{"id":"https://openalex.org/W4415124535","doi":"https://doi.org/10.1109/icnp65844.2025.11192393","title":"Enterprise Threat Detection with Explainable AI for Cloud-Network Convergence","display_name":"Enterprise Threat Detection with Explainable AI for Cloud-Network Convergence","publication_year":2025,"publication_date":"2025-09-22","ids":{"openalex":"https://openalex.org/W4415124535","doi":"https://doi.org/10.1109/icnp65844.2025.11192393"},"language":"en","primary_location":{"id":"doi:10.1109/icnp65844.2025.11192393","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icnp65844.2025.11192393","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 33rd International Conference on Network Protocols (ICNP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Xingkai Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I180662265","display_name":"China Mobile (China)","ror":"https://ror.org/05gftfe97","country_code":"CN","type":"company","lineage":["https://openalex.org/I180662265"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xingkai Wang","raw_affiliation_strings":["China Mobile Communications Group Co., Ltd.,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"China Mobile Communications Group Co., Ltd.,Beijing,China","institution_ids":["https://openalex.org/I180662265"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103177690","display_name":"Fangying Wu","orcid":"https://orcid.org/0009-0006-3077-2513"},"institutions":[{"id":"https://openalex.org/I110630785","display_name":"NSK (United States)","ror":"https://ror.org/027qba521","country_code":"US","type":"company","lineage":["https://openalex.org/I110630785","https://openalex.org/I4210157453"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fudi Wu","raw_affiliation_strings":["NSFOCUS Technologies Group Co., Ltd.,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NSFOCUS Technologies Group Co., Ltd.,Beijing,China","institution_ids":["https://openalex.org/I110630785"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021900554","display_name":"Xingwang Huang","orcid":"https://orcid.org/0000-0003-3055-6408"},"institutions":[{"id":"https://openalex.org/I161346416","display_name":"Jimei University","ror":"https://ror.org/03hknyb50","country_code":"CN","type":"education","lineage":["https://openalex.org/I161346416"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xingwang Huang","raw_affiliation_strings":["Jimei University,Computer Engineering College,Xiamen,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Jimei University,Computer Engineering College,Xiamen,China","institution_ids":["https://openalex.org/I161346416"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5119975396","display_name":"Qiefu Wuri","orcid":null},"institutions":[{"id":"https://openalex.org/I180662265","display_name":"China Mobile (China)","ror":"https://ror.org/05gftfe97","country_code":"CN","type":"company","lineage":["https://openalex.org/I180662265"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiefu Wuri","raw_affiliation_strings":["China Mobile Communications Group Co., Ltd.,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"China Mobile Communications Group Co., Ltd.,Beijing,China","institution_ids":["https://openalex.org/I180662265"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5106511173","display_name":"Dujuan Gu","orcid":"https://orcid.org/0000-0003-3445-8100"},"institutions":[{"id":"https://openalex.org/I110630785","display_name":"NSK (United States)","ror":"https://ror.org/027qba521","country_code":"US","type":"company","lineage":["https://openalex.org/I110630785","https://openalex.org/I4210157453"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dujuan Gu","raw_affiliation_strings":["NSFOCUS Technologies Group Co., Ltd.,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NSFOCUS Technologies Group Co., Ltd.,Beijing,China","institution_ids":["https://openalex.org/I110630785"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003367512","display_name":"Runzi Zhang","orcid":"https://orcid.org/0000-0003-2929-2484"},"institutions":[{"id":"https://openalex.org/I4391768176","display_name":"State Key Laboratory of Media Convergence and Communication","ror":"https://ror.org/0595ys057","country_code":null,"type":"facility","lineage":["https://openalex.org/I4391768176","https://openalex.org/I75689368"]},{"id":"https://openalex.org/I75689368","display_name":"Communication University of China","ror":"https://ror.org/04facbs33","country_code":"CN","type":"education","lineage":["https://openalex.org/I75689368"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Runzi Zhang","raw_affiliation_strings":["Communication University of China,State Key Laboratory of Media Convergence and Communication,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Communication University of China,State Key Laboratory of Media Convergence and Communication,Beijing,China","institution_ids":["https://openalex.org/I4391768176","https://openalex.org/I75689368"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5021862101","display_name":"Shen Gao","orcid":"https://orcid.org/0000-0003-1301-3700"},"institutions":[{"id":"https://openalex.org/I4210136246","display_name":"China Telecom (China)","ror":"https://ror.org/03jgnzt20","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210136246"]},{"id":"https://openalex.org/I4210144487","display_name":"Cloud Computing Center","ror":"https://ror.org/04aa0zm65","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210144487"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shen Gao","raw_affiliation_strings":["Cloud Computing Research Institute China Telecom,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cloud Computing Research Institute China