{"id":"https://openalex.org/W2977950445","doi":"https://doi.org/10.1002/ett.3753","title":"A probability distribution function for investigating node infection and removal times","display_name":"A probability distribution function for investigating node infection and removal times","publication_year":2019,"publication_date":"2019-10-02","ids":{"openalex":"https://openalex.org/W2977950445","doi":"https://doi.org/10.1002/ett.3753","mag":"2977950445"},"language":"en","primary_location":{"id":"doi:10.1002/ett.3753","doi":"https://doi.org/10.1002/ett.3753","is_oa":false,"landing_page_url":"https://doi.org/10.1002/ett.3753","pdf_url":null,"source":{"id":"https://openalex.org/S4306425600","display_name":"Transactions on Emerging Telecommunications Technologies","issn_l":"2161-3915","issn":["2161-3915","2161-5748"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-d","jufo-1","norway-1","poland-70","russia-white-list-1"],"host_organization":"https://openalex.org/P4310320595","host_organization_name":"Wiley","host_organization_lineage":["https://openalex.org/P4310320595"],"host_organization_lineage_names":["Wiley"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Transactions on Emerging Telecommunications Technologies","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5017027330","display_name":"Tala Tafazzoli","orcid":"https://orcid.org/0000-0001-6206-4972","observed_orcids":["https://orcid.org/0000-0001-6206-4972"]},"institutions":[{"id":"https://openalex.org/I4210102178","display_name":"ICT Research Institute","ror":"https://ror.org/01a3g2z22","country_code":"IR","type":"facility","lineage":["https://openalex.org/I4210102178"]}],"countries":["IR"],"is_corresponding":true,"raw_author_name":"Tala Tafazzoli","raw_affiliation_strings":["ICT Security Faculty, ICT Research Institute (ITRC), Tehran, Iran","Tala Tafazzoli, ICT Security Faculty, ICT Research Institute (ITRC), Tehran, Iran"],"raw_orcid":"https://orcid.org/0000-0001-6206-4972","affiliations":[{"raw_affiliation_string":"ICT Security Faculty, ICT Research Institute (ITRC), Tehran, Iran","institution_ids":["https://openalex.org/I4210102178"]},{"raw_affiliation_string":"Tala Tafazzoli, ICT Security Faculty, ICT Research Institute (ITRC), Tehran, Iran","institution_ids":["https://openalex.org/I4210102178"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101811727","display_name":"Babak Sadeghiyan","orcid":"https://orcid.org/0000-0002-5947-7570","observed_orcids":["https://orcid.org/0000-0002-5947-7570","https://orcid.org/0000-0002-5316-8005"]},"institutions":[{"id":"https://openalex.org/I158248296","display_name":"Amirkabir University of Technology","ror":"https://ror.org/04gzbav43","country_code":"IR","type":"education","lineage":["https://openalex.org/I158248296"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Babak Sadeghiyan","raw_affiliation_strings":["Computer and IT Department, Amirkabir University of Technology, Tehran, Iran"],"raw_orcid":"https://orcid.org/0000-0002-5947-7570","affiliations":[{"raw_affiliation_string":"Computer and IT Department, Amirkabir University of Technology, Tehran, Iran","institution_ids":["https://openalex.org/I158248296"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5017027330"],"corresponding_institution_ids":["https://openalex.org/I4210102178"],"apc_list":{"value":3000,"currency":"USD","value_usd":3000},"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":93,"max":95},"biblio":{"volume":"31","issue":"2","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9672999978065491,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9672999978065491,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.008999999612569809,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.006000000052154064,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/bayesian-networks","display_name":"Bayesian networks","score":0.7850000262260437},{"id":"https://openalex.org/keywords/estimation-of-distribution-algorithms","display_name":"estimation