{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,10]],"date-time":"2026-07-10T01:49:09Z","timestamp":1783648149365,"version":"3.55.0"},"reference-count":48,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2018,12,1]],"date-time":"2018-12-01T00:00:00Z","timestamp":1543622400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Cybersecur"],"published-print":{"date-parts":[[2018,12]]},"DOI":"10.1186\/s42400-018-0016-5","type":"journal-article","created":{"date-parts":[[2018,12,18]],"date-time":"2018-12-18T07:45:31Z","timestamp":1545119131000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":23,"title":["Forecasting cyberattacks with incomplete, imbalanced, and insignificant data"],"prefix":"10.1186","volume":"1","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8990-6869","authenticated-orcid":false,"given":"Ahmet","family":"Okutan","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Gordon","family":"Werner","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shanchieh Jay","family":"Yang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Katie","family":"McConky","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2018,12,18]]},"reference":[{"key":"16_CR1","unstructured":"Accenture Security (2017) Cost of cyber crime study. https:\/\/www.accenture.com\/us-en\/insight-cost-of-cybercrime-2017 . Accessed 5 Jan 2018."},{"key":"16_CR2","doi-asserted-by":"crossref","first-page":"37","DOI":"10.1023\/A:1022689900470","volume":"6","author":"D Aha","year":"1991","unstructured":"Aha, D, Kibler D (1991) Instance-based learning algorithms. Mach Learn 6:37\u201366.","journal-title":"Mach Learn"},{"issue":"3","key":"16_CR3","doi-asserted-by":"publisher","first-page":"87","DOI":"10.1016\/j.bdr.2015.04.001","volume":"2","author":"OY Al-Jarrah","year":"2015","unstructured":"Al-Jarrah OY, Yoo PD, Muhaidat S, Karagiannidis GK, Taha K (2015) Efficient machine learning for big data: A review. Big Data Res 2(3):87\u201393. https:\/\/doi.org\/10.1016\/j.bdr.2015.04.001 .","journal-title":"Big Data Res"},{"key":"16_CR4","unstructured":"Almukaynizi, M, Nunes E, Dharaiya K, Senguttuvan M, Shakarian J, Shakarian P (2017) Proactive identification of exploits in the wild through vulnerability mentions online In: Proceedings of the 2017 International Conference on Cyber Conflict (CyCon U.S.), 82\u201388."},{"key":"16_CR5","doi-asserted-by":"crossref","unstructured":"Babko-Malaya, O, Cathey R, Hinton S, Maimon D, Gladkova T (2017) Detection of hacking behaviors and communication patterns on social media In: Proceedings of the 2017 IEEE International Conference on Big Data, 4636\u20134641.","DOI":"10.1109\/BigData.2017.8258508"},{"issue":"2","key":"16_CR6","doi-asserted-by":"publisher","first-page":"167","DOI":"10.1177\/1088868307301033","volume":"11","author":"RF Baumeister","year":"2007","unstructured":"Baumeister, RF, Vohs KD, DeWall CN, Zhang L (2007) How emotion shapes behavior: Feedback, anticipation, and reflection, rather than direct causation. Personal Soc Psychol Rev 11(2):167\u2013203.","journal-title":"Personal Soc Psychol Rev"},{"key":"16_CR7","doi-asserted-by":"publisher","first-page":"1299","DOI":"10.1145\/3133956.3134022","volume-title":"Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security (CCS)","author":"L Bilge","year":"2017","unstructured":"Bilge, L, Han Y, Dell\u2019Amico M (2017) Riskteller: Predicting the risk of cyber incidents In: Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security (CCS), 1299\u20131311.. ACM, New York. https:\/\/doi.org\/10.1145\/3133956.3134022 ."},{"key":"16_CR8","unstructured":"Branco, P, Torgo L, Ribeiro RP (2015) A survey of predictive modelling under imbalanced distributions. CoRR abs\/1505.01658. http:\/\/arxiv.org\/abs\/1505.01658, 1505.01658."