{"id":"https://openalex.org/W7203821085","doi":"https://doi.org/10.1371/journal.pone.0354921","title":"MambaGCN-SMI: Protocol state machine inference framework based on Mamba and GCN","display_name":"MambaGCN-SMI: Protocol state machine inference framework based on Mamba and GCN","publication_year":2026,"publication_date":"2026-08-20","ids":{"openalex":"https://openalex.org/W7203821085","doi":"https://doi.org/10.1371/journal.pone.0354921","pmid":"https://pubmed.ncbi.nlm.nih.gov/42623360","pmcid":"https://www.ncbi.nlm.nih.gov/pmc/articles/13492748"},"language":"en","primary_location":{"id":"doi:10.1371/journal.pone.0354921","doi":"https://doi.org/10.1371/journal.pone.0354921","is_oa":true,"landing_page_url":"https://doi.org/10.1371/journal.pone.0354921","pdf_url":"https://journals.plos.org/plosone/article/file?id=10.1371/journal.pone.0354921&type=printable","source":{"id":"https://openalex.org/S202381698","display_name":"PLoS ONE","issn_l":"1932-6203","issn":["1932-6203"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","cwts-core","doaj","dongbi-c","doyens","erih-plus","jufo-1","ki-jl-1","medline","norway-1","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310315706","host_organization_name":"Public Library of Science","host_organization_lineage":["https://openalex.org/P4310315706"],"host_organization_lineage_names":["Public Library of Science"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"PLOS One","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref","pubmed"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://journals.plos.org/plosone/article/file?id=10.1371/journal.pone.0354921&type=printable","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5090323209","display_name":"Junkang Ren","orcid":"https://orcid.org/0009-0001-1615-4667","observed_orcids":["https://orcid.org/0009-0001-1615-4667"]},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Junkang Ren","raw_affiliation_strings":["Department of Information System Engineering, PLA Information Engineering University, Zhengzhou, Henan, China"],"raw_orcid":"https://orcid.org/0009-0001-1615-4667","affiliations":[{"raw_affiliation_string":"Department of Information System Engineering, PLA Information Engineering University, Zhengzhou, Henan, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5124069264","display_name":"Qing Li","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qing Li","raw_affiliation_strings":["Department of Information System Engineering, PLA Information Engineering University, Zhengzhou, Henan, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information System Engineering, PLA Information Engineering University, Zhengzhou, Henan, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5124114279","display_name":"Ruijuan Chu","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruijuan Chu","raw_affiliation_strings":["Department of Information System Engineering, PLA Information Engineering University, Zhengzhou, Henan, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information System Engineering, PLA Information Engineering University, Zhengzhou, Henan, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5130574743","display_name":"Yifan Chen","orcid":"https://orcid.org/0009-0009-1104-2023","observed_orcids":["https://orcid.org/0009-0009-1104-2023"]},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yifan Chen","raw_affiliation_strings":["Department of Information System Engineering, PLA Information Engineering University, Zhengzhou, Henan, China"],"raw_orcid":"https://orcid.org/0009-0009-1104-2023","affiliations":[{"raw_affiliation_string":"Department of Information System Engineering, PLA Information Engineering University, Zhengzhou, Henan, China","institution_ids":["https://openalex.org/I169689159"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5090323209"],"corresponding_institution_ids":["https://openalex.org/I169689159"],"apc_list":{"value":2382,"currency":"USD","value_usd":2382},"apc_paid":{"value":2382,"currency":"USD","value_usd":2382},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"21","issue":"8","first_page":"e0354921","last_page":"e0354921"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.49000000953674316,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.49000000953674316,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.37869998812675476,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.008799999952316284,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/mamba","display_name":"Mamba","score":0.7580000162124634},{"id":"https://openalex.org/keywords/graph-convolutional-networks","display_name":"graph convolutional