{"id":"https://openalex.org/W4414170752","doi":"https://doi.org/10.1109/iwqos65803.2025.11143256","title":"Embedding More Knowledge: Strategic Graph Masking Based Advanced Persistent Threats Detection","display_name":"Embedding More Knowledge: Strategic Graph Masking Based Advanced Persistent Threats Detection","publication_year":2025,"publication_date":"2025-07-02","ids":{"openalex":"https://openalex.org/W4414170752","doi":"https://doi.org/10.1109/iwqos65803.2025.11143256"},"language":"en","primary_location":{"id":"doi:10.1109/iwqos65803.2025.11143256","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iwqos65803.2025.11143256","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/ACM 33rd International Symposium on Quality of Service (IWQoS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100532638","display_name":"Junbo Jia","orcid":"https://orcid.org/0009-0009-4286-4003"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Junbo Jia","raw_affiliation_strings":["Xidian University,Xi'an,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Xidian University,Xi'an,China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008822438","display_name":"Li Yang","orcid":"https://orcid.org/0000-0001-9383-1097"},"institutions":[{"id":"https://openalex.org/I4210141776","display_name":"China XD Group (China)","ror":"https://ror.org/04ceqst84","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210141776"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Li Yang","raw_affiliation_strings":["Shaanxi Key Laboratory of Network and System Security,Xi'an,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shaanxi Key Laboratory of Network and System Security,Xi'an,China","institution_ids":["https://openalex.org/I4210141776"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101883746","display_name":"Lu Zhou","orcid":"https://orcid.org/0000-0002-5201-5074"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lu Zhou","raw_affiliation_strings":["Xidian University,Xi'an,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Xidian University,Xi'an,China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5107589511","display_name":"Anyuan Sang","orcid":"https://orcid.org/0009-0006-3265-4078"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Anyuan Sang","raw_affiliation_strings":["Xidian University,Xi'an,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Xidian University,Xi'an,China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Huipeng Yang","orcid":null},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Huipeng Yang","raw_affiliation_strings":["Xidian University,Xi'an,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Xidian University,Xi'an,China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5035264598","display_name":"A. F. Wang","orcid":"https://orcid.org/0009-0009-9284-0421"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ao Wang","raw_affiliation_strings":["Xidian University,Xi'an,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Xidian University,Xi'an,China","institution_ids":["https://openalex.org/I149594827"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9930999875068665,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/masking","display_name":"Masking (illustration)","score":0.7217000126838684},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.595300018787384},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5855000019073486},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5465999841690063},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.47110000252723694}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.79830002784729},{"id":"https://openalex.org/C2777402240","wikidata":"https://www.wikidata.org/wiki/Q6783436","display_name":"Masking (illustration)","level":2,"score":0.7217000126838684},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.595300018787384},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5855000019073486},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5465999841690063},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.47110000252723694},{"id":"https://openalex.org/C75564084","wikidata":"https://www.wikidata.org/wiki/Q5597085","display_name":"Graph embedding","level":3,"score":0.46619999408721924},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.446399986743927},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.40610000491142273},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3953000009059906},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3828999996185303},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.3635999858379364}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iwqos65803.2025.11143256","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iwqos65803.2025.11143256","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/ACM 33rd International Symposium on Quality of Service (IWQoS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3053902597","display_name":null,"funder_award_id":"YJSJ25012","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G5455559681","display_name":null,"funder_award_id":"2023YFB3106900","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G6642649587","display_name":null,"funder_award_id":"62302362,62472337","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W2133296809","https://openalex.org/W2165299997","https://openalex.org/W2284900416","https://openalex.org/W2393319904","https://openalex.org/W2532844970","https://openalex.org/W2767094836","https://openalex.org/W2947745012","https://openalex.org/W2962703433","https://openalex.org/W2962756421","https://openalex.org/W2978956219","https://openalex.org/W2981450816","https://openalex.org/W2986944522","https://openalex.org/W2998038410","https://openalex.org/W3006711782","https://openalex.org/W3015650867","https://openalex.org/W3099203541","https://openalex.org/W3172710079","https://openalex.org/W3193389962","https://openalex.org/W3212868562","https://openalex.org/W4288057803","https://openalex.org/W4290876361","https://openalex.org/W4294558607","https://openalex.org/W4297733535","https://openalex.org/W4319663646","https://openalex.org/W4321479940","https://openalex.org/W4372342980","https://openalex.org/W4383550974","https://openalex.org/W4385567478","https://openalex.org/W4386215080","https://openalex.org/W4393160557","https://openalex.org/W4396757496","https://openalex.org/W4401024487","https://openalex.org/W4402265033","https://openalex.org/W4402955702"],"related_works":[],"abstract_inverted_index":{"Advanced":[0],"Persistent":[1],"Threats":[2],"(APTs)":[3],"have":[4],"become":[5,24],"increasingly":[6],"frequent,":[7],"presenting":[8],"substantial":[9],"challenges":[10],"to":[11,48,51,117,127,141,188],"the":[12,81,94,101,106,109,115,125,161,183],"management":[13],"of":[14,83,96,108,145,185],"network":[15],"services.":[16],"Using":[17],"provenance":[18,97],"graphs":[19],"for":[20],"log":[21],"analysis":[22],"has":[23,34],"a":[25,69,74,87],"common":[26],"approach":[27],"in":[28],"APT":[29,62],"detection.":[30],"However,":[31],"existing":[32,174],"research":[33],"two":[35],"shortcomings:":[36],"it":[37],"does":[38],"not":[39],"fully":[40],"utilize":[41],"richer":[42],"contextual":[43,130],"semantic":[44,131],"information":[45,111],"and":[46,60,86,160],"fails":[47],"effectively":[49],"respond":[50],"unknown":[52,146],"attacks.":[53],"This":[54,123],"paper":[55],"presents":[56],"SGAM,":[57],"an":[58,138],"accurate":[59],"fast":[61],"detection":[63,144,150,168],"framework.":[64],"SGAM":[65,92,136,154,165,180],"enhances":[66],"accuracy":[67],"through":[68],"training":[70,90],"process":[71],"driven":[72],"by":[73],"masking":[75,78,102],"strategy.":[76],"The":[77],"strategy":[79],"includes":[80],"selection":[82],"masked":[84,110],"nodes":[85,99],"more":[88,119],"robust":[89],"approach.":[91],"incorporates":[93],"importance":[95],"graph":[98],"into":[100],"strategy,":[103],"gradually":[104],"increasing":[105],"significance":[107],"during":[112],"training,":[113],"allowing":[114],"model":[116,126],"learn":[118],"critical":[120],"node":[121],"features.":[122],"enables":[124],"extract":[128],"deeper":[129],"information.":[132],"In":[133],"anomaly":[134],"detection,":[135],"employs":[137],"unsupervised":[139],"method":[140],"ensure":[142],"effective":[143],"attacks":[147],"while":[148],"improving":[149],"efficiency.":[151],"We":[152],"evaluated":[153],"on":[155],"three":[156],"widely":[157],"used":[158],"datasets,":[159],"results":[162],"indicate":[163],"that":[164,179],"demonstrates":[166],"outstanding":[167],"performance":[169],"across":[170],"all":[171],"scenarios,":[172],"outperforming":[173],"methods.":[175],"Additionally,":[176],"experiments":[177],"show":[178],"can":[181],"mitigate":[182],"impact":[184],"concept":[186],"drift":[187],"some":[189],"extent.":[190]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}