{"id":"https://openalex.org/W4389820376","doi":"https://doi.org/10.1109/dsc61021.2023.10354204","title":"Malicious Cyber Activity Detection using Zigzag Persistence","display_name":"Malicious Cyber Activity Detection using Zigzag Persistence","publication_year":2023,"publication_date":"2023-11-07","ids":{"openalex":"https://openalex.org/W4389820376","doi":"https://doi.org/10.1109/dsc61021.2023.10354204"},"language":"en","primary_location":{"id":"doi:10.1109/dsc61021.2023.10354204","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/dsc61021.2023.10354204","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Conference on Dependable and Secure Computing (DSC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038687349","display_name":"Audun Myers","orcid":"https://orcid.org/0000-0001-6268-9227"},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Audun Myers","raw_affiliation_strings":["Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory,Seattle,WA,United States","Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory, Seattle, WA, United States"],"affiliations":[{"raw_affiliation_string":"Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory,Seattle,WA,United States","institution_ids":["https://openalex.org/I142606810"]},{"raw_affiliation_string":"Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory, Seattle, WA, United States","institution_ids":["https://openalex.org/I142606810"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043675032","display_name":"Alyson Bittner","orcid":null},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alyson Bittner","raw_affiliation_strings":["Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory,Seattle,WA,United States","Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory, Seattle, WA, United States"],"affiliations":[{"raw_affiliation_string":"Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory,Seattle,WA,United States","institution_ids":["https://openalex.org/I142606810"]},{"raw_affiliation_string":"Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory, Seattle, WA, United States","institution_ids":["https://openalex.org/I142606810"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065542694","display_name":"Sinan G. Aksoy","orcid":"https://orcid.org/0000-0002-3466-3334"},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sinan Aksoy","raw_affiliation_strings":["Foundational Data Science Pacific Northwest National Laboratory,Seattle,WA,United States","Foundational Data Science Pacific Northwest National Laboratory, Seattle, WA, United States"],"affiliations":[{"raw_affiliation_string":"Foundational Data Science Pacific Northwest National Laboratory,Seattle,WA,United States","institution_ids":["https://openalex.org/I142606810"]},{"raw_affiliation_string":"Foundational Data Science Pacific Northwest National Laboratory, Seattle, WA, United States","institution_ids":["https://openalex.org/I142606810"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039791572","display_name":"Dan Best","orcid":null},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dan Best","raw_affiliation_strings":["Cyber Security Pacific Northwest National Laboratory,Seattle,WA,United States","Cyber Security Pacific Northwest National Laboratory, Seattle, WA, United States"],"affiliations":[{"raw_affiliation_string":"Cyber Security Pacific Northwest National Laboratory,Seattle,WA,United States","institution_ids":["https://openalex.org/I142606810"]},{"raw_affiliation_string":"Cyber Security Pacific Northwest National Laboratory, Seattle, WA, United States","institution_ids":["https://openalex.org/I142606810"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027854626","display_name":"Gregory Henselman\u2010Petrusek","orcid":"https://orcid.org/0000-0002-1889-8272"},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gregory Henselman-Petrusek","raw_affiliation_strings":["Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory,Seattle,WA,United States","Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory, Seattle, WA, United States"],"affiliations":[{"raw_affiliation_string":"Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory,Seattle,WA,United States","institution_ids":["https://openalex.org/I142606810"]},{"raw_affiliation_string":"Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory, Seattle, WA, United States","institution_ids":["https://openalex.org/I142606810"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092897312","display_name":"Helen Jenne","orcid":null},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Helen Jenne","raw_affiliation_strings":["Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory,Seattle,WA,United States","Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory, Seattle, WA, United States"],"affiliations":[{"raw_affiliation_string":"Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory,Seattle,WA,United States","institution_ids":["https://openalex.org/I142606810"]},{"raw_affiliation_string":"Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory, Seattle, WA, United