{"id":"https://openalex.org/W3116863033","doi":"https://doi.org/10.1109/isncc49221.2020.9297233","title":"An Optimization Approach to Graph Partitioning for Detecting Persistent Attacks in Enterprise Networks","display_name":"An Optimization Approach to Graph Partitioning for Detecting Persistent Attacks in Enterprise Networks","publication_year":2020,"publication_date":"2020-10-20","ids":{"openalex":"https://openalex.org/W3116863033","doi":"https://doi.org/10.1109/isncc49221.2020.9297233","mag":"3116863033"},"language":"en","primary_location":{"id":"doi:10.1109/isncc49221.2020.9297233","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isncc49221.2020.9297233","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 International Symposium on Networks, Computers and Communications (ISNCC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5061675896","display_name":"Hazem M. Soliman","orcid":"https://orcid.org/0000-0001-9377-3528"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Hazem M. Soliman","raw_affiliation_strings":["RANK Software Inc., Toronto, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"RANK Software Inc., Toronto, Canada","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5061675896"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.4684,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.56754788,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9933000206947327,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9909999966621399,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8214189410209656},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.5751718878746033},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5135164856910706},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.42961445450782776},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.42720723152160645},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.42118513584136963},{"id":"https://openalex.org/keywords/network-topology","display_name":"Network topology","score":0.4174593389034271},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.1531367301940918},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.14943280816078186}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8214189410209656},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.5751718878746033},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5135164856910706},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.42961445450782776},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.42720723152160645},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.42118513584136963},{"id":"https://openalex.org/C199845137","wikidata":"https://www.wikidata.org/wiki/Q145490","display_name":"Network topology","level":2,"score":0.4174593389034271},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.1531367301940918},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.14943280816078186},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/isncc49221.2020.9297233","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isncc49221.2020.9297233","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 International Symposium on Networks, Computers and Communications (ISNCC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6399999856948853,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W1985987493","https://openalex.org/W2072884723","https://openalex.org/W2074522670","https://openalex.org/W2090934172","https://openalex.org/W2099940443","https://openalex.org/W2104266187","https://openalex.org/W2137928260","https://openalex.org/W2141200504","https://openalex.org/W2143117649","https://openalex.org/W2182819203","https://openalex.org/W2541153825","https://openalex.org/W2737388338","https://openalex.org/W2771902086","https://openalex.org/W2923216703","https://openalex.org/W2938891776","https://openalex.org/W2963966702","https://openalex.org/W4210947630","https://openalex.org/W4220677655","https://openalex.org/W4231518042","https://openalex.org/W4250589301","https://openalex.org/W4288411092","https://openalex.org/W6680369147","https://openalex.org/W6686096946","https://openalex.org/W6729308877","https://openalex.org/W6760626135"],"related_works":["https://openalex.org/W1557094818","https://openalex.org/W2183246718","https://openalex.org/W2099261052","https://openalex.org/W3209204065","https://openalex.org/W1755711892","https://openalex.org/W2160907113","https://openalex.org/W2164205946","https://openalex.org/W2086397253","https://openalex.org/W2070813941","https://openalex.org/W2105707930"],"abstract_inverted_index":{"Advanced":[0],"Persistent":[1],"Threats":[2],"(APTs)":[3],"refer":[4],"to":[5,28,40,56,61,70,82,95,127,171,180],"sophisticated,":[6],"prolonged":[7],"and":[8,12,19,31,51,84,103,174],"multi-step":[9],"attacks,":[10],"planned":[11],"executed":[13],"by":[14],"skilled":[15],"adversaries":[16],"targeting":[17],"government":[18],"enterprise":[20],"networks.":[21],"Attack":[22],"graphs'":[23],"topologies":[24],"can":[25],"be":[26],"leveraged":[27],"detect,":[29],"explain":[30],"visualize":[32],"the":[33,41,62,66,87,96,99,135,146,149,154,167,178],"progress":[34],"of":[35,43,64,68,73,98,140,148],"such":[36,45,133],"attacks.":[37],"However,":[38],"due":[39],"abundance":[42],"false-positives,":[44],"graphs":[46,106,161],"are":[47,77,93,163,175],"usually":[48],"overwhelmingly":[49],"large":[50],"difficult":[52],"for":[53,79,177],"an":[54,80,122],"analyst":[55,81,179],"understand.":[57,181],"Graph":[58],"partitioning":[59],"refers":[60],"problem":[63,100],"reducing":[65],"graph":[67],"alerts":[69],"a":[71,114],"set":[72],"smaller":[74],"incidents":[75],"that":[76,157,162],"easier":[78,176],"process":[83],"better":[85,164],"represent":[86],"actual":[88],"attack":[89,169],"plan.":[90],"Existing":[91],"approaches":[92,173],"oblivious":[94],"security-context":[97],"at":[101,165],"hand":[102],"result":[104],"in":[105],"which,":[107],"while":[108],"smaller,":[109],"make":[110],"little":[111],"sense":[112],"from":[113],"security":[115],"perspective.":[116],"In":[117],"this":[118],"paper,":[119],"we":[120],"propose":[121],"optimization":[123],"approach":[124,159],"allowing":[125],"us":[126],"generate":[128],"security-aware":[129],"partitions,":[130],"utilizing":[131],"aspects":[132],"as":[134,143,145],"kill":[136],"chain":[137],"progression,":[138],"number":[139],"assets":[141],"involved,":[142],"well":[144],"size":[147],"graph.":[150],"Using":[151],"real-world":[152],"datasets,":[153],"results":[155],"show":[156],"our":[158],"produces":[160],"capturing":[166],"underlying":[168],"compared":[170],"state-of-the-art":[172]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}