},{"issue":"1","key":"16_CR9","doi-asserted-by":"publisher","first-page":"321","DOI":"10.1613\/jair.953","volume":"16","author":"NV Chawla","year":"2002","unstructured":"Chawla, NV, Bowyer KW, Hall LO, Kegelmeyer WP (2002) Smote: Synthetic minority over-sampling technique. J Artif Intell Res 16(1):321\u2013357.","journal-title":"J Artif Intell Res"},{"issue":"4","key":"16_CR10","doi-asserted-by":"crossref","first-page":"309","DOI":"10.1023\/A:1022649401552","volume":"9","author":"GF Cooper","year":"1992","unstructured":"Cooper, GF, Herskovits E (1992) A bayesian method for the induction of probabilistic networks from data. Mach Learn 9(4):309\u2013347.","journal-title":"Mach Learn"},{"key":"16_CR11","doi-asserted-by":"publisher","first-page":"169","DOI":"10.1016\/S0959-1524(97)80001-7","volume":"7","author":"B Dayal","year":"1997","unstructured":"Dayal, B, MacGregor JF (1997) Recursive exponentially weighted PLS and its applications to adaptive control and prediction. J Process Control 7:169\u2013179.","journal-title":"J Process Control"},{"key":"16_CR12","doi-asserted-by":"publisher","first-page":"520","DOI":"10.1016\/j.jprocont.2008.05.002","volume":"19","author":"P Facco","year":"2009","unstructured":"Facco, P, Doplicher F, Bezze F, Barolo M (2009) Moving average PLS soft sensor for online product quality estimation in an industrial batch polymerization process. J Process Control 19:520\u2013529.","journal-title":"J Process Control"},{"issue":"5","key":"16_CR13","doi-asserted-by":"publisher","first-page":"692","DOI":"10.1109\/TSMCA.2007.902631","volume":"37","author":"A Farhangfar","year":"2007","unstructured":"Farhangfar, A, Kurgan LA, Pedrycz W (2007) A novel framework for imputation of missing values in databases. IEEE Trans Syst Man Cybern Syst Hum 37(5):692\u2013709.","journal-title":"IEEE Trans Syst Man Cybern Syst Hum"},{"key":"16_CR14","unstructured":"Frossard, DEN, Nunes IO, Krohling RA (2016) An approach to dealing with missing values in heterogeneous data using k-nearest neighbors. CoRR abs\/1608.04037. http:\/\/arxiv.org\/abs\/1608.04037. 1608.04037."},{"key":"16_CR15","unstructured":"GDELT (2017) The gdelt project. http:\/\/www.gdeltproject.org\/ . Accessed 6 Feb 2017."},{"issue":"5","key":"16_CR16","doi-asserted-by":"publisher","first-page":"535","DOI":"10.1109\/34.589216","volume":"19","author":"TM Ha","year":"1997","unstructured":"Ha, TM, Bunke H (1997) Off-line, handwritten numeral recognition by perturbation method. IEEE Trans Pattern Anal Mach Intell 19(5):535\u2013539. https:\/\/doi.org\/10.1109\/34.589216 .","journal-title":"IEEE Trans Pattern Anal Mach Intell"},{"issue":"1","key":"16_CR17","doi-asserted-by":"publisher","first-page":"10","DOI":"10.1145\/1656274.1656278","volume":"11","author":"M Hall","year":"2009","unstructured":"Hall, M, Frank E, Holmes G, Pfahringer B, Reutemann P, Witten IH (2009) The WEKA data mining software: An update. SIGKDD Explor 11(1):10\u201318.","journal-title":"SIGKDD Explor"},{"key":"16_CR18","doi-asserted-by":"publisher","first-page":"108","DOI":"10.1016\/j.jlp.2015.05.017","volume":"36","author":"F Harrou","year":"2015","unstructured":"Harrou, F, Nounou MN, Nounou HN, Madakyaru M (2015) Pls-based ewma fault detection strategy for process monitoring. J Loss Prev Process Ind 36:108\u2013119.","journal-title":"J Loss Prev Process Ind"},{"issue":"9","key":"16_CR19","doi-asserted-by":"publisher","first-page":"1263","DOI":"10.1109\/TKDE.2008.239","volume":"21","author":"H He","year":"2009","unstructured":"He, H, Garcia EA (2009) Learning from imbalanced data. IEEE Trans Knowl Data Eng 21(9):1263\u20131284.","journal-title":"IEEE Trans Knowl Data Eng"},{"key":"16_CR20","doi-asserted-by":"publisher","first-page":"581","DOI":"10.1007\/11553939_83","volume-title":"Proceedings of the the Knowledge-Based Intelligent Information and Engineering Systems","author":"F Honghai","year":"2005","unstructured":"Honghai, F, Guoshun C, Cheng Y, Bingru Y, Yumei C (2005) A SVM regression based approach to filling in missing values. In: Khosla R, Howlett RJ, Jain LC (eds)Proceedings of the the Knowledge-Based Intelligent Information and Engineering Systems, 581\u2013587.. Springer Berlin Heidelberg, Berlin, Heidelberg."