{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,19]],"date-time":"2026-03-19T14:51:57Z","timestamp":1773931917955,"version":"3.50.1"},"reference-count":46,"publisher":"IEEE","license":[{"start":{"date-parts":[[2024,9,26]],"date-time":"2024-09-26T00:00:00Z","timestamp":1727308800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,9,26]],"date-time":"2024-09-26T00:00:00Z","timestamp":1727308800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024,9,26]]},"DOI":"10.23919\/softcom62040.2024.10721992","type":"proceedings-article","created":{"date-parts":[[2024,10,23]],"date-time":"2024-10-23T17:44:41Z","timestamp":1729705481000},"page":"1-6","source":"Crossref","is-referenced-by-count":2,"title":["Heuristic Malware Detection Method Based on Structured CTI Data: A Research Study and Proposal"],"prefix":"10.23919","author":[{"given":"Pavel","family":"Novak","sequence":"first","affiliation":[{"name":"Masaryk University Brno,Department of Computer Systems and Communications Faculty of Informatics,Czechia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vaclav","family":"Oujezsky","sequence":"additional","affiliation":[{"name":"Masaryk University Brno,Department of Computer Systems and Communications Faculty of Informatics,Czechia"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Cybersecurity Stats: Facts And Figures You Should Know","author":"John","year":"2024"},{"key":"ref2","article-title":"Ransomware landscape overview 2023","author":"Team","year":"2024"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.3390\/technologies12020023"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/tsp59544.2023.10197687"},{"key":"ref5","article-title":"Positive Technologies Security Team","year":"2023","journal-title":"Results of cybersecurity incident investigations in 2021 2023"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.3390\/electronics9050824"},{"key":"ref7","volume-title":"Taxonomies cdot User guide of MISP intelligence sharing platform","year":"2024"},{"key":"ref8","volume-title":"TheHive project","author":"Leonard","year":"2021"},{"key":"ref9","volume-title":"TheHive Project","year":"2024"},{"key":"ref11","volume-title":"Crits\/Crits: Crits-collaborative research into threats","year":"2024"},{"key":"ref12","volume-title":"CIF Framework","year":"2024"},{"key":"ref13","volume-title":"Csirtgadgets\/CIF-V5: The fastest way to consume threat Intel","year":"2024"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1365\/s43439-022-00058-7"},{"key":"ref15","volume-title":"NUKIB Portal Sheet","year":"2024"},{"key":"ref16","article-title":"Computer Security Incident Response Teams in the reformed Network and Information Security Directive: Good practices","author":"Kamara","year":"2022"},{"key":"ref17","volume-title":"MISP France","year":"2024"},{"key":"ref18","volume-title":"EBF key messages on the proposal for a Revised Directive on Security of Network and Information Systems (NIS2)","year":"2021"},{"key":"ref19","volume-title":"Common Information Model","year":"2024"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/2994539.2994542"},{"key":"ref21","article-title":"PyMISP Documentation","author":"Vinot","year":"2024"},{"key":"ref22","volume-title":"OpenIOC","year":"2024"},{"key":"ref24","volume-title":"STIX Repository","year":"2024"},{"key":"ref25","volume-title":"RFC5070","year":"2024"},{"key":"ref26","volume-title":"RFC7970","year":"2024"},{"key":"ref27","article-title":"CyberThreat Intelligence","year":"2016","journal-title":"OpenTPX"},{"key":"ref28","volume-title":"Sigma","year":"2024"},{"key":"ref29","volume-title":"Welcome to YARA\u2019s documentation!-yara 4.4.0 documentation","year":"2024"},{"key":"ref30","volume-title":"Gene","year":"2024"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/qrs.2015.26"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/infocom48880.2022.9796786"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-54129-2_6"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3607199.3607208"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134646"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-17140-6_29"},{"key":"ref37","doi-asserted-by":"crossref","DOI":"10.1145\/3600160.3600182","article-title":"STIXnet: A Novel and Modular Solution for Extracting All STIX Objects in CTI Reports","volume-title":"Proceedings of the 18th International Conference on Availability, Reliability and Security. ARES \u201823","author":"Marchiori"},{"key":"ref38","article-title":"Information Prediction using Knowledge Graphs for Contextual Malware Threat Intelligence","author":"Rastogi","year":"2021"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/BigData52589.2021.9672062"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/FIT.2018.00049"},{"key":"ref41","volume-title":"Time for aCTIon: Automated Analysis of Cyber Threat Intelligence in the Wild","author":"Siracusano","year":"2023"},{"key":"ref42","doi-asserted-by":"crossref","DOI":"10.1145\/3314058.3317728","article-title":"Learning APT chains from cyber threat intelligence","volume-title":"Proceedings of the 6th Annual Symposium on Hot Topics in the Science of Security. HotSoS \u201819","author":"Husari"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3119008"},{"key":"ref44","article-title":"America\u2019s Cyber Defense Agency (CISA)","year":"2024","journal-title":"#StopRansomware: Phobos Ransomware"},{"key":"ref45","article-title":"TLS fingerprinting with JA3 and JA3S","author":"Althouse","year":"2021"},{"key":"ref46","volume-title":"STIX Viewer Tool","year":"2024"},{"key":"ref47","article-title":"Nmap Network Scanning","volume-title":"The Official Nmap Project Guide to Network Discovery and Security Scanning","author":"Lyon"},{"key":"ref49","volume-title":"WannaCry Malware Profile","year":"2017"}],"event":{"name":"2024 International Conference on Software, Telecommunications and Computer Networks (SoftCOM)","location":"Split, Croatia","start":{"date-parts":[[2024,9,26]]},"end":{"date-parts":[[2024,9,28]]}},"container-title":["2024 International Conference on Software, Telecommunications and Computer Networks (SoftCOM)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10721617\/10721628\/10721992.pdf?arnumber=10721992","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,11,27]],"date-time":"2024-11-27T01:27:48Z","timestamp":1732670868000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10721992\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,9,26]]},"references-count":46,"URL":"https:\/\/doi.org\/10.23919\/softcom62040.2024.10721992","relation":{},"subject":[],"published":{"date-parts":[[2024,9,26]]}}}