{"id":"https://openalex.org/W4391406902","doi":"https://doi.org/10.1109/tifs.2024.3360867","title":"Malicious Internet Entity Detection Using Local Graph Inference","display_name":"Malicious Internet Entity Detection Using Local Graph Inference","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4391406902","doi":"https://doi.org/10.1109/tifs.2024.3360867"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2024.3360867","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3360867","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5082050465","display_name":"\u0160imon Mandl\u00edk","orcid":"https://orcid.org/0000-0002-8776-2854"},"institutions":[{"id":"https://openalex.org/I44504214","display_name":"Czech Technical University in Prague","ror":"https://ror.org/03kqpb082","country_code":"CZ","type":"education","lineage":["https://openalex.org/I44504214"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"\u0160imon Mandl\u00edk","raw_affiliation_strings":["Department of Computer Science, Artificial Intelligence Center, Czech Technical University, Prague, Czech Republic"],"raw_orcid":"https://orcid.org/0000-0002-8776-2854","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Artificial Intelligence Center, Czech Technical University, Prague, Czech Republic","institution_ids":["https://openalex.org/I44504214"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059337672","display_name":"Tom\u00e1\u0161 Pevn\u00fd","orcid":"https://orcid.org/0000-0002-5768-9713"},"institutions":[{"id":"https://openalex.org/I44504214","display_name":"Czech Technical University in Prague","ror":"https://ror.org/03kqpb082","country_code":"CZ","type":"education","lineage":["https://openalex.org/I44504214"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Tom\u00e1\u0161 Pevn\u00fd","raw_affiliation_strings":["Department of Computer Science, Artificial Intelligence Center, Czech Technical University, Prague, Czech Republic"],"raw_orcid":"https://orcid.org/0000-0002-5768-9713","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Artificial Intelligence Center, Czech Technical University, Prague, Czech Republic","institution_ids":["https://openalex.org/I44504214"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037930366","display_name":"V\u00e1clav \u0160m\u00eddl","orcid":"https://orcid.org/0000-0003-3027-6174"},"institutions":[{"id":"https://openalex.org/I44504214","display_name":"Czech Technical University in Prague","ror":"https://ror.org/03kqpb082","country_code":"CZ","type":"education","lineage":["https://openalex.org/I44504214"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"V\u00e1clav \u0160m\u00eddl","raw_affiliation_strings":["Department of Computer Science, Artificial Intelligence Center, Czech Technical University, Prague, Czech Republic"],"raw_orcid":"https://orcid.org/0000-0003-3027-6174","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Artificial Intelligence Center, Czech Technical University, Prague, Czech Republic","institution_ids":["https://openalex.org/I44504214"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5017854474","display_name":"Luk\u00e1\u0161 Bajer","orcid":"https://orcid.org/0000-0002-9402-6417"},"institutions":[{"id":"https://openalex.org/I4210146034","display_name":"Cisco Systems (Czechia)","ror":"https://ror.org/04dg1g218","country_code":"CZ","type":"company","lineage":["https://openalex.org/I135428043","https://openalex.org/I4210146034"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Luk\u00e1\u0161 Bajer","raw_affiliation_strings":["Cisco Systems, Prague, Czech Republic"],"raw_orcid":"https://orcid.org/0000-0002-9402-6417","affiliations":[{"raw_affiliation_string":"Cisco Systems, Prague, Czech Republic","institution_ids":["https://openalex.org/I4210146034"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.8062,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.70619973,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":"19","issue":null,"first_page":"3554","last_page":"3566"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9957000017166138,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9812999963760376,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8428999185562134},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.6203557252883911},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.553560197353363},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.4906231462955475},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.364197701215744},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.35411518812179565},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.33283519744873047},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.24318209290504456}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8428999185562134},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.6203557252883911},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.553560197353363},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4906231462955475},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.364197701215744},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.35411518812179565},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.33283519744873047},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.24318209290504456}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2024.3360867","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3360867","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Sustainable