{"id":"https://openalex.org/W7154717588","doi":"https://doi.org/10.1016/j.knosys.2026.115986","title":"ProGrasp: Storage-efficient provenance graph compression for APT forensics via structure prediction and attribute aggregation","display_name":"ProGrasp: Storage-efficient provenance graph compression for APT forensics via structure prediction and attribute aggregation","publication_year":2026,"publication_date":"2026-04-17","ids":{"openalex":"https://openalex.org/W7154717588","doi":"https://doi.org/10.1016/j.knosys.2026.115986"},"language":"en","primary_location":{"id":"doi:10.1016/j.knosys.2026.115986","is_oa":false,"landing_page_url":"https://doi.org/10.1016/j.knosys.2026.115986","pdf_url":null,"source":{"id":"https://openalex.org/S10169007","display_name":"Knowledge-Based Systems","issn_l":"0950-7051","issn":["0950-7051","1872-7409"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Knowledge-Based Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5029428788","display_name":"Tiantian Zhu","orcid":"https://orcid.org/0000-0002-8657-662X"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]},{"id":"https://openalex.org/I82760581","display_name":"Taizhou University","ror":"https://ror.org/04fzhyx73","country_code":"CN","type":"education","lineage":["https://openalex.org/I82760581"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tiantian Zhu","raw_affiliation_strings":["Taizhou Institute, Zhejiang University of Technology, China","Zhejiang University of Technology, China"],"raw_orcid":"https://orcid.org/0000-0002-8657-662X","affiliations":[{"raw_affiliation_string":"Taizhou Institute, Zhejiang University of Technology, China","institution_ids":["https://openalex.org/I82760581"]},{"raw_affiliation_string":"Zhejiang University of Technology, China","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133863409","display_name":"Yiqian Yang","orcid":null},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yiqian Yang","raw_affiliation_strings":["Zhejiang University of Technology, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University of Technology, China","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079651155","display_name":"Zhengqiu Weng","orcid":"https://orcid.org/0000-0003-4175-6763"},"institutions":[{"id":"https://openalex.org/I146620803","display_name":"Wenzhou University","ror":"https://ror.org/020hxh324","country_code":"CN","type":"education","lineage":["https://openalex.org/I146620803"]},{"id":"https://openalex.org/I4400573270","display_name":"Wenzhou University of Technology","ror":"https://ror.org/03dd7qj98","country_code":null,"type":"education","lineage":["https://openalex.org/I4400573270"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhengqiu Weng","raw_affiliation_strings":["Wenzhou University of Technology, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wenzhou University of Technology, China","institution_ids":["https://openalex.org/I146620803","https://openalex.org/I4400573270"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103874644","display_name":"Haofei Sun","orcid":null},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haofei Sun","raw_affiliation_strings":["Zhejiang University of Technology, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University of Technology, China","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133892606","display_name":"Zhizhong Ma","orcid":null},"institutions":[{"id":"https://openalex.org/I146620803","display_name":"Wenzhou University","ror":"https://ror.org/020hxh324","country_code":"CN","type":"education","lineage":["https://openalex.org/I146620803"]},{"id":"https://openalex.org/I4400573270","display_name":"Wenzhou University of Technology","ror":"https://ror.org/03dd7qj98","country_code":null,"type":"education","lineage":["https://openalex.org/I4400573270"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Zhizhong Ma","raw_affiliation_strings":["Wenzhou University of Technology, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wenzhou University of Technology, China","institution_ids":["https://openalex.org/I146620803","https://openalex.org/I4400573270"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5081919297","display_name":"Guoyong Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I4210144709","display_name":"Wenzhou Polytechnic","ror":"https://ror.org/05h1ry383","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210144709"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Guolang Chen","raw_affiliation_strings":["Wenzhou Polytechnic, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wenzhou Polytechnic, China","institution_ids":["https://openalex.org/I4210144709"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5081919297","https://openalex.org/A5133892606"],"corresponding_institution_ids":["https://openalex.org/I146620803","https://openalex.org/I4210144709","https://openalex.org/I4400573270"],"apc_list":{"value":3130,"currency":"USD","value_usd":3130},"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.90208411,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":null,"biblio":{"volume":"343","issue":null,"first_page":"115986","last_page":"115986"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.24230000376701355,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.24230000376701355,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.19869999587535858,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.07999999821186066,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/lossless-compression","display_name":"Lossless compression","score":0.5817000269889832},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5045999884605408},{"id":"https://openalex.org/keywords/data-compression","display_name":"Data