{"id":"https://openalex.org/W4400878337","doi":"https://doi.org/10.1109/tifs.2024.3431932","title":"K-GetNID: Knowledge-Guided Graphs for Early and Transferable Network Intrusion Detection","display_name":"K-GetNID: Knowledge-Guided Graphs for Early and Transferable Network Intrusion Detection","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4400878337","doi":"https://doi.org/10.1109/tifs.2024.3431932"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2024.3431932","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3431932","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102876450","display_name":"Minxiao Wang","orcid":"https://orcid.org/0000-0003-3646-9479"},"institutions":[{"id":"https://openalex.org/I110378019","display_name":"Southern Illinois University Carbondale","ror":"https://ror.org/049kefs16","country_code":"US","type":"education","lineage":["https://openalex.org/I110378019","https://openalex.org/I2801502357"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Minxiao Wang","raw_affiliation_strings":["Computer Engineering Program, School of ECBE, Southern Illinois University Carbondale, Carbondale, IL, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Engineering Program, School of ECBE, Southern Illinois University Carbondale, Carbondale, IL, USA","institution_ids":["https://openalex.org/I110378019"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100662844","display_name":"Ning Yang","orcid":"https://orcid.org/0000-0003-4837-6632"},"institutions":[{"id":"https://openalex.org/I110378019","display_name":"Southern Illinois University Carbondale","ror":"https://ror.org/049kefs16","country_code":"US","type":"education","lineage":["https://openalex.org/I110378019","https://openalex.org/I2801502357"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ning Yang","raw_affiliation_strings":["Information Technology Program, School of Computing, Southern Illinois University Carbondale, Carbondale, IL, USA"],"raw_orcid":"https://orcid.org/0000-0003-4837-6632","affiliations":[{"raw_affiliation_string":"Information Technology Program, School of Computing, Southern Illinois University Carbondale, Carbondale, IL, USA","institution_ids":["https://openalex.org/I110378019"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5077388020","display_name":"Ning Weng","orcid":"https://orcid.org/0000-0003-4869-8383"},"institutions":[{"id":"https://openalex.org/I110378019","display_name":"Southern Illinois University Carbondale","ror":"https://ror.org/049kefs16","country_code":"US","type":"education","lineage":["https://openalex.org/I110378019","https://openalex.org/I2801502357"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ning Weng","raw_affiliation_strings":["Computer Engineering Program, School of ECBE, Southern Illinois University Carbondale, Carbondale, IL, USA"],"raw_orcid":"https://orcid.org/0000-0003-4869-8383","affiliations":[{"raw_affiliation_string":"Computer Engineering Program, School of ECBE, Southern Illinois University Carbondale, Carbondale, IL, USA","institution_ids":["https://openalex.org/I110378019"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I110378019"],"apc_list":null,"apc_paid":null,"fwci":3.9815,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.94249001,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"19","issue":null,"first_page":"7147","last_page":"7160"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9836999773979187,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9595000147819519,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8011954426765442},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6277499794960022},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.42031633853912354},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3389202058315277}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8011954426765442},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6277499794960022},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.42031633853912354},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3389202058315277}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2024.3431932","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3431932","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":47,"referenced_works":["https://openalex.org/W1965334909","https://openalex.org/W1985987493","https://openalex.org/W2334853001","https://openalex.org/W2789828921","https://openalex.org/W2919358060","https://openalex.org/W2925211503","https://openalex.org/W2