{"id":"https://openalex.org/W4415742034","doi":"https://doi.org/10.1049/ise2/8625988","title":"ProvADShield: A Multimodel Ensemble Defender Against Adversarial Attacks on Provenance Graph Host Intrusion Detector","display_name":"ProvADShield: A Multimodel Ensemble Defender Against Adversarial Attacks on Provenance Graph Host Intrusion Detector","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4415742034","doi":"https://doi.org/10.1049/ise2/8625988"},"language":"en","primary_location":{"id":"doi:10.1049/ise2/8625988","is_oa":true,"landing_page_url":"https://doi.org/10.1049/ise2/8625988","pdf_url":"https://onlinelibrary.wiley.com/doi/pdfdirect/10.1049/ise2/8625988","source":{"id":"https://openalex.org/S58852226","display_name":"IET Information Security","issn_l":"1751-8709","issn":["1751-8709","1751-8717"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311714","host_organization_name":"Institution of Engineering and Technology","host_organization_lineage":["https://openalex.org/P4310311714"],"host_organization_lineage_names":["Institution of Engineering and Technology"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IET Information Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://onlinelibrary.wiley.com/doi/pdfdirect/10.1049/ise2/8625988","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5068773146","display_name":"Mingqi Lv","orcid":"https://orcid.org/0000-0003-4810-7491"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingqi Lv","raw_affiliation_strings":["College of Geoinformatics ,  Zhejiang University of Technology ,  Deqing ,  313200 ,  China , zjut.edu.cn"],"raw_orcid":"https://orcid.org/0000-0003-4810-7491","affiliations":[{"raw_affiliation_string":"College of Geoinformatics ,  Zhejiang University of Technology ,  Deqing ,  313200 ,  China , zjut.edu.cn","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Kehan Qian","orcid":null},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kehan Qian","raw_affiliation_strings":["College of Geoinformatics ,  Zhejiang University of Technology ,  Deqing ,  313200 ,  China , zjut.edu.cn"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Geoinformatics ,  Zhejiang University of Technology ,  Deqing ,  313200 ,  China , zjut.edu.cn","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056827411","display_name":"Tieming Chen","orcid":"https://orcid.org/0000-0003-4664-3311"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Tieming Chen","raw_affiliation_strings":["College of Geoinformatics ,  Zhejiang University of Technology ,  Deqing ,  313200 ,  China , zjut.edu.cn"],"raw_orcid":"https://orcid.org/0000-0003-4664-3311","affiliations":[{"raw_affiliation_string":"College of Geoinformatics ,  Zhejiang University of Technology ,  Deqing ,  313200 ,  China , zjut.edu.cn","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029428788","display_name":"Tiantian Zhu","orcid":"https://orcid.org/0000-0002-8657-662X"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tiantian Zhu","raw_affiliation_strings":["College of Geoinformatics ,  Zhejiang University of Technology ,  Deqing ,  313200 ,  China , zjut.edu.cn"],"raw_orcid":"https://orcid.org/0000-0002-8657-662X","affiliations":[{"raw_affiliation_string":"College of Geoinformatics ,  Zhejiang University of Technology ,  Deqing ,  313200 ,  China , zjut.edu.cn","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101758654","display_name":"Jinyin Chen","orcid":"https://orcid.org/0000-0002-7153-2755"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinyin Chen","raw_affiliation_strings":["College of Information Engineering ,  Zhejiang University of Technology ,  Hangzhou ,  310023 ,  China , zjut.edu.cn"],"raw_orcid":"https://orcid.org/0000-0002-7153-2755","affiliations":[{"raw_affiliation_string":"College of Information Engineering ,  Zhejiang University of Technology ,  Hangzhou ,  310023 ,  China , zjut.edu.cn","institution_ids":["https://openalex.org/I55712492"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5056827411"],"corresponding_institution_ids":["https://openalex.org/I55712492"],"apc_list":{"value":2200,"currency":"USD","value_usd":2200},"apc_paid":{"value":2200,"currency":"USD","value_usd":2200},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.11839751,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"2025","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.4657000005245209,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.4657000005245209,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.2750000059604645,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.041600000113248825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8806999921798706},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5497000217437744},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"Adversarial machine learning","score":0.5099999904632568},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.4902999997138977},{"id":"https://openalex.org/keywords/intrusion","display_name":"Intrusion","score":0.41589999198913574},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.40380001068115234}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8806999921798706},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7394999861717224},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5497000217437744},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5180000066757202},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.5099999904632568},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4902999997138977},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4381999969482422},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.41589999198913574},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.40380001068115234},{"id":"https://openalex.org/C2780049196","wikidata":"https://www.wikidata.org/wiki/Q23582628","display_name":"Provenance","level":2,"score":0.3601999878883362},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.3488999903202057},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3264999985694885},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3215000033378601},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.31369999051094055},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3133000135421753},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.30090001225471497},{"id":"https://openalex.org/C2987255567","wikidata":"https://www.wikidata.org/wiki/Q33002955","display_name":"Knowledge