{"id":"https://openalex.org/W4406611343","doi":"https://doi.org/10.1109/tifs.2025.3530702","title":"$\\mathsf{TCG}\\text{-}\\mathsf{IDS}$ : Robust Network Intrusion Detection via Temporal Contrastive Graph Learning","display_name":"$\\mathsf{TCG}\\text{-}\\mathsf{IDS}$ : Robust Network Intrusion Detection via Temporal Contrastive Graph Learning","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4406611343","doi":"https://doi.org/10.1109/tifs.2025.3530702"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2025.3530702","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3530702","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101623391","display_name":"Cong Wu","orcid":"https://orcid.org/0000-0002-0930-0283"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]},{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN","SG"],"is_corresponding":false,"raw_author_name":"Cong Wu","raw_affiliation_strings":["School of Cyber Science and Engineering, Wuhan University, Wuhan, China","College of Computing and Data Science, Cyber Security Lab, Nanyang Technological University, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-0930-0283","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]},{"raw_affiliation_string":"College of Computing and Data Science, Cyber Security Lab, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061961718","display_name":"Jianfei Sun","orcid":"https://orcid.org/0000-0002-6944-8378"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]},{"id":"https://openalex.org/I79891267","display_name":"Singapore Management University","ror":"https://ror.org/050qmg959","country_code":"SG","type":"education","lineage":["https://openalex.org/I79891267"]}],"countries":["CN","SG"],"is_corresponding":false,"raw_author_name":"Jianfei Sun","raw_affiliation_strings":["School of Cyber Science and Engineering, Wuhan University, Wuhan, China","School of Computing and Information Systems, Singapore Management University, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-6944-8378","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]},{"raw_affiliation_string":"School of Computing and Information Systems, Singapore Management University, Singapore","institution_ids":["https://openalex.org/I79891267"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100394917","display_name":"Jing Chen","orcid":"https://orcid.org/0000-0002-7212-5297"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]},{"id":"https://openalex.org/I79891267","display_name":"Singapore Management University","ror":"https://ror.org/050qmg959","country_code":"SG","type":"education","lineage":["https://openalex.org/I79891267"]}],"countries":["CN","SG"],"is_corresponding":false,"raw_author_name":"Jing Chen","raw_affiliation_strings":["School of Computing and Information Systems, Singapore Management University, Bras Basah, Singapore","School of Cyber Science and Engineering, Wuhan University, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-7212-5297","affiliations":[{"raw_affiliation_string":"School of Computing and Information Systems, Singapore Management University, Bras Basah, Singapore","institution_ids":["https://openalex.org/I79891267"]},{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018409592","display_name":"Mamoun Alazab","orcid":"https://orcid.org/0000-0002-1928-3704"},"institutions":[{"id":"https://openalex.org/I29894533","display_name":"Charles Darwin University","ror":"https://ror.org/048zcaj52","country_code":"AU","type":"education","lineage":["https://openalex.org/I29894533"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Mamoun Alazab","raw_affiliation_strings":["College of Engineering, IT, and Environment, Charles Darwin University, Darwin, Australia"],"raw_orcid":"https://orcid.org/0000-0002-1928-3704","affiliations":[{"raw_affiliation_string":"College of Engineering, IT, and Environment, Charles Darwin University, Darwin, Australia","institution_ids":["https://openalex.org/I29894533"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100355692","display_name":"Yang Liu","orcid":"https://orcid.org/0000-0001-7300-9215"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yang Liu","raw_affiliation_strings":["College of Computing and Data Science, Nanyang Technological University, Jurong West, Singapore","College of