&CK Adversarial Techniques. In IEEE Conference on Communications and Network Security (CNS). IEEE. Rawan Al-Shaer, Jonathan\u00a0M Spring, and Eliana Christou. 2020. Learning the Associations of MITRE ATT&CK Adversarial Techniques. In IEEE Conference on Communications and Network Security (CNS). IEEE."},{"key":"e_1_3_2_1_2_1","volume-title":"Anderson and Phil Roth","author":"S.","year":"2018","unstructured":"Hyrum\u00a0 S. Anderson and Phil Roth . 2018 . EMBER : An Open Dataset for Training Static PE Malware Machine Learning Models . arxiv:1804.04637\u00a0[cs.CR] Hyrum\u00a0S. Anderson and Phil Roth. 2018. EMBER: An Open Dataset for Training Static PE Malware Machine Learning Models. arxiv:1804.04637\u00a0[cs.CR]"},{"key":"e_1_3_2_1_3_1","volume-title":"European Interdisciplinary Cybersecurity Conference. ACM.","author":"Atzmueller Martin","year":"2022","unstructured":"Martin Atzmueller and Rushed Kanawati . 2022 . Explainability in Cyber Security using Complex Network Analysis: A Brief Methodological Overview . In European Interdisciplinary Cybersecurity Conference. ACM. Martin Atzmueller and Rushed Kanawati. 2022. Explainability in Cyber Security using Complex Network Analysis: A Brief Methodological Overview. In European Interdisciplinary Cybersecurity Conference. ACM."},{"key":"e_1_3_2_1_4_1","volume-title":"Explainable Artificial Intelligence in CyberSecurity: A Survey","author":"Capuano Nicola","year":"2022","unstructured":"Nicola Capuano , Giuseppe Fenza , Vincenzo Loia , and Claudio Stanzione . 2022. Explainable Artificial Intelligence in CyberSecurity: A Survey . IEEE Access ( 2022 ). Nicola Capuano, Giuseppe Fenza, Vincenzo Loia, and Claudio Stanzione. 2022. Explainable Artificial Intelligence in CyberSecurity: A Survey. IEEE Access (2022)."},{"key":"e_1_3_2_1_5_1","volume-title":"Evolution of IoT Linux Malware: A MITRE ATT&CK TTP Based Approach. In APWG Symposium on eCrime.","author":"Chierzi Veronica","year":"2021","unstructured":"Veronica Chierzi and Fernando Merc\u00eas . 2021 . Evolution of IoT Linux Malware: A MITRE ATT&CK TTP Based Approach. In APWG Symposium on eCrime. Veronica Chierzi and Fernando Merc\u00eas. 2021. Evolution of IoT Linux Malware: A MITRE ATT&CK TTP Based Approach. In APWG Symposium on eCrime."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC5101"},{"key":"e_1_3_2_1_7_1","volume-title":"On The Empirical Effectiveness of Unrealistic Adversarial Hardening Against Realistic Adversarial Attacks. In IEEE Symposium on Security and Privacy (SP). IEEE Computer Society.","author":"Dyrmishi Salijona","year":"2023","unstructured":"Salijona Dyrmishi , Salah Ghamizi , Thibault Simonetto , Yves Le\u00a0Traon , and Maxime Cordy . 2023 . On The Empirical Effectiveness of Unrealistic Adversarial Hardening Against Realistic Adversarial Attacks. In IEEE Symposium on Security and Privacy (SP). IEEE Computer Society. Salijona Dyrmishi, Salah Ghamizi, Thibault Simonetto, Yves Le\u00a0Traon, and Maxime Cordy. 2023. On The Empirical Effectiveness of Unrealistic Adversarial Hardening Against Realistic Adversarial Attacks. In IEEE Symposium on Security and Privacy (SP). IEEE Computer Society."},{"key":"e_1_3_2_1_8_1","volume-title":"Proc. of IEEE Big Data.","author":"Fairbanks Jeffrey","year":"2021","unstructured":"Jeffrey Fairbanks , Andres Orbe , Christine Patterson , Janet Layne , Edoardo Serra , and Marion Scheepers . 2021 . Identifying ATT&CK Tactics in Android Malware Control Flow Graph Through Graph Representation Learning and Interpretability . In Proc. of IEEE Big Data. Jeffrey Fairbanks, Andres Orbe, Christine Patterson, Janet Layne, Edoardo Serra, and Marion Scheepers. 