{"id":"https://openalex.org/W4415368539","doi":"https://doi.org/10.1109/tbdata.2025.3621145","title":"CAPTOR: Cyber Attack Protection via Temporal Online Graph Representation Learning","display_name":"CAPTOR: Cyber Attack Protection via Temporal Online Graph Representation Learning","publication_year":2025,"publication_date":"2025-10-20","ids":{"openalex":"https://openalex.org/W4415368539","doi":"https://doi.org/10.1109/tbdata.2025.3621145"},"language":null,"primary_location":{"id":"doi:10.1109/tbdata.2025.3621145","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tbdata.2025.3621145","pdf_url":null,"source":{"id":"https://openalex.org/S2491400915","display_name":"IEEE Transactions on Big Data","issn_l":"2332-7790","issn":["2332-7790","2372-2096"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Big Data","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5056949073","display_name":"Bishal Lakha","orcid":null},"institutions":[{"id":"https://openalex.org/I120156002","display_name":"Boise State University","ror":"https://ror.org/02e3zdp86","country_code":"US","type":"education","lineage":["https://openalex.org/I120156002"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Bishal Lakha","raw_affiliation_strings":["Boise State University, Boise, ID, USA"],"raw_orcid":"https://orcid.org/0009-0001-8234-4389","affiliations":[{"raw_affiliation_string":"Boise State University, Boise, ID, USA","institution_ids":["https://openalex.org/I120156002"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046439802","display_name":"Janet Layne","orcid":"https://orcid.org/0000-0001-9533-5599"},"institutions":[{"id":"https://openalex.org/I120156002","display_name":"Boise State University","ror":"https://ror.org/02e3zdp86","country_code":"US","type":"education","lineage":["https://openalex.org/I120156002"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Janet Layne","raw_affiliation_strings":["Boise State University, Boise, ID, USA"],"raw_orcid":"https://orcid.org/0000-0001-9533-5599","affiliations":[{"raw_affiliation_string":"Boise State University, Boise, ID, USA","institution_ids":["https://openalex.org/I120156002"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009094578","display_name":"Edoardo Serra","orcid":"https://orcid.org/0000-0003-0689-5063"},"institutions":[{"id":"https://openalex.org/I120156002","display_name":"Boise State University","ror":"https://ror.org/02e3zdp86","country_code":"US","type":"education","lineage":["https://openalex.org/I120156002"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Edoardo Serra","raw_affiliation_strings":["Boise State University, Boise, ID, USA"],"raw_orcid":"https://orcid.org/0000-0003-0689-5063","affiliations":[{"raw_affiliation_string":"Boise State University, Boise, ID, USA","institution_ids":["https://openalex.org/I120156002"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026420819","display_name":"Francesco Gullo","orcid":"https://orcid.org/0000-0002-7052-1114"},"institutions":[{"id":"https://openalex.org/I26415053","display_name":"University of L'Aquila","ror":"https://ror.org/01j9p1r26","country_code":"IT","type":"education","lineage":["https://openalex.org/I26415053"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Francesco Gullo","raw_affiliation_strings":["University of L’Aquila, L’Aquila, Italy","University of L'Aquila, L'Aquila, Italy"],"raw_orcid":"https://orcid.org/0000-0002-7052-1114","affiliations":[{"raw_affiliation_string":"University of L’Aquila, L’Aquila, Italy","institution_ids":["https://openalex.org/I26415053"]},{"raw_affiliation_string":"University of L'Aquila, L'Aquila, Italy","institution_ids":["https://openalex.org/I26415053"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5010727123","display_name":"Sushil Jajodia","orcid":"https://orcid.org/0000-0003-3210-558X"},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sushil Jajodia","raw_affiliation_strings":["George Mason University, Fairfax, VA, USA"],"raw_orcid":"https://orcid.org/0000-0003-3210-558X","affiliations":[{"raw_affiliation_string":"George Mason University, Fairfax, VA, USA","institution_ids":["https://openalex.org/I162714631"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.36913482,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"12","issue":"2","first_page":"376","last_page":"388"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10994","display_name":"Terrorism, Counterterrorism, and Political Violence","score":0.980400025844574,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10994","display_name":"Terrorism, Counterterrorism, and Political Violence","score":0.980400025844574,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9782999753952026,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9682999849319458,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6248000264167786},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.586899995803833},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5562000274658203},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5536999702453613},{"id":"https://openalex.org/keywords/generality","display_name":"Generality","score":0.5512999892234802},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.41359999775886536},{"id":"https://openalex.org/keywords/rendering","display_name":"Rendering (computer graphics)","score":0.3538999855518341}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8597999811172485},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6248000264167786},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.586899995803833},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5562000274658203},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5536999702453613},{"id":"https://openalex.org/C2780767217","wikidata":"https://www.wikidata.org/wiki/Q5532421","display_name":"Generality","level":2,"score":0.5512999892234802},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.41359999775886536},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.41110000014305115},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38370001316070557},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3621000051498413},{"id":"https://openalex.org/C205711294","wikidata":"https://www.wikidata.org/wiki/Q176953","display_name":"Rendering (computer