graph","level":2,"score":0.26080000400543213},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.25209999084472656}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1049/ise2/8625988","is_oa":true,"landing_page_url":"https://doi.org/10.1049/ise2/8625988","pdf_url":"https://onlinelibrary.wiley.com/doi/pdfdirect/10.1049/ise2/8625988","source":{"id":"https://openalex.org/S58852226","display_name":"IET Information Security","issn_l":"1751-8709","issn":["1751-8709","1751-8717"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311714","host_organization_name":"Institution of Engineering and Technology","host_organization_lineage":["https://openalex.org/P4310311714"],"host_organization_lineage_names":["Institution of Engineering and Technology"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IET Information Security","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:8603c4bf2b5e4d0c80dbae069876c359","is_oa":true,"landing_page_url":"https://doaj.org/article/8603c4bf2b5e4d0c80dbae069876c359","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IET Information Security, Vol 2025 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1049/ise2/8625988","is_oa":true,"landing_page_url":"https://doi.org/10.1049/ise2/8625988","pdf_url":"https://onlinelibrary.wiley.com/doi/pdfdirect/10.1049/ise2/8625988","source":{"id":"https://openalex.org/S58852226","display_name":"IET Information Security","issn_l":"1751-8709","issn":["1751-8709","1751-8717"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311714","host_organization_name":"Institution of Engineering and Technology","host_organization_lineage":["https://openalex.org/P4310311714"],"host_organization_lineage_names":["Institution of Engineering and Technology"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IET Information Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1083766541","display_name":null,"funder_award_id":"62372410","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6401997768","display_name":"\u6570\u636e\u4e0e\u77e5\u8bc6\u6df7\u5408\u9a71\u52a8\u7684\u590d\u6742\u7f51\u7edc\u653b\u51fb\u68c0\u6d4b\u65b9\u6cd5\u7814\u7a76","funder_award_id":"LZ23F020011","funder_id":"https://openalex.org/F4320338464","funder_display_name":"Natural Science Foundation of Zhejiang Province"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320338464","display_name":"Natural Science Foundation of Zhejiang Province","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4415742034.pdf"},"referenced_works_count":30,"referenced_works":["https://openalex.org/W2284900416","https://openalex.org/W2803831897","https://openalex.org/W2912240430","https://openalex.org/W2949208225","https://openalex.org/W2951823788","https://openalex.org/W2962703433","https://openalex.org/W2964159205","https://openalex.org/W2964583308","https://openalex.org/W2964971928","https://openalex.org/W2978956219","https://openalex.org/W2988790801","https://openalex.org/W2994506732","https://openalex.org/W2998122931","https://openalex.org/W3004179294","https://openalex.org/W3005127313","https://openalex.org/W3015481738","https://openalex.org/W3081203761","https://openalex.org/W3168561516","https://openalex.org/W3170068709","https://openalex.org/W3174629335","https://openalex.org/W3212868562","https://openalex.org/W4306959538","https://openalex.org/W4319663646","https://openalex.org/W4324007191","https://openalex.org/W4386914472","https://openalex.org/W4390817755","https://openalex.org/W4396853130","https://openalex.org/W4402288718","https://openalex.org/W4402352182","https://openalex.org/W4402703010"],"related_works":[],"abstract_inverted_index":{"HID":[0,26,53,69,89,99,113,140,151],"(host":[1],"intrusion":[2],"detection)":[3],"is":[4,147],"a":[5,14,17,28,127,163],"security":[6],"mechanism":[7],"for":[8],"detecting":[9],"malicious":[10],"activities":[11],"performed":[12],"in":[13,37],"host":[15],"(e.g.,":[16],"server,":[18],"an":[19,83],"edge":[20],"device).":[21],"Recent":[22],"research":[23],"has":[24],"recast":[25],"as":[27],"provenance":[29,49,136,164],"graph":[30,50,137],"learning":[31,39,51,138],"problem":[32],"thanks":[33],"to":[34,60,96,130,148],"the":[35,42,48,64,68,105,117,122,155],"advancement":[36],"deep":[38],"techniques,":[40],"especially":[41],"GNNs":[43],"(graph":[44],"neural":[45],"networks).":[46],"Although":[47],"based":[52,139,161],"methods":[54],"show":[55,176],"promise,":[56],"they":[57],"are":[58],"vulnerable":[59],"adversarial":[61,84,109,133,184],"attacks,":[62],"where":[63],"attackers":[65],"can":[66],"bypass":[67],"models":[70,114,152],"by":[71,115,153,170],"carefully":[72],"modifying":[73],"their":[74],"attack":[75,97],"behaviors.":[76],"In":[77],"this":[78],"paper,":[79],"we":[80,102,124],"reveal":[81],"that":[82,177],"sample":[85],"generated":[86],"against":[87,132,183],"one":[88],"model":[90],"may":[91],"not":[92],"be":[93],"necessarily":[94],"able":[95],"another":[98],"model,":[100],"and":[101,167],"further":[103],"explore":[104],"success":[106],"rate":[107],"of":[108,145],"attacks":[110,134],"between":[111],"different":[112],"evaluating":[116],"mutual":[118,156],"transferability.":[119,157],"Based":[120],"on":[121,135,162],"evaluation,":[123],"propose":[125],"ProvADShield,":[126],"framework":[128],"designed":[129],"defend":[131],"models.":[141],"The":[142,173],"core":[143],"idea":[144],"ProvADShield":[146,160,178],"combine":[149],"multiple":[150],"leveraging":[154],"We":[158],"evaluate":[159],"dataset":[165],"collected":[166],"made":[168],"public":[169],"our":[171],"team.":[172],"experiment":[174],"results":[175],"outperforms":[179],"state\u2010of\u2010the\u2010art":[180],"defense":[181],"systems":[182],"attacks.":[185]},"counts_by_year":[],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-31T00:00:00"}