},{"key":"16_CR21","unstructured":"Khandpur, RP, Ji T, Jan STK, Wang G, Lu C, Ramakrishnan N (2017) Crowdsourcing cybersecurity: Cyber attack detection using social media. CoRR abs\/1702.07745. http:\/\/arxiv.org\/abs\/1702.07745. 1702.07745."},{"issue":"4","key":"16_CR22","doi-asserted-by":"publisher","first-page":"221","DOI":"10.1007\/s13748-016-0094-0","volume":"5","author":"B Krawczyk","year":"2016","unstructured":"Krawczyk, B (2016) Learning from imbalanced data: open challenges and future directions. Progress Artif Intell 5(4):221\u2013232.","journal-title":"Progress Artif Intell"},{"key":"16_CR23","unstructured":"Leke, C, Marwala T (2016) Missing data estimation in high-dimensional datasets: A swarm intelligence-deep neural network approach. CoRR abs\/1607.00136. http:\/\/arxiv.org\/abs\/1607.00136. 1607.00136."},{"key":"16_CR24","doi-asserted-by":"publisher","first-page":"7776","DOI":"10.1109\/ACCESS.2017.2696365","volume":"5","author":"A L\u2019Heureux","year":"2017","unstructured":"L\u2019Heureux, A, Grolinger K, Elyamany HF, Capretz MAM (2017) Machine learning with big data: Challenges and approaches. IEEE Access 5:7776\u20137797. https:\/\/doi.org\/10.1109\/ACCESS.2017.2696365 .","journal-title":"IEEE Access"},{"key":"16_CR25","first-page":"1009","volume-title":"Proceedings of the 24th USENIX Security Symposium (USENIX Security 15)","author":"Y Liu","year":"2015","unstructured":"Liu, Y, Sarabi A, Zhang J, Naghizadeh P, Karir M, Bailey M, Liu M (2015) Cloudy with a chance of breach: Forecasting cyber security incidents In: Proceedings of the 24th USENIX Security Symposium (USENIX Security 15), 1009\u20131024.. USENIX Association, Washington, DC."},{"key":"16_CR26","doi-asserted-by":"publisher","first-page":"113","DOI":"10.1016\/j.ins.2013.07.007","volume":"250","author":"V Lopez","year":"2013","unstructured":"Lopez, V, Fernondez A, Garcia S, Palade V, Herrera F (2013) An insight into classification with imbalanced data: Empirical results and current trends on using data intrinsic characteristics. Inf Sci 250:113\u2013141. https:\/\/doi.org\/10.1016\/j.ins.2013.07.007 .","journal-title":"Inf Sci"},{"issue":"1","key":"16_CR27","doi-asserted-by":"publisher","first-page":"77","DOI":"10.1007\/s10115-011-0424-2","volume":"32","author":"J Luengo","year":"2012","unstructured":"Luengo, J, Garc\u00eda S, Herrera F (2012) On the choice of the best imputation methods for missing values considering three groups of classification methods. Knowl Inf Syst 32(1):77\u2013108.","journal-title":"Knowl Inf Syst"},{"key":"16_CR28","doi-asserted-by":"crossref","unstructured":"Maimon, D, Fukuda A, Hinton S, Babko-Malaya O, Cathey R (2017) On the relevance of social media platforms in predicting the volume and patterns of web defacement attacks In: Proceedings of the 2017 IEEE International Conference on Big Data (Big Data), 4668\u20134673.","DOI":"10.1109\/BigData.2017.8258513"},{"key":"16_CR29","doi-asserted-by":"publisher","first-page":"2563","DOI":"10.1145\/3133956.3138834","volume-title":"Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, CCS \u201917","author":"A Okutan","year":"2017","unstructured":"Okutan, A, Werner G, McConky K, Yang SJ (2017a) POSTER: Cyber attack prediction of threats from unconventional resources (CAPTURE) In: Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, CCS \u201917, 2563\u20132565.. ACM, New York. https:\/\/doi.org\/10.1145\/3133956.3138834 ."