{"id":"https://openalex.org/W3017733550","doi":"https://doi.org/10.1109/tkde.2020.2987019","title":"HinCTI: A Cyber Threat Intelligence Modeling and Identification System Based on Heterogeneous Information Network","display_name":"HinCTI: A Cyber Threat Intelligence Modeling and Identification System Based on Heterogeneous Information Network","publication_year":2020,"publication_date":"2020-04-20","ids":{"openalex":"https://openalex.org/W3017733550","doi":"https://doi.org/10.1109/tkde.2020.2987019","mag":"3017733550"},"language":"en","primary_location":{"id":"doi:10.1109/tkde.2020.2987019","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tkde.2020.2987019","pdf_url":null,"source":{"id":"https://openalex.org/S30698027","display_name":"IEEE Transactions on Knowledge and Data Engineering","issn_l":"1041-4347","issn":["1041-4347","1558-2191","2326-3865"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Knowledge and Data Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5075909729","display_name":"Yali Gao","orcid":"https://orcid.org/0000-0003-0458-8481"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yali Gao","raw_affiliation_strings":["Key Laboratory of Trustworthy Distributed Computing and Service, Ministry of Education, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-0458-8481","affiliations":[{"raw_affiliation_string":"Key Laboratory of Trustworthy Distributed Computing and Service, Ministry of Education, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100673949","display_name":"Xiaoyong Li","orcid":"https://orcid.org/0000-0001-5597-9306"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoyong Li","raw_affiliation_strings":["Key Laboratory of Trustworthy Distributed Computing and Service, Ministry of Education, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-5597-9306","affiliations":[{"raw_affiliation_string":"Key Laboratory of Trustworthy Distributed Computing and Service, Ministry of Education, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100740618","display_name":"Hao Peng","orcid":"https://orcid.org/0000-0001-7422-630X"},"institutions":[{"id":"https://openalex.org/I4210165198","display_name":"Beijing Advanced Sciences and Innovation Center","ror":"https://ror.org/05qm21180","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165198"]},{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hao Peng","raw_affiliation_strings":["Beijing Advanced Innovation Center for Big Data and Brain Computing, Beihang University, Beijing, China","State Key Laboratory of Software Development Environment, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-7422-630X","affiliations":[{"raw_affiliation_string":"Beijing Advanced Innovation Center for Big Data and Brain Computing, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I4210165198","https://openalex.org/I82880672"]},{"raw_affiliation_string":"State Key Laboratory of Software Development Environment, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113587199","display_name":"Binxing Fang","orcid":null},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Binxing Fang","raw_affiliation_strings":["Key Laboratory of Trustworthy Distributed Computing and Service, Ministry of Education, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Key Laboratory of Trustworthy Distributed Computing and Service, Ministry of Education, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5036357902","display_name":"Philip S. Yu","orcid":"https://orcid.org/0000-0002-3491-5968"},"institutions":[{"id":"https://openalex.org/I39422238","display_name":"University of Illinois Chicago","ror":"https://ror.org/02mpq6x41","country_code":"US","type":"education","lineage":["https://openalex.org/I39422238"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN","US"],"is_corresponding":false,"raw_author_name":"Philip S. Yu","raw_affiliation_strings":["Computer Science Department, University of Illinois at Chicago, Chicago, IL, USA","Institude for Data Science, Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-3491-5968","affiliations":[{"raw_affiliation_string":"Computer Science Department, University of Illinois at Chicago, Chicago, IL, USA","institution_ids":["https://openalex.org/I39422238"]},{"raw_affiliation_string":"Institude for Data