{"id":"https://openalex.org/W4206266728","doi":"https://doi.org/10.1109/tdsc.2022.3143551","title":"DeepAG: Attack Graph Construction and Threats Prediction With Bi-Directional Deep Learning","display_name":"DeepAG: Attack Graph Construction and Threats Prediction With Bi-Directional Deep Learning","publication_year":2022,"publication_date":"2022-01-18","ids":{"openalex":"https://openalex.org/W4206266728","doi":"https://doi.org/10.1109/tdsc.2022.3143551"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2022.3143551","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3143551","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5020227658","display_name":"Teng Li","orcid":"https://orcid.org/0000-0001-5147-8336"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Teng Li","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi'an, Shaanxi, China"],"raw_orcid":"https://orcid.org/0000-0001-5147-8336","affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi'an, Shaanxi, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000331772","display_name":"Ya Li Jiang","orcid":"https://orcid.org/0000-0001-8804-2288"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ya Jiang","raw_affiliation_strings":["School of Computer Science and Technology, Xidian University, Xi'an, Shaanxi, China"],"raw_orcid":"https://orcid.org/0000-0001-8804-2288","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Xidian University, Xi'an, Shaanxi, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014651715","display_name":"Chi Lin","orcid":"https://orcid.org/0000-0002-0302-5102"},"institutions":[{"id":"https://openalex.org/I27357992","display_name":"Dalian University of Technology","ror":"https://ror.org/023hj5876","country_code":"CN","type":"education","lineage":["https://openalex.org/I27357992"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chi Lin","raw_affiliation_strings":["School of Software Technology, Dalian University of Technology, Dalian, Liaoning, China"],"raw_orcid":"https://orcid.org/0000-0002-0302-5102","affiliations":[{"raw_affiliation_string":"School of Software Technology, Dalian University of Technology, Dalian, Liaoning, China","institution_ids":["https://openalex.org/I27357992"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051195514","display_name":"Mohammad S. Obaidat","orcid":"https://orcid.org/0000-0002-1569-9657"},"institutions":[{"id":"https://openalex.org/I114972647","display_name":"University of Jordan","ror":"https://ror.org/05k89ew48","country_code":"JO","type":"education","lineage":["https://openalex.org/I114972647"]},{"id":"https://openalex.org/I29891158","display_name":"University of Sharjah","ror":"https://ror.org/00engpz63","country_code":"AE","type":"education","lineage":["https://openalex.org/I29891158"]},{"id":"https://openalex.org/I92403157","display_name":"University of Science and Technology Beijing","ror":"https://ror.org/02egmk993","country_code":"CN","type":"education","lineage":["https://openalex.org/I92403157"]}],"countries":["AE","CN","JO"],"is_corresponding":false,"raw_author_name":"Mohammad S. Obaidat","raw_affiliation_strings":["College of Computing and Informatics, University of Sharjah, Sharjah, UAE","University of Jordan, Amman, Jordan","University of Science and Technology Beijing, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-1569-9657","affiliations":[{"raw_affiliation_string":"College of Computing and Informatics, University of Sharjah, Sharjah, UAE","institution_ids":["https://openalex.org/I29891158"]},{"raw_affiliation_string":"University of Jordan, Amman, Jordan","institution_ids":["https://openalex.org/I114972647"]},{"raw_affiliation_string":"University of Science and Technology Beijing, Beijing, China","institution_ids":["https://openalex.org/I92403157"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043356063","display_name":"Yulong Shen","orcid":"https://orcid.org/0000-0002-8448-705X"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yulong Shen","raw_affiliation_strings":["School of Computer Science and Technology, Xidian University, Xi'an, Shaanxi, China"],"raw_orcid":"https://orcid.org/0000-0002-8448-705X","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Xidian University, Xi'an, Shaanxi, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5012016098","display_name":"Jianfeng Ma","orcid":"https://orcid.org/0000-0003-4251-1143"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianfeng Ma","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi'an, Shaanxi, China"],"raw_orcid":"https://orcid.org/0000-0003-4251-1143","affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi'an, Shaanxi, China","institution_ids":["https://openalex.org/I149594827"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":null,"fwci":8.7511,"has_fulltext":false,"cited_by_count":84,"citation_normalized_percentile":{"value":0.98405814,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":"20","issue":"1","first_page":"740","last_page":"757"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9907000064849854,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7116550207138062},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5067844986915588},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.42389628291130066},{"id":"https://openalex.org/keywords/vocabulary","display_name":"Vocabulary","score":0.4144023656845093},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.35540539026260376},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.27142971754074097}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