{"id":"https://openalex.org/W4400234090","doi":"https://doi.org/10.1109/noms59830.2024.10575161","title":"One-Class Learning on Temporal Graphs for Attack Detection in Cyber-Physical Systems","display_name":"One-Class Learning on Temporal Graphs for Attack Detection in Cyber-Physical Systems","publication_year":2024,"publication_date":"2024-05-06","ids":{"openalex":"https://openalex.org/W4400234090","doi":"https://doi.org/10.1109/noms59830.2024.10575161"},"language":"en","primary_location":{"id":"doi:10.1109/noms59830.2024.10575161","is_oa":false,"landing_page_url":"https://doi.org/10.1109/noms59830.2024.10575161","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"NOMS 2024-2024 IEEE Network Operations and Management Symposium","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5018594386","display_name":"Robin Buchta","orcid":"https://orcid.org/0000-0001-5335-5735"},"institutions":[{"id":"https://openalex.org/I140025399","display_name":"Hochschule Hannover","ror":"https://ror.org/03m2kj587","country_code":"DE","type":"education","lineage":["https://openalex.org/I140025399"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Robin Buchta","raw_affiliation_strings":["Hochschule Hannover - University of Applied Sciences and Arts,Institute for Applied Data Science Hannover (Data|H),Hanover,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hochschule Hannover - University of Applied Sciences and Arts,Institute for Applied Data Science Hannover (Data|H),Hanover,Germany","institution_ids":["https://openalex.org/I140025399"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017876886","display_name":"T. A. Fritz","orcid":"https://orcid.org/0000-0001-7081-2635"},"institutions":[{"id":"https://openalex.org/I40527276","display_name":"Universit\u00e4t der Bundeswehr M\u00fcnchen","ror":"https://ror.org/05kkv3f82","country_code":"DE","type":"education","lineage":["https://openalex.org/I1315109972","https://openalex.org/I40527276","https://openalex.org/I4387152969"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Tobias Fritz","raw_affiliation_strings":["Universität der Bundeswehr München,Research Institute CODE,Munich,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universität der Bundeswehr München,Research Institute CODE,Munich,Germany","institution_ids":["https://openalex.org/I40527276"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082591165","display_name":"Carsten Kleiner","orcid":"https://orcid.org/0000-0001-9497-0312"},"institutions":[{"id":"https://openalex.org/I140025399","display_name":"Hochschule Hannover","ror":"https://ror.org/03m2kj587","country_code":"DE","type":"education","lineage":["https://openalex.org/I140025399"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Carsten Kleiner","raw_affiliation_strings":["Hochschule Hannover - University of Applied Sciences and Arts,Institute for Applied Data Science Hannover (Data|H),Hanover,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hochschule Hannover - University of Applied Sciences and Arts,Institute for Applied Data Science Hannover (Data|H),Hanover,Germany","institution_ids":["https://openalex.org/I140025399"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074463410","display_name":"Felix Heine","orcid":"https://orcid.org/0000-0001-7290-6037"},"institutions":[{"id":"https://openalex.org/I140025399","display_name":"Hochschule Hannover","ror":"https://ror.org/03m2kj587","country_code":"DE","type":"education","lineage":["https://openalex.org/I140025399"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Felix Heine","raw_affiliation_strings":["Hochschule Hannover - University of Applied Sciences and Arts,Institute for Applied Data Science Hannover (Data|H),Hanover,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hochschule Hannover - University of Applied Sciences and Arts,Institute for Applied Data Science Hannover (Data|H),Hanover,Germany","institution_ids":["https://openalex.org/I140025399"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078551681","display_name":"Gabi Dreo Rodosek","orcid":"https://orcid.org/0000-0002-8702-8553"},"institutions":[{"id":"https://openalex.org/I40527276","display_name":"Universit\u00e4t der Bundeswehr M\u00fcnchen","ror":"https://ror.org/05kkv3f82","country_code":"DE","type":"education","lineage":["https://openalex.org/I1315109972","https://openalex.org/I40527276","https://openalex.org/I4387152969"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Gabi Dreo Rodosek","raw_affiliation_strings":["Universität der Bundeswehr München,Research Institute CODE,Munich,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universität der Bundeswehr München,Research Institute CODE,Munich,Germany","institution_ids":["https://openalex.org/I40527276"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.5585,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.53950375,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9682999849319458,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.963100016117096,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cyber-physical-system","display_name":"Cyber-physical