Science, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":9.5823,"has_fulltext":false,"cited_by_count":127,"citation_normalized_percentile":{"value":0.98302581,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":"34","issue":"2","first_page":"708","last_page":"722"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9959999918937683,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7843555212020874},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5610748529434204},{"id":"https://openalex.org/keywords/cyber-threats","display_name":"Cyber threats","score":0.5128107666969299},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.4359170198440552},{"id":"https://openalex.org/keywords/critical-infrastructure","display_name":"Critical infrastructure","score":0.41735243797302246},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.33365482091903687}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7843555212020874},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5610748529434204},{"id":"https://openalex.org/C3018725008","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber threats","level":2,"score":0.5128107666969299},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.4359170198440552},{"id":"https://openalex.org/C29852176","wikidata":"https://www.wikidata.org/wiki/Q373338","display_name":"Critical infrastructure","level":2,"score":0.41735243797302246},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.33365482091903687},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tkde.2020.2987019","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tkde.2020.2987019","pdf_url":null,"source":{"id":"https://openalex.org/S30698027","display_name":"IEEE Transactions on Knowledge and Data Engineering","issn_l":"1041-4347","issn":["1041-4347","1558-2191","2326-3865"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Knowledge and Data Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.6100000143051147}],"awards":[{"id":"https://openalex.org/G5483372277","display_name":null,"funder_award_id":"U1836215","funder_id":"https://openalex.org/F4320336807","funder_display_name":"National Natural Science Foundation of China-China Academy of General Technology Joint Fund for Basic Research"},{"id":"https://openalex.org/G7197909496","display_name":null,"funder_award_id":"2018YFC0830804","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G7304636144","display_name":null,"funder_award_id":"CNS-1930941","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7633400475","display_name":null,"funder_award_id":"III-1763325","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7817793019","display_name":null,"funder_award_id":"III-1909323","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null},{"id":"https://openalex.org/F4320336807","display_name":"National Natural Science Foundation of China-China Academy of General Technology Joint Fund for Basic Research","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":58,"referenced_works":["https://openalex.org/W103340358","https://openalex.org/W1419517020","https://openalex.org/W1501856433","https://openalex.org/W1561983441","https://openalex.org/W1674074141","https://openalex.org/W1981294881","https://openalex.org/W1983551905","https://openalex.org/W1983776999","https://openalex.org/W2095705004","https://openalex.org/W2104324457","https://openalex.org/W2116341502","https://openalex.org/W2137165876","https://openalex.org/W2146729596","https://openalex.org/W2152755144","https://openalex.org/W2154851992","https://openalex.org/W2187358498","https://openalex.org/W2348679751","https://openalex.org/W2401054255","https://openalex.org/W2404532944","https://openalex.org/W2526931032","https://openalex.org/W2533908554","https://openalex.org/W2538865281","https://openalex.org/W2554200766","https://openalex.org/W2560810941","https://openalex.org/W2568683544","https://openalex.org/W2598491244","https://openalex.org/W2728121559","https://openalex.org/W2743104969","https://openalex.org/W2743159750","https://openalex.org/W2744097819","https://openalex.org/W2760313715","https://openalex.org/W2767774008","https://openalex.org/W2771963642","https://openalex.org/W2782101021","https://openalex.org/W2788667846","https://openalex.org/W2790843555","https://openalex.org/W2808927717","https://openalex.org/W2884134047","https://openalex.org/W2892774134","https://openalex.org/W2905097561","https://openalex.org/W2907977958","https://openalex.org/W2908520504","https://openalex.org/W2911286998","https://openalex.org/W2913949296","https://openalex.org/W2953384591","https://openalex.org/W2962756421","https://openalex.org/W2963528528","https://openalex.org/W2963919031","