},{"key":"16_CR30","doi-asserted-by":"crossref","unstructured":"Okutan, A, Yang SJ, McConky K (2017b) Predicting cyber attacks with bayesian networks using unconventional signals In: Proceedings of the Cyber and Information Security Research (CISR) Conference, 1\u20134.","DOI":"10.1145\/3064814.3064823"},{"key":"16_CR31","unstructured":"Okutan, A, Yang SJ, McConky K (2018) Forecasting cyber attacks with imbalanced data sets and different time granularities. CoRR abs\/1803.09560. http:\/\/arxiv.org\/abs\/1803.09560. 1803.09560."},{"key":"16_CR32","unstructured":"OTX (2017) Alienvault open threat exchange. https:\/\/www.alienvault.com\/open-threat-exchange . Accessed 21 Dec 2017."},{"issue":"1","key":"16_CR33","doi-asserted-by":"publisher","first-page":"247","DOI":"10.1007\/s10115-014-0794-3","volume":"45","author":"RC Prati","year":"2015","unstructured":"Prati, RC, Batista GEAPA, Silva DF (2015) Class imbalance revisited: a new experimental setup to assess the performance of treatment methods. Knowl Inf Syst 45(1):247\u2013270.","journal-title":"Knowl Inf Syst"},{"key":"16_CR34","doi-asserted-by":"crossref","unstructured":"Preo\u0163iuc-Pietro, D, Schwartz HA, Park G, Eichstaedt J, Kern M, Ungar L, Shulman E (2016) Modelling valence and arousal in facebook posts In: Proceedings of Workshop on Computational Approaches to Subjectivity, Sentiment and Social Media Analysis (WASSA), Proceedings of NAACL-HLT, 9\u201315.","DOI":"10.18653\/v1\/W16-0404"},{"key":"16_CR35","unstructured":"PwC (2016) The global state of information security survey 2016. http:\/\/www.pwc.ru\/gsiss2016 . Accessed 6 Feb 2017."},{"key":"16_CR36","doi-asserted-by":"publisher","unstructured":"Rahman, MM, Davis DN (2013) Machine Learning-Based Missing Value Imputation Method for Clinical Datasets, 245\u2013257.. Springer Netherlands. https:\/\/doi.org\/10.1007\/978-94-007-6190-2_19 .","DOI":"10.1007\/978-94-007-6190-2_19"},{"key":"16_CR37","doi-asserted-by":"publisher","first-page":"1799","DOI":"10.1145\/2623330.2623373","volume-title":"Proceedings of the 20th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, KDD \u201914","author":"N Ramakrishnan","year":"2014","unstructured":"Ramakrishnan, N, et al. (2014) \u2019beating the news\u2019 with embers: Forecasting civil unrest using open source indicators In: Proceedings of the 20th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, KDD \u201914, 1799\u20131808.. ACM, New York. https:\/\/doi.org\/10.1145\/2623330.2623373 ."},{"key":"16_CR38","first-page":"1623","volume":"8","author":"M Saar-Tsechansky","year":"2007","unstructured":"Saar-Tsechansky, M, Provost F (2007) Handling missing values when applying classification models. J Mach Learn Res 8:1623\u20131657. http:\/\/dl.acm.org\/citation.cfm?id=1314498.1314553 .","journal-title":"J Mach Learn Res"},{"key":"16_CR39","doi-asserted-by":"crossref","unstructured":"Sapienza, A, Bessi A, Damodaran S, Shakarian P, Lerman K, Ferrara E (2017) Early warnings of cyber threats in online discussions In: Proceedings of the 2017 IEEE International Conference on Data Mining Workshops (ICDMW), 667\u2013674.","DOI":"10.1109\/ICDMW.2017.94"},{"key":"16_CR40","doi-asserted-by":"publisher","first-page":"2461","DOI":"10.1109\/TIFS.2015.2464775","volume":"10","author":"J Scanlon","year":"2015","unstructured":"Scanlon, J, Gerber M (2015) Forecasting violent extremist cyber recruitment. IEEE Trans Inf Forensics Secur 10:2461\u20132470. https:\/\/doi.org\/10.1109\/TIFS.2015.2464775 .","journal-title":"IEEE Trans Inf Forensics Secur"},{"issue":"5","key":"16_CR41","doi-asserted-by":"publisher","first-page":"1188","DOI":"10.1109\/72.870050","volume":"11","author":"SK