{"id":"https://openalex.org/W4414538702","doi":"https://doi.org/10.1109/icc52391.2025.11162124","title":"EMAD: Email Masquerade Attack Detection Based on Semi-Supervised Learning","display_name":"EMAD: Email Masquerade Attack Detection Based on Semi-Supervised Learning","publication_year":2025,"publication_date":"2025-06-08","ids":{"openalex":"https://openalex.org/W4414538702","doi":"https://doi.org/10.1109/icc52391.2025.11162124"},"language":"en","primary_location":{"id":"doi:10.1109/icc52391.2025.11162124","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc52391.2025.11162124","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICC 2025 - IEEE International Conference on Communications","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100373900","display_name":"Chun Li","orcid":"https://orcid.org/0000-0002-3132-3756"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210108629","display_name":"Computer Network Information Center","ror":"https://ror.org/01s0wyf50","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210108629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"C. Li","raw_affiliation_strings":["Chinese Academy of Sciences,Computer Network Information Center,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Computer Network Information Center,Beijing,China","institution_ids":["https://openalex.org/I4210108629","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006146465","display_name":"Chai Kiat Yeo","orcid":"https://orcid.org/0000-0002-7618-1472"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"C. K. Yeo","raw_affiliation_strings":["College of Computing and Data Science, Nanyang Technological University,Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computing and Data Science, Nanyang Technological University,Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033745290","display_name":"Jiwu Jing","orcid":"https://orcid.org/0000-0002-3409-6149"},"institutions":[{"id":"https://openalex.org/I4210132990","display_name":"State Key Laboratory of Cryptology","ror":"https://ror.org/02pn5rj08","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210132990"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"J. Jing","raw_affiliation_strings":["University of Chinese Academy of Sciences,Department of Cryptography,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Chinese Academy of Sciences,Department of Cryptography,Beijing,China","institution_ids":["https://openalex.org/I4210165038","https://openalex.org/I4210132990"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103067955","display_name":"Guohao Du","orcid":"https://orcid.org/0000-0003-0030-8817"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210108629","display_name":"Computer Network Information Center","ror":"https://ror.org/01s0wyf50","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210108629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"G. Du","raw_affiliation_strings":["Chinese Academy of Sciences,Computer Network Information Center,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Computer Network Information Center,Beijing,China","institution_ids":["https://openalex.org/I4210108629","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111615426","display_name":"Chengfen Long","orcid":null},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210108629","display_name":"Computer Network Information Center","ror":"https://ror.org/01s0wyf50","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210108629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"C. Long","raw_affiliation_strings":["Chinese Academy of Sciences,Computer Network Information Center,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Computer Network Information Center,Beijing,China","institution_ids":["https://openalex.org/I4210108629","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069584904","display_name":"Junsuo Zhao","orcid":"https://orcid.org/0000-0001-8950-4157"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210108629","display_name":"Computer Network Information Center","ror":"https://ror.org/01s0wyf50","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210108629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"J. Zhao","raw_affiliation_strings":["Chinese Academy of Sciences,Computer Network Information Center,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Computer Network Information Center,Beijing,China","institution_ids":["https://openalex.org/I4210108629","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112601665","display_name":"Yuan Gao","orcid":"https://orcid.org/0000-0003-4535-2977"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210108629","display_name":"Computer Network Information Center","ror":"https://ror.org/01s0wyf50","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210108629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Y. Gao","raw_affiliation_strings":["Chinese Academy of Sciences,Computer Network Information Center,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Computer Network Information Center,Beijing,China","institution_ids":["https://openalex.org/I4210108629","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100398950","display_name":"Yunlong Wang","orcid":"https://orcid.org/0000-0001-7455-8064"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210108629","display_name":"Computer Network Information Center","ror":"https://ror.org/01s0wyf50","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210108629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Y. Wang","raw_affiliation_strings":["Chinese Academy of Sciences,Computer Network Information Center,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Computer Network Information