{"id":"https://openalex.org/W4394596018","doi":"https://doi.org/10.1109/tifs.2024.3385321","title":"Practical Cyber Attack Detection With Continuous Temporal Graph in Dynamic Network System","display_name":"Practical Cyber Attack Detection With Continuous Temporal Graph in Dynamic Network System","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4394596018","doi":"https://doi.org/10.1109/tifs.2024.3385321"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2024.3385321","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3385321","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5036554878","display_name":"Guanghan Duan","orcid":"https://orcid.org/0000-0001-7128-3085"},"institutions":[{"id":"https://openalex.org/I151727225","display_name":"Harbin Engineering University","ror":"https://ror.org/03x80pn82","country_code":"CN","type":"education","lineage":["https://openalex.org/I151727225"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guanghan Duan","raw_affiliation_strings":["Department of Computer Science and Technology, Harbin Engineering University, Harbin, China"],"raw_orcid":"https://orcid.org/0000-0001-7128-3085","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Harbin Engineering University, Harbin, China","institution_ids":["https://openalex.org/I151727225"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038832558","display_name":"Hongwu Lv","orcid":"https://orcid.org/0000-0002-1917-3978"},"institutions":[{"id":"https://openalex.org/I115228651","display_name":"Agency for Science, Technology and Research","ror":"https://ror.org/036wvzt09","country_code":"SG","type":"government","lineage":["https://openalex.org/I115228651"]},{"id":"https://openalex.org/I151727225","display_name":"Harbin Engineering University","ror":"https://ror.org/03x80pn82","country_code":"CN","type":"education","lineage":["https://openalex.org/I151727225"]},{"id":"https://openalex.org/I3005327000","display_name":"Institute for Infocomm Research","ror":"https://ror.org/053rfa017","country_code":"SG","type":"facility","lineage":["https://openalex.org/I115228651","https://openalex.org/I3005327000","https://openalex.org/I91275662"]}],"countries":["CN","SG"],"is_corresponding":false,"raw_author_name":"Hongwu Lv","raw_affiliation_strings":["A*STAR, Institute for Infocomm Research, Fusionopolis, Singapore","Department of Computer Science and Technology, Harbin Engineering University, Harbin, China"],"raw_orcid":"https://orcid.org/0000-0002-1917-3978","affiliations":[{"raw_affiliation_string":"A*STAR, Institute for Infocomm Research, Fusionopolis, Singapore","institution_ids":["https://openalex.org/I115228651","https://openalex.org/I3005327000"]},{"raw_affiliation_string":"Department of Computer Science and Technology, Harbin Engineering University, Harbin, China","institution_ids":["https://openalex.org/I151727225"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101954149","display_name":"Huiqiang Wang","orcid":"https://orcid.org/0000-0002-1007-5589"},"institutions":[{"id":"https://openalex.org/I115228651","display_name":"Agency for Science, Technology and Research","ror":"https://ror.org/036wvzt09","country_code":"SG","type":"government","lineage":["https://openalex.org/I115228651"]},{"id":"https://openalex.org/I151727225","display_name":"Harbin Engineering University","ror":"https://ror.org/03x80pn82","country_code":"CN","type":"education","lineage":["https://openalex.org/I151727225"]},{"id":"https://openalex.org/I3005327000","display_name":"Institute for Infocomm Research","ror":"https://ror.org/053rfa017","country_code":"SG","type":"facility","lineage":["https://openalex.org/I115228651","https://openalex.org/I3005327000","https://openalex.org/I91275662"]}],"countries":["CN","SG"],"is_corresponding":false,"raw_author_name":"Huiqiang Wang","raw_affiliation_strings":["A*STAR, Institute for Infocomm Research, Fusionopolis, Singapore","Department of Computer Science and Technology, Harbin Engineering University, Harbin, China"],"raw_orcid":"https://orcid.org/0000-0002-1007-5589","affiliations":[{"raw_affiliation_string":"A*STAR, Institute for Infocomm Research, Fusionopolis, Singapore","institution_ids":["https://openalex.org/I115228651","https://openalex.org/I3005327000"]},{"raw_affiliation_string":"Department of Computer Science and Technology, Harbin Engineering University, Harbin, China","institution_ids":["https://openalex.org/I151727225"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056970858","display_name":"Guangsheng