Shevade","year":"2000","unstructured":"Shevade, SK, Keerthi SS, Bhattacharyya C, Murthy KRK (2000) Improvements to the SMO algorithm for SVM regression. IEEE Trans Neural Netw 11(5):1188\u20131193.","journal-title":"IEEE Trans Neural Netw"},{"key":"16_CR42","doi-asserted-by":"crossref","unstructured":"Sliva, A, et al. (2017) Hybrid modeling of cyber adversary behavior In: Proceedings of the Social, Cultural, and Behavioral Modeling, 133\u2013138.. Springer International Publishing.","DOI":"10.1007\/978-3-319-60240-0_17"},{"key":"16_CR43","doi-asserted-by":"publisher","first-page":"687","DOI":"10.1142\/S0218001409007326","volume":"23","author":"Y Sun","year":"2011","unstructured":"Sun, Y, Wong A, Kamel MS (2011) Classification of imbalanced data: a review. Int J Pattern Recognit Artif Intell 23:687\u2013719.","journal-title":"Int J Pattern Recognit Artif Intell"},{"key":"16_CR44","unstructured":"Tabassum, J, Ritter A, Xu W (2016) A minimally supervised method for recognizing and normalizing time expressions in twitter. CoRR abs\/1608.02904. http:\/\/arxiv.org\/abs\/1608.02904. 1608.02904."},{"key":"16_CR45","volume-title":"Superforecasting: The Art and Science of Prediction","author":"PE Tetlock","year":"2015","unstructured":"Tetlock, PE, Gardner D (2015) Superforecasting: The Art and Science of Prediction. Crown Publishing Group, New York."},{"key":"16_CR46","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4757-2440-0","volume-title":"The Nature of Statistical Learning Theory","author":"VN Vapnik","year":"1995","unstructured":"Vapnik, VN (1995) The Nature of Statistical Learning Theory. Springer-Verlag Inc., New York."},{"key":"16_CR47","doi-asserted-by":"publisher","first-page":"1117","DOI":"10.1145\/2660267.2660330","volume-title":"Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, CCS \u201914","author":"TF Yen","year":"2014","unstructured":"Yen, TF, Heorhiadi V, Oprea A, Reiter MK, Juels A (2014) An epidemiological study of malware encounters in a large enterprise In: Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, CCS \u201914, 1117\u20131130.. ACM, New York. https:\/\/doi.org\/10.1145\/2660267.2660330 ."},{"key":"16_CR48","doi-asserted-by":"crossref","unstructured":"Zhang, S, Wu X, Zhu M (2010) Proceedings of Cognitive Informatics (ICCI), 2010 9th IEEE International Conference on In: Efficient missing data imputation for supervised learning, 672\u2013679.","DOI":"10.1109\/COGINF.2010.5599826"}],"container-title":["Cybersecurity"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1186\/s42400-018-0016-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1186\/s42400-018-0016-5\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1186\/s42400-018-0016-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,4]],"date-time":"2026-04-04T15:53:40Z","timestamp":1775318020000},"score":1,"resource":{"primary":{"URL":"https:\/\/cybersecurity.springeropen.com\/articles\/10.1186\/s42400-018-0016-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,12]]},"references-count":48,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2018,12]]}},"alternative-id":["16"],"URL":"https:\/\/doi.org\/10.1186\/s42400-018-0016-5","relation":{},"ISSN":["2523-3246"],"issn-type":[{"value":"2523-3246","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018,12]]},"assertion":[{"value":"14 September 2018","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"7 November 2018","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"18 December 2018","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"All authors declare that they have no competing interests.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}},{"value":"Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Publisher\u2019s Note"}}],"article-number":"15"}}