{"id":"https://openalex.org/W4377968460","doi":"https://doi.org/10.1109/icps58381.2023.10128062","title":"Advanced Persistent Threats Detection based on Deep Learning Approach","display_name":"Advanced Persistent Threats Detection based on Deep Learning Approach","publication_year":2023,"publication_date":"2023-05-08","ids":{"openalex":"https://openalex.org/W4377968460","doi":"https://doi.org/10.1109/icps58381.2023.10128062"},"language":"en","primary_location":{"id":"doi:10.1109/icps58381.2023.10128062","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icps58381.2023.10128062","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE 6th International Conference on Industrial Cyber-Physical Systems (ICPS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://rgu-repository.worktribe.com/file/1931366/1/EKE%202023%20Advanced%20persistent%20threats%20%28AAM%29","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038718470","display_name":"Hope Nkiruka Eke","orcid":"https://orcid.org/0000-0001-5049-8212"},"institutions":[{"id":"https://openalex.org/I522815984","display_name":"Robert Gordon University","ror":"https://ror.org/04f0qj703","country_code":"GB","type":"education","lineage":["https://openalex.org/I522815984"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Hope Nkiruka Eke","raw_affiliation_strings":["School of Computing, Robert Gordon University,Aberdeen,UK","School of Computing, Robert Gordon University, Aberdeen, UK"],"raw_orcid":"https://orcid.org/0000-0001-5049-8212","affiliations":[{"raw_affiliation_string":"School of Computing, Robert Gordon University,Aberdeen,UK","institution_ids":["https://openalex.org/I522815984"]},{"raw_affiliation_string":"School of Computing, Robert Gordon University, Aberdeen, UK","institution_ids":["https://openalex.org/I522815984"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5040494006","display_name":"Andrei Petrovski","orcid":"https://orcid.org/0000-0002-0987-2791"},"institutions":[{"id":"https://openalex.org/I4210157630","display_name":"National Computing Centre (United Kingdom)","ror":"https://ror.org/05gptew44","country_code":"GB","type":"company","lineage":["https://openalex.org/I4210157630"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Andrei Petrovski","raw_affiliation_strings":["School of Computing, National Subsea Centre,Aberdeen,UK","School of Computing, National Subsea Centre, Aberdeen, UK"],"raw_orcid":"https://orcid.org/0000-0002-0987-2791","affiliations":[{"raw_affiliation_string":"School of Computing, National Subsea Centre,Aberdeen,UK","institution_ids":["https://openalex.org/I4210157630"]},{"raw_affiliation_string":"School of Computing, National Subsea Centre, Aberdeen, UK","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":14,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7431110143661499},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.5291645526885986},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5272625684738159},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4684374928474426},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.4619906544685364},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4494273364543915},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.43791669607162476},{"id":"https://openalex.org/keywords/layer","display_name":"Layer (electronics)","score":0.43729543685913086},{"id":"https://openalex.org/keywords/sequence","display_name":"Sequence (biology)","score":0.42036211490631104},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.36559492349624634},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2839615046977997},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.1393018662929535}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7431110143661499},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.5291645526885986},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5272625684738159},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4684374928474426},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.4619906544685364},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4494273364543915},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.43791669607162476},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.43729543685913086},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.42036211490631104},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.36559492349624634},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2839615046977997},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.1393018662929535},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C178790620","wikidata":"https://www.wikidata.org/wiki/Q11351","display_name":"Organic chemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C54355233","wikidata":"https://www.wikidata.org/wiki/Q7162","display_name":"Genetics","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/icps58381.2023.10128062","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icps58381.2023.10128062","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE 6th International Conference on Industrial Cyber-Physical Systems (ICPS)","raw_type":"proceedings-article"},{"id":"pmh:oai:rgu-repository.worktribe.com:1931366","is_oa":true,"landing_page_url":"https://rgu-repository.worktribe.com/output/1931366","pdf_url":"https://rgu-repository.worktribe.com/file/1931366/1/EKE%202023%20Advanced%20persistent%20threats%20%28AAM%29","source":{"id":"https://openalex.org/S4306400814","display_name":"Open Access Institutional Repository at Robert Gordon University (Robert Gordon University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I522815984","host_organization_name":"Robert