{"id":"https://openalex.org/W7204646841","doi":"https://doi.org/10.22266/ijies2026.0930.45","title":"Cross-attention Guided Graph-temporal Representation Learning for DDoS Attack Detection","display_name":"Cross-attention Guided Graph-temporal Representation Learning for DDoS Attack Detection","publication_year":2026,"publication_date":"2026-08-29","ids":{"openalex":"https://openalex.org/W7204646841","doi":"https://doi.org/10.22266/ijies2026.0930.45"},"language":"en","primary_location":{"id":"doi:10.22266/ijies2026.0930.45","doi":"https://doi.org/10.22266/ijies2026.0930.45","is_oa":true,"landing_page_url":"https://doi.org/10.22266/ijies2026.0930.45","pdf_url":"https://doi.org/10.22266/ijies2026.0930.45","source":{"id":"https://openalex.org/S2764379787","display_name":"International journal of intelligent engineering and systems","issn_l":"1882-708X","issn":["1882-708X","2185-310X","2185-3118"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","poland-40","russia-white-list-2"],"host_organization":"https://openalex.org/P4365922016","host_organization_name":"Intelligent Networks and Systems Society","host_organization_lineage":["https://openalex.org/P4365922016"],"host_organization_lineage_names":["Intelligent Networks and Systems Society"],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Intelligent Engineering and Systems","raw_type":"journal-article"},"parent_works":[],"lineage":["https://openalex.org/W7204646841"],"child_works_count":0,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.22266/ijies2026.0930.45","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5148577901","display_name":"Alby Alphonsa Joseph","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I96797292","display_name":"Noorul Islam University","ror":"https://ror.org/01y2gf490","country_code":"IN","type":"education","lineage":["https://openalex.org/I96797292"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Alby Alphonsa Joseph","raw_affiliation_strings":["Department of Computer Science and Engineering, Noorul Islam Centre for Higher Education, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Noorul Islam Centre for Higher Education, India","institution_ids":["https://openalex.org/I96797292"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5083794809","display_name":"G. Venifa Mini","orcid":"https://orcid.org/0000-0002-5852-1410","observed_orcids":["https://orcid.org/0000-0002-5852-1410"]},"institutions":[{"id":"https://openalex.org/I96797292","display_name":"Noorul Islam University","ror":"https://ror.org/01y2gf490","country_code":"IN","type":"education","lineage":["https://openalex.org/I96797292"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Venifa Mini G","raw_affiliation_strings":["Department of Computer Science and Engineering, Noorul Islam Centre for Higher Education, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Noorul Islam Centre for Higher Education, India","institution_ids":["https://openalex.org/I96797292"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I96797292"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"19","issue":"9","first_page":"912","last_page":"938"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ddos-detection","display_name":"DDoS attack detection","score":1.0},{"id":"https://openalex.org/keywords/network-traffic-classification","display_name":"network traffic classification","score":0.7710000276565552},{"id":"https://openalex.org/keywords/cross-attention-fusion","display_name":"cross-attention fusion","score":0.8080000281333923},{"id":"https://openalex.org/keywords/transformer-encoder","display_name":"Transformer encoder","score":0.8140000104904175},{"id":"https://openalex.org/keywords/bidirectional-gated-recurrent-unit","display_name":"bidirectional gated recurrent unit","score":0.8410000205039978},{"id":"https://openalex.org/keywords/cicddos2019","display_name":"CICDDoS2019","score":0.8790000081062317},{"id":"https://openalex.org/keywords/intrusion-detection","display_name":"intrusion detection","score":0.6740000247955322},{"id":"https://openalex.org/keywords/iot-security","display_name":"Internet of Things