of distribution algorithms","score":0.8450000286102295},{"id":"https://openalex.org/keywords/network-traffic-features","display_name":"network traffic features","score":0.6399999856948853},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"digital forensics","score":0.6489999890327454}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7207548022270203},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.690889298915863},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.5671241283416748},{"id":"https://openalex.org/C33724603","wikidata":"https://www.wikidata.org/wiki/Q812540","display_name":"Bayesian network","level":2,"score":0.5569528937339783},{"id":"https://openalex.org/C149441793","wikidata":"https://www.wikidata.org/wiki/Q200726","display_name":"Probability distribution","level":2,"score":0.48392540216445923},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.47619664669036865},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4613407254219055},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.45357975363731384},{"id":"https://openalex.org/C114289077","wikidata":"https://www.wikidata.org/wiki/Q3284399","display_name":"Statistical model","level":2,"score":0.42040300369262695},{"id":"https://openalex.org/C177769412","wikidata":"https://www.wikidata.org/wiki/Q278090","display_name":"Prior probability","level":3,"score":0.4104680120944977},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3701680302619934},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.3622995615005493},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.14304673671722412},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.11508733034133911},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.10883167386054993},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C66938386","wikidata":"https://www.wikidata.org/wiki/Q633538","display_name":"Structural engineering","level":1,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1002/ett.3753","doi":"https://doi.org/10.1002/ett.3753","is_oa":false,"landing_page_url":"https://doi.org/10.1002/ett.3753","pdf_url":null,"source":{"id":"https://openalex.org/S4306425600","display_name":"Transactions on Emerging Telecommunications Technologies","issn_l":"2161-3915","issn":["2161-3915","2161-5748"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-d","jufo-1","norway-1","poland-70","russia-white-list-1"],"host_organization":"https://openalex.org/P4310320595","host_organization_name":"Wiley","host_organization_lineage":["https://openalex.org/P4310320595"],"host_organization_lineage_names":["Wiley"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Transactions on Emerging Telecommunications Technologies","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W114565888","https://openalex.org/W129962873","https://openalex.org/W261585586","https://openalex.org/W562953997","https://openalex.org/W1517993545","https://openalex.org/W1542788159","https://openalex.org/W1595106420","https://openalex.org/W1722282631","https://openalex.org/W1963907682","https://openalex.org/W1966006953","https://openalex.org/W1976309217","https://openalex.org/W1991001460","https://openalex.org/W2008906462","https://openalex.org/W2011014734","https://openalex.org/W2012095206","https://openalex.org/W2031163547","https://openalex.org/W2031197939","https://openalex.org/W2054558630","https://openalex.org/W2095006675","https://openalex.org/W2103315222","https://openalex.org/W2110227539","https://openalex.org/W2117651009","https://openalex.org/W2130466555","https://openalex.org/W2140886193","https://openalex.org/W2150105124","https://openalex.org/W2163166770","https://openalex.org/W2258956667","https://openalex.org/W2274455420","https://openalex.org/W2296509296","https://openalex.org/W2360989194","https://openalex.org/W2369072273","https://openalex.org/W2405095208","https://openalex.org/W2414365832","https://openalex.org/W2479032158","https://openalex.org/W2528339895","https://openalex.org/W2785919258","https