2021. Identifying ATT&CK Tactics in Android Malware Control Flow Graph Through Graph Representation Learning and Interpretability. In Proc. of IEEE Big Data."},{"key":"e_1_3_2_1_9_1","volume-title":"The rise of machine learning for detection and classification of malware: Research developments, trends and challenges. J. Netw. Comput. Appl. 153","author":"Gibert Daniel","year":"2020","unstructured":"Daniel Gibert , Carles Mateu , and Jordi Planes . 2020. The rise of machine learning for detection and classification of malware: Research developments, trends and challenges. J. Netw. Comput. Appl. 153 ( 2020 ). Daniel Gibert, Carles Mateu, and Jordi Planes. 2020. The rise of machine learning for detection and classification of malware: Research developments, trends and challenges. J. Netw. Comput. Appl. 153 (2020)."},{"key":"e_1_3_2_1_10_1","volume-title":"XAI - Explainable artificial intelligence. Sci. Robotics","author":"Gunning David","year":"2019","unstructured":"David Gunning , Mark Stefik , Jaesik Choi , Timothy Miller , Simone Stumpf , and Guang Yang . 2019. XAI - Explainable artificial intelligence. Sci. Robotics ( 2019 ). David Gunning, Mark Stefik, Jaesik Choi, Timothy Miller, Simone Stumpf, and Guang Yang. 2019. XAI - Explainable artificial intelligence. Sci. Robotics (2019)."},{"key":"e_1_3_2_1_11_1","volume-title":"Tactical Provenance Analysis for Endpoint Detection and Response Systems. In IEEE Symp. on S&P.","author":"Hassan Wajih\u00a0Ul","year":"2020","unstructured":"Wajih\u00a0Ul Hassan , Adam Bates , and Daniel Marino . 2020 . Tactical Provenance Analysis for Endpoint Detection and Response Systems. In IEEE Symp. on S&P. Wajih\u00a0Ul Hassan, Adam Bates, and Daniel Marino. 2020. Tactical Provenance Analysis for Endpoint Detection and Response Systems. In IEEE Symp. on S&P."},{"key":"e_1_3_2_1_12_1","volume-title":"Proc. of ACSAC.","author":"Husari Ghaith","year":"2017","unstructured":"Ghaith Husari , Ehab Al-Shaer , Mohiuddin Ahmed , Bill Chu , and Xi Niu . 2017 . TTPDrill: Automatic and Accurate Extraction of Threat Actions From Unstructured Text of CTI Sources . In Proc. of ACSAC. Ghaith Husari, Ehab Al-Shaer, Mohiuddin Ahmed, Bill Chu, and Xi Niu. 2017. TTPDrill: Automatic and Accurate Extraction of Threat Actions From Unstructured Text of CTI Sources. In Proc. of ACSAC."},{"key":"e_1_3_2_1_13_1","volume-title":"LISA 2010 - 24th Large Installation System Administration Conference","author":"M.","year":"2010","unstructured":"Christopher\u00a0 M. Inacio and Brian Trammell. 2010. YAF: Yet another flowmeter . LISA 2010 - 24th Large Installation System Administration Conference ( 2010 ). Christopher\u00a0M. Inacio and Brian Trammell. 2010. YAF: Yet another flowmeter. LISA 2010 - 24th Large Installation System Administration Conference (2010)."},{"key":"e_1_3_2_1_14_1","volume-title":"Proc. of NDSS(NDSS 21)","author":"Kuechler Alexander","year":"2021","unstructured":"Alexander Kuechler , Alessandro Mantovani , Yufei Han , Leyla Bilge , and Davide Balzarotti . 2021 . Does Every Second Count? Time-based Evolution of Malware Behavior in Sandboxes . In Proc. of NDSS(NDSS 21) . Alexander Kuechler, Alessandro Mantovani, Yufei Han, Leyla Bilge, and Davide Balzarotti. 2021. Does Every Second Count? Time-based Evolution of Malware Behavior in Sandboxes. In Proc. of NDSS(NDSS 21)."},{"key":"e_1_3_2_1_15_1","volume-title":"Proc. of IEEE TrustCom","author":"Kuppa Aditya","year":"2019","unstructured":"Aditya Kuppa , Slawomir Grzonkowski , Muhammad\u00a0Rizwan Asghar , and Nhien\u00a0An Le-Khac . 2019 . Finding rats in cats: Detecting stealthy attacks using group anomaly detection . Proc. of IEEE TrustCom (2019). Aditya Kuppa, Slawomir Grzonkowski, Muhammad\u00a0Rizwan Asghar, and Nhien\u00a0An Le-Khac. 2019. Finding rats in cats: Detecting stealthy attacks using group anomaly detection. Proc. of IEEE TrustCom (2019)."