{"id":"https://openalex.org/W4400490193","doi":"https://doi.org/10.1109/cscwd61410.2024.10580010","title":"An Automated Alert Cross-Verification System with Graph Neural Networks for IDS Events","display_name":"An Automated Alert Cross-Verification System with Graph Neural Networks for IDS Events","publication_year":2024,"publication_date":"2024-05-08","ids":{"openalex":"https://openalex.org/W4400490193","doi":"https://doi.org/10.1109/cscwd61410.2024.10580010"},"language":"en","primary_location":{"id":"doi:10.1109/cscwd61410.2024.10580010","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cscwd61410.2024.10580010","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 27th International Conference on Computer Supported Cooperative Work in Design (CSCWD)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100718263","display_name":"Liang Li","orcid":"https://orcid.org/0000-0001-5802-2681"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liang Li","raw_affiliation_strings":["Zhejiang University,College of Computer Science and Technology,Hangzhou,China,310027"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University,College of Computer Science and Technology,Hangzhou,China,310027","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102225239","display_name":"Yuanhui He","orcid":null},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuanhui He","raw_affiliation_strings":["Zhejiang University,College of Computer Science and Technology,Hangzhou,China,310027"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University,College of Computer Science and Technology,Hangzhou,China,310027","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067176504","display_name":"Feiyang Huang","orcid":"https://orcid.org/0000-0002-7241-1509"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Feiyang Huang","raw_affiliation_strings":["Zhejiang University,College of Computer Science and Technology,Hangzhou,China,310027"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University,College of Computer Science and Technology,Hangzhou,China,310027","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101902155","display_name":"Ziming Zhao","orcid":"https://orcid.org/0000-0003-1455-4330"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ziming Zhao","raw_affiliation_strings":["Zhejiang University,College of Computer Science and Technology,Hangzhou,China,310027"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University,College of Computer Science and Technology,Hangzhou,China,310027","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025336383","display_name":"Zhuoxue Song","orcid":"https://orcid.org/0000-0002-1252-2303"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhuoxue Song","raw_affiliation_strings":["Zhejiang University,College of Computer Science and Technology,Hangzhou,China,310027"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University,College of Computer Science and Technology,Hangzhou,China,310027","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104283428","display_name":"Tong Zhou","orcid":"https://orcid.org/0000-0002-9007-3232"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tong Zhou","raw_affiliation_strings":["Zhejiang University,College of Computer Science and Technology,Hangzhou,China,310027"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University,College of Computer Science and Technology,Hangzhou,China,310027","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010057779","display_name":"Zhenyuan Li","orcid":"https://orcid.org/0000-0002-7712-0292"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenyuan Li","raw_affiliation_strings":["Zhejiang University,College of Computer Science and Technology,Hangzhou,China,310027"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University,College of Computer Science and Technology,Hangzhou,China,310027","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100403380","display_name":"Fan Zhang","orcid":"https://orcid.org/0000-0001-6087-8243"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fan Zhang","raw_affiliation_strings":["Zhejiang University,College of Computer Science and Technology,Hangzhou,China,310027"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University,College of Computer Science and Technology,Hangzhou,China,310027","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I76130692"],"apc_list":null,"apc_paid":null,"fwci":1.5314,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.8354188,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"2240","last_page":"2245"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9562000036239624,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9562000036239624,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9327999949455261,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8063465356826782},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5119441747665405},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.43554604053497314},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.30645227432250977},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.26331645250320435}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8063465356826782},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5119441747665405},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.43554604053497314},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.30645227432250977},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.26331645250320435}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cscwd61410.2024.10580010","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cscwd61410.2024.10580010","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 27th International Conference on Computer Supported Cooperative Work in Design (CSCWD)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322769","display_name":"Natural Science Foundation of Jiangsu Province","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W1594026167","https://openalex.org/W2101765290","https://openalex.org/W2116341502","https://openalex.org/W2141200504","https://openalex.org/W2548532227","https://openalex.org/W2807021761","https://openalex.org/W2810737462","https://openalex.org/W2905049115","https://openalex.org/W2947745012","https://openalex.org/W2962946486","https://openalex.org/W2964015378","https://openalex.org/W2964113829","https://openalex.org/W2986291326","https://openalex.org/W3012902672","https://openalex.org/W3100848837","https://openalex.org/W3104803508","https://openalex.org/W3137205257","https://openalex.org/W3201894803","https://openalex.org/W3211484264","https://openalex.org/W4288038854","https://openalex.org/W4308085945","https://openalex.org/W4319994093","https://openalex.org/W4322706638","https://openalex.org/W4386363082","https://openalex.org/W4389937323","https://openalex.org/W4390571282","https://openalex.org/W4391558006","https://openalex.org/W6685350579","https://openalex.org/W6726873649","https://openalex.org/W7000447106"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052","https://openalex.org/W2382290278","https://openalex.org/W4395014643"],"abstract_inverted_index":{"Intrusion":[0],"Detection":[1],"Systems":[2],"(IDSs)":[3],"are":[4,145],"vital":[5],"in":[6,79],"detecting":[7],"network":[8,17],"attacks":[9],"and":[10,14,37,92,99,122,164],"ensuring":[11],"the":[12,42,52,114,158,167],"confidentiality":[13],"integrity":[15],"of":[16,48,96,160],"resources.":[18],"Currently,":[19],"industry-standard":[20],"IDSs":[21],"primarily":[22],"rely":[23],"on":[24,104,133],"rule-based":[25],"or":[26],"anomaly-detection":[27],"techniques.":[28],"However,":[29],"existing":[30],"detection":[31,162],"techniques":[32],"often":[33],"generate":[34],"false":[35],"positives":[36],"negatives,":[38],"also":[39],"known":[40],"as":[41],"alert":[43,68,108],"fatigue":[44],"problem.":[45],"This":[46],"influx":[47],"incorrect":[49],"events":[50,98,126],"diminishes":[51],"IDS\u2019s":[53],"efficiency":[54],"by":[55],"overburdening":[56],"security":[57,80,97,125,142],"analysts.":[58],"In":[59],"this":[60],"paper,":[61],"we":[62],"present":[63],"ACVS,":[64],"an":[65],"innovative":[66],"automated":[67],"cross-verification":[69],"system":[70,115],"that":[71,154],"leverages":[72],"Graph":[73,117],"Neural":[74,118],"Networks":[75,119],"for":[76,131,169],"identifying":[77],"misclassifications":[78],"events.":[81],"Initially,":[82],"ACVS":[83,132,155],"generates":[84],"event":[85],"graphs":[86],"using":[87],"attributes":[88],"like":[89],"IP":[90],"addresses":[91],"timestamps":[93],"from":[94],"sequences":[95],"then":[100],"employs":[101],"correlation":[102],"analysis":[103],"these":[105,124],"events,":[106,143],"utilizing":[107],"information":[109],"to":[110,120],"verify":[111],"misclassifications.":[112],"Finally,":[113],"uses":[116],"classify":[121],"correct":[123],"automatically.":[127],"We":[128],"conduct":[129],"evaluations":[130],"a":[134],"substantial":[135],"real-world":[136],"dataset":[137],"comprising":[138],"over":[139],"5":[140,148],"million":[141],"which":[144],"categorized":[146],"into":[147],"distinct":[149],"groups.":[150],"The":[151],"results":[152],"reveal":[153],"markedly":[156],"enhances":[157],"accuracy":[159],"intrusion":[161],"systems":[163],"substantially":[165],"reduces":[166],"need":[168],"manual":[170],"analysis.":[171]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":3}],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2025-10-10T00:00:00"}