{"id":"https://openalex.org/W2914028805","doi":"https://doi.org/10.1109/desec.2018.8625145","title":"Differentiating and Predicting Cyberattack Behaviors Using LSTM","display_name":"Differentiating and Predicting Cyberattack Behaviors Using LSTM","publication_year":2018,"publication_date":"2018-12-01","ids":{"openalex":"https://openalex.org/W2914028805","doi":"https://doi.org/10.1109/desec.2018.8625145","mag":"2914028805"},"language":"en","primary_location":{"id":"doi:10.1109/desec.2018.8625145","is_oa":false,"landing_page_url":"https://doi.org/10.1109/desec.2018.8625145","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 IEEE Conference on Dependable and Secure Computing (DSC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5113586047","display_name":"Ian Perry","orcid":null},"institutions":[{"id":"https://openalex.org/I155173764","display_name":"Rochester Institute of Technology","ror":"https://ror.org/00v4yb702","country_code":"US","type":"education","lineage":["https://openalex.org/I155173764"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ian Perry","raw_affiliation_strings":["Department of Computer Engineering, Rochester Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Rochester Institute of Technology","institution_ids":["https://openalex.org/I155173764"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073258462","display_name":"Lutzu Li","orcid":null},"institutions":[{"id":"https://openalex.org/I155173764","display_name":"Rochester Institute of Technology","ror":"https://ror.org/00v4yb702","country_code":"US","type":"education","lineage":["https://openalex.org/I155173764"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lutzu Li","raw_affiliation_strings":["Department of Computer Engineering, Rochester Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Rochester Institute of Technology","institution_ids":["https://openalex.org/I155173764"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103104238","display_name":"Christopher Sweet","orcid":"https://orcid.org/0000-0001-8214-7177"},"institutions":[{"id":"https://openalex.org/I155173764","display_name":"Rochester Institute of Technology","ror":"https://ror.org/00v4yb702","country_code":"US","type":"education","lineage":["https://openalex.org/I155173764"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christopher Sweet","raw_affiliation_strings":["Department of Computer Engineering, Rochester Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Rochester Institute of Technology","institution_ids":["https://openalex.org/I155173764"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018876452","display_name":"Shao-Hsuan Su","orcid":null},"institutions":[{"id":"https://openalex.org/I155173764","display_name":"Rochester Institute of Technology","ror":"https://ror.org/00v4yb702","country_code":"US","type":"education","lineage":["https://openalex.org/I155173764"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shao-Hsuan Su","raw_affiliation_strings":["Department of Computer Engineering, Rochester Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Rochester Institute of Technology","institution_ids":["https://openalex.org/I155173764"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089681008","display_name":"Fu-Yuan Cheng","orcid":"https://orcid.org/0000-0003-2273-6089"},"institutions":[{"id":"https://openalex.org/I155173764","display_name":"Rochester Institute of Technology","ror":"https://ror.org/00v4yb702","country_code":"US","type":"education","lineage":["https://openalex.org/I155173764"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fu-Yuan Cheng","raw_affiliation_strings":["Department of Computer Engineering, Rochester Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Rochester Institute of Technology","institution_ids":["https://openalex.org/I155173764"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022627080","display_name":"Shanchieh Jay Yang","orcid":"https://orcid.org/0009-0004-5503-2082"},"institutions":[{"id":"https://openalex.org/I155173764","display_name":"Rochester Institute of Technology","ror":"https://ror.org/00v4yb702","country_code":"US","type":"education","lineage":["https://openalex.org/I155173764"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shanchieh Jay Yang","raw_affiliation_strings":["Department of Computer Engineering, Rochester Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Rochester Institute of Technology","institution_ids":["https://openalex.org/I155173764"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5040805050","display_name":"Ahmet Okutan","orcid":"https://orcid.org/0000-0001-6664-515X"},"institutions":[{"id":"https://openalex.org/I155173764","display_name":"Rochester Institute of Technology","ror":"https://ror.org/00v4yb702","country_code":"US","type":"education","lineage":["https://openalex.org/I155173764"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ahmet Okutan","raw_affiliation_strings":["Department of Computer Engineering, Rochester Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Rochester Institute of Technology","institution_ids":["https://openalex.org/I155173764"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I155173764"],"apc_list":null,"apc_paid":null,"fwci":3.1665,"has_fulltext":false,"cited_by_count":25,"citation_normalized_percentile":{"value":0.93263657,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9943000078201294,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7416650056838989},{"id":"https://openalex.org/keywords/predictability","display_name":"Predictability","score":0.6933445930480957},{"id":"https://openalex.org/keywords/recurrent-neural-network","display_name":"Recurrent