},{"key":"e_1_3_2_1_16_1","unstructured":"Donghwoon Kwon Hyunjoo Kim Jinoh Kim Sang Suh Ikkyun Kim and Kuinam Kim. 2019. A survey of deep learning-based network anomaly detection. Clust. Comput. (2019).  Donghwoon Kwon Hyunjoo Kim Jinoh Kim Sang Suh Ikkyun Kim and Kuinam Kim. 2019. A survey of deep learning-based network anomaly detection. Clust. Comput. (2019)."},{"key":"e_1_3_2_1_17_1","volume-title":"Automated Retrieval of ATT&CK Tactics and Techniques for Cyber Threat Reports. preprint arXiv:2004.14322","author":"Legoy Valentine","year":"2020","unstructured":"Valentine Legoy , Marco Caselli , Christin Seifert , and Andreas Peter . 2020. Automated Retrieval of ATT&CK Tactics and Techniques for Cyber Threat Reports. preprint arXiv:2004.14322 ( 2020 ). Valentine Legoy, Marco Caselli, Christin Seifert, and Andreas Peter. 2020. Automated Retrieval of ATT&CK Tactics and Techniques for Cyber Threat Reports. preprint arXiv:2004.14322 (2020)."},{"key":"e_1_3_2_1_18_1","volume-title":"An Empirical Evaluation of Deep Learning for Network Anomaly Detection","author":"Malaiya Ritesh","year":"2019","unstructured":"Ritesh Malaiya , Donghwoon Kwon , Sang Suh , Hyunjoo Kim , Ikkyun Kim , and Jinoh Kim . 2019. An Empirical Evaluation of Deep Learning for Network Anomaly Detection . IEEE Access ( 2019 ). Ritesh Malaiya, Donghwoon Kwon, Sang Suh, Hyunjoo Kim, Ikkyun Kim, and Jinoh Kim. 2019. An Empirical Evaluation of Deep Learning for Network Anomaly Detection. IEEE Access (2019)."},{"key":"e_1_3_2_1_20_1","volume-title":"The 14th Intl. Conf. on Emerging Security Info., Systems and Tech.","author":"Mendsaikhan Otgonpurev","year":"2020","unstructured":"Otgonpurev Mendsaikhan , Hirokazu Hasegawa , Yukiko Yamaguchi , and Hajime Shimada . 2020 . Automatic Mapping of Vulnerability Information to Adversary Techniques . In The 14th Intl. Conf. on Emerging Security Info., Systems and Tech. Otgonpurev Mendsaikhan, Hirokazu Hasegawa, Yukiko Yamaguchi, and Hajime Shimada. 2020. Automatic Mapping of Vulnerability Information to Adversary Techniques. In The 14th Intl. Conf. on Emerging Security Info., Systems and Tech."},{"key":"e_1_3_2_1_21_1","volume-title":"BZAR: A set of Zeek scripts to detect ATT&CK techniques.https:\/\/github.com\/mitre-attack\/bzar","author":"MITRE Corporation","year":"2020","unstructured":"MITRE Corporation . 2020 . BZAR: A set of Zeek scripts to detect ATT&CK techniques.https:\/\/github.com\/mitre-attack\/bzar MITRE Corporation. 2020. BZAR: A set of Zeek scripts to detect ATT&CK techniques.https:\/\/github.com\/mitre-attack\/bzar"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"crossref","unstructured":"Kris Oosthoek and Christian Doerr. 2019. SoK: ATT&CK Techniques and Trends in Windows Malware. In Security and Privacy in Communication Networks.  Kris Oosthoek and Christian Doerr. 2019. SoK: ATT&CK Techniques and Trends in Windows Malware. In Security and Privacy in Communication Networks.","DOI":"10.1007\/978-3-030-37228-6_20"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"crossref","unstructured":"Eva Papadogiannaki and Sotiris Ioannidis. 2022. A Survey on Encrypted Network Traffic Analysis Applications Techniques and Countermeasures. ACM Comput. Surv. (2022).  Eva Papadogiannaki and Sotiris Ioannidis. 2022. A Survey on Encrypted Network Traffic Analysis Applications Techniques and Countermeasures. ACM Comput. Surv. (2022).","DOI":"10.1145\/3457904"},{"key":"e_1_3_2_1_24_1","volume-title":"Bro: A System for Detecting Network Intruders in Real-Time. In 7th USENIX Security Symposium (USENIX Security 98)","author":"Paxson Vern","year":"1998","unstructured":"Vern Paxson . 