{"id":"https://openalex.org/W4415820802","doi":"https://doi.org/10.1109/tmc.2025.3628363","title":"Along Came a Spider: Enabling Effective Cross-Domain Threat Detection via Collaborative Graph Learning","display_name":"Along Came a Spider: Enabling Effective Cross-Domain Threat Detection via Collaborative Graph Learning","publication_year":2025,"publication_date":"2025-11-03","ids":{"openalex":"https://openalex.org/W4415820802","doi":"https://doi.org/10.1109/tmc.2025.3628363"},"language":null,"primary_location":{"id":"doi:10.1109/tmc.2025.3628363","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tmc.2025.3628363","pdf_url":null,"source":{"id":"https://openalex.org/S69141925","display_name":"IEEE Transactions on Mobile Computing","issn_l":"1536-1233","issn":["1536-1233","1558-0660","2161-9875"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Mobile Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100703190","display_name":"Hao Tang","orcid":"https://orcid.org/0009-0006-6814-3456"},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hao Tang","raw_affiliation_strings":["School of Economics and Management, Tongji University, Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0006-6814-3456","affiliations":[{"raw_affiliation_string":"School of Economics and Management, Tongji University, Shanghai, China","institution_ids":["https://openalex.org/I116953780"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Cheng Wang","orcid":"https://orcid.org/0000-0002-4752-0316"},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Cheng Wang","raw_affiliation_strings":["School of Computer Science and Technology, Tongji University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-4752-0316","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Tongji University, Shanghai, China","institution_ids":["https://openalex.org/I116953780"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Kunfeng Chen","orcid":"https://orcid.org/0009-0002-2972-7038"},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kunfeng Chen","raw_affiliation_strings":["School of Computer Science and Technology, Tongji University, Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0002-2972-7038","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Tongji University, Shanghai, China","institution_ids":["https://openalex.org/I116953780"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5066099338","display_name":"Changjun Jiang","orcid":"https://orcid.org/0000-0003-0637-9317"},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Changjun Jiang","raw_affiliation_strings":["School of Computer Science and Technology, Tongji University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0003-0637-9317","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Tongji University, Shanghai, China","institution_ids":["https://openalex.org/I116953780"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I116953780"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.1609114,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"25","issue":"4","first_page":"5065","last_page":"5082"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.303600013256073,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.303600013256073,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.18230000138282776,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.1404999941587448,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.4973999857902527},{"id":"https://openalex.org/keywords/workload","display_name":"Workload","score":0.4968000054359436},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.47940000891685486},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.4489000141620636},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.38989999890327454},{"id":"https://openalex.org/keywords/information-sensitivity","display_name":"Information sensitivity","score":0.3589000105857849},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.3303999900817871},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.31150001287460327}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8766000270843506},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.4973999857902527},{"id":"https://openalex.org/C2778476105","wikidata":"https://www.wikidata.org/wiki/Q628539","display_name":"Workload","level":2,"score":0.4968000054359436},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.47940000891685486},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4489000141620636},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4097999930381775},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.38989999890327454},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.3589000105857849},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.33640000224113464},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.3303999900817871},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.31150001287460327},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.3009999990463257},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.29589998722076416},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.29330000281333923},{"id":"https://openalex.org/C138020889","wikidata":"https://www.wikidata.org/wiki/Q2349659","display_name":"Collaborative learning","level":2,"score":0.29280000925064087},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.29269999265670776},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.2881999909877777},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2840000092983246},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.2770000100135803},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.2766999900341034},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.274399995803833},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.26820001006126404},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.25529998540878296},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2517000138759613},{"id":"https://openalex.org/C88230418","wikidata":"https://www.wikidata.org/wiki/Q131476","display_name":"Graph