://openalex.org/W2901747110","https://openalex.org/W2935625550","https://openalex.org/W4285719527","https://openalex.org/W4302423442"],"related_works":["https://openalex.org/W2597968748","https://openalex.org/W2730393987","https://openalex.org/W2579780686","https://openalex.org/W2105426354","https://openalex.org/W2958435858","https://openalex.org/W1972020724","https://openalex.org/W2032069756","https://openalex.org/W2053195381","https://openalex.org/W2151244572","https://openalex.org/W1986509690"],"abstract_inverted_index":{"Abstract":[0],"Considering":[1],"the":[2,13,34,37,51,55,71,106,124,130,134,155,191,199,214,220,226,234,250,263,274,302,306],"important":[3],"issue":[4],"of":[5,15,157,161,198,222,229,252,309],"computer":[6,63],"infections":[7],"by":[8,62,86,113,219],"worms":[9],"spread":[10],"via":[11],"networks,":[12],"theme":[14],"source":[16,303],"identification":[17],"has":[18,245],"been":[19,247],"a":[20,42,97,114,150,205],"prominent":[21],"research":[22],"field":[23],"that":[24,108,249,295,297,318],"aims":[25],"at":[26,102,144,240],"investigating":[27],"infection":[28,35,44,136,158,227,307],"propagation":[29],"including":[30,329],"acquiring":[31],"knowledge":[32],"about":[33],"and":[36,58,66,73,120,126,159,169,180,193,237,289,305],"node":[38,110,135,163,304],"removal":[39,160],"times":[40],"when":[41],"worm":[43,56,327],"happens.":[45],"This":[46],"information":[47],"helps":[48],"in":[49,54,260],"identifying":[50],"patient":[52],"zero":[53],"attack":[57],"may":[59],"be":[60,139,256,316,322],"used":[61],"forensic":[64],"investigators":[65],"network":[67,77,125,172],"administrators":[68],"to":[69,74,100,153,280],"spot":[70],"culprits":[72],"identify":[75],"related":[76],"vulnerabilities.":[78],"In":[79],"this":[80,84],"paper,":[81],"we":[82,189,292],"tackle":[83],"problem":[85],"developing":[87],"new":[88],"probabilistic":[89,215],"models":[90,299],"based":[91],"on":[92],"Bayesian":[93],"networks.":[94],"We":[95,148,268],"learn":[96],"probability":[98,107,132,228,235],"distribution":[99,223,236],"calculate,":[101],"every":[103],"time":[104,146,156,242,261,308],"step,":[105],"each":[109,145,162,241],"is":[111,208,217,231],"infected":[112],"scanning":[115],"worm,":[116],"using":[117,141,196,210],"historical":[118],"data":[119],"features":[121,166],"extracted":[122,168],"from":[123,171],"application":[127],"layers.":[128],"With":[129],"mentioned":[131],"distribution,":[133],"status":[137],"can":[138,255,300],"inferred":[140,232],"feature":[142,238],"values":[143,239],"step.":[147,243],"propose":[149],"four\u2010step":[151],"method":[152,320],"investigate":[154],"probabilistically.":[164],"First,":[165],"are":[167,176],"derived":[170],"traffic":[173],"data.":[174,212],"There":[175],"no":[177],"suitable":[178],"training":[179,192,211],"test":[181,194],"datasets":[182,195],"publicly":[183],"available":[184],"for":[185],"our":[186,270,282,287,319],"tests;":[187],"therefore,":[188],"developed":[190],"simulations":[197],"Code":[200],"Red":[201],"II":[202],"worm.":[203],"Second,":[204],"prior":[206,275],"model":[207,216,272,279],"built":[209,218],"Third,":[213],"estimation":[221],"algorithm.":[224],"Fourth,":[225],"nodes":[230,254,310],"given":[233],"It":[244,314],"already":[246],"shown":[248],"number":[251],"infectious":[253],"probabilistically":[257],"approximated":[258],"backward":[259],"through":[262],"stochastic":[264,276],"Back\u2010to\u2010Origin":[265,277],"Markov":[266,278],"model.":[267,284],"combine":[269],"first":[271,288],"with":[273,311,324],"develop":[281],"second":[283,290],"To":[285],"evaluate":[286],"models,":[291],"conducted":[293],"experiments":[294],"show":[296],"these":[298],"pinpoint":[301],"acceptable":[312],"accuracy.":[313],"should":[315],"noted":[317],"could":[321],"employed":[323],"other":[325],"propagating":[326],"types":[328],"ransomware":[330],"worms.":[331]},"counts_by_year":[{"year":2024,"cited_by_count":2}],"updated_date":"2026-11-13T13:42:25.865203","created_date":"2019-10-10T00:00:00"}