7116550207138062},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5067844986915588},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.42389628291130066},{"id":"https://openalex.org/C2777601683","wikidata":"https://www.wikidata.org/wiki/Q6499736","display_name":"Vocabulary","level":2,"score":0.4144023656845093},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.35540539026260376},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.27142971754074097},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2022.3143551","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3143551","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G7320741009","display_name":null,"funder_award_id":"61902291","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G857192928","display_name":null,"funder_award_id":"XJS211516","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":51,"referenced_works":["https://openalex.org/W1973240709","https://openalex.org/W2047784240","https://openalex.org/W2102941975","https://openalex.org/W2110908300","https://openalex.org/W2509891819","https://openalex.org/W2583874385","https://openalex.org/W2600058599","https://openalex.org/W2606833268","https://openalex.org/W2729350029","https://openalex.org/W2744097819","https://openalex.org/W2749008552","https://openalex.org/W2751418808","https://openalex.org/W2754665629","https://openalex.org/W2755588949","https://openalex.org/W2765664114","https://openalex.org/W2766503369","https://openalex.org/W2767094836","https://openalex.org/W2784244651","https://openalex.org/W2794988934","https://openalex.org/W2883701651","https://openalex.org/W2891432086","https://openalex.org/W2902529532","https://openalex.org/W2905097561","https://openalex.org/W2905559537","https://openalex.org/W2911286998","https://openalex.org/W2937220922","https://openalex.org/W2947815220","https://openalex.org/W2962703433","https://openalex.org/W2962756421","https://openalex.org/W2963026768","https://openalex.org/W2963421945","https://openalex.org/W2965838158","https://openalex.org/W2973385958","https://openalex.org/W2978956219","https://openalex.org/W2986174819","https://openalex.org/W2986944522","https://openalex.org/W3015797940","https://openalex.org/W3033777149","https://openalex.org/W3047322466","https://openalex.org/W3090066802","https://openalex.org/W3099203541","https://openalex.org/W3105926539","https://openalex.org/W3107090477","https://openalex.org/W3112311055","https://openalex.org/W3184914355","https://openalex.org/W3200780444","https://openalex.org/W4239205245","https://openalex.org/W6739901393","https://openalex.org/W6754723338","https://openalex.org/W6761437520","https://openalex.org/W6767173058"],"related_works":["https://openalex.org/W2961085424","https://openalex.org/W4306674287","https://openalex.org/W3046775127","https://openalex.org/W3107602296","https://openalex.org/W3170094116","https://openalex.org/W4386462264","https://openalex.org/W3209574120","https://openalex.org/W4364306694","https://openalex.org/W4312192474","https://openalex.org/W4283697347"],"abstract_inverted_index":{"The":[0,142],"complicated":[1],"multi-step":[2],"attacks,":[3],"such":[4],"as":[5],"Advanced":[6],"Persistent":[7],"Threats":[8],"(APTs),":[9],"have":[10],"brought":[11],"considerable":[12],"threats":[13,52],"to":[14,50,60,82,113,129],"cybersecurity":[15],"because":[16],"they":[17],"are":[18,32],"naturally":[19],"varied":[20],"and":[21,29,53,103,125,139],"complex.":[22],"Therefore,":[23],"studying":[24],"the":[25,55,74,106,115,118,164],"strategies":[26],"of":[27,70,120,153,168,172],"adversaries":[28],"making":[30],"predictions":[31],"still":[33],"significant":[34],"challenges":[35],"for":[36,86],"attack":[37,56,64,87,101,107,132],"prevention.":[38],"To":[39],"address":[40],"these":[41],"problems,":[42],"we":[43],"proposeDeepAG,":[44],"a":[45],"framework":[46],"utilizing":[47],"system":[48,71],"logs":[49],"detect":[51,62],"predict":[54],"paths.DeepAGleverages":[57],"transformer":[58],"models":[59],"novelly":[61],"APT":[63],"sequences":[65,102,156],"by":[66,166],"modeling":[67],"semantic":[68],"information":[69],"logs.":[72],"On":[73],"other":[75],"hand,DeepAGutilizes":[76],"Long":[77],"Short-Term":[78],"Memory":[79],"(LSTM)":[80],"network":[81],"propose":[83],"bi-directional":[84],"prediction":[85,140],"paths,":[88],"which":[89],"achieves":[90],"higher":[91],"performance":[92],"than":[93,151],"traditional":[94],"BiLSTM.":[95],"In":[96],"addition,":[97],"with":[98],"previously":[99],"detected":[100,159],"predicted":[104],"paths,DeepAGconstructs":[105],"graphs":[108],"that":[109,134,149],"attackers":[110],"may":[111],"follow":[112],"compromise":[114],"network.":[116],"Furthermore,DeepAGoffers":[117],"mechanisms":[119],"Out-Of-Vocabulary":[121],"(OOV)":[122],"word":[123],"processor":[124],"online":[126],"update":[127],"respectively":[128],"adapt":[130],"new":[131],"patterns":[133],"show":[135,148],"up":[136],"during":[137],"detection":[138],"stages.":[141],"experiments":[143],"on":[144],"open-source":[145],"data":[146],"sets":[147],"more":[150],"99%":[152],"over":[154],"15000":[155],"can":[157],"be":[158],"accurately":[160],"byDeepAG.":[161],"Moreover,DeepAGcan":[162],"improve":[163],"baseline":[165],"11.166%":[167],"accuracy":[169],"in":[170],"terms":[171],"prediction.":[173]},"counts_by_year":[{"year":2026,"cited_by_count":9},{"year":2025,"cited_by_count":33},{"year":2024,"cited_by_count":25},{"year":2023,"cited_by_count":12},{"year":2022,"cited_by_count":5}],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-10T00:00:00"}