graphics)","level":2,"score":0.3538999855518341},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.32030001282691956},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.3140000104904175},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.3109999895095825},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.30820000171661377},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.3057999908924103},{"id":"https://openalex.org/C116409475","wikidata":"https://www.wikidata.org/wiki/Q1385056","display_name":"External Data Representation","level":2,"score":0.2919999957084656},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.2759999930858612},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.26919999718666077},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.26030001044273376},{"id":"https://openalex.org/C3017597292","wikidata":"https://www.wikidata.org/wiki/Q25052250","display_name":"Privacy protection","level":2,"score":0.25679999589920044},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.25429999828338623}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tbdata.2025.3621145","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tbdata.2025.3621145","pdf_url":null,"source":{"id":"https://openalex.org/S2491400915","display_name":"IEEE Transactions on Big Data","issn_l":"2332-7790","issn":["2332-7790","2372-2096"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Big Data","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":57,"referenced_works":["https://openalex.org/W433644524","https://openalex.org/W2004295714","https://openalex.org/W2122217421","https://openalex.org/W2678934292","https://openalex.org/W2789828921","https://openalex.org/W2799941355","https://openalex.org/W2803090662","https://openalex.org/W2889379876","https://openalex.org/W2945827377","https://openalex.org/W2971114155","https://openalex.org/W2980576170","https://openalex.org/W2981025625","https://openalex.org/W2989622320","https://openalex.org/W2996900869","https://openalex.org/W3000367805","https://openalex.org/W3008202598","https://openalex.org/W3017908321","https://openalex.org/W3028784002","https://openalex.org/W3127712067","https://openalex.org/W3135578542","https://openalex.org/W3160144061","https://openalex.org/W3162323195","https://openalex.org/W3166888304","https://openalex.org/W3171364527","https://openalex.org/W3171557651","https://openalex.org/W3173648532","https://openalex.org/W3175040784","https://openalex.org/W3176367300","https://openalex.org/W3191490876","https://openalex.org/W3199174176","https://openalex.org/W3203072121","https://openalex.org/W3206604724","https://openalex.org/W3208773001","https://openalex.org/W3208881055","https://openalex.org/W3212868562","https://openalex.org/W4221022534","https://openalex.org/W4224213953","https://openalex.org/W4225697716","https://openalex.org/W4282963615","https://openalex.org/W4285227013","https://openalex.org/W4288080007","https://openalex.org/W4311703141","https://openalex.org/W4320024068","https://openalex.org/W4327750468","https://openalex.org/W4362579348","https://openalex.org/W4376480418","https://openalex.org/W4381611856","https://openalex.org/W4383749430","https://openalex.org/W4387011098","https://openalex.org/W4387590274","https://openalex.org/W4390252710","https://openalex.org/W4394596018","https://openalex.org/W4401568813","https://openalex.org/W4402263645","https://openalex.org/W4402265033","https://openalex.org/W4402896978","https://openalex.org/W7123363333"],"related_works":[],"abstract_inverted_index":{"Online":[0,146],"intrusion":[1,201],"detection":[2,45],"systems":[3],"(IDSs),":[4],"i.e.,":[5],"tools":[6],"for":[7,87,113],"detecting":[8],"live":[9],"cyberattacks":[10],"in":[11,28,69,95,121,199,232],"the":[12,29,33,38,56,126,156,159,162,192,225],"form":[13],"of":[14,25,35,53,55,85,90,100,158,161,166,173,182],"unauthorized":[15],"access":[16],"gained":[17],"to":[18,80,117],"a":[19,23,48,71,150,167,219],"(networking)":[20],"system,":[21],"play":[22],"role":[24],"paramount":[26],"importance":[27],"cybersecurity":[30,210,234],"landscape.":[31],"Among":[32],"plethora":[34],"existing":[36,83,104],"IDSs,":[37],"ones":[39],"based":[40],"on":[41,208],"temporal":[42,49,67,128,180],"graph":[43,50,72,147,174],"anomaly":[44],"(TGAD)":[46],"process":[47],"representing":[51],"entities":[52],"interest":[54],"underlying":[57,127],"system":[58],"and":[59,64,93,98,123,170,179,197],"time-varying":[60],"relationships":[61],"among":[62],"them,":[63],"identify":[65],"anomalous":[66],"edges":[68],"such":[70],"as":[73,203],"potential":[74],"intrusions.":[75],"TGAD-based":[76,105,152,200,227],"IDSs":[77,106],"are":[78,107,131],"superior":[79],"various":[81],"other":[82],"types":[84,99],"IDS":[86,153,228],"their":[88,118],"peculiarities":[89],"high":[91],"generality":[92],"powerfulness":[94],"data":[96],"representation":[97,175],"cyberattack":[101],"identifiable.":[102],"However,":[103],"still":[108],"far":[109],"from":[110],"being":[111],"suitable":[112],"real-world":[114,233],"settings,":[115],"due":[116],"severe":[119],"limitations":[120,157],"efficiently":[122],"effectively":[124],"handling":[125],"graphs,":[129],"which":[130,154],"typically":[132],"really":[133],"big.":[134],"In":[135],"this":[136,215],"paper,":[137],"we":[138,217],"devise":[139],"CAPTOR":[140,164,190],"(\u201cCyber":[141],"Attack":[142],"Protection":[143],"via":[144],"Temporal":[145],"Representation":[148],"learning\u201d),":[149],"novel":[151],"addresses":[155],"state":[160],"art.":[163],"consists":[165],"careful":[168],"selection":[169],"clever":[171],"combination":[172],"learning":[176],"(GRL),":[177],"TGAD,":[178],"aggregation":[181],"GRL":[183],"representations":[184],"(embeddings).":[185],"These":[186],"design":[187],"choices":[188],"make":[189],"achieve":[191],"best":[193],"tradeoff":[194],"between":[195],"accuracy":[196],"scalability":[198],"detection,":[202],"testified":[204],"by":[205],"extensive":[206],"experiments":[207],"real":[209],"datasets.":[211],"As":[212],"such,":[213],"with":[214],"work":[216],"take":[218],"significant":[220],"step":[221],"forward":[222],"towards":[223],"rendering":[224],"important":[226],"technology":[229],"actually":[230],"applicable":[231],"scenarios.":[235]},"counts_by_year":[],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-21T00:00:00"}