{"id":"https://openalex.org/W4407403176","doi":"https://doi.org/10.1109/tnsm.2025.3531885","title":"GSA-DT: A Malicious Traffic Detection Model Based on Graph Self-Attention Network and Decision Tree","display_name":"GSA-DT: A Malicious Traffic Detection Model Based on Graph Self-Attention Network and Decision Tree","publication_year":2025,"publication_date":"2025-02-12","ids":{"openalex":"https://openalex.org/W4407403176","doi":"https://doi.org/10.1109/tnsm.2025.3531885"},"language":"en","primary_location":{"id":"doi:10.1109/tnsm.2025.3531885","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2025.3531885","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5090272207","display_name":"Saihua Cai","orcid":"https://orcid.org/0000-0003-0743-1156"},"institutions":[{"id":"https://openalex.org/I115592961","display_name":"Jiangsu University","ror":"https://ror.org/03jc41j30","country_code":"CN","type":"education","lineage":["https://openalex.org/I115592961"]},{"id":"https://openalex.org/I4210096899","display_name":"Jiangsu University of Science and Technology","ror":"https://ror.org/00tyjp878","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210096899"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Saihua Cai","raw_affiliation_strings":["School of Computer Science and Communication Engineering, and the Jiangsu Provincial Key Laboratory of Industrial Cyberspace Security Technology, Jiangsu University, Zhenjiang, China","School of Computer Science and Communication Engineering, Jiangsu University, Zhenjiang, China"],"raw_orcid":"https://orcid.org/0000-0003-0743-1156","affiliations":[{"raw_affiliation_string":"School of Computer Science and Communication Engineering, and the Jiangsu Provincial Key Laboratory of Industrial Cyberspace Security Technology, Jiangsu University, Zhenjiang, China","institution_ids":["https://openalex.org/I4210096899"]},{"raw_affiliation_string":"School of Computer Science and Communication Engineering, Jiangsu University, Zhenjiang, China","institution_ids":["https://openalex.org/I115592961"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062457127","display_name":"Hanmei Tang","orcid":"https://orcid.org/0000-0003-2659-7768"},"institutions":[{"id":"https://openalex.org/I115592961","display_name":"Jiangsu University","ror":"https://ror.org/03jc41j30","country_code":"CN","type":"education","lineage":["https://openalex.org/I115592961"]},{"id":"https://openalex.org/I4210096899","display_name":"Jiangsu University of Science and Technology","ror":"https://ror.org/00tyjp878","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210096899"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Han Tang","raw_affiliation_strings":["School of Computer Science and Communication Engineering, and the Jiangsu Provincial Key Laboratory of Industrial Cyberspace Security Technology, Jiangsu University, Zhenjiang, China","School of Computer Science and Communication Engineering, Jiangsu University, Zhenjiang, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Communication Engineering, and the Jiangsu Provincial Key Laboratory of Industrial Cyberspace Security Technology, Jiangsu University, Zhenjiang, China","institution_ids":["https://openalex.org/I4210096899"]},{"raw_affiliation_string":"School of Computer Science and Communication Engineering, Jiangsu University, Zhenjiang, China","institution_ids":["https://openalex.org/I115592961"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063671391","display_name":"Jinfu Chen","orcid":"https://orcid.org/0000-0002-3124-5452"},"institutions":[{"id":"https://openalex.org/I115592961","display_name":"Jiangsu University","ror":"https://ror.org/03jc41j30","country_code":"CN","type":"education","lineage":["https://openalex.org/I115592961"]},{"id":"https://openalex.org/I4210096899","display_name":"Jiangsu University of Science and Technology","ror":"https://ror.org/00tyjp878","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210096899"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinfu Chen","raw_affiliation_strings":["School of Computer Science and Communication Engineering, and the Jiangsu Provincial Key Laboratory of Industrial Cyberspace Security Technology, Jiangsu University, Zhenjiang, China","School of Computer Science and Communication Engineering, Jiangsu University, Zhenjiang, China"],"raw_orcid":"https://orcid.org/0000-0002-3124-5452","affiliations":[{"raw_affiliation_string":"School of Computer Science and Communication Engineering, and the Jiangsu Provincial Key Laboratory of Industrial Cyberspace Security Technology, Jiangsu University, Zhenjiang, China","institution_ids":["https://openalex.org/I4210096899"]},{"raw_affiliation_string":"School of Computer Science and Communication Engineering, Jiangsu University, Zhenjiang, China","institution_ids":["https://openalex.org/I115592961"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065872018","display_name":"Tianxiang Lv","orcid":null},"institutions":[{"id":"https://openalex.org/I115592961","display_name":"Jiangsu University","ror":"https://ror.org/03jc41j30","country_code":"CN","type":"education","lineage":["https://openalex.org/I115592961"]},{"id":"https://openalex.org/I4210096899","display_name":"Jiangsu University of Science and Technology","ror":"https://ror.org/00tyjp878","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210096899"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tianxiang Lv","raw_affiliation_strings":["School of Computer Science and Communication Engineering, and the Jiangsu Provincial Key Laboratory of Industrial Cyberspace Security Technology, Jiangsu