{"id":"https://openalex.org/W4412985477","doi":"https://doi.org/10.1109/tdsc.2025.3596092","title":"LLMGraph: Label-Free Detection Against APTs in Edge Networks via LLM and GCN","display_name":"LLMGraph: Label-Free Detection Against APTs in Edge Networks via LLM and GCN","publication_year":2025,"publication_date":"2025-08-05","ids":{"openalex":"https://openalex.org/W4412985477","doi":"https://doi.org/10.1109/tdsc.2025.3596092"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2025.3596092","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3596092","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5053547414","display_name":"Tianlong Yu","orcid":null},"institutions":[{"id":"https://openalex.org/I75900474","display_name":"Hubei University","ror":"https://ror.org/03a60m280","country_code":"CN","type":"education","lineage":["https://openalex.org/I75900474"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Tianlong Yu","raw_affiliation_strings":["Key Laboratory of Intelligent Sensing System and Security (Ministry of Education), School of Artificial Intelligence, Hubei University, Wuhan, China"],"raw_orcid":"https://orcid.org/0009-0001-1309-091X","affiliations":[{"raw_affiliation_string":"Key Laboratory of Intelligent Sensing System and Security (Ministry of Education), School of Artificial Intelligence, Hubei University, Wuhan, China","institution_ids":["https://openalex.org/I75900474"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104666790","display_name":"Gaoyang Liu","orcid":"https://orcid.org/0000-0003-2566-9360"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Gaoyang Liu","raw_affiliation_strings":["Hubei Key Laboratory of Internet of Intelligence, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0003-2566-9360","affiliations":[{"raw_affiliation_string":"Hubei Key Laboratory of Internet of Intelligence, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100337659","display_name":"Chen Wang","orcid":"https://orcid.org/0000-0003-1963-4954"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chen Wang","raw_affiliation_strings":["Hubei Key Laboratory of Internet of Intelligence, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0003-1963-4954","affiliations":[{"raw_affiliation_string":"Hubei Key Laboratory of Internet of Intelligence, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100397644","display_name":"Yang Yang","orcid":"https://orcid.org/0000-0002-6297-5722"},"institutions":[{"id":"https://openalex.org/I75900474","display_name":"Hubei University","ror":"https://ror.org/03a60m280","country_code":"CN","type":"education","lineage":["https://openalex.org/I75900474"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Yang","raw_affiliation_strings":["Key Laboratory of Intelligent Sensing System and Security (Ministry of Education), School of Artificial Intelligence, Hubei University, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-6297-5722","affiliations":[{"raw_affiliation_string":"Key Laboratory of Intelligent Sensing System and Security (Ministry of Education), School of Artificial Intelligence, Hubei University, Wuhan, China","institution_ids":["https://openalex.org/I75900474"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5053547414"],"corresponding_institution_ids":["https://openalex.org/I75900474"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.09639126,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"22","issue":"6","first_page":"7256","last_page":"7271"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.9810000061988831,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.9810000061988831,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9528999924659729,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.9412000179290771,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6681697368621826},{"id":"https://openalex.org/keywords/enhanced-data-rates-for-gsm-evolution","display_name":"Enhanced Data Rates for GSM Evolution","score":0.47415226697921753},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.44177696108818054},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.19082015752792358}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6681697368621826},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.47415226697921753},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.44177696108818054},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.19082015752792358}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3596092","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3596092","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2616141538","display_name":null,"funder_award_id":"62002104","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G324800219","display_name":null,"funder_award_id":"62106069","