Telecom,Beijing,China","institution_ids":["https://openalex.org/I4210136246","https://openalex.org/I4210144487"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9688000082969666,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9688000082969666,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9580000042915344,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9577999711036682,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6807000041007996},{"id":"https://openalex.org/keywords/workload","display_name":"Workload","score":0.5375999808311462},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.5065000057220459},{"id":"https://openalex.org/keywords/reliability","display_name":"Reliability (semiconductor)","score":0.49470001459121704},{"id":"https://openalex.org/keywords/intrusion-prevention-system","display_name":"Intrusion prevention system","score":0.3619999885559082},{"id":"https://openalex.org/keywords/convergence","display_name":"Convergence (economics)","score":0.3564000129699707},{"id":"https://openalex.org/keywords/misuse-detection","display_name":"Misuse detection","score":0.3492000102996826},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.3391000032424927}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7405999898910522},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6807000041007996},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5888000130653381},{"id":"https://openalex.org/C2778476105","wikidata":"https://www.wikidata.org/wiki/Q628539","display_name":"Workload","level":2,"score":0.5375999808311462},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.5065000057220459},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.49470001459121704},{"id":"https://openalex.org/C27061796","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion prevention system","level":3,"score":0.3619999885559082},{"id":"https://openalex.org/C2777303404","wikidata":"https://www.wikidata.org/wiki/Q759757","display_name":"Convergence (economics)","level":2,"score":0.3564000129699707},{"id":"https://openalex.org/C2776973144","wikidata":"https://www.wikidata.org/wiki/Q6880649","display_name":"Misuse detection","level":4,"score":0.3492000102996826},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3391000032424927},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.32580000162124634},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3118000030517578},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2944999933242798},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2930000126361847},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.28450000286102295},{"id":"https://openalex.org/C149859251","wikidata":"https://www.wikidata.org/wiki/Q483426","display_name":"Enterprise private network","level":2,"score":0.2727999985218048},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.26759999990463257},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.25839999318122864},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.25209999084472656},{"id":"https://openalex.org/C67571701","wikidata":"https://www.wikidata.org/wiki/Q1318054","display_name":"Enterprise system","level":2,"score":0.25119999051094055}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icnp65844.2025.11192393","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icnp65844.2025.11192393","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 33rd International Conference on Network Protocols (ICNP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321878","display_name":"Natural Science Foundation of Fujian Province","ror":null},{"id":"https://openalex.org/F4320325565","display_name":"Jimei University","ror":"https://ror.org/03hknyb50"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W2147694185","https://openalex.org/W2154851992","https://openalex.org/W2302958273","https://openalex.org/W2756489700","https://openalex.org/W2907492528","https://openalex.org/W2942292460","https://openalex.org/W2986944522","https://openalex.org/W3117762922"],"related_works":[],"abstract_inverted_index":{"With":[0],"the":[1,60,124],"rapid":[2],"development":[3],"of":[4,46],"cloud-network":[5,17],"convergence,":[6],"alert":[7],"data":[8,118],"processing":[9],"has":[10],"become":[11],"a":[12,27,51],"critical":[13],"task":[14],"in":[15,135],"intelligent":[16],"operations":[18],"and":[19,44,89,110,133],"maintenance.":[20],"Enterprise":[21,61],"threat":[22,48,136],"detection":[23,49],"systems":[24],"serve":[25],"as":[26,38],"vital":[28],"defense":[29],"against":[30],"cyberattacks.":[31],"However,":[32],"due":[33],"to":[34,74,95,103],"well-known":[35],"challenges":[36],"such":[37],"massive":[39],"unlabeled":[40],"data,":[41],"false":[42],"alerts,":[43],"lack":[45],"interpretability,":[47],"remains":[50],"formidable":[52],"challenge.":[53],"To":[54],"address":[55],"these":[56],"issues,":[57],"we":[58],"propose":[59],"Threat":[62],"Detection":[63],"Explainer":[64],"(ETDE),":[65],"an":[66],"interpretable":[67],"graph":[68],"neural":[69],"network":[70],"(GNN)-based":[71],"framework":[72],"designed":[73],"automatically":[75],"identify":[76],"attackers":[77],"from":[78,91],"intrusion":[79],"prevention":[80],"system":[81],"(IPS)":[82],"alerts.":[83],"ETDE":[84,121],"extracts":[85],"relevant":[86],"subgraph":[87],"structures":[88],"features":[90],"security":[92,105,128],"attribute":[93],"graphs":[94],"model":[96],"attack":[97],"patterns,":[98],"while":[99],"providing":[100],"comprehensive":[101],"explanations":[102],"help":[104],"teams":[106],"rapidly":[107],"pinpoint":[108],"threats":[109],"accelerate":[111],"incident":[112],"response.":[113],"Evaluations":[114],"on":[115],"real-world":[116],"operational":[117],"demonstrate":[119],"that":[120],"significantly":[122],"reduces":[123],"manual":[125],"workload":[126],"for":[127],"analysts,":[129],"enhancing":[130],"both":[131],"efficiency":[132],"reliability":[134],"detection.":[137]},"counts_by_year":[],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-14T00:00:00"}