{"id":"https://openalex.org/W4411799099","doi":"https://doi.org/10.1109/tnse.2025.3584627","title":"EarlyDLM: Early Detecting Lateral Movements Through Graph and Loopback Sequence Embedding","display_name":"EarlyDLM: Early Detecting Lateral Movements Through Graph and Loopback Sequence Embedding","publication_year":2025,"publication_date":"2025-06-30","ids":{"openalex":"https://openalex.org/W4411799099","doi":"https://doi.org/10.1109/tnse.2025.3584627"},"language":"en","primary_location":{"id":"doi:10.1109/tnse.2025.3584627","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnse.2025.3584627","pdf_url":null,"source":{"id":"https://openalex.org/S2484352698","display_name":"IEEE Transactions on Network Science and Engineering","issn_l":"2327-4697","issn":["2327-4697","2334-329X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network Science and Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5012922428","display_name":"Xiaorong Hao","orcid":"https://orcid.org/0000-0001-8973-2424"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaorong Hao","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0001-8973-2424","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100461575","display_name":"Bo Liu","orcid":"https://orcid.org/0000-0001-5209-9063"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bo Liu","raw_affiliation_strings":["School of Computer Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0001-5209-9063","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046510716","display_name":"Shan Wang","orcid":"https://orcid.org/0000-0001-7742-8679"},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Shan Wang","raw_affiliation_strings":["Hong Kong Polytechnic University, Hong Kong, China"],"raw_orcid":"https://orcid.org/0000-0001-7742-8679","affiliations":[{"raw_affiliation_string":"Hong Kong Polytechnic University, Hong Kong, China","institution_ids":["https://openalex.org/I14243506"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012384188","display_name":"Jiuxin Cao","orcid":"https://orcid.org/0000-0002-2448-6717"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiuxin Cao","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-2448-6717","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058994392","display_name":"Ding Zhou","orcid":"https://orcid.org/0000-0002-8142-1426"},"institutions":[{"id":"https://openalex.org/I4210155350","display_name":"Purple Mountain Laboratories","ror":"https://ror.org/04zcbk583","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210155350"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ding Zhou","raw_affiliation_strings":["Purple Mountain Laboratories, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-8142-1426","affiliations":[{"raw_affiliation_string":"Purple Mountain Laboratories, Nanjing, China","institution_ids":["https://openalex.org/I4210155350"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5063375840","display_name":"Xinwen Fu","orcid":"https://orcid.org/0000-0003-2391-7789"},"institutions":[{"id":"https://openalex.org/I133738476","display_name":"University of Massachusetts Lowell","ror":"https://ror.org/03hamhx47","country_code":"US","type":"education","lineage":["https://openalex.org/I133738476"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xinwen Fu","raw_affiliation_strings":["School of Computer &amp; Information Sciences, University of Massachusetts Lowell, Lowell, MA, USA"],"raw_orcid":"https://orcid.org/0000-0003-2391-7789","affiliations":[{"raw_affiliation_string":"School of Computer &amp; Information Sciences, University of Massachusetts Lowell, Lowell, MA, USA","institution_ids":["https://openalex.org/I133738476"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.2288,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.79095498,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":"13","issue":null,"first_page":"454","last_page":"468"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11398","display_name":"Hand Gesture Recognition Systems","score":0.9639000296592712,"subfield":{"id":"https://openalex.org/subfields/1709","display_name":"Human-Computer Interaction"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11398","display_name":"Hand Gesture Recognition Systems","score":0.9639000296592712,"subfield":{"id":"https://openalex.org/subfields/1709","display_name":"Human-Computer Interaction"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10429","display_name":"EEG and Brain-Computer Interfaces","score":0.9470000267028809,"subfield":{"id":"https://openalex.org/subfields/2805","display_name":"Cognitive Neuroscience"},"field":{"id":"https://openalex.org/fields/28","display_name":"Neuroscience"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6146474480628967},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.5293322801589966},{"id":"https://openalex.org/keywords/sequence","display_name":"Sequence (biology)","score":0.5224734544754028},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.42008885741233826},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3849990963935852},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.38214820623397827},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.34031200408935547},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.306182324886322}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6146474480628967},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.5293322801589966},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.5224734544754028},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.42008885741233826},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3849990963935852},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.38214820623397827},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.34031200408935547},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.306182324886322},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C54355233","wikidata":"https://www.wikidata.org/wiki/Q7162","display_name":"Genetics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnse.2025.3584627","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnse.2025.3584627","pdf_url":null,"source":{"id":"https://openalex.org/S2484352698","display_name":"IEEE