University, Zhenjiang, China","School of Computer Science and Communication Engineering, Jiangsu University, Zhenjiang, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Communication Engineering, and the Jiangsu Provincial Key Laboratory of Industrial Cyberspace Security Technology, Jiangsu University, Zhenjiang, China","institution_ids":["https://openalex.org/I4210096899"]},{"raw_affiliation_string":"School of Computer Science and Communication Engineering, Jiangsu University, Zhenjiang, China","institution_ids":["https://openalex.org/I115592961"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100563157","display_name":"Wen-Jun Zhao","orcid":null},"institutions":[{"id":"https://openalex.org/I115592961","display_name":"Jiangsu University","ror":"https://ror.org/03jc41j30","country_code":"CN","type":"education","lineage":["https://openalex.org/I115592961"]},{"id":"https://openalex.org/I4210096899","display_name":"Jiangsu University of Science and Technology","ror":"https://ror.org/00tyjp878","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210096899"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenjun Zhao","raw_affiliation_strings":["School of Computer Science and Communication Engineering, and the Jiangsu Provincial Key Laboratory of Industrial Cyberspace Security Technology, Jiangsu University, Zhenjiang, China","School of Computer Science and Communication Engineering, Jiangsu University, Zhenjiang, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Communication Engineering, and the Jiangsu Provincial Key Laboratory of Industrial Cyberspace Security Technology, Jiangsu University, Zhenjiang, China","institution_ids":["https://openalex.org/I4210096899"]},{"raw_affiliation_string":"School of Computer Science and Communication Engineering, Jiangsu University, Zhenjiang, China","institution_ids":["https://openalex.org/I115592961"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089977481","display_name":"Chunlei Huang","orcid":"https://orcid.org/0000-0003-3875-605X"},"institutions":[{"id":"https://openalex.org/I115592961","display_name":"Jiangsu University","ror":"https://ror.org/03jc41j30","country_code":"CN","type":"education","lineage":["https://openalex.org/I115592961"]},{"id":"https://openalex.org/I4210096899","display_name":"Jiangsu University of Science and Technology","ror":"https://ror.org/00tyjp878","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210096899"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chunlei Huang","raw_affiliation_strings":["School of Computer Science and Communication Engineering, and the Jiangsu Provincial Key Laboratory of Industrial Cyberspace Security Technology, Jiangsu University, Zhenjiang, China","School of Computer Science and Communication Engineering, Jiangsu University, Zhenjiang, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Communication Engineering, and the Jiangsu Provincial Key Laboratory of Industrial Cyberspace Security Technology, Jiangsu University, Zhenjiang, China","institution_ids":["https://openalex.org/I4210096899"]},{"raw_affiliation_string":"School of Computer Science and Communication Engineering, Jiangsu University, Zhenjiang, China","institution_ids":["https://openalex.org/I115592961"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":12.1887,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.98437051,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"22","issue":"2","first_page":"2059","last_page":"2073"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9638000130653381,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9532999992370605,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8494488000869751},{"id":"https://openalex.org/keywords/decision-tree","display_name":"Decision tree","score":0.5959007143974304},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.48874902725219727},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4139411747455597},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.39593130350112915},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.34142017364501953},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.2490999698638916}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8494488000869751},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.5959007143974304},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.48874902725219727},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4139411747455597},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.39593130350112915},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.34142017364501953},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2490999698638916}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnsm.2025.3531885","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2025.3531885","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5799999833106995,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G1196022803","display_name":null,"funder_award_id":"2023T160275","funder_id":"https://openalex.org/F4320335443","funder_display_name":"Postdoctoral Research Foundation of China"},{"id":"https://openalex.org/G1308233889","display_name":null,"funder_award_id":"U1836116","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G565499716","display_name":null,"funder_award_id":"2023T160275","funder_id":"https://openalex.org/F4320321543","funder_display_name":"China Postdoctoral Science Foundation"},{"id":"https://openalex.org/G5747080351","display_name":null,"funder_award_id":"62202206","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6369611365","display_name":null,"funder_award_id":"62172194","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6747370699","display_name":null,"funder_award_id":"BK20220515","funder_id":"https://openalex.org/F4320322769","funder_display_name":"Natural