theory","level":2,"score":0.2515000104904175},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2513999938964844}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tmc.2025.3628363","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tmc.2025.3628363","pdf_url":null,"source":{"id":"https://openalex.org/S69141925","display_name":"IEEE Transactions on Mobile Computing","issn_l":"1536-1233","issn":["1536-1233","1558-0660","2161-9875"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Mobile Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1012616008","display_name":null,"funder_award_id":"62372328","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G1474585034","display_name":null,"funder_award_id":"2024-1-ZD-04","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G2999259666","display_name":null,"funder_award_id":"22120240357","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G6873270536","display_name":null,"funder_award_id":"2024ZD001","funder_id":"https://openalex.org/F4320312071","funder_display_name":"Ministry of Education, Libya"}],"funders":[{"id":"https://openalex.org/F4320312071","display_name":"Ministry of Education, Libya","ror":"https://ror.org/02w030k33"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":54,"referenced_works":["https://openalex.org/W2010725470","https://openalex.org/W2090018148","https://openalex.org/W2154201675","https://openalex.org/W2605904959","https://openalex.org/W2790557990","https://openalex.org/W2808409763","https://openalex.org/W2809959305","https://openalex.org/W2947745012","https://openalex.org/W2962703433","https://openalex.org/W2978956219","https://openalex.org/W2981450816","https://openalex.org/W2998038410","https://openalex.org/W3004179294","https://openalex.org/W3005127313","https://openalex.org/W3015650867","https://openalex.org/W3016038045","https://openalex.org/W3016445534","https://openalex.org/W3110889769","https://openalex.org/W3130970113","https://openalex.org/W3135578542","https://openalex.org/W3156833186","https://openalex.org/W3158906645","https://openalex.org/W3172265425","https://openalex.org/W3209696639","https://openalex.org/W3212868562","https://openalex.org/W3217476834","https://openalex.org/W4210517283","https://openalex.org/W4214746841","https://openalex.org/W4226092233","https://openalex.org/W4226139354","https://openalex.org/W4281686206","https://openalex.org/W4283814689","https://openalex.org/W4285194168","https://openalex.org/W4285325239","https://openalex.org/W4286375281","https://openalex.org/W4288057803","https://openalex.org/W4290876361","https://openalex.org/W4309939034","https://openalex.org/W4311165723","https://openalex.org/W4311703141","https://openalex.org/W4312948208","https://openalex.org/W4321488684","https://openalex.org/W4365999023","https://openalex.org/W4384948624","https://openalex.org/W4385567478","https://openalex.org/W4388835106","https://openalex.org/W4390187498","https://openalex.org/W4392939845","https://openalex.org/W4393141675","https://openalex.org/W4393207695","https://openalex.org/W4400530199","https://openalex.org/W4402265033","https://openalex.org/W4402288718","https://openalex.org/W4402334728"],"related_works":[],"abstract_inverted_index":{"Advanced":[0],"persistent":[1],"threat":[2,34,47,106,144],"groups":[3],"are":[4],"launching":[5],"extensive":[6],"attacks":[7],"on":[8,26,53,111,142],"national":[9],"critical":[10],"institutions":[11],"and":[12,43,80,95,117,140,162,185],"key":[13],"infrastructures.":[14],"Learning":[15],"contextual":[16],"information":[17,85,149],"among":[18],"entities":[19],"using":[20],"graph":[21,113],"neural":[22],"network":[23,181],"models":[24],"based":[25,110],"provenance":[27],"graphs":[28],"has":[29],"demonstrated":[30],"excellent":[31],"performance":[32],"in":[33,178],"detection.":[35,99,120],"However,":[36],"due":[37],"to":[38,127],"constraints":[39],"of":[40,64,97,124,166,180,195],"transmission":[41],"costs":[42],"privacy":[44],"concerns,":[45],"existing":[46],"detection":[48,107,160,172],"methods":[49],"typically":[50],"rely":[51],"solely":[52],"audit":[54],"logs":[55],"within":[56],"their":[57,82],"own":[58],"domains,":[59],"which":[60,146,188],"contain":[61],"only":[62],"part":[63],"the":[65,93,155,164,170,196],"attacker's":[66],"behavior.":[67],"Attackers":[68],"have":[69],"also":[70],"recognized":[71],"this,":[72],"so":[73],"they":[74],"brazenly":[75],"carry":[76],"out":[77],"attack":[78],"attempts":[79],"expand":[81],"impact.":[83],"The":[84,121],"asymmetry":[86],"across":[87],"multiple":[88],"domains":[89],"indeed":[90],"significantly":[91,174],"impacts":[92],"efficiency":[94],"timeliness":[96],"APT":[98,119],"This":[100],"paper":[101],"introduces":[102],"a":[103],"novel":[104],"cross-domain":[105,134],"(CDTD)":[108],"scheme":[109,173],"collaborative":[112],"learning":[114],"for":[115,192],"effective":[116],"early":[118],"core":[122],"idea":[123],"CDTD":[125],"is":[126],"foster":[128],"mutual":[129],"benefits":[130],"by":[131],"utilizing":[132],"potential":[133,191],"general":[135],"knowledge":[136],"from":[137],"heterogeneous":[138],"data":[139],"collaborating":[141],"precious":[143],"intelligence,":[145],"could":[147],"mitigate":[148],"asymmetry.":[150],"Experimental":[151],"results":[152],"demonstrate":[153],"that":[154],"proposed":[156,197],"method":[157],"achieves":[158],"state-of-the-art":[159],"capabilities":[161],"reduces":[163],"workload":[165],"security":[167],"analysts.":[168],"Additionally,":[169],"distributed":[171],"decreases":[175],"system":[176],"overheads":[177],"terms":[179],"bandwidth,":[182],"memory":[183],"usage,":[184],"execution":[186],"time,":[187],"shows":[189],"promising":[190],"broad":[193],"applications":[194],"scheme.":[198]},"counts_by_year":[],"updated_date":"2026-03-09T07:00:12.390032","created_date":"2025-11-03T00:00:00"}