Feng","orcid":"https://orcid.org/0000-0001-7192-1622"},"institutions":[{"id":"https://openalex.org/I151727225","display_name":"Harbin Engineering University","ror":"https://ror.org/03x80pn82","country_code":"CN","type":"education","lineage":["https://openalex.org/I151727225"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guangsheng Feng","raw_affiliation_strings":["Department of Computer Science and Technology, Harbin Engineering University, Harbin, China"],"raw_orcid":"https://orcid.org/0000-0001-7192-1622","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Harbin Engineering University, Harbin, China","institution_ids":["https://openalex.org/I151727225"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100418684","display_name":"Xiaoli Li","orcid":"https://orcid.org/0000-0002-0762-6562"},"institutions":[{"id":"https://openalex.org/I115228651","display_name":"Agency for Science, Technology and Research","ror":"https://ror.org/036wvzt09","country_code":"SG","type":"government","lineage":["https://openalex.org/I115228651"]},{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]},{"id":"https://openalex.org/I3005327000","display_name":"Institute for Infocomm Research","ror":"https://ror.org/053rfa017","country_code":"SG","type":"facility","lineage":["https://openalex.org/I115228651","https://openalex.org/I3005327000","https://openalex.org/I91275662"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Xiaoli Li","raw_affiliation_strings":["A*STAR, Institute for Infocomm Research, Fusionopolis, Singapore","School of Computer Science and Engineering, Nanyang Technological University, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-0762-6562","affiliations":[{"raw_affiliation_string":"A*STAR, Institute for Infocomm Research, Fusionopolis, Singapore","institution_ids":["https://openalex.org/I115228651","https://openalex.org/I3005327000"]},{"raw_affiliation_string":"School of Computer Science and Engineering, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":8.3607,"has_fulltext":false,"cited_by_count":39,"citation_normalized_percentile":{"value":0.98222875,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":"19","issue":null,"first_page":"4851","last_page":"4864"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8668574094772339},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5690939426422119},{"id":"https://openalex.org/keywords/node","display_name":"Node (physics)","score":0.4786061942577362},{"id":"https://openalex.org/keywords/cyberspace","display_name":"Cyberspace","score":0.4777730703353882},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.47369384765625},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.45900651812553406},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.4443243443965912},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.43170982599258423},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3597341775894165},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.26056307554244995},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.18986982107162476}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8668574094772339},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5690939426422119},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.4786061942577362},{"id":"https://openalex.org/C2781241145","wikidata":"https://www.wikidata.org/wiki/Q204606","display_name":"Cyberspace","level":3,"score":0.4777730703353882},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.47369384765625},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.45900651812553406},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.4443243443965912},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.43170982599258423},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3597341775894165},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.26056307554244995},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.18986982107162476},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C66938386","wikidata":"https://www.wikidata.org/wiki/Q633538","display_name":"Structural engineering","level":1,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2024.3385321","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3385321","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G261463436","display_name":null,"funder_award_id":"LH2021F001","funder_id":"https://openalex.org/F4320323085","funder_display_name":"Natural Science Foundation of Heilongjiang