{"id":"https://openalex.org/W4413554953","doi":"https://doi.org/10.1109/tifs.2025.3601358","title":"Behavior-Enhanced Representation Learning for User Behavior Analysis","display_name":"Behavior-Enhanced Representation Learning for User Behavior Analysis","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4413554953","doi":"https://doi.org/10.1109/tifs.2025.3601358"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2025.3601358","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3601358","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Zeyan Li","orcid":"https://orcid.org/0000-0002-6091-8062"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zeyan Li","raw_affiliation_strings":["School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","School of Computer Science, Shanghai Jiaotong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-6091-8062","affiliations":[{"raw_affiliation_string":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]},{"raw_affiliation_string":"School of Computer Science, Shanghai Jiaotong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053053767","display_name":"Shengda Zhuo","orcid":"https://orcid.org/0000-0001-5610-005X"},"institutions":[{"id":"https://openalex.org/I159948400","display_name":"Jinan University","ror":"https://ror.org/02xe5ns62","country_code":"CN","type":"education","lineage":["https://openalex.org/I159948400"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shengda Zhuo","raw_affiliation_strings":["College of Cyber Security, Jinan University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-5610-005X","affiliations":[{"raw_affiliation_string":"College of Cyber Security, Jinan University, Guangzhou, China","institution_ids":["https://openalex.org/I159948400"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037742756","display_name":"Jinchun He","orcid":"https://orcid.org/0009-0006-1855-7642"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinchun He","raw_affiliation_strings":["Institute of Artificial Intelligence, Beijing Advanced Innovation Center for Future Blockchain and Privacy Computing, Beihang University, Beijing, China","Beijing Advanced Innovation Center for Future Blockchain and Privacy Computing, Institute of Artificial Intelligence, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0006-1855-7642","affiliations":[{"raw_affiliation_string":"Institute of Artificial Intelligence, Beijing Advanced Innovation Center for Future Blockchain and Privacy Computing, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]},{"raw_affiliation_string":"Beijing Advanced Innovation Center for Future Blockchain and Privacy Computing, Institute of Artificial Intelligence, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091300423","display_name":"Wangjie Qiu","orcid":"https://orcid.org/0009-0003-9654-9515"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wangjie Qiu","raw_affiliation_strings":["Institute of Artificial Intelligence, Beijing Advanced Innovation Center for Future Blockchain and Privacy Computing, Beihang University, Beijing, China","Beijing Advanced Innovation Center for Future Blockchain and Privacy Computing, Institute of Artificial Intelligence, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0003-9654-9515","affiliations":[{"raw_affiliation_string":"Institute of Artificial Intelligence, Beijing Advanced Innovation Center for Future Blockchain and Privacy Computing, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]},{"raw_affiliation_string":"Beijing Advanced Innovation Center for Future Blockchain and Privacy Computing, Institute of Artificial Intelligence, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100708332","display_name":"Zhiming Zheng","orcid":"https://orcid.org/0000-0002-0550-8087"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhiming Zheng","raw_affiliation_strings":["Institute of Artificial Intelligence, Beijing Advanced Innovation Center for Future Blockchain and Privacy Computing, Beihang University, Beijing, China","Beijing Advanced Innovation Center for Future Blockchain and Privacy Computing, Institute of Artificial Intelligence, Beihang University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Artificial Intelligence, Beijing Advanced Innovation Center for Future Blockchain and Privacy Computing, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]},{"raw_affiliation_string":"Beijing Advanced Innovation Center for Future Blockchain and Privacy Computing, Institute of Artificial Intelligence, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100337209","display_name":"Min Chen","orcid":"https://orcid.org/0000-0002-0960-4447"},"institutions":[{"id":"https://openalex.org/I90610280","display_name":"South China University of Technology","ror":"https://ror.org/0530pts50","country_code":"CN","type":"education","lineage":["https://openalex.org/I90610280"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Min Chen","raw_affiliation_strings":["School of Computer Science and Engineering, South China University of Technology, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-0960-4447","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, South China University of Technology, Guangzhou, China","institution_ids":["https://openalex.org/I90610280"]}]},{"author_position":"last","author":{"id":null,"display_name":"Yin Tang","orcid":"https://orcid.org/0000-0001-7693-7543"},"institutions":[{"id":"https://openalex.org/I159948400","display_name":"Jinan University","ror":"https://ror.org/02xe5ns62","country_code":"CN","type":"education","lineage":["https://openalex.org/I159948400"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yin Tang","raw_affiliation_strings":["School of Management, Jinan