{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,26]],"date-time":"2025-12-26T06:55:29Z","timestamp":1766732129661,"version":"3.48.0"},"publisher-location":"New York, NY, USA","reference-count":27,"publisher":"ACM","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,12]]},"DOI":"10.1145\/3773276.3775245","type":"proceedings-article","created":{"date-parts":[[2025,12,24]],"date-time":"2025-12-24T08:16:18Z","timestamp":1766564178000},"page":"1-6","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Design and Development of a Predictive Security Threat Management System Leveraging CWEs, CVEs, and CAPECs"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-5968-8022","authenticated-orcid":false,"given":"Joaqu\u00edn","family":"Sierra-Granados","sequence":"first","affiliation":[{"name":"GSyA Research Group, University of Castilla-La Mancha, Ciudad Real, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-5722-7261","authenticated-orcid":false,"given":"Jos\u00e9 L.","family":"Ruiz-Catal\u00e1n","sequence":"additional","affiliation":[{"name":"GSyA Research Group, University of Castilla-La Mancha, Ciudad Real, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4613-5501","authenticated-orcid":false,"given":"David G.","family":"Rosado","sequence":"additional","affiliation":[{"name":"GSyA Research Group, University of Castilla-La Mancha, Ciudad Real, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0962-5659","authenticated-orcid":false,"given":"Manuel A.","family":"Serrano","sequence":"additional","affiliation":[{"name":"Alarcos Research Group, University of Castilla-La Mancha, Ciudad Real, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,12,24]]},"reference":[{"key":"e_1_3_3_1_2_2","doi-asserted-by":"publisher","unstructured":"Ehsan Aghaei Ehab Al-Shaer Waseem Shadid and Xi Niu. 2023. Automated CVE Analysis for Threat Prioritization and Impact Prediction. 10.48550\/arXiv.2309.03040","DOI":"10.48550\/arXiv.2309.03040"},{"key":"e_1_3_3_1_3_2","doi-asserted-by":"publisher","unstructured":"Fatemeh Akbarian William T\u00e4rneberg Emma Fitzgerald and Maria Kihl. 2023. Attack Resilient Cloud-Based Control Systems for Industry 4.0. IEEE Access PP (01 2023) 1\u20131. 10.1109\/ACCESS.2023.3259063","DOI":"10.1109\/ACCESS.2023.3259063"},{"key":"e_1_3_3_1_4_2","unstructured":"Seyed\u00a0Ali Akhavani Behzad Ousat and Amin Kharraz. 2025. Open Source Open Threats? Investigating Security Challenges in Open-Source Software. arxiv:https:\/\/arXiv.org\/abs\/2506.12995\u00a0[cs.CR] https:\/\/arxiv.org\/abs\/2506.12995"},{"key":"e_1_3_3_1_5_2","doi-asserted-by":"publisher","unstructured":"Naeem Allahrakha. 2024. Impacts of Cybercrimes on the Digital Economy. Uzbek Journal of Law and Digital Policy 2 (08 2024) 29\u201336. 10.59022\/ujldp.207","DOI":"10.59022\/ujldp.207"},{"key":"e_1_3_3_1_6_2","doi-asserted-by":"publisher","unstructured":"Benjamin Ampel Sagar Samtani Hongyi Zhu and Jay Nunamaker. 2024. Improving Threat Mitigation Through a Cybersecurity Risk Management Framework: A Computational Design Science Approach. Journal of Management Information Systems 41 (03 2024) 236\u2013265. 10.1080\/07421222.2023.2301178","DOI":"10.1080\/07421222.2023.2301178"},{"key":"e_1_3_3_1_7_2","doi-asserted-by":"publisher","unstructured":"Khalid Bennouk Dorra Mahouachi Nawal Ait\u00a0Aali Youn\u00e8s El\u00a0Bouzakri El\u00a0Idrissi Bechir Sebai and Abou\u00a0Zakaria Faroukhi. 2025. Dynamic Data Updates and Weight Optimization for Predicting Vulnerability Exploitability. IEEE Access PP (01 2025) 1\u20131. 