1998 . Bro: A System for Detecting Network Intruders in Real-Time. In 7th USENIX Security Symposium (USENIX Security 98) . USENIX Assoc. Vern Paxson. 1998. Bro: A System for Detecting Network Intruders in Real-Time. In 7th USENIX Security Symposium (USENIX Security 98). USENIX Assoc."},{"key":"e_1_3_2_1_25_1","unstructured":"MalShare Project. 2022. MalShare. https:\/\/malshare.com\/  MalShare Project. 2022. MalShare. https:\/\/malshare.com\/"},{"key":"e_1_3_2_1_26_1","volume":"201","author":"Rafique Zubair","unstructured":"M.\u00a0 Zubair Rafique and J. Caballero. 201 3. FIRMA: Malware clustering and network signature generation with mixed network behaviors. LNCS 8145 (2013). M.\u00a0Zubair Rafique and J. Caballero. 2013. FIRMA: Malware clustering and network signature generation with mixed network behaviors. LNCS 8145 (2013).","journal-title":"J. Caballero."},{"key":"e_1_3_2_1_27_1","volume-title":"Proc. of DIMVA.","author":"Severi Giorgio","year":"2018","unstructured":"Giorgio Severi , Tim Leek , and Brendan Dolan-Gavitt . 2018 . Malrec: Compact Full-Trace Malware Recording for Retrospective Deep Analysis . In Proc. of DIMVA. Giorgio Severi, Tim Leek, and Brendan Dolan-Gavitt. 2018. Malrec: Compact Full-Trace Malware Recording for Retrospective Deep Analysis. In Proc. of DIMVA."},{"key":"e_1_3_2_1_28_1","volume-title":"A Survey on Machine Learning Techniques for Cyber Security in the Last Decade","author":"Shaukat Kamran","year":"2020","unstructured":"Kamran Shaukat , Suhuai Luo , Vijay Varadharajan , Ibrahim\u00a0 A. Hameed , and Min Xu. 2020. A Survey on Machine Learning Techniques for Cyber Security in the Last Decade . IEEE Access 8 ( 2020 ). Kamran Shaukat, Suhuai Luo, Vijay Varadharajan, Ibrahim\u00a0A. Hameed, and Min Xu. 2020. A Survey on Machine Learning Techniques for Cyber Security in the Last Decade. IEEE Access 8 (2020)."},{"key":"e_1_3_2_1_29_1","volume-title":"Emotet exposed: looking inside highly destructive malware. Network Security","author":"Research Team SophosLabs","year":"2019","unstructured":"SophosLabs Research Team . 2019. Emotet exposed: looking inside highly destructive malware. Network Security ( 2019 ). SophosLabs Research Team. 2019. Emotet exposed: looking inside highly destructive malware. Network Security (2019)."},{"key":"e_1_3_2_1_30_1","unstructured":"VirusShare.com. 2022. VirusShare. https:\/\/virusshare.com\/  VirusShare.com. 2022. VirusShare. https:\/\/virusshare.com\/"},{"key":"e_1_3_2_1_31_1","volume-title":"Top 10 algorithms in data mining. Knowledge and information systems","author":"Wu Xindong","year":"2008","unstructured":"Xindong Wu , Vipin Kumar , 2008. Top 10 algorithms in data mining. Knowledge and information systems ( 2008 ). Xindong Wu, Vipin Kumar, 2008. Top 10 algorithms in data mining. Knowledge and information systems (2008)."}],"event":{"name":"EICC 2023: European Interdisciplinary Cybersecurity Conference","location":"Stavanger Norway","acronym":"EICC 2023"},"container-title":["European Interdisciplinary Cybersecurity Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3590777.3590804","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T12:36:27Z","timestamp":1750163787000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3590777.3590804"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,6,14]]},"references-count":30,"alternative-id":["10.1145\/3590777.3590804","10.1145\/3590777"],"URL":"https:\/\/doi.org\/10.1145\/3590777.3590804","relation":{},"subject":[],"published":{"date-parts":[[2023,6,14]]},"assertion":[{"value":"2023-06-14","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}