University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-7693-7543","affiliations":[{"raw_affiliation_string":"School of Management, Jinan University, Guangzhou, China","institution_ids":["https://openalex.org/I159948400"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.4954,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.84374292,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":"20","issue":null,"first_page":"9275","last_page":"9288"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10667","display_name":"Emotion and Mood Recognition","score":0.9246000051498413,"subfield":{"id":"https://openalex.org/subfields/3205","display_name":"Experimental and Cognitive Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10667","display_name":"Emotion and Mood Recognition","score":0.9246000051498413,"subfield":{"id":"https://openalex.org/subfields/3205","display_name":"Experimental and Cognitive Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10444","display_name":"Context-Aware Activity Recognition Systems","score":0.900600016117096,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8214222192764282},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.48408544063568115},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.41874009370803833},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.4063362181186676}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8214222192764282},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.48408544063568115},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.41874009370803833},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.4063362181186676},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2025.3601358","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3601358","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1312685195","display_name":null,"funder_award_id":"2024A1515010121","funder_id":"https://openalex.org/F4320337111","funder_display_name":"Basic and Applied Basic Research Foundation of Guangdong Province"},{"id":"https://openalex.org/G308179870","display_name":null,"funder_award_id":"62272198","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320337111","display_name":"Basic and Applied Basic Research Foundation of Guangdong Province","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W1980867644","https://openalex.org/W2012481173","https://openalex.org/W2069867586","https://openalex.org/W2080006578","https://openalex.org/W2101746535","https://openalex.org/W2146729596","https://openalex.org/W2192203593","https://openalex.org/W2250539671","https://openalex.org/W2791741309","https://openalex.org/W2909737018","https://openalex.org/W2944954104","https://openalex.org/W2963764569","https://openalex.org/W2963775347","https://openalex.org/W2970641574","https://openalex.org/W2999300566","https://openalex.org/W3010081751","https://openalex.org/W3015534721","https://openalex.org/W3023514002","https://openalex.org/W3094045953","https://openalex.org/W3105217250","https://openalex.org/W3175769352","https://openalex.org/W4225454120","https://openalex.org/W4225727688","https://openalex.org/W4239025696","https://openalex.org/W4304098281","https://openalex.org/W4313201185","https://openalex.org/W4323055202","https://openalex.org/W4379259963","https://openalex.org/W4405304489"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"The":[0],"Uniform":[1],"Resource":[2],"Locator":[3],"(URL)":[4],"is":[5,87],"a":[6,23,65,93,103,118],"primary":[7],"vector":[8],"for":[9,130],"numerous":[10],"security":[11,27,80,132,145,175,186],"threats,":[12],"including":[13],"phishing,":[14],"malware":[15],"propagation,":[16],"and":[17,45,72,100,111,117,155,185],"spam":[18,156],"attacks,":[19],"making":[20],"URL-based":[21],"analysis":[22],"critical":[24],"task":[25],"in":[26,83],"systems.":[28,188],"However,":[29],"existing":[30,163],"research":[31],"often":[32],"focuses":[33],"on":[34],"static":[35],"lexical":[36],"features":[37],"of":[38,79,89,114,170],"individual":[39],"URLs,":[40],"overlooking":[41],"deeper":[42],"semantic,":[43,70],"structural,":[44,71],"behavioral":[46],"signals":[47],"that":[48,68,123],"can":[49],"indicate":[50],"malicious":[51,149],"intent":[52],"or":[53],"evasive":[54],"patterns.":[55],"In":[56],"this":[57],"paper,":[58],"we":[59,166],"propose":[60],"Behavior-Enhanced":[61],"Semantic":[62],"URL":[63,115,150],"Embedding,":[64],"novel":[66],"framework":[67],"integrates":[69],"contextual":[73,101],"information":[74],"to":[75,97,108,173],"improve":[76],"the":[77,168],"detection":[78,133,184],"threats":[81],"embedded":[82],"URLs.":[84],"Our":[85],"model":[86],"composed":[88],"three":[90],"core":[91],"modules:":[92],"semantic":[94],"understanding":[95],"module":[96,107,122],"extract":[98],"token-level":[99],"semantics,":[102],"topology":[104],"structure":[105],"learning":[106,129],"capture":[109],"hierarchical":[110],"sequential":[112],"patterns":[113],"components,":[116],"downstream":[119],"multi-task":[120],"adaptation":[121],"fine-tunes":[124],"embeddings":[125],"with":[126],"supervised":[127],"contrastive":[128],"various":[131],"tasks.":[134],"We":[135],"evaluate":[136],"our":[137,171],"method":[138],"across":[139],"five":[140],"public":[141],"datasets":[142],"covering":[143],"key":[144],"applications":[146],"such":[147],"as":[148],"detection,":[151],"phishing":[152],"website":[153],"identification,":[154],"filtering,":[157],"consistently":[158],"achieving":[159],"superior":[160],"performance":[161],"over":[162],"baselines.":[164],"Additionally,":[165],"demonstrate":[167],"extensibility":[169],"approach":[172],"related":[174],"tasks,":[176],"showcasing":[177],"its":[178],"potential":[179],"integration":[180],"into":[181],"real-world":[182],"threat":[183],"monitoring":[187]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}