{"id":"https://openalex.org/W4400489769","doi":"https://doi.org/10.1109/cscwd61410.2024.10580608","title":"MalPolymer: A Threat Identification System Utilizing Cognate Malicious Login Behavior Detection","display_name":"MalPolymer: A Threat Identification System Utilizing Cognate Malicious Login Behavior Detection","publication_year":2024,"publication_date":"2024-05-08","ids":{"openalex":"https://openalex.org/W4400489769","doi":"https://doi.org/10.1109/cscwd61410.2024.10580608"},"language":"en","primary_location":{"id":"doi:10.1109/cscwd61410.2024.10580608","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/cscwd61410.2024.10580608","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 27th International Conference on Computer Supported Cooperative Work in Design (CSCWD)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5106342606","display_name":"Jianjun Zhao","orcid":"https://orcid.org/0009-0004-1540-3854"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianjun Zhao","raw_affiliation_strings":["Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111240373","display_name":"Ru Tan","orcid":null},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ru Tan","raw_affiliation_strings":["Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020641983","display_name":"Yaqin Cao","orcid":"https://orcid.org/0000-0002-2568-2517"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yaqin Cao","raw_affiliation_strings":["Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014763916","display_name":"Xutong Wang","orcid":"https://orcid.org/0000-0001-7712-7884"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xutong Wang","raw_affiliation_strings":["Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004834139","display_name":"Qixu Liu","orcid":"https://orcid.org/0000-0003-0895-9585"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qixu Liu","raw_affiliation_strings":["Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100497168","display_name":"Xiang Cui","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiang Cui","raw_affiliation_strings":["Zhongguancun Laboratory,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhongguancun Laboratory,Beijing,China","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1231","last_page":"1237"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9700999855995178,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13192","display_name":"Forensic Fingerprint Detection Methods","score":0.9318000078201294,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.7355396151542664},{"id":"https://openalex.org/keywords/login","display_name":"Login","score":0.6819839477539062},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6818022727966309},{"id":"https://openalex.org/keywords/cognate","display_name":"Cognate","score":0.4678308069705963},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.43002885580062866},{"id":"https://openalex.org/keywords/biology","display_name":"Biology","score":0.0801529586315155}],"concepts":[{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.7355396151542664},{"id":"https://openalex.org/C113324615","wikidata":"https://www.wikidata.org/wiki/Q472302","display_name":"Login","level":2,"score":0.6819839477539062},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6818022727966309},{"id":"https://openalex.org/C2777392089","wikidata":"https://www.wikidata.org/wiki/Q690548","display_name":"Cognate","level":2,"score":0.4678308069705963},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.43002885580062866},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0801529586315155},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cscwd61410.2024.10580608","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/cscwd61410.2024.10580608","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 27th International Conference on Computer Supported Cooperative Work in Design (CSCWD)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.44999998807907104,"id":"https://metadata.un.org/sdg/13","display_name":"Climate action"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321133","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2356815520","https://openalex.org/W2360457743","https://openalex.org/W4379645529","https://openalex.org/W3009996856","https://openalex.org/W2974737450","https://openalex.org/W2367891843","https://openalex.org/W2369596954","https://openalex.org/W2561203018"],"abstract_inverted_index":{"Accurate":[0],"attribution":[1],"and":[2,56,75,106],"tracing":[3],"of":[4,11,20,28,36,52,71,129],"cyber":[5],"attacks":[6],"require":[7],"a":[8,26,42,62,90,101,140],"comprehensive":[9],"understanding":[10],"the":[12,29,34,50,69,112,117,127],"resources":[13],"employed":[14],"by":[15,116],"malicious":[16,64,96],"actors.":[17],"However,":[18],"Indicators":[19],"Compromise":[21],"(IoCs)":[22],"can":[23],"only":[24],"reveal":[25],"portion":[27],"attacker\u2019s":[30],"assets.":[31],"To":[32],"enhance":[33],"capability":[35],"clue":[37],"expansion,":[38],"this":[39],"study":[40],"introduces":[41],"novel":[43],"approach":[44],"to":[45,61,88,104,139],"associating":[46],"attack":[47,113,137],"sources,":[48],"facilitating":[49],"identification":[51],"additional":[53],"IP":[54],"addresses":[55],"subnets":[57,109],"that":[58,93,110],"may":[59],"correspond":[60],"single":[63,141],"actor.":[65],"We":[66,82],"focus":[67],"on":[68,122],"scenario":[70],"compromised":[72],"email":[73],"accounts":[74],"utilize":[76,100],"login":[77],"logs":[78],"as":[79],"foundational":[80],"data.":[81],"employ":[83],"Gaussian":[84],"Mixture":[85],"Models":[86],"(GMM)":[87],"construct":[89],"reference":[91,118],"model":[92],"captures":[94],"known":[95],"behaviors.":[97],"Then,":[98],"we":[99,125],"genetic":[102],"algorithm":[103],"filter":[105],"select":[107],"candidate":[108],"exhibit":[111],"patterns":[114],"outlined":[115],"model.":[119],"Through":[120],"evaluation":[121],"real-world":[123],"data,":[124],"demonstrate":[126],"effectiveness":[128],"our":[130],"proposed":[131],"method":[132],"in":[133],"successfully":[134],"attributing":[135],"multiple":[136],"sources":[138],"attacker,":[142],"thereby":[143],"providing":[144],"valuable":[145],"insights":[146],"for":[147],"manual":[148],"investigations.":[149]},"counts_by_year":[],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}