Computing and Data Science, Cyber Security Lab, Nanyang Technological University, Singapore"],"raw_orcid":"https://orcid.org/0000-0001-7300-9215","affiliations":[{"raw_affiliation_string":"College of Computing and Data Science, Nanyang Technological University, Jurong West, Singapore","institution_ids":["https://openalex.org/I172675005"]},{"raw_affiliation_string":"College of Computing and Data Science, Cyber Security Lab, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100666554","display_name":"Yang Xiang","orcid":"https://orcid.org/0000-0001-5252-0831"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yang Xiang","raw_affiliation_strings":["Department of Digital Research, Swinburne University of Technology, Melbourne, Australia","Digital Research, Swinburne University of Technology, Australia"],"raw_orcid":"https://orcid.org/0000-0001-5252-0831","affiliations":[{"raw_affiliation_string":"Department of Digital Research, Swinburne University of Technology, Melbourne, Australia","institution_ids":["https://openalex.org/I57093077"]},{"raw_affiliation_string":"Digital Research, Swinburne University of Technology, Australia","institution_ids":["https://openalex.org/I57093077"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":29.337,"has_fulltext":false,"cited_by_count":44,"citation_normalized_percentile":{"value":0.99812317,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"20","issue":null,"first_page":"1475","last_page":"1486"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9670000076293945,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9254000186920166,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8471277356147766},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.619278609752655},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5042320489883423},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.4311867356300354},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3696839213371277},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.1924366056919098}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8471277356147766},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.619278609752655},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5042320489883423},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4311867356300354},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3696839213371277},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.1924366056919098}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tifs.2025.3530702","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3530702","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},{"id":"pmh:oai:dr.ntu.edu.sg:10356/217814","is_oa":false,"landing_page_url":"https://hdl.handle.net/10356/217814","pdf_url":null,"source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Journal Article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G554618108","display_name":null,"funder_award_id":"NCRP25- P04-TAICeN","funder_id":"https://openalex.org/F4320320709","funder_display_name":"National Research Foundation Singapore"}],"funders":[{"id":"https://openalex.org/F4320320671","display_name":"National Research Foundation","ror":"https://ror.org/05s0g1g46"},{"id":"https://openalex.org/F4320320709","display_name":"National Research Foundation Singapore","ror":"https://ror.org/03cpyc314"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W2335999708","https://openalex.org/W2599306383","https://openalex.org/W2767094836","https://openalex.org/W2767455180","https://openalex.org/W2913975235","https://openalex.org/W2963197901","https://openalex.org/W2963516518","https://openalex.org/W2964015378","https://openalex.org/W2964051675","https://openalex.org/W3011124515","https://openalex.org/W3011667710","https://openalex.org/W3162651254","https://openalex.org/W3169450514","https://openalex.org/W3191490876","https://openalex.org/W3195954353","https://openalex.org/W3208773001","https://openalex.org/W3211805421","https://openalex.org/W4300167448","https://openalex.org/W4312204616","https://openalex.org/W4313378981","https://openalex.org/W4313591247","https://openalex.org/W4319653420","https://openalex.org/W4381687292","https://openalex.org/W4382239148","https://openalex.org/W4385973175","https://openalex.org/W4392159286","https://openalex.org