Province"},{"id":"https://openalex.org/G5992375098","display_name":null,"funder_award_id":"62272126","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320323085","display_name":"Natural Science Foundation of Heilongjiang Province","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W1490509368","https://openalex.org/W2786672974","https://openalex.org/W2789389144","https://openalex.org/W2808908091","https://openalex.org/W2911505293","https://openalex.org/W2942788380","https://openalex.org/W2985336933","https://openalex.org/W3007404067","https://openalex.org/W3026076535","https://openalex.org/W3040389479","https://openalex.org/W3045255111","https://openalex.org/W3099104041","https://openalex.org/W3113693716","https://openalex.org/W3119160111","https://openalex.org/W3119781401","https://openalex.org/W3136205675","https://openalex.org/W3164321464","https://openalex.org/W3164964481","https://openalex.org/W3165871547","https://openalex.org/W3170348203","https://openalex.org/W3198565628","https://openalex.org/W3204818612","https://openalex.org/W3208097639","https://openalex.org/W4285184946","https://openalex.org/W4285612255","https://openalex.org/W4287755062","https://openalex.org/W4288057716","https://openalex.org/W4307042912","https://openalex.org/W4313378981","https://openalex.org/W4319994093","https://openalex.org/W4376122603","https://openalex.org/W4381736190","https://openalex.org/W4388505134","https://openalex.org/W6748816842","https://openalex.org/W6767596638","https://openalex.org/W6771247989","https://openalex.org/W6776137863","https://openalex.org/W6779860234","https://openalex.org/W6852479606"],"related_works":["https://openalex.org/W2368745349","https://openalex.org/W3167675181","https://openalex.org/W2372005904","https://openalex.org/W144012884","https://openalex.org/W2360897455","https://openalex.org/W2131575257","https://openalex.org/W2377660959","https://openalex.org/W4251169878","https://openalex.org/W2810589793","https://openalex.org/W2527886746"],"abstract_inverted_index":{"Deep":[0],"learning":[1,156],"(DL)":[2],"greatly":[3],"enhances":[4],"cyber":[5,77],"anomaly":[6,78],"detection":[7,43,68,79],"capabilities":[8],"through":[9],"effective":[10],"statistical":[11],"network":[12,88,103],"characteristic.":[13],"However,":[14],"previous":[15],"methods":[16],"have":[17],"not":[18],"fully":[19],"addressed":[20],"two":[21],"real-world":[22],"scenario-driven":[23],"challenges.":[24],"1)":[25],"Frequent":[26],"node":[27,114],"access":[28,115,184],"and":[29,142,185],"disconnection":[30],"sourced":[31],"from":[32,89],"free-bounded":[33],"5G/B5G":[34],"cyberspace":[35],"introduce":[36],"unfamiliar":[37],"communication":[38,54,148],"behavior":[39],"patterns,":[40,58],"reducing":[41],"the":[42,46,98,106,138,143,155],"ability":[44],"of":[45,135,157],"pre-trained":[47],"DL":[48],"model.":[49],"2)":[50],"Low-frequency":[51],"or":[52],"sporadic":[53],"behaviors":[55,116],"lack":[56],"stable":[57,152],"posing":[59],"a":[60,76,90,127,150],"challenge":[61],"for":[62,154],"existing":[63],"AI-driven":[64],"models,":[65],"including":[66,166],"DL-based":[67],"methods.":[69],"To":[70],"address":[71],"these":[72],"issues,":[73],"we":[74],"propose":[75],"framework":[80,96],"based":[81],"on":[82,120,131,162],"Continuous":[83],"Temporal":[84],"Graph":[85],"(CTG)":[86],"neural":[87,122],"new":[91,113,183],"interaction-centered":[92],"perspective.":[93],"The":[94],"proposed":[95],"refines":[97],"concrete":[99],"information":[100],"interaction":[101],"between":[102],"entities":[104],"into":[105,117,149],"CTG":[107,121,132],"evolution":[108],"process,":[109],"thereby":[110],"naturally":[111],"incorporating":[112],"feature":[118],"extraction":[119],"network.":[123],"We":[124],"furthermore":[125],"present":[126],"message":[128],"aggregation":[129],"scheme":[130],"with":[133],"fusion":[134],"spatio-temporal":[136],"neighborhood,":[137],"actual":[139],"time":[140],"distribution":[141],"historical":[144],"state,":[145],"thus":[146],"transforming":[147],"more":[151],"pattern":[153],"low-frequency":[158,186],"interactions.":[159],"Extensive":[160],"experiments":[161],"4":[163],"novel":[164],"datasets,":[165],"ToN-IoT,":[167],"UNSWNB15,":[168],"CIC-Dark2020,":[169],"J.P.":[170],"Morgan":[171],"payment,":[172],"demonstrate":[173],"that":[174],"our":[175],"approach":[176],"outperforms":[177],"state-of-the-art":[178],"methods,":[179],"particularly":[180],"in":[181],"detecting":[182],"behaviors.":[187]},"counts_by_year":[{"year":2026,"cited_by_count":16},{"year":2025,"cited_by_count":20},{"year":2024,"cited_by_count":3}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}