{"id":"https://openalex.org/W4412719245","doi":"https://doi.org/10.1109/tifs.2025.3592824","title":"Dehydrator: Enhancing Provenance Graph Storage via Hierarchical Encoding and Sequence Generation","display_name":"Dehydrator: Enhancing Provenance Graph Storage via Hierarchical Encoding and Sequence Generation","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4412719245","doi":"https://doi.org/10.1109/tifs.2025.3592824"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2025.3592824","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3592824","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038660211","display_name":"Jie Ying","orcid":"https://orcid.org/0009-0006-4293-5850"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Jie Ying","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University of Technology, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University of Technology, Hangzhou, China","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029428788","display_name":"Tiantian Zhu","orcid":"https://orcid.org/0000-0002-8657-662X"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tiantian Zhu","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University of Technology, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University of Technology, Hangzhou, China","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056827411","display_name":"Tieming Chen","orcid":"https://orcid.org/0000-0003-4664-3311"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]},{"id":"https://openalex.org/I4210123185","display_name":"Zhejiang Lab","ror":"https://ror.org/02m2h7991","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210123185"]},{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tieming Chen","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University of Technology, Hangzhou, China","College of Computer Science and Technology, Zhejiang University of Technology and Zhejiang Key Laboratory of Visual Information Intelligent Processing, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University of Technology, Hangzhou, China","institution_ids":["https://openalex.org/I55712492"]},{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University of Technology and Zhejiang Key Laboratory of Visual Information Intelligent Processing, Hangzhou, China","institution_ids":["https://openalex.org/I55712492","https://openalex.org/I168879160","https://openalex.org/I4210123185"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5068773146","display_name":"Mingqi Lv","orcid":"https://orcid.org/0000-0003-4810-7491"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingqi Lv","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University of Technology, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University of Technology, Hangzhou, China","institution_ids":["https://openalex.org/I55712492"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5038660211"],"corresponding_institution_ids":["https://openalex.org/I55712492"],"apc_list":null,"apc_paid":null,"fwci":4.1786,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.94689184,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":"20","issue":null,"first_page":"7853","last_page":"7866"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9925000071525574,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9911999702453613,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7657203078269958},{"id":"https://openalex.org/keywords/encoding","display_name":"Encoding (memory)","score":0.6937956213951111},{"id":"https://openalex.org/keywords/provenance","display_name":"Provenance","score":0.6043410301208496},{"id":"https://openalex.org/keywords/sequence","display_name":"Sequence (biology)","score":0.4979126453399658},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.467013418674469},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.29359692335128784},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.13621479272842407},{"id":"https://openalex.org/keywords/biology","display_name":"Biology","score":0.0741540789604187},{"id":"https://openalex.org/keywords/paleontology","display_name":"Paleontology","score":0.06354096531867981}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7657203078269958},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.6937956213951111},{"id":"https://openalex.org/C2780049196","wikidata":"https://www.wikidata.org/wiki/Q23582628","display_name":"Provenance","level":2,"score":0.6043410301208496},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.4979126453399658},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.467013418674469},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.29359692335128784},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.13621479272842407},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0741540789604187},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.06354096531867981},{"id":"https://openalex.org/C54355233","wikidata":"https://www.wikidata.org/wiki/Q7162","display_name":"Genetics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2025.3592824","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3592824","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1083766541","display_name":null,"funder_award_id":"62372410","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G307877974","display_name":null,"funder_award_id":"2025C01082","