{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,9]],"date-time":"2025-12-09T18:09:43Z","timestamp":1765303783850},"reference-count":8,"publisher":"Institute of Electronics, Information and Communications Engineers (IEICE)","issue":"11","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEICE Trans. Inf. & Syst."],"published-print":{"date-parts":[[2018,11,1]]},"DOI":"10.1587\/transinf.2017icp0015","type":"journal-article","created":{"date-parts":[[2018,10,31]],"date-time":"2018-10-31T22:46:53Z","timestamp":1541026013000},"page":"2658-2664","source":"Crossref","is-referenced-by-count":4,"title":["Modeling Attack Activity for Integrated Analysis of Threat Information"],"prefix":"10.1587","volume":"E101.D","author":[{"given":"Daiki","family":"ITO","sequence":"first","affiliation":[{"name":"PwC Cyber Services"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kenta","family":"NOMURA","sequence":"additional","affiliation":[{"name":"PwC Cyber Services"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Masaki","family":"KAMIZONO","sequence":"additional","affiliation":[{"name":"PwC Cyber Services"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yoshiaki","family":"SHIRAISHI","sequence":"additional","affiliation":[{"name":"Kobe University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yasuhiro","family":"TAKANO","sequence":"additional","affiliation":[{"name":"Kobe University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Masami","family":"MOHRI","sequence":"additional","affiliation":[{"name":"Gifu University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Masakatu","family":"MORII","sequence":"additional","affiliation":[{"name":"Kobe University"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"532","reference":[{"key":"1","unstructured":"[1] E.M. Hutchins, M.J. Cloppert, and R.M. Amin, \u201cIntelligence-driven computer network defense informed by analysis of adversary campaigns and intrusion kill chains,\u201d Leading Issues in Information Warfare & Security Research, vol.1, pp.80-106, 2011."},{"key":"2","unstructured":"[2] S. Caltagirone, P. Andrew, and B. Christopher, \u201cThe Diamond Model of Intrusion Analysis,\u201d Center forCyber Threat Intelligence and Threat Research, Hanover, MD. 2013."},{"key":"3","unstructured":"[3] K. Savage, \u201cW32.Phopifas Cons Over 2.5 MillionClicks with LOL Links,\u201d [Online].Available: http:\/\/www.symantec.com\/connect\/blogs\/w32phopifas-cons-over-25-million-clicks-lol-links, Oct. 10, 2012."},{"key":"4","unstructured":"[4] R. Calvo, \u201cDownloader.Liftoh Cousin to W32.Phopifas?,\u201d [Online] Available: https:\/\/www.symantec.com\/connect\/blogs\/downloaderliftohcousin-w32phopifas, May 23, 2013."},{"key":"5","unstructured":"[5] E. Kumar, \u201cSpam Campaign Delivers LiftohDownloader,\u201d [Online]. Available: https:\/\/www.secureworks.com\/research\/spamcampaign-delivers-liftoh-downloader, Dec. 23, 2013."},{"key":"6","unstructured":"[6] B. Levene, R. Falcone, J. Grunzweig, B. Lee, and R. Olson, \u201cRetefe Banking Trojan Targets Sweden, Switzerland and Japan,\u201d [Online]. Available: http:\/\/researchcenter.paloaltonetworks.com\/2015\/08\/retefe-banking-trojan-targets-sweden-switzerlandand-japan\/, Aug. 20, 2015."},{"key":"7","unstructured":"[7] Malwarebytes Labs, \u201cSmoke Loader-downloader with a smokescreen still alive,\u201d [Online]. Available: https:\/\/blog.malwarebytes.com\/threatanalysis\/2016\/08\/smoke-loader-downloader-with-asmokescreen-still-alive\/, Aug. 5, 2016."},{"key":"8","unstructured":"[8] Proofpoint Staff, \u201cKronos Banking Trojan Used to Deliver New Point-of-Sale Malware,\u201d [Online].Available: https:\/\/www.proofpoint.com\/us\/threatinsight\/post\/kronos-banking-trojan-used-to-delivernew-point-of-sale-malware, Nov. 5, 2016."}],"container-title":["IEICE Transactions on Information and Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.jstage.jst.go.jp\/article\/transinf\/E101.D\/11\/E101.D_2017ICP0015\/_pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2018,11,3]],"date-time":"2018-11-03T04:52:26Z","timestamp":1541220746000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.jstage.jst.go.jp\/article\/transinf\/E101.D\/11\/E101.D_2017ICP0015\/_article"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,11,1]]},"references-count":8,"journal-issue":{"issue":"11","published-print":{"date-parts":[[2018]]}},"URL":"https:\/\/doi.org\/10.1587\/transinf.2017icp0015","relation":{},"ISSN":["0916-8532","1745-1361"],"issn-type":[{"value":"0916-8532","type":"print"},{"value":"1745-1361","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018,11,1]]}}}