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3864529057","display_name":null,"funder_award_id":"62302177","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4137277356","display_name":null,"funder_award_id":"62272183","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8950497980","display_name":null,"funder_award_id":"62102136","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W1516506771","https://openalex.org/W1996881001","https://openalex.org/W2083658929","https://openalex.org/W2157554212","https://openalex.org/W2574448563","https://openalex.org/W2605367183","https://openalex.org/W2613352518","https://openalex.org/W2767094836","https://openalex.org/W2904027722","https://openalex.org/W2947175569","https://openalex.org/W2963197901","https://openalex.org/W2997404190","https://openalex.org/W3012846134","https://openalex.org/W3136284412","https://openalex.org/W3168561516","https://openalex.org/W3173170122","https://openalex.org/W3208773001","https://openalex.org/W4378587122","https://openalex.org/W4384948624","https://openalex.org/W4388858881","https://openalex.org/W4391176584","https://openalex.org/W4402263650","https://openalex.org/W4404783040"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"In":[0],"the":[1,26,39,56,61,67,101,132,139,144,228,234,239,254,261],"growing":[2],"trend":[3],"of":[4,8,25,50,72,233],"remote":[5,35],"working,":[6],"millions":[7],"edge":[9,73,88,181,235,267],"networks":[10,268],"(e.g.,":[11],"homes":[12],"or":[13],"branch":[14],"offices)":[15],"are":[16,52],"increasingly":[17],"threatened":[18],"by":[19,256],"Advanced":[20],"Persistent":[21],"Threats":[22],"(APTs),":[23],"because":[24],"weakened":[27],"segmentation":[28],"between":[29],"business":[30],"and":[31,66,168,194,210,226,249,260],"non-business":[32],"devices":[33],"in":[34,87,180],"working":[36],"environment.":[37],"Despite":[38],"fact":[40],"that":[41],"numerous":[42],"APT":[43,83],"detection":[44,84,177],"mechanisms":[45],"have":[46,131],"been":[47],"proposed,":[48],"all":[49],"them":[51],"struggling":[53],"to":[54,96,99,111,134,174,224,238],"handle":[55],"<italic":[57,62,68,75,102,229,246,250],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[58,63,69,76,103,159,184,197,218,230,243,247,251],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">complex":[59,104],"structure</i>,":[60,105],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">massive":[64],"scale</i>":[65],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">diverse":[70,231],"topology</i>":[71,232],"networks.":[74,182,236],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Can":[77],"recent":[78],"machine-learning":[79],"advances":[80],"tackle":[81],"these":[82,154],"pain":[85],"points":[86],"networks?</i>":[89],"The":[90],"GNNs":[91,118],"(Graph":[92,165],"Neural":[93],"Networks)":[94,167],"seems":[95],"be":[97],"suited":[98],"capture":[100,112,190],"but":[106,141],"its":[107],"adjacency":[108],"matrix":[109],"fails":[110],"key":[113,204],"network":[114,191,211],"flow":[115,192],"context.":[116],"Additionally,":[117,216],"require":[119],"extensive":[120],"manual":[121],"labeling,":[122],"which":[123,161],"is":[124,269],"not":[125],"scalable.":[126],"LLMs":[127],"(Large":[128],"Language":[129],"Models)":[130],"potential":[133],"provide":[135],"automatic":[136],"labeling":[137],"for":[138,149,213,264],"GNNs,":[140],"they":[142],"lack":[143],"supplementary":[145],"security":[146,205],"context":[147,193],"needed":[148],"effective":[150,214],"labeling.":[151,215],"To":[152],"address":[153],"gaps,":[155],"we":[156],"present":[157],"<sc":[158,183,196,217,242],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">LLMGraph</small>,":[160],"incorporates":[162],"extended":[163,186],"GCNs":[164,187],"Convolutional":[166],"domain-specific":[169,199],"RAG":[170,200],"(Retrieval-Augmented":[171],"Generation)":[172],"pipeline":[173,201],"achieve":[175],"label-free":[176],"against":[178],"APTs":[179],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">LLMGraph</small>'s":[185,198],"model":[188],"can":[189,202],"direction.":[195],"supplement":[203],"contexts,":[206],"including":[207],"device":[208],"vulnerability":[209],"flow,":[212],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">LLMGraph</small>":[219,244],"provides":[220],"an":[221],"LLM":[222],"aggregator":[223],"augment":[225],"merge":[227],"Compared":[237],"state-of-the-art":[240],"mechanisms,":[241],"proves":[245],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">effective</i>":[248],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">scalable</i>,":[252],"improving":[253],"F1-score":[255],"at":[257],"least":[258],"46.9%,":[259],"training":[262],"time":[263],"1":[265],"million":[266],"within":[270],"1000":[271],"s.":[272]},"counts_by_year":[],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}