Science Foundation of Jiangsu Province"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321543","display_name":"China Postdoctoral Science Foundation","ror":"https://ror.org/0426zh255"},{"id":"https://openalex.org/F4320322769","display_name":"Natural Science Foundation of Jiangsu Province","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320327794","display_name":"Qinglan Project of Jiangsu Province of China","ror":null},{"id":"https://openalex.org/F4320335443","display_name":"Postdoctoral Research Foundation of China","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W2606697812","https://openalex.org/W2726872669","https://openalex.org/W2790583291","https://openalex.org/W2796013264","https://openalex.org/W2802074198","https://openalex.org/W2901504064","https://openalex.org/W2970054631","https://openalex.org/W3034461890","https://openalex.org/W3035254752","https://openalex.org/W3040628207","https://openalex.org/W3151784567","https://openalex.org/W3213111842","https://openalex.org/W4200049650","https://openalex.org/W4206912047","https://openalex.org/W4220783734","https://openalex.org/W4221102375","https://openalex.org/W4226521449","https://openalex.org/W4285122420","https://openalex.org/W4285596339","https://openalex.org/W4290714064","https://openalex.org/W4304098281","https://openalex.org/W4312241727","https://openalex.org/W4312893735","https://openalex.org/W4313423370","https://openalex.org/W4318773647","https://openalex.org/W4319994093","https://openalex.org/W4367663204","https://openalex.org/W4379620324","https://openalex.org/W4389355638","https://openalex.org/W4396642049","https://openalex.org/W4397000408","https://openalex.org/W4400489845","https://openalex.org/W6774909299","https://openalex.org/W6779961489","https://openalex.org/W6795300077"],"related_works":["https://openalex.org/W2111375262","https://openalex.org/W2317728013","https://openalex.org/W4252076617","https://openalex.org/W1991205173","https://openalex.org/W2109048960","https://openalex.org/W2741481635","https://openalex.org/W2338537463","https://openalex.org/W2377198601","https://openalex.org/W2381980924","https://openalex.org/W2353774927"],"abstract_inverted_index":{"Malicious":[0],"attack":[1],"has":[2],"shown":[3],"a":[4],"rapid":[5],"growth":[6],"in":[7,244],"recent":[8],"years,":[9],"it":[10,240],"is":[11,160],"very":[12],"important":[13],"to":[14,19,51,79,126,137,164,186,190,194,206],"accurately":[15],"detect":[16],"malicious":[17,22,48,211,235],"traffic":[18,49,59,125,129,144,153,218,236],"defend":[20],"against":[21],"attacks.":[23],"Compared":[24],"with":[25],"machine":[26],"learning":[27,30],"and":[28,83,112,131,133,171,239],"deep":[29],"technologies,":[31],"<underline":[32,35,39,103,106,113,116],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[33,36,40,104,107,109,114,117],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">g</u>raph":[34,105],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">c</u>onvolutional":[37],"neural":[38],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">n</u>etwork":[41],"(GCN)":[42],"achieves":[43],"better":[44,128,243],"detection":[45,64,209,226,237],"results":[46,214],"of":[47,54,142,168,198,210],"due":[50],"additional":[52],"consideration":[53],"the":[55,77,98,122,139,149,156,166,175,181,191,196,208,225],"correlation":[56,150],"between":[57],"network":[58,111,124,143,217],"features.":[60,200],"However,":[61],"existing":[62],"GCN-based":[63],"models":[65],"suffer":[66],"from":[67],"fixed":[68],"weight":[69],"assignment,":[70],"only":[71],"focusing":[72],"on":[73,102,215,230],"local":[74],"features,":[75,154],"lack":[76],"ability":[78],"model":[80,100,223],"graph":[81],"structure":[82,141],"relationships":[84,151],"as":[85,87,145,147,248,250],"well":[86,146,249],"having":[88],"gradient":[89,172],"disappearance.":[90],"To":[91],"solve":[92],"these":[93],"problems,":[94],"this":[95],"paper":[96],"proposes":[97],"GSA-DT":[99,119,202,222],"based":[101],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">s</u>elf-<underline":[108],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">a</u>ttention":[110],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">d</u>ecision":[115],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">t</u>ree.":[118],"first":[120],"preprocesses":[121],"original":[123],"obtain":[127],"features":[130,193],"labels,":[132],"then":[134],"uses":[135,203],"GCN":[136,185],"extract":[138],"topological":[140],"capture":[148],"among":[152],"where":[155],"ReLU":[157],"activation":[158],"function":[159],"replaced":[161],"by":[162],"LeakyReLU":[163],"overcome":[165],"problems":[167],"neuron":[169],"\u201cdeath\u201d":[170],"disappearance":[173],"during":[174],"training":[176],"process;":[177],"It":[178],"also":[179,241],"introduces":[180],"self-attention":[182],"mechanism":[183],"into":[184],"assign":[187],"larger":[188],"weights":[189],"key":[192],"reduce":[195],"interference":[197],"redundant":[199],"Finally,":[201],"decision":[204],"tree":[205],"perform":[207],"traffic.":[212],"Experimental":[213],"four":[216],"datasets":[219],"show":[220],"that":[221],"improves":[224],"accuracy":[227],"over":[228],"1%":[229],"average":[231],"than":[232],"seven":[233],"advanced":[234],"models,":[238],"performs":[242],"F1-measure,":[245],"TPR,":[246],"FPR":[247],"stability.":[251]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":6}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}