States","institution_ids":["https://openalex.org/I142606810"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059387152","display_name":"Cliff Joslyn","orcid":"https://orcid.org/0000-0002-5923-5547"},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Cliff Joslyn","raw_affiliation_strings":["Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory,Seattle,WA,United States","Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory, Seattle, WA, United States"],"affiliations":[{"raw_affiliation_string":"Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory,Seattle,WA,United States","institution_ids":["https://openalex.org/I142606810"]},{"raw_affiliation_string":"Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory, Seattle, WA, United States","institution_ids":["https://openalex.org/I142606810"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046319147","display_name":"Bill Kay","orcid":"https://orcid.org/0009-0007-8288-8953"},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Bill Kay","raw_affiliation_strings":["Computational Mathematics Pacific Northwest National Laboratory,Seattle,WA,United States","Computational Mathematics Pacific Northwest National Laboratory, Seattle, WA, United States"],"affiliations":[{"raw_affiliation_string":"Computational Mathematics Pacific Northwest National Laboratory,Seattle,WA,United States","institution_ids":["https://openalex.org/I142606810"]},{"raw_affiliation_string":"Computational Mathematics Pacific Northwest National Laboratory, Seattle, WA, United States","institution_ids":["https://openalex.org/I142606810"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043020072","display_name":"Garret Seppala","orcid":null},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Garret Seppala","raw_affiliation_strings":["Cyber Resilience Foundations Pacific Northwest National Laboratory,Seattle,WA,United States","Cyber Resilience Foundations Pacific Northwest National Laboratory, Seattle, WA, United States"],"affiliations":[{"raw_affiliation_string":"Cyber Resilience Foundations Pacific Northwest National Laboratory,Seattle,WA,United States","institution_ids":["https://openalex.org/I142606810"]},{"raw_affiliation_string":"Cyber Resilience Foundations Pacific Northwest National Laboratory, Seattle, WA, United States","institution_ids":["https://openalex.org/I142606810"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001785077","display_name":"Stephen J. Young","orcid":"https://orcid.org/0000-0003-0582-6787"},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Stephen J. Young","raw_affiliation_strings":["Computational Mathematics Pacific Northwest National Laboratory,Seattle,WA,United States","Computational Mathematics Pacific Northwest National Laboratory, Seattle, WA, United States"],"affiliations":[{"raw_affiliation_string":"Computational Mathematics Pacific Northwest National Laboratory,Seattle,WA,United States","institution_ids":["https://openalex.org/I142606810"]},{"raw_affiliation_string":"Computational Mathematics Pacific Northwest National Laboratory, Seattle, WA, United States","institution_ids":["https://openalex.org/I142606810"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022505886","display_name":"Emilie Purvine","orcid":"https://orcid.org/0000-0003-2069-5594"},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Emilie Purvine","raw_affiliation_strings":["Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory,Seattle,WA,United States","Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory, Seattle, WA, United States"],"affiliations":[{"raw_affiliation_string":"Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory,Seattle,WA,United States","institution_ids":["https://openalex.org/I142606810"]},{"raw_affiliation_string":"Mathematics, Statistics, and Data Science Pacific Northwest National Laboratory, Seattle, WA, United States","institution_ids":["https://openalex.org/I142606810"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":11,"corresponding_author_ids":["https://openalex.org/A5038687349"],"corresponding_institution_ids":["https://openalex.org/I142606810"],"apc_list":null,"apc_paid":null,"fwci":0.397,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.67496086,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12536","display_name":"Topological and Geometric Data Analysis","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12536","display_name":"Topological and Geometric Data Analysis","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9916999936103821,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.9840999841690063,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/persistence","display_name":"Persistence (discontinuity)","score":0.815111517906189},{"id":"https://openalex.org/keywords/zigzag","display_name":"Zigzag","score":0.7492579817771912},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5143986344337463},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4270440936088562},{"id":"https://openalex.org/keywords/geology","display_name":"Geology","score":0.20406079292297363},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.09495657682418823},{"id":"https://openalex.org/keywords/geotechnical-engineering","display_name":"Geotechnical engineering","score":0.08286735415458679}],"concepts":[{"id":"https://openalex.org/C2781009140","wikidata":"https://www.wikidata.org/wiki/Q7170389","display_name":"Persistence (discontinuity)","level":2,"score":0.815111517906189},{"id":"https://openalex.org/C192271897","wikidata":"https://www.wikidata.org/wiki/Q198438","display_name":"Zigzag","level":2,"score":0.7492579817771912},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5143986344337463},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4270440936088562},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.20406079292297363},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.09495657682418823},{"id":"https://openalex.org/C187320778","wikidata":"https://www.wikidata.org/wiki/Q1349130","display_name":"Geotechnical engineering","level":1,"score":0.08286735415458679},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/dsc61021.2023.10354204","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/dsc61021.2023.10354204","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Conference on Dependable and Secure Computing (DSC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320338354","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W207882028","https://openalex.org/W1556771345","https://openalex.org/W1996639348","https://openalex.org/W2083786039","https://openalex.org/W2144044408","https://openalex.org/W2539402368","https://openalex.org/W2725792925","https://openalex.org/W2913946465","https://openalex.org/W2962706934","https://openalex.org/W2964237352","https://openalex.org/W3013843370","https://openalex.org/W3015234645","https://openalex.org/W3049654111","https://openalex.org/W3098455240","https://openalex.org/W3116336373","https://openalex.org/W3154735260","https://openalex.org/W3185599273","https://openalex.org/W3196544260","https://openalex.org/W4205556156","https://openalex.org/W4205754479","https://openalex.org/W4213381722","https://openalex.org/W4376608071","https://openalex.org/W4387046085","https://openalex.org/W6608601624","https://openalex.org/W6681677808","https://openalex.org/W6694154208","https://openalex.org/W6779254647"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2808029097","https://openalex.org/W3035794677","https://openalex.org/W2032417936","https://openalex.org/W2588100896","https://openalex.org/W2152067480","https://openalex.org/W2326117044","https://openalex.org/W135216162","https://openalex.org/W2947454206"],"abstract_inverted_index":{"In":[0],"this":[1,79,123,134,164],"study":[2,101,165],"we":[3,105,136],"synthesize":[4],"zigzag":[5,107,147,170],"persistence":[6,148,171],"from":[7,31],"topological":[8,112],"data":[9,40,68,80,130,182],"analysis":[10],"with":[11,96,175],"autoencoder-based":[12],"approaches":[13],"to":[14,25,81],"detect":[15],"malicious":[16,35,56,125,161,185],"cyber":[17,129],"activity,":[18],"and":[19,29,42,51,69,172,183],"derive":[20],"analytic":[21],"insights.":[22],"Cybersecurity":[23],"aims":[24],"safeguard":[26],"computers,":[27],"networks,":[28],"servers":[30],"various":[32],"forms":[33],"of":[34,55,65,74,78,144,156,169],"attacks,":[36],"including":[37],"network":[38],"damage,":[39],"theft,":[41],"activity":[43,57,126],"monitoring.":[44],"We":[45,61,120],"focus":[46],"on":[47,141],"the":[48,53,63,66,71,85,102,145,154,157,167],"cybersecurity":[49,180],"domain":[50],"investigate":[52],"detection":[54,135],"using":[58],"log":[59,67,181],"data.":[60],"consider":[62],"dynamics":[64],"explore":[70],"changing":[72,103],"topology":[73,104],"a":[75,128,142],"hypergraph":[76],"representation":[77],"gain":[82],"insights":[83],"into":[84],"underlying":[86],"activity.":[87,162],"These":[88],"hypergraphs":[89,177],"capture":[90],"complex":[91],"interactions":[92],"between":[93],"processes,":[94],"together":[95],"their":[97],"temporal":[98,176],"information.":[99],"To":[100,132],"use":[106],"persistence,":[108],"which":[109],"captures":[110],"how":[111],"features":[113],"persist":[114],"at":[115],"multiple":[116],"dimensions":[117],"over":[118],"time.":[119],"observe":[121],"that":[122],"detects":[124],"in":[127,159],"set.":[131],"automate":[133],"implement":[137],"an":[138],"autoencoder":[139,158],"trained":[140],"vectorization":[143],"resulting":[146],"barcodes.":[149],"Our":[150],"experimental":[151],"results":[152],"demonstrate":[153],"effectiveness":[155],"detecting":[160,184],"Overall,":[163],"highlights":[166],"potential":[168],"its":[173],"combination":[174],"for":[178],"analyzing":[179],"behavior.":[186]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2023,"cited_by_count":1}],"updated_date":"2026-03-25T13:04:00.132906","created_date":"2025-10-10T00:00:00"}