{"id":"https://openalex.org/W2888349659","doi":"https://doi.org/10.1109/mnet.2018.1700469","title":"Attack Provenance Tracing in Cyberspace: Solutions, Challenges and Future Directions","display_name":"Attack Provenance Tracing in Cyberspace: Solutions, Challenges and Future Directions","publication_year":2018,"publication_date":"2018-08-22","ids":{"openalex":"https://openalex.org/W2888349659","doi":"https://doi.org/10.1109/mnet.2018.1700469","mag":"2888349659"},"language":"en","primary_location":{"id":"doi:10.1109/mnet.2018.1700469","is_oa":false,"landing_page_url":"https://doi.org/10.1109/mnet.2018.1700469","pdf_url":null,"source":{"id":"https://openalex.org/S186584794","display_name":"IEEE Network","issn_l":"0890-8044","issn":["0890-8044","1558-156X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Network","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078133270","display_name":"Cheng Tan","orcid":null},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Cheng Tan","raw_affiliation_strings":["Wuhan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100391116","display_name":"Qian Wang","orcid":"https://orcid.org/0000-0002-8967-8525"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qian Wang","raw_affiliation_strings":["Wuhan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056155495","display_name":"Lina Wang","orcid":"https://orcid.org/0000-0001-8085-1312"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lina Wang","raw_affiliation_strings":["Wuhan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100671319","display_name":"Lei Zhao","orcid":"https://orcid.org/0000-0003-2412-7279"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lei Zhao","raw_affiliation_strings":["Wuhan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University","institution_ids":["https://openalex.org/I37461747"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I37461747"],"apc_list":null,"apc_paid":null,"fwci":1.0581,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.87497368,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"33","issue":"2","first_page":"174","last_page":"180"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.9912999868392944,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9887999892234802,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8070347309112549},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7820216417312622},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7116286158561707},{"id":"https://openalex.org/keywords/hacker","display_name":"Hacker","score":0.6941426992416382},{"id":"https://openalex.org/keywords/tracing","display_name":"Tracing","score":0.6268112659454346},{"id":"https://openalex.org/keywords/cyberspace","display_name":"Cyberspace","score":0.5461106300354004},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4680566191673279},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.4417917728424072},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.34780338406562805},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.24123743176460266}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8070347309112549},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7820216417312622},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7116286158561707},{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.6941426992416382},{"id":"https://openalex.org/C138673069","wikidata":"https://www.wikidata.org/wiki/Q322229","display_name":"Tracing","level":2,"score":0.6268112659454346},{"id":"https://openalex.org/C2781241145","wikidata":"https://www.wikidata.org/wiki/Q204606","display_name":"Cyberspace","level":3,"score":0.5461106300354004},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4680566191673279},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.4417917728424072},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.34780338406562805},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.24123743176460266},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/mnet.2018.1700469","is_oa":false,"landing_page_url":"https://doi.org/10.1109/mnet.2018.1700469","pdf_url":null,"source":{"id":"https://openalex.org/S186584794","display_name":"IEEE Network","issn_l":"0890-8044","issn":["0890-8044","1558-156X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Network","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.6600000262260437,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W1444906800","https://openalex.org/W1504669610","https://openalex.org/W1975197166","https://openalex.org/W2009232481","https://openalex.org/W2096347345","https://openalex.org/W2213728018","https://openalex.org/W2397699236","https://openalex.org/W2510661956","https://openalex.org/W2532844970","https://openalex.org/W2560810941","https://openalex.org/W2579106964","https://openalex.org/W2751844787","https://openalex.org/W6629953387","https://openalex.org/W6712595259","https://openalex.org/W6732120385"],"related_works":["https://openalex.org/W2368745349","https://openalex.org/W3167675181","https://openalex.org/W3161898103","https://openalex.org/W3155944704","https://openalex.org/W3115072666","https://openalex.org/W3113358185","https://openalex.org/W2808249021","https://openalex.org/W2093290584","https://openalex.org/W3040987670","https://openalex.org/W3006507989"],"abstract_inverted_index":{"With":[0],"the":[1,7,84,87,90,95,101,107,137,142,149,158],"increasing":[2],"damage":[3],"of":[4,65,92,103,132,144,153,163],"APT":[5,26,60],"attacks,":[6],"modern":[8],"world":[9],"has":[10],"moved":[11],"from":[12,100],"individual":[13],"hackers":[14],"for":[15,20,78],"fun":[16],"to":[17,43,56],"nation-wide":[18],"cybercriminals":[19],"strategic":[21],"advantage":[22],"or":[23,40,110],"profit.":[24],"These":[25],"attacks":[27],"are":[28],"often":[29],"prolonged":[30],"and":[31,35,46,58,75,89,114,155,166,171],"have":[32,111],"multiple":[33],"stages,":[34],"they":[36],"usually":[37],"utilize":[38],"zero-day":[39],"one-day":[41],"exploits":[42],"be":[44],"penetrating":[45],"stealthy.":[47],"As":[48],"a":[49,73,129],"result,":[50],"there":[51],"is":[52,70],"an":[53],"urgent":[54],"need":[55],"detect":[57],"investigate":[59],"attacks.":[61,93],"Among":[62],"all":[63],"kinds":[64],"security":[66,165],"techniques,":[67],"provenance":[68,133],"tracing":[69,134],"regarded":[71],"as":[72,81],"promising":[74],"important":[76],"approach":[77],"attack":[79],"investigation,":[80],"it":[82],"discloses":[83],"root":[85],"cause,":[86],"path,":[88],"results":[91],"However,":[94],"existing":[96],"techniques":[97],"either":[98],"suffer":[99],"limitation":[102],"only":[104],"focusing":[105],"on":[106],"log":[108],"type,":[109],"non-trivial":[112],"space":[113],"runtime":[115],"overhead,":[116],"which":[117],"hinder":[118],"their":[119],"wide":[120],"applications":[121],"in":[122,136,161],"practice.":[123],"In":[124],"this":[125],"article,":[126],"we":[127,147,169],"provide":[128],"comprehensive":[130],"survey":[131],"technologies":[135],"most":[138],"recent":[139],"literature.":[140],"Following":[141],"overview":[143],"each":[145],"scheme,":[146],"present":[148],"key":[150],"technical":[151],"features":[152],"them":[154],"then":[156],"compare":[157],"state-of-the-art":[159],"solutions":[160],"terms":[162],"both":[164],"performance.":[167],"Finally,":[168],"propose":[170],"discuss":[172],"several":[173],"potential":[174],"future":[175],"research":[176],"directions.":[177]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}