https://openalex.org/W2964015378","https://openalex.org/W2966779056","https://openalex.org/W3098102491","https://openalex.org/W3104097132","https://openalex.org/W4250531815","https://openalex.org/W6633578641","https://openalex.org/W6674330103","https://openalex.org/W6713023146","https://openalex.org/W6713134421","https://openalex.org/W6726873649"],"related_works":["https://openalex.org/W3088911518","https://openalex.org/W4385250032","https://openalex.org/W3110311961","https://openalex.org/W4362685783","https://openalex.org/W4242728933","https://openalex.org/W2493430149","https://openalex.org/W4386107585","https://openalex.org/W3196431560","https://openalex.org/W2552246019","https://openalex.org/W2767924451"],"abstract_inverted_index":{"Cyber":[0],"attacks":[1],"have":[2],"become":[3],"increasingly":[4],"complicated,":[5],"persistent,":[6],"organized,":[7],"and":[8,49,63,68,123,161,171,183,219,250,275,312],"weaponized.":[9],"Faces":[10],"with":[11],"this":[12,237],"situation,":[13],"drives":[14],"a":[15,25,40,109,130,169,185,252],"rising":[16],"number":[17],"of":[18,33,43,71,83,96,139,158,199,217,228,234,260,288],"organizations":[19,315],"across":[20],"the":[21,30,44,61,69,80,93,136,196,207,215,224,232,240,286,294],"world":[22],"are":[23,270],"showing":[24],"growing":[26],"willingness":[27],"to":[28,60,79,134,194,242,293,303],"leverage":[29],"open":[31],"exchange":[32],"cyber":[34,46,84,120,145],"threat":[35,47,85,94,121,125,131,146,174,180,197,225,248,257,289],"intelligence":[36,122,132,147],"(CTI)":[37],"for":[38,99,118,247,256],"obtaining":[39],"full":[41],"picture":[42],"fast-evolving":[45],"situation":[48],"protecting":[50],"themselves":[51],"against":[52,316],"cyber-attacks.":[53,317],"However,":[54],"modeling":[55,119],"CTI":[56,67,244],"is":[57,102,116,239,301],"challenging":[58],"due":[59],"explicit":[62],"implicit":[64],"relationships":[65],"among":[66,164],"heterogeneity":[70],"cyber-threat":[72],"infrastructure":[73,86,97,140,159,181,200,229,261],"nodes":[74,87,98,160,182,201],"involved":[75,88,202],"in":[76,89,203,223],"CTI.":[77,204],"Owing":[78],"limited":[81],"labels":[82],"CTI,":[90],"automatically":[91],"identifying":[92,124],"type":[95,226,258,290],"early":[100],"warning":[101],"also":[103],"challenging.":[104],"To":[105,231],"tackle":[106],"these":[107],"challenges,":[108],"practical":[110],"system":[111],"called":[112],"<italic":[113,264],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[114,265],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">HinCTI</i>":[115,266],"developed":[117],"types.":[126],"We":[127,142],"first":[128,241],"design":[129],"meta-schema":[133],"depict":[135],"semantic":[137],"relatedness":[138],"nodes.":[141,230,262],"then":[143],"model":[144,212,243],"on":[148,245,272],"heterogeneous":[149,188,253],"information":[150],"network":[151,191],"(HIN),":[152],"which":[153],"can":[154,213,283],"integrate":[155],"various":[156],"types":[157,198],"rich":[162],"relations":[163],"them.":[165],"Following,":[166],"we":[167],"define":[168],"meta-path":[170],"meta-graph":[172],"instances-based":[173],"Infrastructure":[175],"similarity":[176],"(MIIS)":[177],"measure":[178],"between":[179],"present":[184],"MIIS":[186],"measure-based":[187],"graph":[189],"convolutional":[190],"(GCN)":[192],"approach":[193,255,282],"identify":[195],"Moreover,":[205],"through":[206],"hierarchical":[208],"regularization":[209],"strategy,":[210],"our":[211,235,280],"alleviate":[214],"problem":[216],"overfitting":[218],"achieve":[220],"good":[221],"results":[222,277],"identification":[227,249,259,291],"best":[233],"knowledge,":[236],"work":[238,300,311],"HIN":[246],"propose":[251],"GCN-based":[254],"With":[263],",":[267],"comprehensive":[268],"experiments":[269],"conducted":[271],"real-world":[273],"datasets,":[274],"experimental":[276],"demonstrate":[278],"that":[279],"proposed":[281],"significantly":[284],"improve":[285],"performance":[287],"compared":[292],"existing":[295],"state-of-the-art":[296],"baseline":[297],"methods.":[298],"Our":[299],"beneficial":[302],"greatly":[304],"relieve":[305],"security":[306],"analysts":[307],"from":[308],"heavy":[309],"analysis":[310],"efficiently":[313],"protect":[314]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":26},{"year":2024,"cited_by_count":36},{"year":2023,"cited_by_count":21},{"year":2022,"cited_by_count":17},{"year":2021,"cited_by_count":20},{"year":2020,"cited_by_count":4}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}