cities and communities","id":"https://metadata.un.org/sdg/11","score":0.4699999988079071}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":77,"referenced_works":["https://openalex.org/W1536325007","https://openalex.org/W1836465849","https://openalex.org/W1919179112","https://openalex.org/W1980793860","https://openalex.org/W1981276685","https://openalex.org/W1994687138","https://openalex.org/W1997243486","https://openalex.org/W2007321142","https://openalex.org/W2010792435","https://openalex.org/W2044285442","https://openalex.org/W2045606343","https://openalex.org/W2053195381","https://openalex.org/W2062797058","https://openalex.org/W2063471322","https://openalex.org/W2071376663","https://openalex.org/W2095705004","https://openalex.org/W2110119381","https://openalex.org/W2117951582","https://openalex.org/W2120804060","https://openalex.org/W2125479168","https://openalex.org/W2127883478","https://openalex.org/W2128181433","https://openalex.org/W2137495254","https://openalex.org/W2137813581","https://openalex.org/W2245533262","https://openalex.org/W2417270923","https://openalex.org/W2535120693","https://openalex.org/W2558748708","https://openalex.org/W2584848220","https://openalex.org/W2743104969","https://openalex.org/W2767774008","https://openalex.org/W2784235806","https://openalex.org/W2789042518","https://openalex.org/W2891707391","https://openalex.org/W2905224888","https://openalex.org/W2907492528","https://openalex.org/W2911286998","https://openalex.org/W2922520936","https://openalex.org/W2945993578","https://openalex.org/W2951626319","https://openalex.org/W2963162436","https://openalex.org/W2963707260","https://openalex.org/W2964015378","https://openalex.org/W2964636835","https://openalex.org/W2997134027","https://openalex.org/W3005586285","https://openalex.org/W3019011053","https://openalex.org/W3134204681","https://openalex.org/W4235892716","https://openalex.org/W4241614753","https://openalex.org/W4250143236","https://openalex.org/W4253872296","https://openalex.org/W4287207390","https://openalex.org/W4287849792","https://openalex.org/W4315630201","https://openalex.org/W4318148196","https://openalex.org/W6606342502","https://openalex.org/W6631190155","https://openalex.org/W6631943919","https://openalex.org/W6632653372","https://openalex.org/W6638667902","https://openalex.org/W6640663528","https://openalex.org/W6674330103","https://openalex.org/W6677919857","https://openalex.org/W6679102953","https://openalex.org/W6683033130","https://openalex.org/W6723978441","https://openalex.org/W6726873649","https://openalex.org/W6730664267","https://openalex.org/W6738964360","https://openalex.org/W6747861035","https://openalex.org/W6753153400","https://openalex.org/W6755418207","https://openalex.org/W6757374366","https://openalex.org/W6776072314","https://openalex.org/W6793904004","https://openalex.org/W6929396646"],"related_works":["https://openalex.org/W2055243143","https://openalex.org/W2065457896","https://openalex.org/W3173234801","https://openalex.org/W2167984027","https://openalex.org/W3021302227","https://openalex.org/W10630519","https://openalex.org/W1919377569","https://openalex.org/W3144288563","https://openalex.org/W3123907821","https://openalex.org/W2382319620"],"abstract_inverted_index":{"Detection":[0],"of":[1,57,87,102,163],"malicious":[2],"behavior":[3],"in":[4,15,42,47],"a":[5,9,21,66,81,140],"large":[6,55,82],"network":[7,77,94],"is":[8,75,90,110,148,151],"challenging":[10],"problem":[11],"for":[12,54,69],"machine":[13],"learning":[14,70],"computer":[16],"security,":[17],"since":[18],"it":[19],"requires":[20],"model":[22],"with":[23,92,154],"high":[24],"expressive":[25],"power":[26],"and":[27,44,104,121,158],"scalable":[28],"inference.":[29],"Existing":[30],"solutions":[31],"struggle":[32],"to":[33,166],"achieve":[34],"this":[35,100],"feat\u2014current":[36],"cybersec-tailored":[37],"approaches":[38],"are":[39],"still":[40],"limited":[41],"expressivity,":[43],"methods":[45],"successful":[46],"other":[48],"domains":[49],"do":[50],"not":[51,152],"scale":[52],"well":[53],"volumes":[56],"data,":[58],"rendering":[59],"frequent":[60],"retraining":[61],"impossible.":[62],"This":[63],"work":[64],"proposes":[65],"new":[67],"perspective":[68],"from":[71],"graph":[72,115],"data":[73,103,147],"that":[74,97],"modeling":[76],"entity":[78],"interactions":[79],"as":[80,124],"heterogeneous":[83],"graph.":[84],"High":[85],"expressivity":[86],"the":[88,132,155,160,164],"method":[89,165],"achieved":[91,111],"neural":[93],"architecture":[95],"HMILnet":[96],"naturally":[98],"models":[99],"type":[101],"provides":[105],"theoretical":[106],"guarantees.":[107],"The":[108],"scalability":[109],"by":[112],"pursuing":[113],"local":[114],"inference,":[116],"i.e.,":[117],"classifying":[118],"individual":[119],"vertices":[120],"their":[122],"neighborhood":[123],"independent":[125],"samples.":[126],"Our":[127],"experiments":[128],"exhibit":[129],"improvement":[130,144],"over":[131],"state-of-the-art":[133],"Probabilistic":[134],"Threat":[135],"Propagation":[136],"(PTP)":[137],"algorithm,":[138,157],"show":[139],"further":[141],"threefold":[142],"accuracy":[143],"when":[145],"additional":[146],"used,":[149],"which":[150],"possible":[153],"PTP":[156],"demonstrate":[159],"generalization":[161],"capabilities":[162],"new,":[167],"previously":[168],"unseen":[169],"entities.":[170]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1}],"updated_date":"2026-08-11T07:18:39.950985","created_date":"2025-10-10T00:00:00"}