Transactions on Network Science and Engineering","issn_l":"2327-4697","issn":["2327-4697","2334-329X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network Science and Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1019060874","display_name":null,"funder_award_id":"BK20191258","funder_id":"https://openalex.org/F4320322769","funder_display_name":"Natural Science Foundation of Jiangsu Province"},{"id":"https://openalex.org/G5988281228","display_name":null,"funder_award_id":"62172089","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7379951849","display_name":null,"funder_award_id":"62472092","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322769","display_name":"Natural Science Foundation of Jiangsu Province","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":46,"referenced_works":["https://openalex.org/W2058115154","https://openalex.org/W2141996170","https://openalex.org/W2476891002","https://openalex.org/W2561684037","https://openalex.org/W2766503369","https://openalex.org/W2792023776","https://openalex.org/W2898098096","https://openalex.org/W2900814345","https://openalex.org/W2906034153","https://openalex.org/W2908063670","https://openalex.org/W2919358060","https://openalex.org/W2925289689","https://openalex.org/W2960465464","https://openalex.org/W2963273426","https://openalex.org/W2963471098","https://openalex.org/W3007170941","https://openalex.org/W3034402928","https://openalex.org/W3036598342","https://openalex.org/W3047150775","https://openalex.org/W3080456792","https://openalex.org/W3089549039","https://openalex.org/W3096129012","https://openalex.org/W3107973192","https://openalex.org/W3124203340","https://openalex.org/W3127076682","https://openalex.org/W3170032051","https://openalex.org/W3179438752","https://openalex.org/W3190847932","https://openalex.org/W3198839083","https://openalex.org/W3205408730","https://openalex.org/W3212619967","https://openalex.org/W4200304719","https://openalex.org/W4225697716","https://openalex.org/W4226128225","https://openalex.org/W4282546337","https://openalex.org/W4282963615","https://openalex.org/W4285326819","https://openalex.org/W4289334733","https://openalex.org/W4294238081","https://openalex.org/W4295540231","https://openalex.org/W4323321528","https://openalex.org/W4324093415","https://openalex.org/W4360764855","https://openalex.org/W4366389425","https://openalex.org/W4379548935","https://openalex.org/W4388894090"],"related_works":["https://openalex.org/W2081900870","https://openalex.org/W2037549926","https://openalex.org/W2345479200","https://openalex.org/W2183306018","https://openalex.org/W2849310602","https://openalex.org/W3006008237","https://openalex.org/W2419146053","https://openalex.org/W4388890789","https://openalex.org/W2966686650","https://openalex.org/W2932872266"],"abstract_inverted_index":{"An":[0],"adversary":[1],"may":[2,83],"conduct":[3],"lateral":[4,30,190],"movement":[5,31,191],"(LM),":[6],"a":[7,48,60,103,129,148],"critical":[8],"tactic":[9],"in":[10,46,93,158],"advanced":[11],"persistent":[12],"threats":[13],"(APTs),":[14],"to":[15,89,138,153],"progressively":[16],"access":[17],"and":[18,82,106,133,193],"control":[19],"systems":[20],"within":[21],"an":[22],"intranet,":[23],"advancing":[24],"toward":[25],"their":[26,94],"ultimate":[27,66],"targets.":[28,67],"Detecting":[29],"has":[32],"drawn":[33],"significant":[34],"research":[35],"interest.":[36],"However,":[37],"existing":[38,70],"work":[39,78,194],"on":[40,179],"LM":[41],"detection":[42,75,86,175],"exhibits":[43],"low":[44],"effectiveness":[45],"identifying":[47],"LM-based":[49,80],"attack":[50,74],"at":[51],"its":[52],"early":[53,73,189],"stage,":[54],"defined":[55],"as":[56],"attackers":[57],"only":[58],"compromise":[59],"few":[61],"hosts":[62,143,157],"before":[63],"reaching":[64],"the":[65,90,140,159,167],"In":[68],"addition,":[69],"methods":[71],"for":[72,111],"usually":[76],"cannot":[77],"against":[79],"attacks":[81],"incur":[84],"cumulative":[85,174],"errors":[87],"due":[88],"noise":[91],"propagation":[92],"recursive":[95],"structures.":[96],"To":[97],"bridge":[98],"this":[99],"gap,":[100],"we":[101,146],"design":[102],"new":[104],"graph":[105,132,135],"loopback":[107,149,168],"sequence":[108,150,169],"embedding":[109,136,151,170],"model":[110,152,171],"<underline":[112,115,119,122],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[113,116,120,123],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Early</u>":[114],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">D</u>etection":[117],"of":[118,142],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">L</u>ateral":[121],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">M</u>ovement":[124],"(EarlyDLM).":[125],"EarlyDLM":[126,185],"first":[127],"constructs":[128],"discrete":[130],"temporal":[131],"employs":[134],"models":[137],"learn":[139],"features":[141],"effectively.":[144],"Then,":[145],"introduce":[147],"predict":[154],"connections":[155],"among":[156],"future.":[160],"The":[161],"backward":[162],"inference":[163],"capability":[164],"possessed":[165],"by":[166],"can":[172,186],"alleviate":[173],"errors.":[176],"Experimental":[177],"results":[178],"three":[180],"public":[181],"datasets":[182],"demonstrate":[183],"that":[184],"accurately":[187],"detect":[188],"events,":[192],"better":[195],"than":[196],"other":[197],"work.":[198]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}