{"id":"https://openalex.org/W7140217875","doi":"https://doi.org/10.1109/ton.2026.3677135","title":"Early Attack Identification in the Wild","display_name":"Early Attack Identification in the Wild","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7140217875","doi":"https://doi.org/10.1109/ton.2026.3677135"},"language":null,"primary_location":{"id":"doi:10.1109/ton.2026.3677135","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ton.2026.3677135","pdf_url":null,"source":{"id":"https://openalex.org/S5407042750","display_name":"IEEE Transactions on Networking","issn_l":"2998-4157","issn":["2998-4157"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Networking","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Minji Kim","orcid":null},"institutions":[{"id":"https://openalex.org/I206651237","display_name":"East Texas A&M University","ror":"https://ror.org/01red3556","country_code":"US","type":"education","lineage":["https://openalex.org/I206651237"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Minji Kim","raw_affiliation_strings":["Computer Science Department, East Texas A&#x0026;M University, Commerce, TX, USA"],"affiliations":[{"raw_affiliation_string":"Computer Science Department, East Texas A&#x0026;M University, Commerce, TX, USA","institution_ids":["https://openalex.org/I206651237"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Dongeun Lee","orcid":"https://orcid.org/0000-0003-3306-1566"},"institutions":[{"id":"https://openalex.org/I206651237","display_name":"East Texas A&M University","ror":"https://ror.org/01red3556","country_code":"US","type":"education","lineage":["https://openalex.org/I206651237"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dongeun Lee","raw_affiliation_strings":["Computer Science Department, East Texas A&#x0026;M University, Commerce, TX, USA"],"affiliations":[{"raw_affiliation_string":"Computer Science Department, East Texas A&#x0026;M University, Commerce, TX, USA","institution_ids":["https://openalex.org/I206651237"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Kookjin Lee","orcid":null},"institutions":[{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kookjin Lee","raw_affiliation_strings":["School of Computing and Augmented Intelligence, Arizona State University, Tempe, AZ, USA"],"affiliations":[{"raw_affiliation_string":"School of Computing and Augmented Intelligence, Arizona State University, Tempe, AZ, USA","institution_ids":["https://openalex.org/I55732556"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Doowon Kim","orcid":null},"institutions":[{"id":"https://openalex.org/I75027704","display_name":"University of Tennessee at Knoxville","ror":"https://ror.org/020f3ap87","country_code":"US","type":"education","lineage":["https://openalex.org/I75027704"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Doowon Kim","raw_affiliation_strings":["Department of Electrical Engineering and Computer Science, University of Tennessee, Knoxville, TN, USA"],"affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering and Computer Science, University of Tennessee, Knoxville, TN, USA","institution_ids":["https://openalex.org/I75027704"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jinpyo Kim","orcid":"https://orcid.org/0009-0000-1875-6330"},"institutions":[{"id":"https://openalex.org/I206651237","display_name":"East Texas A&M University","ror":"https://ror.org/01red3556","country_code":"US","type":"education","lineage":["https://openalex.org/I206651237"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jinpyo Kim","raw_affiliation_strings":["Computer Science Department, East Texas A&#x0026;M University, Commerce, TX, USA"],"affiliations":[{"raw_affiliation_string":"Computer Science Department, East Texas A&#x0026;M University, Commerce, TX, USA","institution_ids":["https://openalex.org/I206651237"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Sangman Lee","orcid":"https://orcid.org/0009-0007-7446-3373"},"institutions":[{"id":"https://openalex.org/I207169309","display_name":"Cyber University","ror":"https://ror.org/038sdcw17","country_code":"JP","type":"education","lineage":["https://openalex.org/I207169309"]},{"id":"https://openalex.org/I4210110812","display_name":"Sejong Cyber University","ror":"https://ror.org/020b78451","country_code":"KR","type":"education","lineage":["https://openalex.org/I4210110812"]}],"countries":["JP","KR"],"is_corresponding":false,"raw_author_name":"Sangman Lee","raw_affiliation_strings":["Department of AI Cyber Security, Korea University, Sejong-si, South Korea"],"affiliations":[{"raw_affiliation_string":"Department of AI Cyber Security, Korea University, Sejong-si, South Korea","institution_ids":["https://openalex.org/I4210110812","https://openalex.org/I207169309"]}]},{"author_position":"last","author":{"id":null,"display_name":"Jinoh Kim","orcid":"https://orcid.org/0000-0002-9835-1866"},"institutions":[{"id":"https://openalex.org/I206651237","display_name":"East Texas A&M University","ror":"https://ror.org/01red3556","country_code":"US","type":"education","lineage":["https://openalex.org/I206651237"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jinoh Kim","raw_affiliation_strings":["Computer Science Department, East Texas A&#x0026;M University, Commerce, TX, USA"],"affiliations":[{"raw_affiliation_string":"Computer Science Department, East Texas A&#x0026;M University, Commerce, TX, USA","institution_ids":["https://openalex.org/I206651237"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I206651237"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.88901881,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"34","issue":null,"first_page":"4361","last_page":"4376"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.6798999905586243,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.6798999905586243,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.18850000202655792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.06400000303983688,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.7350000143051147},{"id":"https://openalex.org/keywords/deep-packet-inspection","display_name":"Deep packet inspection","score":0.7192000150680542},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.6177999973297119},{"id":"https://openalex.org/keywords/packet-analyzer","display_name":"Packet analyzer","score":0.5271000266075134},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4749000072479248},{"id":"https://openalex.org/keywords/fraction","display_name":"Fraction (chemistry)","score":0.45419999957084656},{"id":"https://openalex.org/keywords/packet-loss","display_name":"Packet