{"id":"https://openalex.org/W4318604528","doi":"https://doi.org/10.1109/ssci51031.2022.10022249","title":"Detection, Explanation and Filtering of Cyber Attacks Combining Symbolic and Sub-Symbolic Methods","display_name":"Detection, Explanation and Filtering of Cyber Attacks Combining Symbolic and Sub-Symbolic Methods","publication_year":2022,"publication_date":"2022-12-04","ids":{"openalex":"https://openalex.org/W4318604528","doi":"https://doi.org/10.1109/ssci51031.2022.10022249"},"language":"en","primary_location":{"id":"doi:10.1109/ssci51031.2022.10022249","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ssci51031.2022.10022249","pdf_url":null,"source":{"id":"https://openalex.org/S4363605327","display_name":"2022 IEEE Symposium Series on Computational Intelligence (SSCI)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Symposium Series on Computational Intelligence (SSCI)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5017846984","display_name":"Anna Himmelhuber","orcid":null},"institutions":[{"id":"https://openalex.org/I1325886976","display_name":"Siemens (Germany)","ror":"https://ror.org/059mq0909","country_code":"DE","type":"company","lineage":["https://openalex.org/I1325886976"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Anna Himmelhuber","raw_affiliation_strings":["Siemens AG,Munich,Germany","Siemens AG, Munich, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Siemens AG,Munich,Germany","institution_ids":["https://openalex.org/I1325886976"]},{"raw_affiliation_string":"Siemens AG, Munich, Germany","institution_ids":["https://openalex.org/I1325886976"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063752112","display_name":"Dominik Dold","orcid":"https://orcid.org/0000-0001-7626-9960"},"institutions":[{"id":"https://openalex.org/I44377176","display_name":"European Space Research and Technology Centre","ror":"https://ror.org/03h3jqn23","country_code":"NL","type":"government","lineage":["https://openalex.org/I2801994115","https://openalex.org/I44377176"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Dominik Dold","raw_affiliation_strings":["European Space Agency,Noordwijk,Netherlands","European Space Agency, Noordwijk, Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"European Space Agency,Noordwijk,Netherlands","institution_ids":["https://openalex.org/I44377176"]},{"raw_affiliation_string":"European Space Agency, Noordwijk, Netherlands","institution_ids":["https://openalex.org/I44377176"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108827748","display_name":"Stephan Grimm","orcid":null},"institutions":[{"id":"https://openalex.org/I1325886976","display_name":"Siemens (Germany)","ror":"https://ror.org/059mq0909","country_code":"DE","type":"company","lineage":["https://openalex.org/I1325886976"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Stephan Grimm","raw_affiliation_strings":["Siemens AG,Munich,Germany","Siemens AG, Munich, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Siemens AG,Munich,Germany","institution_ids":["https://openalex.org/I1325886976"]},{"raw_affiliation_string":"Siemens AG, Munich, Germany","institution_ids":["https://openalex.org/I1325886976"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044187928","display_name":"Sonia Zillner","orcid":null},"institutions":[{"id":"https://openalex.org/I1325886976","display_name":"Siemens (Germany)","ror":"https://ror.org/059mq0909","country_code":"DE","type":"company","lineage":["https://openalex.org/I1325886976"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Sonia Zillner","raw_affiliation_strings":["Siemens AG,Munich,Germany","Siemens AG, Munich, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Siemens AG,Munich,Germany","institution_ids":["https://openalex.org/I1325886976"]},{"raw_affiliation_string":"Siemens AG, Munich, Germany","institution_ids":["https://openalex.org/I1325886976"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5002518694","display_name":"Thomas A. Runkler","orcid":"https://orcid.org/0000-0002-5465-198X"},"institutions":[{"id":"https://openalex.org/I1325886976","display_name":"Siemens (Germany)","ror":"https://ror.org/059mq0909","country_code":"DE","type":"company","lineage":["https://openalex.org/I1325886976"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Thomas Runkler","raw_affiliation_strings":["Siemens AG,Munich,Germany","Siemens AG, Munich, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Siemens AG,Munich,Germany","institution_ids":["https://openalex.org/I1325886976"]},{"raw_affiliation_string":"Siemens AG, Munich, Germany","institution_ids":["https://openalex.org/I1325886976"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.7267,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.72494037,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"381","last_page":"388"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.9923999905586243,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.9923999905586243,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.9905999898910522,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.984499990940094,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8417750597000122},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5020866394042969},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4702877998352051},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.44953423738479614},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.42348411679267883},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3975062072277069},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3873845338821411},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.32076025009155273}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8417750597000122},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5020866394042969},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4702877998352051},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.44953423738479614},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.42348411679267883},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3975062072277069},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3873845338821411},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32076025009155273},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ssci51031.2022.10022249","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ssci51031.2022.10022249","pdf_url":null,"source":{"id":"https://openalex.org/S4363605327","display_name":"2022 