neural network","score":0.6926047801971436},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5265857577323914},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5130149722099304},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.47762531042099},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4584794044494629},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.43173229694366455},{"id":"https://openalex.org/keywords/analytics","display_name":"Analytics","score":0.42874860763549805},{"id":"https://openalex.org/keywords/long-short-term-memory","display_name":"Long short term memory","score":0.4277356266975403},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.2962301969528198}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7416650056838989},{"id":"https://openalex.org/C197640229","wikidata":"https://www.wikidata.org/wiki/Q2534066","display_name":"Predictability","level":2,"score":0.6933445930480957},{"id":"https://openalex.org/C147168706","wikidata":"https://www.wikidata.org/wiki/Q1457734","display_name":"Recurrent neural network","level":3,"score":0.6926047801971436},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5265857577323914},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5130149722099304},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.47762531042099},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4584794044494629},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.43173229694366455},{"id":"https://openalex.org/C79158427","wikidata":"https://www.wikidata.org/wiki/Q485396","display_name":"Analytics","level":2,"score":0.42874860763549805},{"id":"https://openalex.org/C133488467","wikidata":"https://www.wikidata.org/wiki/Q6673524","display_name":"Long short term memory","level":4,"score":0.4277356266975403},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2962301969528198},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/desec.2018.8625145","is_oa":false,"landing_page_url":"https://doi.org/10.1109/desec.2018.8625145","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 IEEE Conference on Dependable and Secure Computing (DSC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.44999998807907104,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W1546690352","https://openalex.org/W1591801644","https://openalex.org/W1811853421","https://openalex.org/W2010685537","https://openalex.org/W2025519999","https://openalex.org/W2043852022","https://openalex.org/W2122269808","https://openalex.org/W2122371512","https://openalex.org/W2191950414","https://openalex.org/W2335999708","https://openalex.org/W2464457188","https://openalex.org/W2466206609","https://openalex.org/W2525778437","https://openalex.org/W2552202683","https://openalex.org/W2583164363","https://openalex.org/W2741809018","https://openalex.org/W2753616590","https://openalex.org/W2951365926","https://openalex.org/W2963673968","https://openalex.org/W4293718132","https://openalex.org/W6632629631","https://openalex.org/W6687415500","https://openalex.org/W6719918161","https://openalex.org/W6729612850","https://openalex.org/W6732899423","https://openalex.org/W6744375652","https://openalex.org/W6745040976"],"related_works":["https://openalex.org/W3008584592","https://openalex.org/W2912153778","https://openalex.org/W4387163678","https://openalex.org/W4288108708","https://openalex.org/W2973430807","https://openalex.org/W4385280324","https://openalex.org/W2984436043","https://openalex.org/W4390245176","https://openalex.org/W2912831041","https://openalex.org/W2890685186"],"abstract_inverted_index":{"Classifying":[0],"and":[1,12,49,101,113,140],"predicting":[2],"cyberattack":[3],"behaviors":[4,66,98],"are":[5],"outstanding":[6],"challenges":[7],"due":[8],"to":[9,39,63,135,144],"the":[10,59,72,87,91,94,102,137],"changing":[11],"broad":[13],"attack":[14,54,97,118],"surfaces":[15],"as":[16],"attackers":[17],"penetrate":[18],"into":[19],"enterprise":[20],"networks.":[21],"The":[22,79,129],"rise":[23],"of":[24,53,61,93,96,104,126],"Recurrent":[25],"Neural":[26],"Networks":[27],"(RNNs)":[28],"for":[29,115],"temporally":[30],"structured":[31],"data":[32,48,89],"in":[33,71],"machine":[34],"learning":[35],"presents":[36,58,111],"an":[37],"opportunity":[38],"address":[40],"these":[41],"challenges,":[42],"though":[43],"it":[44],"would":[45],"require":[46],"sufficient":[47],"reasonable":[50],"labels":[51],"indicative":[52,125],"behaviors.":[55,128],"This":[56,107],"paper":[57,130],"use":[60],"RNNs":[62],"model":[64],"penetration":[65],"exhibited":[67],"by":[68,84],"ten":[69],"teams":[70,100],"2017":[73],"Collegiate":[74],"Penetration":[75],"Testing":[76],"Competition":[77],"(CPTC'17).":[78],"Long-Short-Term-Memory":[80],"(LSTM)":[81],"models":[82,139],"obtained":[83],"training":[85],"on":[86],"CPTC":[88],"enable":[90,141],"assessment":[92],"differentiability":[95],"across":[99],"predictability":[103],"future":[105,127,133],"actions.":[106],"first-of-its":[108],"kind":[109],"attempt":[110],"observations":[112],"insights":[114],"how":[116],"earlier":[117],"actions":[119],"may":[120,122],"or":[121],"not":[123],"be":[124],"concludes":[131],"with":[132],"considerations":[134],"integrate":[136],"LSTM":[138],"predictive":[142],"analytics":[143],"defend":[145],"against":[146],"complex,":[147],"multistage":[148],"cyberattacks.":[149]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":8},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}