{"id":"https://openalex.org/W4392910468","doi":"https://doi.org/10.1109/ccnc51664.2024.10454841","title":"Graph Autoencoders for Detecting Anomalous Intrusions in OT Networks Through Dynamic Link Detection","display_name":"Graph Autoencoders for Detecting Anomalous Intrusions in OT Networks Through Dynamic Link Detection","publication_year":2024,"publication_date":"2024-01-06","ids":{"openalex":"https://openalex.org/W4392910468","doi":"https://doi.org/10.1109/ccnc51664.2024.10454841"},"language":"en","primary_location":{"id":"doi:10.1109/ccnc51664.2024.10454841","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ccnc51664.2024.10454841","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE 21st Consumer Communications & Networking Conference (CCNC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5076488693","display_name":"Alex R. Howe","orcid":"https://orcid.org/0000-0002-4884-7150"},"institutions":[{"id":"https://openalex.org/I87208437","display_name":"University of Tulsa","ror":"https://ror.org/04wn28048","country_code":"US","type":"education","lineage":["https://openalex.org/I87208437"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Alex Howe","raw_affiliation_strings":["The University of Tulsa,Tulsa,Oklahoma","The University of Tulsa, Tulsa, Oklahoma"],"affiliations":[{"raw_affiliation_string":"The University of Tulsa,Tulsa,Oklahoma","institution_ids":["https://openalex.org/I87208437"]},{"raw_affiliation_string":"The University of Tulsa, Tulsa, Oklahoma","institution_ids":["https://openalex.org/I87208437"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025027338","display_name":"Dale Peasley","orcid":null},"institutions":[{"id":"https://openalex.org/I87208437","display_name":"University of Tulsa","ror":"https://ror.org/04wn28048","country_code":"US","type":"education","lineage":["https://openalex.org/I87208437"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dale Peasley","raw_affiliation_strings":["The University of Tulsa,Tulsa,Oklahoma","The University of Tulsa, Tulsa, Oklahoma"],"affiliations":[{"raw_affiliation_string":"The University of Tulsa,Tulsa,Oklahoma","institution_ids":["https://openalex.org/I87208437"]},{"raw_affiliation_string":"The University of Tulsa, Tulsa, Oklahoma","institution_ids":["https://openalex.org/I87208437"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022613150","display_name":"Mauricio Papa","orcid":"https://orcid.org/0009-0000-5628-0548"},"institutions":[{"id":"https://openalex.org/I87208437","display_name":"University of Tulsa","ror":"https://ror.org/04wn28048","country_code":"US","type":"education","lineage":["https://openalex.org/I87208437"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mauricio Papa","raw_affiliation_strings":["The University of Tulsa,Tulsa,Oklahoma","The University of Tulsa, Tulsa, Oklahoma"],"affiliations":[{"raw_affiliation_string":"The University of Tulsa,Tulsa,Oklahoma","institution_ids":["https://openalex.org/I87208437"]},{"raw_affiliation_string":"The University of Tulsa, Tulsa, Oklahoma","institution_ids":["https://openalex.org/I87208437"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5076488693"],"corresponding_institution_ids":["https://openalex.org/I87208437"],"apc_list":null,"apc_paid":null,"fwci":0.7305,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.68888184,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7018222808837891},{"id":"https://openalex.org/keywords/link","display_name":"Link (geometry)","score":0.6878843307495117},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.49421218037605286},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.4931449294090271},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.44502660632133484},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.42820677161216736},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.24829450249671936},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.1788826286792755}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7018222808837891},{"id":"https://openalex.org/C2778753846","wikidata":"https://www.wikidata.org/wiki/Q6554239","display_name":"Link (geometry)","level":2,"score":0.6878843307495117},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.49421218037605286},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.4931449294090271},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.44502660632133484},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.42820677161216736},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.24829450249671936},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.1788826286792755}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ccnc51664.2024.10454841","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ccnc51664.2024.10454841","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE 21st Consumer Communications & Networking Conference (CCNC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Climate action","id":"https://metadata.un.org/sdg/13","score":0.6800000071525574}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W2116341502","https://openalex.org/W2678934292","https://openalex.org/W2887434122","https://openalex.org/W2908140179","https://openalex.org/W2963445059","https://openalex.org/W2990692206","https://openalex.org/W3208773001","https://openalex.org/W4207005592","https://openalex.org/W4225697716","https://openalex.org/W4294558607","https://openalex.org/W4297733535","https://openalex.org/W4307042912","https://openalex.org/W4322614756","https://openalex.org/W4377968952","https://openalex.org/W4380361614","https://openalex.org/W6722594521","https://openalex.org/W6730084236","https://openalex.org/W6738964360","https://openalex.org/W6757844995"],"related_works":["https://openalex.org/W1518185400","https://openalex.org/W3200586296","https://openalex.org/W4230332972","https://openalex.org/W1998033311","https://openalex.org/W4247322236","https://openalex.org/W4231165741","https://openalex.org/W1762272577","https://openalex.org/W4206960768","https://openalex.org/W4229899156","https://openalex.org/W2158247860"],"abstract_inverted_index":{"This":[0,108],"paper":[1],"evaluates":[2,110],"the":[3,32,81,111,169,216,234,238],"use":[4,112],"of":[5,113,171,189,221],"graph":[6,105,114,213],"neural":[7],"network":[8,14,40,125,135,154,174,183,241],"(GNN)":[9],"based":[10],"autoencoders":[11,84,115],"for":[12,49,101,116,132,148,167],"detecting":[13,117],"intrusions":[15],"or":[16],"anomalous":[17,118],"traffic":[18,136,155],"in":[19,38,104,123,162,219,230],"Operational":[20],"Technology":[21],"(OT)":[22],"networks.":[23],"Traditional":[24],"intrusion":[25,150],"detection":[26,103,201,222],"methods":[27,202],"often":[28],"struggle":[29],"to":[30,52,74,145,164],"capture":[31,165],"complex":[33],"relationships":[34,44,79],"and":[35,70,78,97,208,227],"interdependencies":[36],"found":[37],"OT":[39,124,182,240],"communications.":[41],"These":[42],"spatial":[43],"can":[45,71,98,142],"provide":[46],"information":[47,166],"vital":[48],"identifying":[50],"harder":[51],"detect":[53],"attacks":[54],"(i.e.":[55],"Advanced":[56],"Persistent":[57],"Threats).":[58],"GNNs":[59],"are":[60,86,196],"a":[61,130,172,225],"machine":[62],"learning":[63,90],"technique":[64,91],"which":[65,141],"operate":[66],"on":[67,237],"graph-structured":[68],"data":[69],"be":[72,99,143],"used":[73,100,144],"identify":[75],"underlying":[76],"patterns":[77],"between":[80],"nodes.":[82],"Graph":[83],"(GAEs)":[85],"an":[87,94],"unsupervised":[88],"GNN-based":[89],"that":[92],"incorporates":[93,158],"encoder-decoder":[95],"architecture":[96],"anomaly":[102,200],"structured":[106],"data.":[107,126],"work":[109],"edges":[119],"(extracted":[120],"from":[121],"packets)":[122],"Additionally,":[127],"we":[128],"introduce":[129],"method":[131],"encoding":[133,156],"raw":[134],"into":[137],"discrete":[138],"temporal":[139],"graphs":[140],"apply":[146],"GAEs":[147],"real-time":[149],"detection.":[151],"The":[152,176,211],"proposed":[153,212],"scheme":[157],"multi-dimensional":[159],"edge":[160],"attributes":[161],"order":[163],"determining":[168],"relevance":[170],"given":[173],"packet.":[175],"approach":[177],"is":[178],"evaluated":[179],"using":[180],"two":[181,239],"datasets":[184],"each":[185],"containing":[186],"labeled":[187],"examples":[188],"commonly":[190],"encountered":[191],"malicious":[192],"attack":[193],"traffic.":[194],"Results":[195],"compared":[197],"against":[198],"baseline":[199,217,235],"including":[203],"K-Nearest":[204],"Neighbors,":[205],"Deep":[206],"Autoencoders,":[207],"Isolation":[209],"Forest.":[210],"autoencoder":[214],"outperforms":[215],"cases":[218],"terms":[220],"accuracy":[223],"achieving":[224],"31.05%":[226],"8.64%":[228],"improvement":[229],"F1":[231],"scores":[232],"over":[233],"models":[236],"datasets.":[242]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}