/W4392553889","https://openalex.org/W4394822945","https://openalex.org/W4402264505","https://openalex.org/W6738964360","https://openalex.org/W6753153400","https://openalex.org/W6754929296","https://openalex.org/W6760031732","https://openalex.org/W6774097426","https://openalex.org/W6779860234","https://openalex.org/W6784472380","https://openalex.org/W6784694379","https://openalex.org/W6785833892","https://openalex.org/W6799119926","https://openalex.org/W6908357448"],"related_works":["https://openalex.org/W2961085424","https://openalex.org/W4306674287","https://openalex.org/W4387369504","https://openalex.org/W3046775127","https://openalex.org/W4394896187","https://openalex.org/W3170094116","https://openalex.org/W4386462264","https://openalex.org/W3107602296","https://openalex.org/W4364306694","https://openalex.org/W4312192474"],"abstract_inverted_index":{"In":[0,182],"the":[1,12,88,95,127,138,147,195,213,225,241],"era":[2],"of":[3,90,140,146,168,190,208,220,234,243],"zero":[4],"trust":[5],"security":[6,89,259],"models":[7],"and":[8,31,45,79,133,163,170,192,210,227],"next-generation":[9],"networks":[10],"(NGN),":[11],"primary":[13],"challenge":[14],"is":[15],"that":[16],"network":[17,43,106,131,159,235,244,258],"nodes":[18],"may":[19],"be":[20],"untrusted,":[21],"even":[22],"if":[23],"they":[24],"have":[25],"been":[26],"verified,":[27],"necessitating":[28],"continuous":[29],"validation":[30],"scrutiny.":[32],"Effective":[33],"intrusion":[34,245],"detection":[35,77,246],"systems":[36],"(IDS)":[37],"are":[38],"crucial":[39],"for":[40,126,256],"continuously":[41],"monitoring":[42],"traffic":[44,160],"identifying":[46],"potential":[47],"threats.":[48],"However,":[49],"traditional":[50],"IDS":[51],"approaches":[52],"often":[53],"struggle":[54],"to":[55,71,82,118,124,136,216],"keep":[56],"pace":[57],"with":[58,204],"evolving":[59],"threats,":[60],"requiring":[61],"extensive":[62],"supervised":[63],"training":[64],"on":[65,101,155,172,194,212],"labeled":[66],"datasets.":[67],"This":[68,92,237],"limitation":[69],"leads":[70],"high":[72,202],"false":[73,187],"positive":[74,188],"rates,":[75],"low":[76],"accuracy,":[78],"a":[80,165,185,253],"failure":[81],"provide":[83],"real-time":[84],"detection,":[85],"thereby":[86],"undermining":[87],"NGNs.":[91],"paper":[93],"proposed":[94],"first":[96],"self-supervised":[97,248],"learning-based":[98],"IDS,":[99],"designed":[100],"temporal":[102,116,120,249],"contrastive":[103,113],"graph":[104,179,250],"neural":[105],"(GNN),":[107],"namely$\\mathsf{TCG}\\text{-}\\mathsf{IDS}$.":[108],"It":[109],"innovatively":[110],"integrates":[111],"three":[112],"learning":[114,139,180],"strategies:":[115],"contrasting":[117,123,135],"capture":[119],"dependencies,":[121],"asymmetric":[122],"account":[125],"diverse":[128],"interactions":[129],"within":[130],"data,":[132],"masked":[134],"enhance":[137],"node":[141],"representations":[142],"by":[143],"masking":[144],"parts":[145],"data":[148],"during":[149],"training.":[150],"Performance":[151],"evaluation":[152],"was":[153],"conducted":[154],"two":[156,173,196,214],"publicly":[157],"available":[158],"datasets,":[161],"NF-CSE-CIC-IDS2018-V2":[162],"NF-UNSW-NB15-V2.$\\mathsf{TCG}\\text{-}\\mathsf{IDS}$achieved":[164],"balanced":[166],"accuracy":[167],"99.48%":[169],"91.48%":[171],"datasets":[174,197,215],"respectively,":[175],"significantly":[176,239],"outperforming":[177],"state-of-the-art":[178],"models.":[181],"multi-class":[183],"detection,$\\mathsf{TCG}\\text{-}\\mathsf{IDS}$attained":[184],"mean":[186],"rate":[189],"4.15%":[191],"3.34%":[193],"respectively.":[198],"Besides,":[199],"it":[200],"exhibits":[201],"efficiency":[203,228],"its":[205],"running":[206],"time":[207],"0.37s":[209],"0.51s":[211],"predict":[217],"per":[218],"batch":[219],"100":[221],"samples.":[222],"Results":[223],"highlight":[224],"effectiveness":[226],"of$\\mathsf{TCG}\\text{-}\\mathsf{IDS}$in":[229],"accurately":[230],"detecting":[231],"various":[232],"types":[233],"intrusions.":[236],"work":[238],"advances":[240],"field":[242],"via":[247],"learning,":[251],"offering":[252],"promising":[254],"solution":[255],"future":[257],"systems.":[260]},"counts_by_year":[{"year":2026,"cited_by_count":29},{"year":2025,"cited_by_count":15}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-01-21T00:00:00"}