10.1109\/ACCESS.2025.3558990","DOI":"10.1109\/ACCESS.2025.3558990"},{"volume-title":"Over 40,000 CVEs published in 2024","year":"2025","key":"e_1_3_3_1_8_2","unstructured":"CyberPress. 2025. Over 40,000 CVEs published in 2024. Retrieved June 30, 2025 from https:\/\/cyberpress.org\/over-40000-cves-published-in-2024\/"},{"key":"e_1_3_3_1_9_2","volume-title":"NIS2 Directive - Official Information Portal","author":"Directive NIS2","year":"2025","unstructured":"NIS2 Directive. 2025. NIS2 Directive - Official Information Portal. Retrieved June 23, 2025 from https:\/\/www.nis-2-directive.com\/"},{"key":"e_1_3_3_1_10_2","doi-asserted-by":"publisher","unstructured":"Martin Eling Mauro Elvedi and Greg Falco. 2022. The Economic Impact of Extreme Cyber Risk Scenarios. North American Actuarial Journal 27 (03 2022) 1\u201315. 10.1080\/10920277.2022.2034507","DOI":"10.1080\/10920277.2022.2034507"},{"key":"e_1_3_3_1_11_2","doi-asserted-by":"publisher","unstructured":"Adebola Folorunso Viqaruddin Mohammed Ifeoluwa Wada and Bunmi Samuel. 2024. The impact of ISO security standards on enhancing cybersecurity posture in organizations. World Journal of Advanced Research and Reviews 24 (10 2024) 2582\u20132595. 10.30574\/wjarr.2024.24.1.3169","DOI":"10.30574\/wjarr.2024.24.1.3169"},{"key":"e_1_3_3_1_12_2","volume-title":"ISO\/IEC 27001:2022 - Information Security, Cybersecurity and Privacy Protection","author":"Standardization\u00a0(ISO) International\u00a0Organization for","year":"2022","unstructured":"International\u00a0Organization for Standardization\u00a0(ISO). 2022. ISO\/IEC 27001:2022 - Information Security, Cybersecurity and Privacy Protection. Retrieved June 23, 2025 from https:\/\/www.iso.org\/obp\/ui\/en\/#iso:std:iso-iec:27001:ed-3:v1:en"},{"key":"e_1_3_3_1_13_2","doi-asserted-by":"publisher","unstructured":"Le Ha. 2022. Are digital business and digital public services a driver for better energy security? Evidence from a European sample. Environmental Science and Pollution Research 29 (01 2022) 27232\u201327256. 10.1007\/s11356-021-17843-2","DOI":"10.1007\/s11356-021-17843-2"},{"key":"e_1_3_3_1_14_2","doi-asserted-by":"publisher","unstructured":"Aleksy Kwilinski Lyulyov Oleksii and Tetyana Pimonenko. 2023. Environmental Sustainability within Attaining Sustainable Development Goals: The Role of Digitalization and the Transport Sector. Sustainability 15 (07 2023) 11282. 10.3390\/su151411282","DOI":"10.3390\/su151411282"},{"key":"e_1_3_3_1_15_2","doi-asserted-by":"publisher","unstructured":"Takashi Minohara Masaya Shimakawa and Sora Okada. 2025. Security Vulnerability Risk Growth Model based on CVSS 4.0. 10.1109\/DSN-S65789.2025.00074","DOI":"10.1109\/DSN-S65789.2025.00074"},{"key":"e_1_3_3_1_16_2","doi-asserted-by":"publisher","unstructured":"Marc Mitchell and Lena Kan. 2019. Digital Technology and The Future of Health Systems. Health Systems & Reform 5 (02 2019). 10.1080\/23288604.2019.1583040","DOI":"10.1080\/23288604.2019.1583040"},{"key":"e_1_3_3_1_17_2","doi-asserted-by":"publisher","unstructured":"Henock Mulugeta. 2023. Context-Based and Adaptive Cybersecurity Risk Management Framework. Risks 11 (05 2023). 10.3390\/risks11060101","DOI":"10.3390\/risks11060101"},{"key":"e_1_3_3_1_18_2","volume-title":"Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1","author":"Standards National\u00a0Institute of","year":"2018","unstructured":"National\u00a0Institute of Standards and Technology (NIST). 2018. Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1. Retrieved September 26, 2025 from https:\/\/www.nist.gov\/cyberframework"},{"key":"e_1_3_3_1_19_2","volume-title":"Zero Trust Architecture (NIST SP 800-207)","author":"Standards National\u00a0Institute of","year":"2020","unstructured":"National\u00a0Institute of Standards and Technology (NIST). 