Center,Beijing,China","institution_ids":["https://openalex.org/I4210108629","https://openalex.org/I19820366"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5107885956","display_name":"L. Gong","orcid":"https://orcid.org/0000-0003-0400-3180"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210108629","display_name":"Computer Network Information Center","ror":"https://ror.org/01s0wyf50","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210108629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"L. Gong","raw_affiliation_strings":["Chinese Academy of Sciences,Computer Network Information Center,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Computer Network Information Center,Beijing,China","institution_ids":["https://openalex.org/I4210108629","https://openalex.org/I19820366"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":9,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.27039566,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"440","last_page":"445"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9940999746322632,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9940999746322632,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.982200026512146,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9812999963760376,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.6198999881744385},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.5376999974250793},{"id":"https://openalex.org/keywords/email-authentication","display_name":"Email authentication","score":0.44940000772476196},{"id":"https://openalex.org/keywords/bank-account","display_name":"Bank account","score":0.3425999879837036},{"id":"https://openalex.org/keywords/electronic-mail","display_name":"Electronic mail","score":0.2971999943256378},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.2856000065803528}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7495999932289124},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.6198999881744385},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5763999819755554},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.5376999974250793},{"id":"https://openalex.org/C550791530","wikidata":"https://www.wikidata.org/wiki/Q5368811","display_name":"Email authentication","level":5,"score":0.44940000772476196},{"id":"https://openalex.org/C2993791488","wikidata":"https://www.wikidata.org/wiki/Q676459","display_name":"Bank account","level":3,"score":0.3425999879837036},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3319999873638153},{"id":"https://openalex.org/C3020028006","wikidata":"https://www.wikidata.org/wiki/Q9158","display_name":"Electronic mail","level":2,"score":0.2971999943256378},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.28999999165534973},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.2856000065803528},{"id":"https://openalex.org/C2985371682","wikidata":"https://www.wikidata.org/wiki/Q11135","display_name":"Ip address","level":2,"score":0.26170000433921814},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.26089999079704285},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.25589999556541443},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.2554999887943268}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icc52391.2025.11162124","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc52391.2025.11162124","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICC 2025 - IEEE International Conference on Communications","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Email,":[0],"as":[1],"a":[2,7,82],"primary":[3],"communication":[4],"service,":[5],"plays":[6],"crucial":[8],"role":[9],"in":[10],"communication,":[11],"making":[12,54,67],"it":[13],"one":[14],"of":[15,20,70,95],"the":[16,59,62,68,145,152],"most":[17],"common":[18],"targets":[19],"cyberattacks.":[21],"Masquerade":[22],"attacks,":[23],"which":[24],"involve":[25],"impersonating":[26],"legitimate":[27,46],"users":[28,130],"to":[29,37,144],"obtain":[30],"authentication":[31],"credentials":[32],"and":[33,74,98,138,160,172],"gain":[34],"unauthorized":[35],"access":[36],"services,":[38],"are":[39,61],"particularly":[40],"common.":[41],"Since":[42],"masquerade":[43,88],"attacks":[44],"use":[45],"logins,":[47],"their":[48],"dwell-time":[49],"behavior":[50],"resembles":[51],"normal":[52],"users,":[53],"detection":[55,71,108],"challenging.":[56],"Further":[57],"complicating":[58],"issue":[60],"diverse":[63],"email":[64,96,126],"usage":[65,100],"patterns,":[66],"identification":[69],"results":[72,114],"time-consuming":[73],"labor-intensive.":[75],"To":[76],"slove":[77],"those":[78],"problems,":[79],"we":[80],"propose":[81],"rule-based,":[83],"self-training,":[84],"semi-supervised":[85],"model":[86],"for":[87,106],"attack":[89],"detection.":[90],"It":[91,102],"analyzes":[92],"four":[93],"types":[94],"logs":[97],"classifies":[99],"scenarios.":[101],"uses":[103],"an":[104],"Auto-Encoder":[105],"semisupervised":[107],"with":[109,118],"limited":[110],"labeled":[111],"data,":[112],"refining":[113],"through":[115],"iterative":[116],"self-training":[117],"coarse-grained":[119],"rules.":[120],"The":[121],"framework":[122,154],"is":[123],"validated":[124],"on":[125],"data":[127],"from":[128],"6,736":[129],"over":[131],"three":[132],"months,":[133],"identifying":[134],"7":[135,161],"anomalous":[136,140,158,163],"accounts":[137,159,168],"12":[139],"IP":[141,164,174],"addresses.":[142],"Compared":[143],"company's":[146],"Security":[147],"Operations":[148],"Center":[149],"security":[150],"tools,":[151],"proposed":[153],"detected":[155],"3":[156],"more":[157,162],"while":[165],"reducing":[166],"suspicious":[167,173],"by":[169,175],"3.72":[170],"times":[171],"3.54":[176],"times.":[177]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}