security","score":0.7379999756813049}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8913000226020813},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.766700029373169},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.588699996471405},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5636000037193298},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.5002999901771545},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.46309998631477356},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.4530999958515167},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.45249998569488525},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.43650001287460327},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.39469999074935913},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3946000039577484},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.3781000077724457},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.3709999918937683},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.36329999566078186},{"id":"https://openalex.org/C173414695","wikidata":"https://www.wikidata.org/wiki/Q5510276","display_name":"Fusion mechanism","level":4,"score":0.3547999858856201},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.3456000089645386},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3424000144004822},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.3287999927997589},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.32179999351501465},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.3131999969482422},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.3100999891757965},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.30149999260902405},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.2937000095844269},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.28119999170303345},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.27070000767707825},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.26660001277923584},{"id":"https://openalex.org/C144240696","wikidata":"https://www.wikidata.org/wiki/Q367204","display_name":"Address space","level":2,"score":0.2662000060081482}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.22266/ijies2026.0930.45","doi":"https://doi.org/10.22266/ijies2026.0930.45","is_oa":true,"landing_page_url":"https://doi.org/10.22266/ijies2026.0930.45","pdf_url":"https://doi.org/10.22266/ijies2026.0930.45","source":{"id":"https://openalex.org/S2764379787","display_name":"International journal of intelligent engineering and systems","issn_l":"1882-708X","issn":["1882-708X","2185-310X","2185-3118"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","poland-40","russia-white-list-2"],"host_organization":"https://openalex.org/P4365922016","host_organization_name":"Intelligent Networks and Systems Society","host_organization_lineage":["https://openalex.org/P4365922016"],"host_organization_lineage_names":["Intelligent Networks and Systems Society"],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Intelligent Engineering and Systems","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.22266/ijies2026.0930.45","doi":"https://doi.org/10.22266/ijies2026.0930.45","is_oa":true,"landing_page_url":"https://doi.org/10.22266/ijies2026.0930.45","pdf_url":"https://doi.org/10.22266/ijies2026.0930.45","source":{"id":"https://openalex.org/S2764379787","display_name":"International journal of intelligent engineering and systems","issn_l":"1882-708X","issn":["1882-708X","2185-310X","2185-3118"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","poland-40","russia-white-list-2"],"host_organization":"https://openalex.org/P4365922016","host_organization_name":"Intelligent Networks and Systems Society","host_organization_lineage":["https://openalex.org/P4365922016"],"host_organization_lineage_names":["Intelligent Networks and Systems Society"],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Intelligent Engineering and Systems","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.4943999946117401,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204646841.pdf","grobid_xml":"https://content.openalex.org/works/W7204646841.grobid-xml"},"referenced_works_count":24,"referenced_works":["https://openalex.org/W2018992824","https://openalex.org/W2104692292","https://openalex.org/W2587078433","https://openalex.org/W2982682021","https://openalex.org/W2989199981","https://openalex.org/W4281696178","https://openalex.org/W4321365799","https://openalex.org/W4383535390","https://openalex.org/W4390499810","https://openalex.org/W4391708331","https://openalex.org/W4401345106","https://openalex.org/W4405196948","https://openalex.org/W4407882299","https://openalex.org/W4408153924","https://openalex.org/W4409896370","https://openalex.org/W4412470815","https://openalex.org/W4414260377","https://openalex.org/W4415672131","https://openalex.org/W4