system","score":0.7920790910720825},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7362804412841797},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.642676055431366},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.39321550726890564},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3782973885536194},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.33928075432777405},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.09416863322257996}],"concepts":[{"id":"https://openalex.org/C179768478","wikidata":"https://www.wikidata.org/wiki/Q1120057","display_name":"Cyber-physical system","level":2,"score":0.7920790910720825},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7362804412841797},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.642676055431366},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.39321550726890564},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3782973885536194},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.33928075432777405},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09416863322257996}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/noms59830.2024.10575161","is_oa":false,"landing_page_url":"https://doi.org/10.1109/noms59830.2024.10575161","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"NOMS 2024-2024 IEEE Network Operations and Management Symposium","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W1583837637","https://openalex.org/W2064675550","https://openalex.org/W2785394676","https://openalex.org/W2789828921","https://openalex.org/W2932812535","https://openalex.org/W2963608065","https://openalex.org/W2999905431","https://openalex.org/W3026076535","https://openalex.org/W3085955590","https://openalex.org/W3110852602","https://openalex.org/W3129369183","https://openalex.org/W3133060356","https://openalex.org/W3162956350","https://openalex.org/W3164796711","https://openalex.org/W3164964481","https://openalex.org/W3177468214","https://openalex.org/W3208773001","https://openalex.org/W4226319939","https://openalex.org/W4287755062","https://openalex.org/W4288057803","https://openalex.org/W4307042912","https://openalex.org/W4309677297","https://openalex.org/W4383180432","https://openalex.org/W4386932075","https://openalex.org/W6751494907","https://openalex.org/W6755573351","https://openalex.org/W6776137863","https://openalex.org/W6779860234","https://openalex.org/W6786860526","https://openalex.org/W6840581513","https://openalex.org/W6854367449"],"related_works":["https://openalex.org/W3004173571","https://openalex.org/W2546638913","https://openalex.org/W2209816623","https://openalex.org/W2968885840","https://openalex.org/W3017360834","https://openalex.org/W2008822734","https://openalex.org/W3135700974","https://openalex.org/W4313307484","https://openalex.org/W2086962923","https://openalex.org/W2963445270"],"abstract_inverted_index":{"Various":[0],"domains,":[1],"including":[2],"critical":[3],"infrastructures,":[4],"industry,":[5],"and":[6,18,21,26,59,131],"the":[7,24,48,66,158],"private":[8],"sector,":[9],"deploy":[10],"cyber-physical":[11],"systems":[12,15],"(CPS).":[13],"These":[14],"integrate":[16],"IT":[17,32],"OT":[19],"components":[20],"interact":[22],"with":[23,123],"environment":[25],"therefore":[27],"differ":[28],"significantly":[29],"from":[30],"pure":[31],"setups.":[33],"However,":[34],"CPS":[35,54],"often":[36],"operate":[37],"as":[38],"black":[39],"boxes,":[40],"hindering":[41],"effective":[42],"attack":[43,74,77,136],"detection.":[44,137],"Our":[45,113],"research":[46],"addresses":[47],"challenge":[49],"of":[50,68],"detecting":[51,144],"attacks":[52],"in":[53,71,89],"relying":[55],"on":[56,61],"network":[57,120],"data":[58],"learning":[60,130],"normal":[62],"behavior.":[63,105],"We":[64,79],"show":[65,115],"performance":[67],"two":[69],"methods":[70],"use":[72,110],"for":[73,94,128,135,143,160],"detection":[75],"without":[76],"knowledge.":[78],"propose":[80],"new":[81],"memory":[82],"update":[83],"strategies":[84],"that":[85,116],"can":[86,132],"be":[87,133],"used":[88,134],"practice.":[90],"Specifically,":[91],"we":[92],"optimize":[93],"temporal":[95,118],"graphs":[96],"using":[97],"graph":[98,119],"neural":[99],"networks":[100],"(GNN)":[101],"to":[102,109],"capture":[103],"system":[104],"Negative":[106],"sampling":[107],"helps":[108],"one-class":[111,129,155],"learning.":[112],"results":[114],"a":[117,139],"(TGN),":[121],"combined":[122],"negative":[124],"sampling,":[125],"is":[126],"suitable":[127],"Additionally,":[138],"simple":[140],"heuristic":[141],"suffices":[142],"basic":[145],"attacks.":[146],"Notably,":[147],"existing":[148],"benchmark":[149],"datasets":[150],"do":[151],"not":[152],"adequately":[153],"support":[154],"learning,":[156],"highlighting":[157],"need":[159],"tailored":[161],"evaluation.":[162]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}