962703433","https://openalex.org/W2963197901","https://openalex.org/W2965857891","https://openalex.org/W2982575942","https://openalex.org/W2986844069","https://openalex.org/W2995802802","https://openalex.org/W2996900869","https://openalex.org/W2998038410","https://openalex.org/W3005097670","https://openalex.org/W3006761813","https://openalex.org/W3021740526","https://openalex.org/W3080203535","https://openalex.org/W3092978542","https://openalex.org/W3102091066","https://openalex.org/W3107973192","https://openalex.org/W3120227884","https://openalex.org/W3131541364","https://openalex.org/W3165963211","https://openalex.org/W3177318507","https://openalex.org/W3180062783","https://openalex.org/W3202428668","https://openalex.org/W3208773001","https://openalex.org/W4210358464","https://openalex.org/W4282963615","https://openalex.org/W4283313119","https://openalex.org/W4286795917","https://openalex.org/W4297099939","https://openalex.org/W4313378981","https://openalex.org/W4322588479","https://openalex.org/W4382128171","https://openalex.org/W4385245566","https://openalex.org/W4387011098","https://openalex.org/W4387705798","https://openalex.org/W4388757517","https://openalex.org/W4396792110","https://openalex.org/W4401567681","https://openalex.org/W6760045743","https://openalex.org/W6797464607","https://openalex.org/W6797867632","https://openalex.org/W6854278629","https://openalex.org/W6871585072"],"related_works":["https://openalex.org/W2061466315","https://openalex.org/W2376886931","https://openalex.org/W1992118813","https://openalex.org/W2010561419","https://openalex.org/W2374845301","https://openalex.org/W2351448539","https://openalex.org/W1977863481","https://openalex.org/W2384741105","https://openalex.org/W1495178644","https://openalex.org/W2185594426"],"abstract_inverted_index":{"Developing":[0],"early":[1,51,71,102,125,196,217],"and":[2,32,42,83,103,140,150,201,220],"transferable":[3,21,151],"Network":[4,164],"Intrusion":[5],"Detection":[6,177],"Systems":[7],"(NIDSs)":[8],"is":[9,179],"essential":[10],"for":[11,45,124,153],"robust":[12],"network":[13,119,146],"security.":[14],"Early":[15,176],"detection":[16,53,219],"prevents":[17],"further":[18],"damage,":[19],"while":[20],"NIDSs":[22],"enables":[23],"reuse":[24],"across":[25],"diverse":[26],"networks.":[27],"For":[28],"Machine":[29],"Learning":[30,34],"(ML)":[31],"Deep":[33],"(DL)-based":[35],"NIDSs,":[36],"transferability":[37,79],"significantly":[38],"reduces":[39],"data":[40],"collection":[41],"annotation":[43],"costs":[44],"timely":[46],"attack":[47],"mitigation.":[48],"Current":[49],"DL-based":[50,75],"intrusion":[52,154,218],"studies":[54],"often":[55],"focus":[56],"on":[57,134,199],"identifying":[58],"attacks":[59],"from":[60,169],"the":[61,66,114,144,170,183,186,190,208],"first":[62],"few":[63],"packets,":[64],"neglecting":[65],"crucial":[67],"aspect":[68],"of":[69,118,185,210],"adjustable":[70,216],"detection.":[72,126,155,197],"Additionally,":[73,127],"most":[74],"NIDS":[76,97],"methods":[77],"overlook":[78],"during":[80],"both":[81,101],"design":[82],"evaluation":[84],"phases.":[85],"To":[86],"address":[87],"these":[88],"limitations,":[89],"we":[90,128],"propose":[91],"K-GetNID,":[92],"a":[93,107,158],"knowledge-guided":[94],"graph":[95],"learning-based":[96],"that":[98,205],"excels":[99],"in":[100,147,215],"transferability.":[104,221],"We":[105,156],"introduce":[106],"Heterogeneous":[108,160],"Temporal":[109,161],"Graph":[110,162],"(HTGraph)":[111],"to":[112,142,167,181,189],"represent":[113],"dynamic":[115],"feature":[116,138],"series":[117],"flows,":[120],"providing":[121],"enough":[122],"information":[123],"construct":[129],"this":[130],"HTGraph":[131,171],"format":[132],"based":[133],"prior":[135],"knowledge":[136,152],"about":[137],"types":[139],"correlations":[141],"assist":[143],"neural":[145],"learning":[148,212],"general":[149],"develop":[157],"corresponding":[159],"Neural":[163],"(HTGNN)":[165],"model":[166,188],"learn":[168],"format.":[172],"Furthermore,":[173],"an":[174],"Adjustable":[175],"Decoder":[178],"designed":[180],"enhance":[182],"generalization":[184],"proposed":[187],"input":[191],"distribution":[192],"shifts":[193],"caused":[194],"by":[195],"Experiments":[198],"CIC-IDS-2017":[200],"UNSW-NB15":[202],"datasets":[203],"show":[204],"K-GetNID":[206],"matches":[207],"performance":[209],"deep":[211],"methods,":[213],"excelling":[214]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":1}],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2025-10-10T00:00:00"}