415672893","https://openalex.org/W4416672616","https://openalex.org/W7118163340","https://openalex.org/W7125691918","https://openalex.org/W7126411545","https://openalex.org/W7143292175"],"related_works":["https://openalex.org/W7164399028","https://openalex.org/W7154856245","https://openalex.org/W7117547193","https://openalex.org/W4414873859","https://openalex.org/W7217494012","https://openalex.org/W7087073865","https://openalex.org/W4402568216","https://openalex.org/W4410934707","https://openalex.org/W7152348657","https://openalex.org/W4293498872"],"abstract_inverted_index":{"Distributed":[0],"Denial-of-Service":[1],"(DDoS)":[2],"attacks":[3],"represent":[4],"a":[5,74,88,100,111,125,138,150],"critical":[6],"cybersecurity":[7],"threat":[8],"in":[9,121],"modern":[10,171],"Internet":[11],"of":[12,25,40,214,221,264],"Things":[13],"(IoT)":[14],"and":[15,32,37,110,146,175,185,194,219,224,229,235,254,262],"networked":[16],"environments":[17],"by":[18],"overwhelming":[19],"targeted":[20],"systems":[21],"with":[22,169,188,216,242],"massive":[23],"volumes":[24],"malicious":[26],"traffic,":[27],"thereby":[28],"disrupting":[29],"service":[30],"availability":[31],"degrading":[33],"performance.The":[34,233],"complex,":[35],"high-dimensional,":[36],"interdependent":[38],"nature":[39],"network":[41,167,288],"traffic":[42,98,168],"makes":[43],"accurate":[44],"detection":[45,232,272],"challenging,":[46],"particularly":[47],"when":[48],"conventional":[49],"approaches":[50],"rely":[51],"on":[52,201,273],"handcrafted":[53],"features":[54],"or":[55],"single-branch":[56],"deep":[57],"learning":[58],"(DL)":[59],"models":[60],"that":[61,206],"fail":[62],"to":[63,95,103,117,132],"capture":[64,104],"multi-level":[65],"feature":[66,152],"interactions.To":[67],"address":[68],"these":[69],"limitations,":[70],"this":[71],"study":[72],"proposes":[73],"Cross-Attention":[75],"Guided":[76],"Transformer":[77,101],"Network":[78,93],"(CAGT-Net)":[79],"for":[80,154,268,286],"robust":[81],"DDoS":[82,172,231,270],"attack":[83,173,271],"detection.The":[84],"proposed":[85,208,266],"framework":[86,267],"integrates":[87,143],"multi-scale":[89],"one-dimensional":[90],"Convolutional":[91],"Neural":[92],"(1D-CNN)":[94],"extract":[96],"local":[97],"patterns,":[99],"encoder":[102],"long-range":[105],"contextual":[106],"dependencies":[107],"through":[108],"self-attention,":[109],"Bidirectional":[112],"Gated":[113],"Recurrent":[114],"Unit":[115],"(BiGRU)":[116],"model":[118,156],"temporal":[119],"dynamics":[120],"sequential":[122],"data.In":[123],"addition,":[124],"Graph":[126],"Reasoning":[127],"Module":[128],"(GRM)":[129],"is":[130,157,179],"employed":[131],"learn":[133],"structural":[134],"interfeature":[135],"relationships,":[136],"while":[137,246],"cross-attention":[139],"fusion":[140],"mechanism":[141],"adaptively":[142],"spatial,":[144],"temporal,":[145],"relational":[147],"representations":[148],"into":[149],"unified":[151],"space":[153],"classification.The":[155],"evaluated":[158],"using":[159,181],"the":[160,202,207,247,260,265,274,278],"CIC-DDoS2019":[161,203,275],"dataset,":[162],"which":[163],"contains":[164],"large-scale,":[165],"real-world":[166],"diverse":[170],"types":[174],"80":[176],"flow-based":[177],"features.Performance":[178],"assessed":[180],"accuracy,":[182],"precision,":[183,217],"recall,":[184,218],"F1-score,":[186],"along":[187],"Receiver":[189],"Operating":[190],"Characteristic":[191],"(ROC),":[192],"Precision-Recall,":[193],"Detection":[195],"Error":[196],"Trade-off":[197],"(DET)":[198],"analyses.Experimental":[199],"results":[200],"dataset":[204,276],"demonstrate":[205,259],"CAGT-Net":[209],"achieves":[210],"an":[211],"overall":[212],"accuracy":[213],"98.56%,":[215,223],"F1-score":[220],"98.58%,":[222],"98.55%,":[225],"respectively,":[226],"indicating":[227,282],"balanced":[228],"reliable":[230],"ROC":[234],"Precision-Recall":[236],"curves":[237],"exhibit":[238],"near-ideal":[239],"classification":[240],"performance":[241],"high":[243],"area-under-curve":[244],"values,":[245],"DET":[248],"analysis":[249],"confirms":[250],"low":[251],"false":[252,255],"positive":[253],"negative":[256],"rates.These":[257],"findings":[258],"effectiveness":[261],"reliability":[263],"binary":[269],"under":[277],"adopted":[279],"experimental":[280],"settings,":[281],"its":[283],"potential":[284],"applicability":[285],"intelligent":[287],"intrusion":[289],"detection.":[290]},"counts_by_year":[],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2026-08-30T00:00:00"}