{"id":"https://openalex.org/W2752487304","doi":"https://doi.org/10.1109/iscc.2017.8024636","title":"Locating victims of destructive targeted attacks based on Suspicious Activity Spike Train","display_name":"Locating victims of destructive targeted attacks based on Suspicious Activity Spike Train","publication_year":2017,"publication_date":"2017-07-01","ids":{"openalex":"https://openalex.org/W2752487304","doi":"https://doi.org/10.1109/iscc.2017.8024636","mag":"2752487304"},"language":"en","primary_location":{"id":"doi:10.1109/iscc.2017.8024636","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iscc.2017.8024636","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE Symposium on Computers and Communications (ISCC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5070636905","display_name":"Nobutaka Kawaguchi","orcid":null},"institutions":[{"id":"https://openalex.org/I65143321","display_name":"Hitachi (Japan)","ror":"https://ror.org/02exqgm79","country_code":"JP","type":"company","lineage":["https://openalex.org/I65143321"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Nobutaka Kawaguchi","raw_affiliation_strings":["Tetsutoshi Komiyama Hitachi ltd, Tokyo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tetsutoshi Komiyama Hitachi ltd, Tokyo, Japan","institution_ids":["https://openalex.org/I65143321"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015041066","display_name":"Hideyuki Tomimura","orcid":null},"institutions":[{"id":"https://openalex.org/I65143321","display_name":"Hitachi (Japan)","ror":"https://ror.org/02exqgm79","country_code":"JP","type":"company","lineage":["https://openalex.org/I65143321"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Hideyuki Tomimura","raw_affiliation_strings":["Tetsutoshi Komiyama Hitachi ltd, Tokyo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tetsutoshi Komiyama Hitachi ltd, Tokyo, Japan","institution_ids":["https://openalex.org/I65143321"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026198491","display_name":"Tetsutoshi Komiyama","orcid":null},"institutions":[{"id":"https://openalex.org/I4210137426","display_name":"Hitachi (United States)","ror":"https://ror.org/03pwpr214","country_code":"US","type":"company","lineage":["https://openalex.org/I4210137426","https://openalex.org/I65143321"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tetsutoshi Komiyama","raw_affiliation_strings":["Kabushiki Kaisha Hitachi Seisakusho, Chiyoda-ku, Tokyo, JP"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kabushiki Kaisha Hitachi Seisakusho, Chiyoda-ku, Tokyo, JP","institution_ids":["https://openalex.org/I4210137426"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022013316","display_name":"Kosuke Kubota","orcid":null},"institutions":[{"id":"https://openalex.org/I65143321","display_name":"Hitachi (Japan)","ror":"https://ror.org/02exqgm79","country_code":"JP","type":"company","lineage":["https://openalex.org/I65143321"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Kosuke Kubota","raw_affiliation_strings":["Hitachi Advanced Systems Corporation, Kanagawa, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hitachi Advanced Systems Corporation, Kanagawa, Japan","institution_ids":["https://openalex.org/I65143321"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085394649","display_name":"Mamoru Tsuichihara","orcid":null},"institutions":[{"id":"https://openalex.org/I65143321","display_name":"Hitachi (Japan)","ror":"https://ror.org/02exqgm79","country_code":"JP","type":"company","lineage":["https://openalex.org/I65143321"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Mamoru Tsuichihara","raw_affiliation_strings":["Hitachi Advanced Systems Corporation, Kanagawa, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hitachi Advanced Systems Corporation, Kanagawa, Japan","institution_ids":["https://openalex.org/I65143321"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.14268286,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"ll","issue":null,"first_page":"871","last_page":"878"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6699897050857544},{"id":"https://openalex.org/keywords/hash-function","display_name":"Hash function","score":0.6406176090240479},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6335687637329102},{"id":"https://openalex.org/keywords/damages","display_name":"Damages","score":0.6063154339790344},{"id":"https://openalex.org/keywords/train","display_name":"Train","score":0.6025004386901855},{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.442156583070755},{"id":"https://openalex.org/keywords/spike","display_name":"Spike (software