2020. Zero Trust Architecture (NIST SP 800-207). Retrieved June 23, 2025 from https:\/\/nvlpubs.nist.gov\/nistpubs\/specialpublications\/NIST.SP.800-207.pdf"},{"key":"e_1_3_3_1_20_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-69255-1_10"},{"key":"e_1_3_3_1_21_2","doi-asserted-by":"publisher","unstructured":"Saqib Saeed Salha Altamimi Norah Alkayyal Ebtisam Alshehri and Dina Alabbad. 2023. Digital Transformation and Cybersecurity Challenges for Businesses Resilience: Issues and Recommendations. Sensors 23 (07 2023). 10.3390\/s23156666","DOI":"10.3390\/s23156666"},{"key":"e_1_3_3_1_22_2","doi-asserted-by":"publisher","unstructured":"Kamran Shaukat Suhuai Luo Vijay Varadharajan Ibrahim Hameed Shan Chen Dongxi Liu and Jiaming Li. 2020. Performance Comparison and Current Challenges of Using Machine Learning Techniques in Cybersecurity. Energies 13 (05 2020) 2509. 10.3390\/en13102509","DOI":"10.3390\/en13102509"},{"key":"e_1_3_3_1_23_2","doi-asserted-by":"publisher","unstructured":"Elham Tabassi. 2023. Artificial Intelligence Risk Management Framework (AI RMF 1.0). 10.6028\/NIST.AI.100-1","DOI":"10.6028\/NIST.AI.100-1"},{"volume-title":"Nessus Vulnerability Scanner","year":"2025","key":"e_1_3_3_1_24_2","unstructured":"Tenable. 2025. Nessus Vulnerability Scanner. Retrieved June 1, 2025 from https:\/\/www.tenable.com\/products\/nessus"},{"key":"e_1_3_3_1_25_2","volume-title":"General Data Protection Regulation","author":"Union European","year":"2016","unstructured":"European Union. 2016. General Data Protection Regulation. Retrieved September 26, 2025 from https:\/\/eur-lex.europa.eu\/eli\/reg\/2016\/679\/oj"},{"key":"e_1_3_3_1_26_2","doi-asserted-by":"publisher","unstructured":"Apostol Vassilev Alina Oprea Alie Fordyce and Hyrum Anderson. 2024. Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations. 10.6028\/NIST.AI.100-2e2023","DOI":"10.6028\/NIST.AI.100-2e2023"},{"volume-title":"Wazuh - Open Source Security Platform","year":"2025","key":"e_1_3_3_1_27_2","unstructured":"Wazuh. 2025. Wazuh - Open Source Security Platform. Retrieved June 4, 2025 from https:\/\/documentation.wazuh.com\/current\/user-manual\/capabilities\/vulnerability-detection\/index.html"},{"key":"e_1_3_3_1_28_2","doi-asserted-by":"publisher","unstructured":"Ferda \u00d6zdemir S\u00f6nmez Chris Hankin and Pasquale Malacaria. 2022. Attack Dynamics: An Automatic Attack Graph Generation Framework Based on System Topology CAPEC CWE and CVE Databases. Computers & Security 123 (10 2022). 10.1016\/j.cose.2022.102938","DOI":"10.1016\/j.cose.2022.102938"}],"event":{"name":"BDCAT '25: IEEE\/ACM 12th International Conference on Big Data Computing, Applications and Technologies","sponsor":["SIGARCH ACM Special Interest Group on Computer Architecture"],"location":"Nantes France","acronym":"BDCAT '25"},"container-title":["Proceedings of the IEEE\/ACM 12th International Conference on Big Data Computing, Applications and Technologies"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3773276.3775245","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,26]],"date-time":"2025-12-26T06:51:46Z","timestamp":1766731906000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3773276.3775245"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,12]]},"references-count":27,"alternative-id":["10.1145\/3773276.3775245","10.1145\/3773276"],"URL":"https:\/\/doi.org\/10.1145\/3773276.3775245","relation":{},"subject":[],"published":{"date-parts":[[2025,12]]},"assertion":[{"value":"2025-12-24","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}