activity
20142025
most citedThreatZoom: CVE2CWE using Hierarchical Neural Network

22 citations · 74 across the 11 of their papers we have counts for

collaborators

11 papers

cs.ET2025

Range and Topology Mutation Based Wireless Agility

Qi Duan, Ehab Al-Shae, Jiang Xie

In this paper, we present formal foundations for two wireless agility techniques: (1) Random Range Mutation (RNM) that allows for periodic changes of AP coverage range randomly, an…

cs.CR2023★ 5 cited

Automated CVE Analysis for Threat Prioritization and Impact Prediction

Ehsan Aghaei, Ehab Al-Shaer, Waseem Shadid +1

The Common Vulnerabilities and Exposures (CVE) are pivotal information for proactive cybersecurity measures, including service patching, security hardening, and more. However, CVEs…

cs.CR2023★ 6 cited

CVE-driven Attack Technique Prediction with Semantic Information Extraction and a Domain-specific Language Model

Ehsan Aghaei, Ehab Al-Shaer

This paper addresses a critical challenge in cybersecurity: the gap between vulnerability information represented by Common Vulnerabilities and Exposures (CVEs) and the resulting c…

cs.CL2022★ 10 cited

SecureBERT: A Domain-Specific Language Model for Cybersecurity

Ehsan Aghaei, Xi Niu, Waseem Shadid +1

Natural Language Processing (NLP) has recently gained wide attention in cybersecurity, particularly in Cyber Threat Intelligence (CTI) and cyber automation. Increased connection an…

cs.CR2021★ 4 cited

Constraints Satisfiability Driven Reinforcement Learning for Autonomous Cyber Defense

Ashutosh Dutta, Ehab Al-Shaer, Samrat Chatterjee

With the increasing system complexity and attack sophistication, the necessity of autonomous cyber defense becomes vivid for cyber and cyber-physical systems (CPSs). Many existing…

cs.LG2021★ 3 cited

V2W-BERT: A Framework for Effective Hierarchical Multiclass Classification of Software Vulnerabilities

Siddhartha Shankar Das, Edoardo Serra, Mahantesh Halappanavar +2

Weaknesses in computer systems such as faults, bugs and errors in the architecture, design or implementation of software provide vulnerabilities that can be exploited by attackers…