development)","score":0.4248954653739929},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.1335049867630005}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6699897050857544},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.6406176090240479},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6335687637329102},{"id":"https://openalex.org/C2777381055","wikidata":"https://www.wikidata.org/wiki/Q308922","display_name":"Damages","level":2,"score":0.6063154339790344},{"id":"https://openalex.org/C190839683","wikidata":"https://www.wikidata.org/wiki/Q2448197","display_name":"Train","level":2,"score":0.6025004386901855},{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.442156583070755},{"id":"https://openalex.org/C2781390188","wikidata":"https://www.wikidata.org/wiki/Q25203449","display_name":"Spike (software development)","level":2,"score":0.4248954653739929},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.1335049867630005},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.0},{"id":"https://openalex.org/C58640448","wikidata":"https://www.wikidata.org/wiki/Q42515","display_name":"Cartography","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iscc.2017.8024636","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iscc.2017.8024636","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE Symposium on Computers and Communications (ISCC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7599999904632568}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W152854583","https://openalex.org/W1512200437","https://openalex.org/W1583098994","https://openalex.org/W1653505105","https://openalex.org/W1985663105","https://openalex.org/W1997222770","https://openalex.org/W2041707350","https://openalex.org/W2073531721","https://openalex.org/W2091641025","https://openalex.org/W2138546208","https://openalex.org/W2480187953","https://openalex.org/W2551222907","https://openalex.org/W2560810941","https://openalex.org/W6606151733","https://openalex.org/W6630693664","https://openalex.org/W6634779276","https://openalex.org/W6668598871","https://openalex.org/W6680772059"],"related_works":["https://openalex.org/W2883256816","https://openalex.org/W2171408034","https://openalex.org/W3003320923","https://openalex.org/W2106140982","https://openalex.org/W2152313554","https://openalex.org/W2064303750","https://openalex.org/W4205240985","https://openalex.org/W4285042611","https://openalex.org/W1509300825","https://openalex.org/W3092582874"],"abstract_inverted_index":{"In":[0,84],"recent":[1],"years,":[2],"many":[3,47,218],"organizations,":[4],"companies":[5],"and":[6,24,114,147,159],"government":[7],"agencies":[8],"have":[9,26,152],"been":[10,27,153],"suffering":[11],"from":[12],"brutality":[13],"of":[14,109,136,150,215,239],"targeted":[15,19,127],"attacks.":[16],"Especially,":[17],"destructive":[18,126],"attacks":[20,43],"such":[21,42,177],"as":[22,178],"Shamoon":[23],"Samas":[25],"causing":[28],"significant":[29],"damages":[30],"on":[31,121],"the":[32,65,71,76,110,115,122,125,162,183,196,205,240],"targets'":[33],"cyber":[34],"assets,":[35],"disputing":[36],"their":[37],"critical":[38],"business":[39],"operations.":[40],"Since":[41],"tend":[44],"to":[45,56,68,132],"access":[46],"hosts":[48,73,131],"simultaneously,":[49],"a":[50,62,81,89,187,208,211],"rapid":[51,63],"incident":[52],"response":[53],"is":[54,119,171,199,227],"essential":[55],"prevent":[57],"serious":[58],"damages.":[59],"To":[60],"realize":[61],"response,":[64],"responders":[66],"need":[67],"locate":[69,203],"all":[70,204],"victim":[72,78,113,198],"immediately":[74,194],"after":[75,195],"first":[77,112,197],"host":[79],"raises":[80],"detection":[82],"alarm.":[83],"this":[85],"paper,":[86],"we":[87,191,224],"propose":[88],"novel":[90],"method,":[91],"called":[92],"Suspicious":[93],"Activity":[94],"Spike":[95],"Train":[96],"(SAST)":[97],"that":[98,124,144,193],"locates":[99],"potential":[100],"attack":[101,128,189],"victims":[102,206],"by":[103],"computing":[104],"similarity":[105,164],"between":[106],"activity":[107],"patterns":[108],"detected":[111],"other":[116],"hosts.":[117],"SAST":[118,140,170,201,226],"based":[120],"observation":[123],"causes":[129],"multiple":[130],"perform":[133],"similar":[134],"types":[135,149],"suspicious":[137],"activities":[138,151],"synchronically.":[139],"employs":[141],"spike":[142],"trains":[143],"records":[145],"when":[146],"which":[148,233],"recently":[154],"observed":[155],"at":[156,165],"each":[157],"host,":[158],"then":[160],"computes":[161],"trains'":[163],"an":[166],"abstract":[167],"level.":[168],"Thus,":[169],"more":[172,228],"robust":[173],"than":[174,230],"traditional":[175],"indicators":[176],"file":[179],"hash":[180],"values.":[181],"Through":[182],"evaluation":[184],"experiments":[185],"with":[186,210],"real-world":[188],"example,":[190],"demonstrate":[192],"detected,":[200],"can":[202],"in":[207],"testbed":[209],"false":[212],"positive":[213],"rate":[214],"0.4%":[216],"before":[217],"victims'":[219],"assets":[220],"are":[221],"tampered.":[222],"Also,":[223],"show":[225],"effective":[229],"na\u00efve":[231],"approaches":[232],"do":[234],"not":[235],"fully":[236],"utilize":[237],"features":[238],"attack.":[241]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}