{"id":"https://openalex.org/W4405179591","doi":"https://doi.org/10.1109/access.2024.3514097","title":"Threat Detection Framework Based on Industrial Internet of Things Logs","display_name":"Threat Detection Framework Based on Industrial Internet of Things Logs","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4405179591","doi":"https://doi.org/10.1109/access.2024.3514097"},"language":"en","primary_location":{"id":"doi:10.1109/access.2024.3514097","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3514097","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2024.3514097","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5027686111","display_name":"Shuqin Zhang","orcid":"https://orcid.org/0000-0002-0665-6567"},"institutions":[{"id":"https://openalex.org/I132586189","display_name":"Zhongyuan University of Technology","ror":"https://ror.org/0360zcg91","country_code":"CN","type":"education","lineage":["https://openalex.org/I132586189"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuqin Zhang","raw_affiliation_strings":["School of Computer Science, Zhongyuan University of Technology, Zhengzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, Zhongyuan University of Technology, Zhengzhou, China","institution_ids":["https://openalex.org/I132586189"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yong Wang","orcid":"https://orcid.org/0009-0000-8370-1512"},"institutions":[{"id":"https://openalex.org/I132586189","display_name":"Zhongyuan University of Technology","ror":"https://ror.org/0360zcg91","country_code":"CN","type":"education","lineage":["https://openalex.org/I132586189"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yong Wang","raw_affiliation_strings":["School of Computer Science, Zhongyuan University of Technology, Zhengzhou, China"],"raw_orcid":"https://orcid.org/0009-0000-8370-1512","affiliations":[{"raw_affiliation_string":"School of Computer Science, Zhongyuan University of Technology, Zhengzhou, China","institution_ids":["https://openalex.org/I132586189"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102085604","display_name":"Xinyu Su","orcid":null},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinyu Su","raw_affiliation_strings":["School of Cyberspace Security, Information Engineering University, Zhengzhou, China","School of Computer Science, Information Engineering University, Zhengzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Information Engineering University, Zhengzhou, China","institution_ids":["https://openalex.org/I169689159"]},{"raw_affiliation_string":"School of Computer Science, Information Engineering University, Zhengzhou, China","institution_ids":["https://openalex.org/I169689159"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.8523,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.76195256,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":"12","issue":null,"first_page":"195642","last_page":"195657"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.769599974155426,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.769599974155426,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6888875365257263},{"id":"https://openalex.org/keywords/industrial-internet","display_name":"Industrial Internet","score":0.6615232229232788},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.6266607046127319},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4653955399990082},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.46415337920188904},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.2598685622215271}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6888875365257263},{"id":"https://openalex.org/C202839342","wikidata":"https://www.wikidata.org/wiki/Q60740481","display_name":"Industrial Internet","level":3,"score":0.6615232229232788},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.6266607046127319},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4653955399990082},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.46415337920188904},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2598685622215271}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2024.3514097","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3514097","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:c4e9054c0f3b4af5959e53c32045e504","is_oa":true,"landing_page_url":"https://doaj.org/article/c4e9054c0f3b4af5959e53c32045e504","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 12, Pp 195642-195657 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2024.3514097","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3514097","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1199136150","display_name":null,"funder_award_id":"62302540","funder_id":"https://openalex.org/F4320333688","funder_display_name":"National Outstanding Youth Science Fund Project of National Natural Science Foundation of