IEEE Symposium Series on Computational Intelligence (SSCI)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Symposium Series on Computational Intelligence (SSCI)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5099999904632568}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":48,"referenced_works":["https://openalex.org/W1487060125","https://openalex.org/W1929674166","https://openalex.org/W2261812172","https://openalex.org/W2780131526","https://openalex.org/W2912083425","https://openalex.org/W2963757395","https://openalex.org/W2972317931","https://openalex.org/W2979481854","https://openalex.org/W2980659949","https://openalex.org/W2981025625","https://openalex.org/W2982534028","https://openalex.org/W2990718118","https://openalex.org/W2997610263","https://openalex.org/W2999525678","https://openalex.org/W3012972431","https://openalex.org/W3017312168","https://openalex.org/W3090540360","https://openalex.org/W3091163785","https://openalex.org/W3094320230","https://openalex.org/W3094828954","https://openalex.org/W3113149630","https://openalex.org/W3139317474","https://openalex.org/W3175836144","https://openalex.org/W3186276894","https://openalex.org/W3192746919","https://openalex.org/W3198760505","https://openalex.org/W3216145890","https://openalex.org/W4200630125","https://openalex.org/W4226295850","https://openalex.org/W4238948521","https://openalex.org/W6629025635","https://openalex.org/W6640312258","https://openalex.org/W6661564250","https://openalex.org/W6683861112","https://openalex.org/W6738964360","https://openalex.org/W6748856961","https://openalex.org/W6753081690","https://openalex.org/W6767288045","https://openalex.org/W6769161880","https://openalex.org/W6770146982","https://openalex.org/W6784720107","https://openalex.org/W6788119346","https://openalex.org/W6792254717","https://openalex.org/W6798084756","https://openalex.org/W6798681010","https://openalex.org/W6800011565","https://openalex.org/W6802311950","https://openalex.org/W6804000992"],"related_works":["https://openalex.org/W2357468538","https://openalex.org/W1577110157","https://openalex.org/W2355007334","https://openalex.org/W2390009783","https://openalex.org/W4254602698","https://openalex.org/W2394461323","https://openalex.org/W2364419519","https://openalex.org/W2017948608","https://openalex.org/W2360767377","https://openalex.org/W2360951146"],"abstract_inverted_index":{"Machine":[0],"learning":[1,51],"(ML)":[2],"on":[3],"graph-structured":[4],"data":[5,27,65],"has":[6],"recently":[7],"received":[8],"deepened":[9],"interest":[10],"in":[11,17,75,89,109,149,166],"the":[12,18,23,76,110,150,191,197,217],"context":[13],"of":[14,26,105,126,152,186,206],"intrusion":[15],"detection":[16],"cybersecurity":[19,77,111,153],"domain.":[20,78],"Due":[21],"to":[22,62,81,100,117,138,176,203],"increasing":[24],"amounts":[25],"generated":[28],"by":[29,120,142,163,210,213],"monitoring":[30],"tools":[31],"as":[32,34,54,97],"well":[33],"more":[35,37],"and":[36,48,146,212],"sophisticated":[38],"attacks,":[39],"these":[40],"ML":[41],"methods":[42,148],"are":[43,72,86,131],"gaining":[44],"traction.":[45],"Knowledge":[46],"graphs":[47],"their":[49,60,90],"corresponding":[50],"techniques":[52],"such":[53,113],"Graph":[55],"Neural":[56],"Networks":[57],"(GNNs)":[58],"with":[59,160],"ability":[61],"seamlessly":[63],"integrate":[64],"from":[66],"multiple":[67],"domains":[68],"using":[69],"human-understandable":[70],"vocabularies,":[71],"finding":[73],"application":[74],"However,":[79],"similar":[80],"other":[82],"connectionist":[83],"models,":[84],"GNNs":[85,137],"lacking":[87],"transparency":[88],"decision":[91],"making.":[92],"This":[93],"is":[94,174],"especially":[95],"important":[96],"there":[98],"tend":[99],"be":[101,118],"a":[102,124,183,204],"high":[103],"number":[104],"false":[106,207],"positive":[107,208],"alerts":[108,181,209],"domain,":[112],"that":[114,154],"triage":[115],"needs":[116],"done":[119],"domain":[121,156],"experts,":[122],"requiring":[123],"lot":[125],"man":[127],"power.":[128],"Therefore,":[129],"we":[130],"addressing":[132],"Explainable":[133],"AI":[134],"(XAI)":[135],"for":[136,180,182],"enhance":[139],"trust":[140],"management":[141],"exploring":[143],"combining":[144],"symbolic":[145],"sub-symbolic":[147],"area":[151],"incorporate":[155],"knowledge.":[157],"We":[158],"experimented":[159],"this":[161],"approach":[162],"generating":[164],"explanations":[165,179,192],"an":[167],"industrial":[168],"demonstrator":[169],"system.":[170],"The":[171],"proposed":[172],"method":[173],"shown":[175],"produce":[177],"intuitive":[178],"diverse":[184],"range":[185],"scenarios.":[187],"Not":[188],"only":[189],"do":[190],"provide":[193],"deeper":[194],"insights":[195],"into":[196],"alerts,":[198],"but":[199],"they":[200],"also":[201],"lead":[202],"reduction":[205],"66%":[211],"93%":[214],"when":[215],"including":[216],"fidelity":[218],"metric.":[219]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":2}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}