{"id":"https://openalex.org/W7220657646","doi":"https://doi.org/10.48550/arxiv.2610.04019","title":"A Quantitative Analysis of Graph Representation Strategies for Cyber Attack Detection","display_name":"A Quantitative Analysis of Graph Representation Strategies for Cyber Attack Detection","publication_year":2026,"publication_date":"2026-10-02","ids":{"openalex":"https://openalex.org/W7220657646","doi":"https://doi.org/10.48550/arxiv.2610.04019"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2610.04019","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.04019","pdf_url":"https://arxiv.org/pdf/2610.04019","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2610.04019","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5120179740","display_name":"Ali Melih Kanca","orcid":"https://orcid.org/0000-0003-3271-7463","observed_orcids":["https://orcid.org/0000-0003-3271-7463"]},"institutions":[{"id":"https://openalex.org/I173761726","display_name":"Karab\u00fck University","ror":"https://ror.org/04wy7gp54","country_code":"TR","type":"education","lineage":["https://openalex.org/I173761726"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Kanca, Ali Melih","raw_affiliation_strings":["Department of Computer Engineering , Faculty of Computing and Informatics Sciences , Karabuk University , Karabuk , T\u00fcrkiye"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Engineering , Faculty of Computing and Informatics Sciences , Karabuk University , Karabuk , T\u00fcrkiye","institution_ids":["https://openalex.org/I173761726"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5042155028","display_name":"\u0130lker T\u00fcrker","orcid":"https://orcid.org/0000-0001-7577-4658","observed_orcids":["https://orcid.org/0000-0001-7577-4658"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Turker, Ilker","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9473000168800354,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9473000168800354,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.024000000208616257,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.0066999997943639755,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cyberattack-detection","display_name":"cyberattack detection","score":0.949999988079071},{"id":"https://openalex.org/keywords/handcrafted-features","display_name":"handcrafted features","score":0.734000027179718},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"feature extraction","score":0.8270000219345093}],"concepts":[{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.7570000290870667},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6955999732017517},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.6061000227928162},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.4846000075340271},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.48410001397132874},{"id":"https://openalex.org/C95986675","wikidata":"https://www.wikidata.org/wiki/Q185168","display_name":"Quantitative analysis (chemistry)","level":2,"score":0.4724999964237213},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.41600000858306885},{"id":"https://openalex.org/C142853389","wikidata":"https://www.wikidata.org/wiki/Q744778","display_name":"Association (psychology)","level":2,"score":0.4156000018119812},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.40939998626708984},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38850000500679016},{"id":"https://openalex.org/C77660490","wikidata":"https://www.wikidata.org/wiki/Q244916","display_name":"Intermediate language","level":3,"score":0.3880999982357025},{"id":"https://openalex.org/C2986587452","wikidata":"https://www.wikidata.org/wiki/Q938438","display_name":"Statistical analysis","level":2,"score":0.3695000112056732},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.36480000615119934},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3382999897003174},{"id":"https://openalex.org/C2994008635","wikidata":"https://www.wikidata.org/wiki/Q730675","display_name":"Quantitative methodology","level":2,"score":0.3336000144481659},{"id":"https://openalex.org/C87007009","wikidata":"https://www.wikidata.org/wiki/Q210832","display_name":"Statistical hypothesis testing","level":2,"score":0.3296999931335449},{"id":"https://openalex.org/C106937863","wikidata":"https://www.wikidata.org/wiki/Q7236518","display_name":"Power graph analysis","level":3,"score":0.3215000033378601},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.31439998745918274},{"id":"https://openalex.org/C88230418","wikidata":"https://www.wikidata.org/wiki/Q131476","display_name":"Graph theory","level":2,"score":0.2985000014305115},{"id":"https://openalex.org/C161301231","wikidata":"https://www.wikidata.org/wiki/Q3478658","display_name":"Knowledge representation and reasoning","level":2,"score":0.28029999136924744},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.27230000495910645},{"id":"https://openalex.org/C207685749","wikidata":"https://www.wikidata.org/wiki/Q2088941","display_name":"Domain knowledge","level":2,"score":0.27090001106262207},{"id":"https://openalex.org/C116409475","wikidata":"https://www.wikidata.org/wiki/Q1385056","display_name":"External Data Representation","level":2,"score":0.27000001072883606},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.267300009727478},{"id":"https://openalex.org/C193524817","wikidata":"https://www.wikidata.org/wiki/Q386780","display_name":"Association rule learning","level":2,"score":0.26579999923706055},{"id":"https://openalex.org/C517642484","wikidata":"https://www.wikidata.org/wiki/Q2388514","display_name":"Intelligence analysis","level":2,"score":0.25060001015663147}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2610.04019","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.04019","pdf_url":"https://arxiv.org/pdf/2610.04019","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2610.04019","doi":"https://doi.org/10.48550/arxiv.2610.04019","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2610.04019","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2610.04019","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.04019","pdf_url":"https://arxiv.org/pdf/2610.04019","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7220657646.pdf","grobid_xml":"https://content.openalex.org/works/W7220657646.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4415673684","https://openalex.org/W4387139148","https://openalex.org/W2997353660","https://openalex.org/W4388788956","https://openalex.org/W2157841794","https://openalex.org/W4410956577","https://openalex.org/W4324343066","https://openalex.org/W3134367579","https://openalex.org/W7098856211","https://openalex.org/W4223591677"],"abstract_inverted_index":{"Graph":[0],"based":[1],"cyber":[2],"attack":[3],"detection":[4],"studies":[5,43],"employ":[6],"various":[7],"graph":[8,59],"construction":[9],"and":[10,47,68,74,116,139],"representation":[11,26,60,81,97,117,132,144],"strategies":[12,27,98,145],"across":[13,30,147],"different":[14],"cybersecurity":[15,148],"application":[16,32,57,114,149],"domains.":[17,33,150],"This":[18,34],"diversity":[19],"motivates":[20],"a":[21,37,109],"quantitative":[22,38],"examination":[23],"of":[24,40,92,143],"how":[25],"are":[28],"distributed":[29],"these":[31],"study":[35,50],"presents":[36],"analysis":[39],"37":[41],"original":[42],"published":[44],"between":[45,113],"2019":[46],"2026.":[48],"Each":[49],"was":[51,83],"coded":[52],"according":[53],"to":[54],"publication":[55],"year,":[56],"domain,":[58],"type,":[61],"feature":[62],"extraction":[63],"strategy,":[64,88],"learning":[65,82,133],"paradigm,":[66],"algorithm,":[67],"dataset.":[69],"Frequency":[70],"analysis,":[71],"cross":[72],"tabulation,":[73],"statistical":[75],"association":[76,112],"tests":[77],"were":[78],"applied.":[79],"Automated":[80],"the":[84,93,136,141],"most":[85],"frequently":[86],"employed":[87],"accounting":[89],"for":[90,100],"73.0%":[91],"studies,":[94],"while":[95],"handcrafted":[96],"accounted":[99],"27.0%.":[101],"The":[102,127],"Fisher":[103],"Freeman":[104],"Halton":[105],"exact":[106],"test":[107],"revealed":[108],"statistically":[110],"significant":[111],"domain":[115],"strategy":[118],"(exact":[119],"p":[120],"=":[121,125],"0.008;":[122],"Cramer's":[123],"V":[124],"0.540).":[126],"findings":[128],"indicate":[129],"that":[130,140],"automated":[131],"predominates":[134],"within":[135],"analyzed":[137],"corpus":[138],"distribution":[142],"differs":[146]},"counts_by_year":[],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2026-10-07T00:00:00"}