China"},{"id":"https://openalex.org/G5738446520","display_name":null,"funder_award_id":"242102210133","funder_id":"https://openalex.org/F4320336593","funder_display_name":"Henan Provincial Science and Technology Research Project"}],"funders":[{"id":"https://openalex.org/F4320333688","display_name":"National Outstanding Youth Science Fund Project of National Natural Science Foundation of China","ror":null},{"id":"https://openalex.org/F4320336593","display_name":"Henan Provincial Science and Technology Research Project","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":48,"referenced_works":["https://openalex.org/W2039157918","https://openalex.org/W2767094836","https://openalex.org/W2790112892","https://openalex.org/W2897249806","https://openalex.org/W2947745012","https://openalex.org/W2947815220","https://openalex.org/W2962703433","https://openalex.org/W2962756421","https://openalex.org/W2965838158","https://openalex.org/W2966841471","https://openalex.org/W2998038410","https://openalex.org/W3009315908","https://openalex.org/W3015799890","https://openalex.org/W3091193567","https://openalex.org/W3097324885","https://openalex.org/W3108642152","https://openalex.org/W3132426156","https://openalex.org/W3133518153","https://openalex.org/W3176489198","https://openalex.org/W3195643805","https://openalex.org/W3198434560","https://openalex.org/W3212868562","https://openalex.org/W4284975312","https://openalex.org/W4324126158","https://openalex.org/W4324287409","https://openalex.org/W4377141523","https://openalex.org/W4385605314","https://openalex.org/W4386766727","https://openalex.org/W4387197245","https://openalex.org/W4387521117","https://openalex.org/W4388111064","https://openalex.org/W4388212317","https://openalex.org/W4388426098","https://openalex.org/W4391423880","https://openalex.org/W4392182086","https://openalex.org/W4392400228","https://openalex.org/W4393207695","https://openalex.org/W4394773022","https://openalex.org/W4394841363","https://openalex.org/W4394987717","https://openalex.org/W4395659530","https://openalex.org/W4398252541","https://openalex.org/W4405180684","https://openalex.org/W6733465621","https://openalex.org/W6779860234","https://openalex.org/W6789405528","https://openalex.org/W6855397463","https://openalex.org/W6872869322"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W4245926026","https://openalex.org/W4311097251","https://openalex.org/W2586548817","https://openalex.org/W3076529025","https://openalex.org/W3212933010","https://openalex.org/W4390610562","https://openalex.org/W4400212587"],"abstract_inverted_index":{"The":[0,188],"Industrial":[1],"Internet":[2,13,70],"of":[3,11,14,71,132,182,194,200],"Things":[4,15,72],"logs":[5,73],"capture":[6],"the":[7,44,55,79,105,135,165,172,178],"status":[8],"and":[9,17,51,92,100,125,149,196],"events":[10,50,144],"industrial":[12,69],"systems":[16],"provide":[18],"a":[19,62,82,89,93,116,129,151],"valuable":[20],"source":[21],"for":[22,65,128],"identifying":[23],"potential":[24],"threats.":[25],"However,":[26],"most":[27],"existing":[28],"anomaly":[29,111],"detection":[30,112],"methods":[31,41],"consider":[32],"quantitative":[33],"or":[34],"sequential":[35],"relationships":[36],"between":[37],"log":[38,83,90],"events.":[39],"These":[40],"often":[42],"neglect":[43],"contextual":[45],"information":[46],"embedded":[47],"in":[48,68],"these":[49,76],"fail":[52],"to":[53,74,98,140,145,158,163],"analyze":[54],"underlying":[56],"attack":[57,147,161],"techniques.":[58],"This":[59],"paper":[60],"proposes":[61],"novel":[63],"framework":[64,80,136,173],"detecting":[66],"threats":[67],"address":[75],"limitations.":[77],"Specifically,":[78],"introduces":[81],"field":[84],"extraction":[85],"module":[86],"that":[87,154],"uses":[88],"ontology":[91],"prompt-based":[94],"few-shot":[95],"learning":[96],"technique":[97],"identify":[99],"extract":[101],"key":[102],"fields":[103],"from":[104,177],"logs.":[106,133],"It":[107],"then":[108],"employs":[109],"an":[110,191,197],"method":[113],"based":[114],"on":[115,167],"temporal":[117,126],"graph":[118,153],"neural":[119],"network,":[120],"which":[121],"considers":[122],"events\u2019":[123],"structural":[124],"characteristics":[127],"thorough":[130],"analysis":[131],"Finally,":[134],"applies":[137],"Sigma":[138],"rules":[139],"map":[141],"low-level":[142],"anomalous":[143,156],"high-level":[146],"techniques":[148,162],"create":[150],"summary":[152],"links":[155],"paths":[157],"their":[159],"corresponding":[160],"alleviate":[164],"burden":[166],"security":[168],"analysts.":[169],"We":[170],"evaluated":[171],"using":[174],"four":[175],"datasets":[176],"United":[179],"States":[180],"Department":[181],"Defense":[183],"Advanced":[184],"Research":[185],"Projects":[186],"Agency.":[187],"results":[189],"demonstrate":[190],"average":[192,198],"recall":[193],"94.38%":[195],"precision":[199],"83.78%.":[201]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1}],"updated_date":"2025-12-27T23:08:20.325037","created_date":"2025-10-10T00:00:00"}