{"id":"https://openalex.org/W7135011105","doi":"https://doi.org/10.1109/tifs.2026.3673137","title":"Exploratory Detection of Unknown Cyber-Attacks via Evolutionary Strategy and Machine Learning","display_name":"Exploratory Detection of Unknown Cyber-Attacks via Evolutionary Strategy and Machine Learning","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7135011105","doi":"https://doi.org/10.1109/tifs.2026.3673137"},"language":null,"primary_location":{"id":"doi:10.1109/tifs.2026.3673137","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2026.3673137","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Wenbo Fang","orcid":"https://orcid.org/0000-0002-2100-4794"},"institutions":[{"id":"https://openalex.org/I6645349","display_name":"Southwest Minzu University","ror":"https://ror.org/04gaexw88","country_code":"CN","type":"education","lineage":["https://openalex.org/I6645349"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenbo Fang","raw_affiliation_strings":["College of Science and Artificial Intelligence, Southwest Minzu University, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0002-2100-4794","affiliations":[{"raw_affiliation_string":"College of Science and Artificial Intelligence, Southwest Minzu University, Chengdu, China","institution_ids":["https://openalex.org/I6645349"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026195636","display_name":"G. Li","orcid":null},"institutions":[{"id":"https://openalex.org/I24201400","display_name":"Chengdu University of Information Technology","ror":"https://ror.org/01yxwrh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I24201400"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Gang Li","raw_affiliation_strings":["School of Software, Chengdu University of Information Technology, Chengdu, China"],"raw_orcid":"https://orcid.org/0009-0002-6143-9677","affiliations":[{"raw_affiliation_string":"School of Software, Chengdu University of Information Technology, Chengdu, China","institution_ids":["https://openalex.org/I24201400"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Sunjun Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I24201400","display_name":"Chengdu University of Information Technology","ror":"https://ror.org/01yxwrh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I24201400"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Sunjun Liu","raw_affiliation_strings":["School of Software, Chengdu University of Information Technology, Chengdu, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Software, Chengdu University of Information Technology, Chengdu, China","institution_ids":["https://openalex.org/I24201400"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128857305","display_name":"Linlin Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I96908189","display_name":"Xinjiang University","ror":"https://ror.org/059gw8r13","country_code":"CN","type":"education","lineage":["https://openalex.org/I96908189"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Linlin Zhang","raw_affiliation_strings":["School of Software, Xinjiang University, Ürümqi, China"],"raw_orcid":"https://orcid.org/0009-0001-6445-3450","affiliations":[{"raw_affiliation_string":"School of Software, Xinjiang University, Ürümqi, China","institution_ids":["https://openalex.org/I96908189"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121550178","display_name":"Menghao Ao","orcid":null},"institutions":[{"id":"https://openalex.org/I24201400","display_name":"Chengdu University of Information Technology","ror":"https://ror.org/01yxwrh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I24201400"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Menghao Ao","raw_affiliation_strings":["School of Software, Chengdu University of Information Technology, Chengdu, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Software, Chengdu University of Information Technology, Chengdu, China","institution_ids":["https://openalex.org/I24201400"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128859543","display_name":"Qikai Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I24201400","display_name":"Chengdu University of Information Technology","ror":"https://ror.org/01yxwrh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I24201400"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qikai Wang","raw_affiliation_strings":["School of Software, Chengdu University of Information Technology, Chengdu, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Software, Chengdu University of Information Technology, Chengdu, China","institution_ids":["https://openalex.org/I24201400"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5128857580","display_name":"Junjiang He","orcid":null},"institutions":[{"id":"https://openalex.org/I24185976","display_name":"Sichuan University","ror":"https://ror.org/011ashp19","country_code":"CN","type":"education","lineage":["https://openalex.org/I24185976"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Junjiang He","raw_affiliation_strings":["School of Cyber Science and Engineering, Sichuan University, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0001-7040-2425","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Sichuan University, Chengdu, China","institution_ids":["https://openalex.org/I24185976"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.23992349,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"21","issue":null,"first_page":"3137","last_page":"3152"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.6495000123977661,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.6495000123977661,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.12770000100135803,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.03759999945759773,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.628000020980835},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.5723000168800354},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.47369998693466187},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.4593999981880188},{"id":"https://openalex.org/keywords/evolutionary-algorithm","display_name":"Evolutionary algorithm","score":0.4551999866962433},{"id":"https://openalex.org/keywords/face","display_name":"Face (sociological concept)","score":0.4490000009536743},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.41600000858306885},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.397599995136261}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8191999793052673},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.7689999938011169},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.628000020980835},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6040999889373779},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5723000168800354},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.47369998693466187},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.4593999981880188},{"id":"https://openalex.org/C159149176","wikidata":"https://www.wikidata.org/wiki/Q14489129","display_name":"Evolutionary algorithm","level":2,"score":0.4551999866962433},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.4490000009536743},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.41600000858306885},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.397599995136261},{"id":"https://openalex.org/C61326573","wikidata":"https://www.wikidata.org/wiki/Q1496376","display_name":"Gaussian process","level":3,"score":0.3375000059604645},{"id":"https://openalex.org/C4641261","wikidata":"https://www.wikidata.org/wiki/Q11681085","display_name":"Face detection","level":4,"score":0.3124000132083893},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.3057999908924103},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.305400013923645},{"id":"https://openalex.org/C163716315","wikidata":"https://www.wikidata.org/wiki/Q901177","display_name":"Gaussian","level":2,"score":0.3019999861717224},{"id":"https://openalex.org/C105902424","wikidata":"https://www.wikidata.org/wiki/Q1197129","display_name":"Evolutionary computation","level":2,"score":0.29820001125335693},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.296099990606308},{"id":"https://openalex.org/C61224824","wikidata":"https://www.wikidata.org/wiki/Q2260434","display_name":"Mixture model","level":2,"score":0.2930000126361847},{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.2768999934196472}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2026.3673137","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2026.3673137","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5159284472465515,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G7582952279","display_name":null,"funder_award_id":"62402330","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8370080615","display_name":null,"funder_award_id":"62366052","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8446699606","display_name":null,"funder_award_id":"62402300","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8721296184","display_name":null,"funder_award_id":"2025ZNSFSC1474","funder_id":"https://openalex.org/F4320335433","funder_display_name":"Science Foundation for Excellent Youth Scholars of Sichuan University"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335433","display_name":"Science Foundation for Excellent Youth Scholars of Sichuan University","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"With":[0],"the":[1,126,130,150,197,214],"open-source":[2],"development":[3],"of":[4,70,89,170,211],"cyber-attack":[5],"technologies,":[6],"attackers\u2019":[7],"ability":[8],"to":[9,19,43,50,92,132,186,202],"modify":[10],"existing":[11],"strategies":[12],"and":[13,47,54,76,112,129,172,188,193,227],"exploit":[14],"vulnerabilities":[15],"has":[16],"increased,":[17],"leading":[18],"numerous":[20],"unknown":[21,98,137,176,194],"cyber-attacks.":[22],"Traditional":[23],"detection":[24,39,156,223],"methods":[25,40,224],"face":[26],"two":[27],"main":[28],"challenges:":[29],"(a)":[30],"requiring":[31],"abundant":[32],"labeled":[33],"attack":[34,99,177],"samples,":[35],"which":[36],"deep":[37],"learning-based":[38],"find":[41],"difficult":[42],"obtain":[44],"in":[45,196,213],"practice,":[46],"(b)":[48],"struggling":[49],"effectively":[51],"detect":[52],"novel":[53],"previously":[55],"unseen":[56],"attacks,":[57],"especially":[58],"those":[59],"that":[60],"are":[61,123],"unknown.":[62],"In":[63],"this":[64],"paper,":[65],"we":[66,81,105,140],"propose":[67],"Exploratory":[68],"Detection":[69],"Unknown":[71],"Cyber-Attacks":[72],"via":[73,101,225],"Evolutionary":[74],"Strategy":[75],"Machine":[77],"Learning.":[78],"Specifically,":[79],"firstly,":[80],"train":[82,142],"kernel-based":[83],"Ramp-OCSVM":[84,128],"models":[85],"on":[86,155,162],"full":[87],"features":[88,109,122],"known":[90,107,192],"attacks":[91,195],"derive":[93],"class-specific":[94],"thresholds,":[95],"while":[96,217],"inferring":[97],"thresholds":[100,131],"Gaussian":[102],"distribution.":[103],"Next,":[104],"define":[106],"sample":[108],"as":[110],"\u201cgenes\u201d":[111],"generate":[113],"evolutionary":[114],"feature":[115],"representations":[116],"through":[117],"multi-strategy":[118],"evolution.":[119],"Subsequently,":[120],"these":[121],"processed":[124],"by":[125],"trained":[127],"separate":[133],"known-attack":[134],"variants":[135],"from":[136],"samples.":[138],"Finally,":[139],"iteratively":[141],"a":[143],"RF":[144],"classifier":[145],"using":[146],"evolved":[147],"features,":[148],"selecting":[149],"optimal":[151],"iteration-trained":[152],"model":[153],"based":[154],"performance.":[157],"We":[158],"conducted":[159],"extensive":[160],"experiments":[161],"authoritative":[163],"datasets.":[164],"The":[165,181],"results":[166],"achieves":[167,208],"F1":[168,183,215],"scores":[169,184],"82.70%":[171],"87.64%":[173],"for":[174,190],"detecting":[175,191],"under":[178],"different":[179],"configurations.":[180],"mean":[182],"improve":[185],"99.84%":[187],"95.80%":[189],"few-shot":[198],"learning":[199],"scenario.":[200],"Compared":[201],"SOTA":[203],"methods,":[204],"our":[205],"proposed":[206],"method":[207],"an":[209],"increase":[210],"2.19%":[212],"score,":[216],"demonstrating":[218],"53.99%":[219],"higher":[220],"F1-score":[221],"than":[222],"GAN":[226],"VAE.":[228]},"counts_by_year":[],"updated_date":"2026-03-26T06:05:38.182114","created_date":"2026-03-13T00:00:00"}