networks","score":0.9760000109672546},{"id":"https://openalex.org/keywords/protocol-reverse-engineering","display_name":"protocol reverse engineering","score":0.7649999856948853},{"id":"https://openalex.org/keywords/transmission-control-protocol","display_name":"TCP","score":0.37599998712539673},{"id":"https://openalex.org/keywords/http","display_name":"HTTP","score":0.9580000042915344},{"id":"https://openalex.org/keywords/simple-mail-transfer-protocol","display_name":"SMTP","score":0.8849999904632568},{"id":"https://openalex.org/keywords/modbus","display_name":"Modbus","score":0.9990000128746033},{"id":"https://openalex.org/keywords/dnp3","display_name":"DNP3","score":0.9750000238418579}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7696999907493591},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.7376999855041504},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5674999952316284},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.5092999935150146},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.5065000057220459},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4634000062942505},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.4498000144958496},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.4399999976158142},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.3686000108718872},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.36640000343322754},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.35269999504089355},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.35179999470710754},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.3506999909877777},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.3465999960899353},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3456000089645386},{"id":"https://openalex.org/C167822520","wikidata":"https://www.wikidata.org/wiki/Q176452","display_name":"Finite-state machine","level":2,"score":0.34380000829696655},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.33970001339912415},{"id":"https://openalex.org/C181062253","wikidata":"https://www.wikidata.org/wiki/Q5421886","display_name":"Extended finite-state machine","level":3,"score":0.32749998569488525},{"id":"https://openalex.org/C13251829","wikidata":"https://www.wikidata.org/wiki/Q3085841","display_name":"Dense graph","level":5,"score":0.29600000381469727},{"id":"https://openalex.org/C134261354","wikidata":"https://www.wikidata.org/wiki/Q938438","display_name":"Statistical inference","level":2,"score":0.2786000072956085},{"id":"https://openalex.org/C72434380","wikidata":"https://www.wikidata.org/wiki/Q230930","display_name":"State space","level":2,"score":0.2703000009059906},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.26980000734329224},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.26170000433921814}],"mesh":[{"descriptor_ui":"D000069550","descriptor_name":"Machine Learning","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D000098422","descriptor_name":"Graph Neural Networks","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D000465","descriptor_name":"Algorithms","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false}],"locations_count":3,"locations":[{"id":"doi:10.1371/journal.pone.0354921","doi":"https://doi.org/10.1371/journal.pone.0354921","is_oa":true,"landing_page_url":"https://doi.org/10.1371/journal.pone.0354921","pdf_url":"https://journals.plos.org/plosone/article/file?id=10.1371/journal.pone.0354921&type=printable","source":{"id":"https://openalex.org/S202381698","display_name":"PLoS ONE","issn_l":"1932-6203","issn":["1932-6203"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","cwts-core","doaj","dongbi-c","doyens","erih-plus","jufo-1","ki-jl-1","medline","norway-1","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310315706","host_organization_name":"Public Library of Science","host_organization_lineage":["https://openalex.org/P4310315706"],"host_organization_lineage_names":["Public Library of Science"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"PLOS One","raw_type":"journal-article"},{"id":"pmid:42623360","doi":null,"is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/42623360","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"PloS one","raw_type":"Journal Article"},{"id":"pmh:oai:pubmedcentral.nih.gov:13492748","doi":null,"is_oa":true,"landing_page_url":"https://pmc.ncbi.nlm.nih.gov/articles/PMC13492748/","pdf_url":null,"source":{"id":"https://openalex.org/S2764455111","display_name":"PubMed Central","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"PLoS