loss","score":0.4187000095844269},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.3804999887943268}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7526000142097473},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.7350000143051147},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.7192000150680542},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.6177999973297119},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5795999765396118},{"id":"https://openalex.org/C95362637","wikidata":"https://www.wikidata.org/wiki/Q54366","display_name":"Packet analyzer","level":3,"score":0.5271000266075134},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4749000072479248},{"id":"https://openalex.org/C149629883","wikidata":"https://www.wikidata.org/wiki/Q660926","display_name":"Fraction (chemistry)","level":2,"score":0.45419999957084656},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.44530001282691956},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.429500013589859},{"id":"https://openalex.org/C54108766","wikidata":"https://www.wikidata.org/wiki/Q391064","display_name":"Packet loss","level":3,"score":0.4187000095844269},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.3804999887943268},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.3325999975204468},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.32899999618530273},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3197000026702881},{"id":"https://openalex.org/C2778484313","wikidata":"https://www.wikidata.org/wiki/Q1172540","display_name":"Data stream","level":2,"score":0.31929999589920044},{"id":"https://openalex.org/C21434264","wikidata":"https://www.wikidata.org/wiki/Q7247320","display_name":"Processing delay","level":4,"score":0.31679999828338623},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.313400000333786},{"id":"https://openalex.org/C193415008","wikidata":"https://www.wikidata.org/wiki/Q639681","display_name":"Network architecture","level":2,"score":0.2930000126361847},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2890999913215637},{"id":"https://openalex.org/C74366991","wikidata":"https://www.wikidata.org/wiki/Q2755335","display_name":"Network processor","level":3,"score":0.2759000062942505},{"id":"https://openalex.org/C113508815","wikidata":"https://www.wikidata.org/wiki/Q193446","display_name":"Packet switching","level":3,"score":0.2705000042915344},{"id":"https://openalex.org/C108921912","wikidata":"https://www.wikidata.org/wiki/Q7834639","display_name":"Transmission delay","level":3,"score":0.26750001311302185},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.25780001282691956},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.25619998574256897},{"id":"https://openalex.org/C13355873","wikidata":"https://www.wikidata.org/wiki/Q2920850","display_name":"Connection (principal bundle)","level":2,"score":0.2558000087738037},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.25040000677108765}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ton.2026.3677135","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ton.2026.3677135","pdf_url":null,"source":{"id":"https://openalex.org/S5407042750","display_name":"IEEE Transactions on Networking","issn_l":"2998-4157","issn":["2998-4157"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Networking","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"While":[0],"characterizing":[1],"network":[2,15,100,170,216],"connections":[3],"in":[4],"their":[5],"early":[6],"stage":[7],"is":[8],"vital":[9],"for":[10,132,148,173],"providing":[11],"timely":[12,34],"responses":[13],"against":[14],"threats,":[16],"existing":[17],"methods":[18],"become":[19],"less":[20],"attractive":[21],"due":[22],"to":[23,32,42,135,193],"the":[24,161,180,183,199,207],"requirement":[25],"of":[26,57,66,111,182,215],"complete":[27,78],"connection":[28,79],"information":[29,65],"(thus":[30],"unable":[31],"make":[33],"identification)":[35],"or":[36],"packet":[37,67,73,84,96,137],"payload":[38],"inspection":[39,74],"(there-fore":[40],"limited":[41],"unencrypted":[43],"packets":[44,202],"under":[45],"no":[46],"privacy":[47],"regulation).":[48],"To":[49,81,114],"this":[50,52],"end,":[51],"paper":[53],"takes":[54],"an":[55],"approach":[56],"<italic":[58,70,75,93,103,126,142],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[59,71,76,94,104,127,143,204],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">packet":[60],"stream":[61,85],"analysis</i>":[62],"referencing":[63],"statistical":[64],"sequences,":[68],"requiring":[69],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">neither</i>":[72],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">nor</i>":[77],"information.":[80],"enable":[82],"practical":[83],"analysis,":[86],"there":[87],"exist":[88],"several":[89],"challenges,":[90,117],"such":[91],"as":[92],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">out-of-order":[95],"sequences</i>":[97],"introduced":[98],"by":[99],"dynamics":[101],"and":[102,139,168],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">class":[105],"imbalance</i>":[106],"with":[107,198],"a":[108,125,141,212],"tiny":[109],"fraction":[110,214],"attack":[112],"connections.":[113],"overcome":[115],"these":[116],"we":[118],"design":[119],"two":[120],"deep":[121,163,188],"sequence":[122,164],"models:":[123],"(i)":[124],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">bidirectional":[128],"recurrent":[129],"structure</i>":[130,146],"designed":[131,147],"greater":[133],"resilience":[134],"out-of-order":[136,219],"streams,":[138],"(ii)":[140],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">pre-training-enabled":[144],"sequence-to-sequence":[145],"creating":[149],"consistent":[150],"representations":[151],"from":[152,206],"unbalanced":[153],"class":[154],"distributions":[155],"using":[156,166],"self-supervised":[157],"learning.":[158],"We":[159],"evaluate":[160],"presented":[162],"models":[165,185],"real":[167],"synthetic":[169],"data":[171],"collections":[172],"extensive":[174],"experimentation.":[175],"The":[176],"experimental":[177],"results":[178],"support":[179],"feasibility":[181],"proposed":[184],"outperforming":[186],"baseline":[187],"learning":[189],"models,":[190],"yielding":[191],"up":[192],"94.8%":[194],"(F1":[195],"score)":[196],"only":[197],"first":[200],"five":[201],"(<italic":[203],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">k</i>=5)":[205],"Internet":[208],"traffic":[209],"collection":[210],"containing":[211],"substantial":[213],"flows":[217],"experiencing":[218],"delivery.":[220]},"counts_by_year":[],"updated_date":"2026-03-28T06:11:35.319607","created_date":"2026-03-25T00:00:00"}