compression","score":0.47290000319480896},{"id":"https://openalex.org/keywords/redundancy","display_name":"Redundancy (engineering)","score":0.4555000066757202},{"id":"https://openalex.org/keywords/network-forensics","display_name":"Network forensics","score":0.4296000003814697},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.34869998693466187},{"id":"https://openalex.org/keywords/terabyte","display_name":"Terabyte","score":0.3472999930381775},{"id":"https://openalex.org/keywords/computation","display_name":"Computation","score":0.33480000495910645},{"id":"https://openalex.org/keywords/uncompressed-video","display_name":"Uncompressed video","score":0.3280999958515167}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8504999876022339},{"id":"https://openalex.org/C81081738","wikidata":"https://www.wikidata.org/wiki/Q55542","display_name":"Lossless compression","level":3,"score":0.5817000269889832},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5045999884605408},{"id":"https://openalex.org/C78548338","wikidata":"https://www.wikidata.org/wiki/Q2493","display_name":"Data compression","level":2,"score":0.47290000319480896},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.459199994802475},{"id":"https://openalex.org/C152124472","wikidata":"https://www.wikidata.org/wiki/Q1204361","display_name":"Redundancy (engineering)","level":2,"score":0.4555000066757202},{"id":"https://openalex.org/C50747538","wikidata":"https://www.wikidata.org/wiki/Q7001032","display_name":"Network forensics","level":3,"score":0.4296000003814697},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.34869998693466187},{"id":"https://openalex.org/C199683683","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Terabyte","level":2,"score":0.3472999930381775},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.33480000495910645},{"id":"https://openalex.org/C162478608","wikidata":"https://www.wikidata.org/wiki/Q4011369","display_name":"Uncompressed video","level":4,"score":0.3280999958515167},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3278999924659729},{"id":"https://openalex.org/C180016635","wikidata":"https://www.wikidata.org/wiki/Q2712821","display_name":"Compression (physics)","level":2,"score":0.3249000012874603},{"id":"https://openalex.org/C68339613","wikidata":"https://www.wikidata.org/wiki/Q1549489","display_name":"Speedup","level":2,"score":0.3240000009536743},{"id":"https://openalex.org/C165435473","wikidata":"https://www.wikidata.org/wiki/Q1509884","display_name":"Padding","level":2,"score":0.3158000111579895},{"id":"https://openalex.org/C556601545","wikidata":"https://www.wikidata.org/wiki/Q878553","display_name":"Computer forensics","level":3,"score":0.31150001287460327},{"id":"https://openalex.org/C154690210","wikidata":"https://www.wikidata.org/wiki/Q1668499","display_name":"Rewriting","level":2,"score":0.3061999976634979},{"id":"https://openalex.org/C176225458","wikidata":"https://www.wikidata.org/wiki/Q595971","display_name":"Graph database","level":3,"score":0.30489999055862427},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.29919999837875366},{"id":"https://openalex.org/C168781493","wikidata":"https://www.wikidata.org/wiki/Q80585","display_name":"Associative array","level":2,"score":0.2978000044822693},{"id":"https://openalex.org/C32587265","wikidata":"https://www.wikidata.org/wiki/Q1182260","display_name":"Data deduplication","level":2,"score":0.2946999967098236},{"id":"https://openalex.org/C2780762811","wikidata":"https://www.wikidata.org/wiki/Q1784941","display_name":"Cosine similarity","level":3,"score":0.29109999537467957},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.2824000120162964},{"id":"https://openalex.org/C165021410","wikidata":"https://www.wikidata.org/wiki/Q55564","display_name":"Lossy compression","level":2,"score":0.2797999978065491},{"id":"https://openalex.org/C25797200","wikidata":"https://www.wikidata.org/wiki/Q828137","display_name":"Compression ratio","level":3,"score":0.27559998631477356},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.26489999890327454},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.2632000148296356},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.25999999046325684},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.2556000053882599},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2513999938964844}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.knosys.2026.115986","is_oa":false,"landing_page_url":"https://doi.org/10.1016/j.knosys.2026.115986","pdf_url":null,"source":{"id":"https://openalex.org/S10169007","display_name":"Knowledge-Based Systems","issn_l":"0950-7051","issn":["0950-7051","1872-7409"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Knowledge-Based Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6408222913742065,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W2076317514","https://openalex.org/W2096347345","https://openalex.org/W2126220112","https://openalex.org/W2291470926","https://openalex.org/W2417641136","https://openalex.org/W2748166927","https://openalex.org/W2755094099","https://openalex.org/W2791168879","https://openalex.org/W2889379876","https://openalex.org/W2889727957","https://openalex.org/W2909977353","https://openalex.org/W2998702515","https://openalex.org/W3012207181","https://openalex.org/W3139550479","https://openalex.org/W3157720608","https://openalex.org/W3209329320","https://openalex.org/W4319663646","https://openalex.org/W4386275784","https://openalex.org/W4386436235","https://openalex.org/W4399110650","https://openalex.org/W4408476231"],"related_works":[],"abstract_inverted_index":null,"counts_by_year":[],"updated_date":"2026-04-29T09:16:38.111599","created_date":"2026-04-18T00:00:00"}