Gordon University","host_organization_lineage":["https://openalex.org/I522815984"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Presentation / Conference Contribution"}],"best_oa_location":{"id":"pmh:oai:rgu-repository.worktribe.com:1931366","is_oa":true,"landing_page_url":"https://rgu-repository.worktribe.com/output/1931366","pdf_url":"https://rgu-repository.worktribe.com/file/1931366/1/EKE%202023%20Advanced%20persistent%20threats%20%28AAM%29","source":{"id":"https://openalex.org/S4306400814","display_name":"Open Access Institutional Repository at Robert Gordon University (Robert Gordon University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I522815984","host_organization_name":"Robert Gordon University","host_organization_lineage":["https://openalex.org/I522815984"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Presentation / Conference Contribution"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4377968460.pdf","grobid_xml":"https://content.openalex.org/works/W4377968460.grobid-xml"},"referenced_works_count":28,"referenced_works":["https://openalex.org/W195047088","https://openalex.org/W1497716074","https://openalex.org/W1505844724","https://openalex.org/W1511742843","https://openalex.org/W2000984532","https://openalex.org/W2015452969","https://openalex.org/W2041938856","https://openalex.org/W2198623851","https://openalex.org/W2300921526","https://openalex.org/W2399839733","https://openalex.org/W2408793237","https://openalex.org/W2513712568","https://openalex.org/W2545820541","https://openalex.org/W2625570400","https://openalex.org/W2910526708","https://openalex.org/W2914662937","https://openalex.org/W2924079745","https://openalex.org/W2939867067","https://openalex.org/W2982518168","https://openalex.org/W3002573977","https://openalex.org/W3009144758","https://openalex.org/W3045927434","https://openalex.org/W3047150775","https://openalex.org/W3127451336","https://openalex.org/W3205070445","https://openalex.org/W4210907528","https://openalex.org/W4285213947","https://openalex.org/W4290666376"],"related_works":["https://openalex.org/W4387497383","https://openalex.org/W3183948672","https://openalex.org/W3173606202","https://openalex.org/W3110381201","https://openalex.org/W2948807893","https://openalex.org/W2935909890","https://openalex.org/W2778153218","https://openalex.org/W2758277628","https://openalex.org/W1531601525","https://openalex.org/W2091483479"],"abstract_inverted_index":{"Advanced":[0],"Persistent":[1],"Threats":[2],"(APTs)":[3],"have":[4],"been":[5],"a":[6,22,49,190],"major":[7],"challenge":[8],"in":[9,77,109,210,220,248,256],"securing":[10],"both":[11],"Information":[12],"Technology":[13,17],"(IT)":[14],"and":[15,40,57,66,74,95,115,123,151,170,182,227,236,245],"Operational":[16],"(OT)":[18],"systems.":[19],"APT":[20,101],"is":[21,68,103,164,251],"sophisticated":[23],"attack":[24,144,172,203,235],"that":[25,202,207,225],"masquerade":[26],"their":[27],"actions":[28],"to":[29,90,139,166,233,253],"navigates":[30],"around":[31],"defenses,":[32],"breach":[33],"networks,":[34],"often,":[35],"over":[36,48],"multiple":[37],"network":[38],"hosts":[39],"evades":[41],"detection.":[42],"It":[43],"also":[44],"uses":[45],"\u201clow-and-slow\u201d":[46],"approach":[47,83,163,188],"long":[50],"period":[51],"of":[52,59,133,143,195,229],"time.":[53],"Resource":[54],"availability,":[55],"integrity,":[56],"confidentiality":[58],"the":[60,72,130,141,147,153,160,168,216,243,254],"operational":[61,230],"cyber-physical":[62],"systems":[63,231],"(CPS)":[64],"state":[65,232],"control":[67],"highly":[69],"impacted":[70],"by":[71,242],"safety":[73,244],"security":[75,246],"measures":[76,247],"place.":[78],"A":[79],"framework":[80,175],"multi-stage":[81],"detection":[82,193,204],"termed":[84],"\u201c":[85,134],"<tex":[86,135],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[87,136],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">$APT_{DASAC}$</tex>":[88,137],"\u201d":[89,138],"detect":[91],"different":[92,180],"tactics,":[93],"techniques,":[94],"procedures":[96],"(TTPs)":[97],"used":[98],"during":[99],"various":[100],"steps":[102,145],"proposed.":[104],"Implementation":[105],"was":[106,176],"carried":[107],"out":[108],"three":[110,179,183],"stages:":[111],"(i)":[112],"Data":[113,126],"input":[114],"probing":[116],"layer":[117],"-":[118],"this":[119],"involves":[120],"data":[121],"gathering":[122],"pre-processing,":[124],"(ii)":[125],"analysis":[127],"layer;":[128,159],"applies":[129],"core":[131],"process":[132],"learn":[140],"behaviour":[142],"from":[146],"sequence":[148],"data,":[149],"correlate":[150],"link":[152],"related":[154],"output":[155,169],"and,":[156],"(iii)":[157],"Decision":[158],"ensemble":[161],"probability":[162],"utilized":[165],"integrate":[167],"make":[171],"prediction.":[173],"The":[174,186],"validated":[177],"with":[178,197],"datasets":[181],"case":[184],"studies.":[185],"proposed":[187],"achieved":[189],"significant":[191],"attacks":[192],"capability":[194],"86.36%":[196],"loss":[198],"as":[199],"0.32%,":[200],"demonstrating":[201],"techniques":[205],"applied":[206],"performed":[208],"well":[209],"one":[211],"domain":[212],"may":[213],"not":[214],"yield":[215],"same":[217],"good":[218],"result":[219],"another":[221],"domain.":[222],"This":[223],"suggests":[224],"robustness":[226],"resilience":[228],"withstand":[234],"maintain":[237],"system":[238,255],"performance":[239],"are":[240],"regulated":[241],"place,":[249],"which":[250],"specific":[252],"question.":[257]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":4}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}