One","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.1371/journal.pone.0354921","doi":"https://doi.org/10.1371/journal.pone.0354921","is_oa":true,"landing_page_url":"https://doi.org/10.1371/journal.pone.0354921","pdf_url":"https://journals.plos.org/plosone/article/file?id=10.1371/journal.pone.0354921&type=printable","source":{"id":"https://openalex.org/S202381698","display_name":"PLoS ONE","issn_l":"1932-6203","issn":["1932-6203"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","cwts-core","doaj","dongbi-c","doyens","erih-plus","jufo-1","ki-jl-1","medline","norway-1","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310315706","host_organization_name":"Public Library of Science","host_organization_lineage":["https://openalex.org/P4310315706"],"host_organization_lineage_names":["Public Library of Science"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"PLOS One","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.4943999946117401,"id":"https://metadata.un.org/sdg/9"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7203821085.pdf","grobid_xml":"https://content.openalex.org/works/W7203821085.grobid-xml"},"referenced_works_count":23,"referenced_works":["https://openalex.org/W38765094","https://openalex.org/W1493454437","https://openalex.org/W1976526581","https://openalex.org/W2048253231","https://openalex.org/W2055228862","https://openalex.org/W2097749765","https://openalex.org/W2115675703","https://openalex.org/W2121972959","https://openalex.org/W2131242596","https://openalex.org/W2164253698","https://openalex.org/W2582379727","https://openalex.org/W2737120854","https://openalex.org/W2889322176","https://openalex.org/W2973442392","https://openalex.org/W2979571639","https://openalex.org/W3083977451","https://openalex.org/W3206655379","https://openalex.org/W3209830516","https://openalex.org/W4387332579","https://openalex.org/W4390574029","https://openalex.org/W4416195063","https://openalex.org/W4416232957","https://openalex.org/W4417170748"],"related_works":["https://openalex.org/W3190299726","https://openalex.org/W2888760415","https://openalex.org/W7138937247","https://openalex.org/W2353037276","https://openalex.org/W4417287952","https://openalex.org/W2608051705","https://openalex.org/W7104177120","https://openalex.org/W3196765911","https://openalex.org/W239045340","https://openalex.org/W2071071977"],"abstract_inverted_index":{"To":[0],"address":[1],"the":[2,26,90,121,136,140,148],"limitations":[3],"of":[4,110,116,167],"existing":[5],"non-interactive":[6],"protocol":[7,43,169,179],"state":[8,49,55,72,97,154,170],"machine":[9,98],"inference":[10,28,166],"methods":[11,94],"in":[12,95],"feature":[13],"representation":[14],"capability,":[15],"inter-stage":[16],"information":[17],"fusion,":[18],"and":[19,54,59,74,86,101,112,123,128,139],"adaptive":[20,71,165],"simplification":[21],"strategies,":[22],"this":[23,161],"paper":[24],"proposes":[25],"MambaGCN-SMI":[27],"framework.":[29],"The":[30],"method":[31],"employs":[32],"a":[33,61,78,113],"dual-level":[34],"Mamba":[35,137],"encoder":[36,138],"to":[37,65,147],"extract":[38],"deep":[39,175],"semantic":[40],"features":[41],"from":[42],"interactions,":[44],"constructs":[45],"an":[46,106,173],"initial":[47],"directed":[48],"graph":[50,158],"based":[51],"on":[52,77],"clustering":[53],"transition":[56],"conditional":[57],"entropy,":[58],"utilizes":[60],"Graph":[62,141],"Convolutional":[63,142],"Network":[64,143],"learn":[66],"node":[67,122],"embeddings,":[68],"enabling":[69],"data-driven":[70],"merging":[73],"simplification.":[75],"Experiments":[76],"multi-protocol":[79],"dataset":[80],"encompassing":[81],"TCP,":[82],"HTTP,":[83],"SMTP,":[84],"Modbus,":[85],"DNP3":[87],"demonstrate":[88],"that":[89,134],"framework":[91],"outperforms":[92],"mainstream":[93],"both":[96,135],"structure":[99,159],"recovery":[100],"behavioral":[102],"prediction.":[103],"It":[104],"achieves":[105,163],"average":[107],"prediction":[108],"accuracy":[109],"95.7%":[111],"behavior":[114],"coverage":[115],"97.5%.":[117],"For":[118],"structural":[119],"recovery,":[120],"edge":[124],"F1-scores":[125],"reach":[126],"0.939":[127],"0.915,":[129],"respectively.":[130],"Ablation":[131],"studies":[132],"confirm":[133],"module":[144],"contribute":[145],"significantly":[146],"performance":[149],"improvement.":[150],"By":[151],"integrating":[152],"selective":[153],"space":[155],"modeling":[156],"with":[157],"learning,":[160],"research":[162],"high-precision,":[164],"private":[168],"machines,":[171],"offering":[172],"effective":[174],"learning":[176],"solution":[177],"for":[178],"reverse":[180],"engineering":[181],"analysis.":[182]},"counts_by_year":[],"updated_date":"2026-11-13T13:42:25.865203","created_date":"2026-08-21T00:00:00"}