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G3558286546","display_name":null,"funder_award_id":"62002324","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7311991182","display_name":null,"funder_award_id":"2025C01013","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G8825203574","display_name":null,"funder_award_id":"U22B2028","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":53,"referenced_works":["https://openalex.org/W168132470","https://openalex.org/W1578024308","https://openalex.org/W1614298861","https://openalex.org/W1777016212","https://openalex.org/W1791587242","https://openalex.org/W1816130922","https://openalex.org/W1924770834","https://openalex.org/W2006296837","https://openalex.org/W2064675550","https://openalex.org/W2096347345","https://openalex.org/W2170701348","https://openalex.org/W2267467826","https://openalex.org/W2284900416","https://openalex.org/W2417763662","https://openalex.org/W2532844970","https://openalex.org/W2560810941","https://openalex.org/W2790557990","https://openalex.org/W2889727957","https://openalex.org/W2896457183","https://openalex.org/W2907047316","https://openalex.org/W2947745012","https://openalex.org/W2948981900","https://openalex.org/W2962703433","https://openalex.org/W2963518130","https://openalex.org/W2963940468","https://openalex.org/W2978956219","https://openalex.org/W2998038410","https://openalex.org/W3005127313","https://openalex.org/W3006711782","https://openalex.org/W3015650867","https://openalex.org/W3016038045","https://openalex.org/W3029187551","https://openalex.org/W3093886841","https://openalex.org/W3099203541","https://openalex.org/W3103682594","https://openalex.org/W3104150464","https://openalex.org/W3110889769","https://openalex.org/W3126165507","https://openalex.org/W3137205257","https://openalex.org/W3169336656","https://openalex.org/W3185502221","https://openalex.org/W3195954353","https://openalex.org/W3212661259","https://openalex.org/W3212868562","https://openalex.org/W4206410067","https://openalex.org/W4245671428","https://openalex.org/W4288028629","https://openalex.org/W4288057803","https://openalex.org/W4298196474","https://openalex.org/W4319663646","https://openalex.org/W4384948624","https://openalex.org/W4385245566","https://openalex.org/W4402288718"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2354627941","https://openalex.org/W2347483153","https://openalex.org/W2353379336","https://openalex.org/W2379683085","https://openalex.org/W2363868702","https://openalex.org/W2374448931","https://openalex.org/W2376723740"],"abstract_inverted_index":{"As":[0],"the":[1,32,39,76,111,166],"scope":[2],"and":[3,22,31,58,60,67,86,134,195],"impact":[4],"of":[5,28,34,42,71],"cyber":[6],"threats":[7,21],"have":[8,146],"expanded,":[9],"analysts":[10],"utilize":[11],"provenance":[12,43,101],"graphs":[13],"constructed":[14],"from":[15],"kernel":[16,29],"logs":[17,112],"to":[18,124,130,141,210],"hunt":[19],"for":[20,38],"investigate":[23],"attacks.":[24],"The":[25],"high":[26],"frequency":[27],"events":[30],"persistence":[33],"attacks":[35],"pose":[36],"challenges":[37],"efficient":[40,100,183],"storage":[41,54,62,84,103,167],"graphs.":[44],"Current":[45],"approaches":[46],"can":[47],"be":[48],"categorized":[49],"into":[50],"two":[51],"types:":[52],"pruning-based":[53],"(e.g.,":[55,63],"LogGC,":[56],"CPR,":[57],"NodeMerge)":[59],"encoding-based":[61],"DeepZip,":[64],"SLEUTH,":[65],"ELISE,":[66],"Leonard).":[68],"However,":[69],"none":[70],"these":[72,108],"methods":[73],"simultaneously":[74],"satisfy":[75],"following":[77],"three":[78],"requirements:":[79],"1)":[80],"lossless":[81],"content,":[82],"2)":[83],"efficiency,":[85],"3)":[87],"query":[88],"support.":[89],"To":[90],"address":[91],"this":[92],"gap,":[93],"we":[94],"propose":[95],"<sc":[96,117,162,171,211],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[97,118,163,172,176,187,197,212],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Dehydrator</small>,":[98,213],"an":[99],"graph":[102],"system":[104],"that":[105,161],"fulfills":[106],"all":[107],"requirements.":[109],"For":[110],"generated":[113],"by":[114,169],"auditing":[115],"frameworks,":[116],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Dehydrator</small>":[119,164,173],"uses":[120],"field":[121],"mapping":[122],"encoding":[123,129],"filter":[125,131],"field-level":[126],"redundancy,":[127,133],"hierarchical":[128],"structure-level":[132],"finally":[135],"learns":[136],"a":[137],"deep":[138],"neural":[139],"network":[140],"support":[142],"batch":[143],"querying.":[144],"We":[145],"conducted":[147],"evaluations":[148],"on":[149],"seven":[150],"datasets":[151],"totaling":[152],"over":[153],"one":[154],"billion":[155],"log":[156],"entries.":[157],"Experimental":[158],"results":[159],"show":[160],"reduces":[165],"space":[168],"84.55%.":[170],"is":[174],"<inline-formula":[175,186,196],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">":[177,188,198],"<tex-math":[178,189,199],"notation=\"LaTeX\">$7.36\\times":[179],"$":[180,191,201],"</tex-math></inline-formula>":[181,192,202],"more":[182],"than":[184,193,203],"PostgreSQL,":[185],"notation=\"LaTeX\">$7.16\\times":[190],"Neo4j,":[194],"notation=\"LaTeX\">$16.17\\times":[200],"Leonard":[204],"(the":[205],"work":[206],"most":[207],"closely":[208],"related":[209],"published":[214],"at":[215],"Usenix":[216],"Security\u201923).":[217]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}