{"id":"https://openalex.org/W4407213325","doi":"https://doi.org/10.1109/tsc.2025.3539194","title":"Behavior Tomographer: Identifying Hidden Cybercrimes by Behavior Interior Structure Modeling","display_name":"Behavior Tomographer: Identifying Hidden Cybercrimes by Behavior Interior Structure Modeling","publication_year":2025,"publication_date":"2025-02-06","ids":{"openalex":"https://openalex.org/W4407213325","doi":"https://doi.org/10.1109/tsc.2025.3539194"},"language":"en","primary_location":{"id":"doi:10.1109/tsc.2025.3539194","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsc.2025.3539194","pdf_url":null,"source":{"id":"https://openalex.org/S204223317","display_name":"IEEE Transactions on Services Computing","issn_l":"1939-1374","issn":["1939-1374","2372-0204"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Services Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100417007","display_name":"Cheng Wang","orcid":"https://orcid.org/0000-0002-4752-0316"},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Cheng Wang","raw_affiliation_strings":["Department of Computer Science and Technology, Tongji University, Shanghai, China"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Tongji University, Shanghai, China","institution_ids":["https://openalex.org/I116953780"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5054508795","display_name":"Hangyu Zhu","orcid":"https://orcid.org/0000-0001-7221-9130"},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hangyu Zhu","raw_affiliation_strings":["Department of Computer Science and Technology, Tongji University, Shanghai, China"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Tongji University, Shanghai, China","institution_ids":["https://openalex.org/I116953780"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5100417007"],"corresponding_institution_ids":["https://openalex.org/I116953780"],"apc_list":null,"apc_paid":null,"fwci":3.0965,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.88475108,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":"18","issue":"2","first_page":"673","last_page":"689"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9944999814033508,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9919000267982483,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7533994913101196},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.425459086894989}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7533994913101196},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.425459086894989}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tsc.2025.3539194","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsc.2025.3539194","pdf_url":null,"source":{"id":"https://openalex.org/S204223317","display_name":"IEEE Transactions on Services Computing","issn_l":"1939-1374","issn":["1939-1374","2372-0204"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Services Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities","score":0.44999998807907104}],"awards":[{"id":"https://openalex.org/G1012616008","display_name":null,"funder_award_id":"62372328","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G1395231520","display_name":null,"funder_award_id":"22XD1423700","funder_id":"https://openalex.org/F4320335796","funder_display_name":"Program of Shanghai Academic Research Leader"},{"id":"https://openalex.org/G1474585034","display_name":null,"funder_award_id":"2024-1-ZD-04","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G2999259666","display_name":null,"funder_award_id":"22120240357","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null},{"id":"https://openalex.org/F4320335796","display_name":"Program of Shanghai Academic Research Leader","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":63,"referenced_works":["https://openalex.org/W1977366836","https://openalex.org/W1995443851","https://openalex.org/W2118915828","https://openalex.org/W2158698691","https://openalex.org/W2743138268","https://openalex.org/W2788154850","https://openalex.org/W2897862648","https://openalex.org/W2902758299","https://openalex.org/W2904890881","https://openalex.org/W2911200746","https://openalex.org/W2943383044","https://openalex.org/W2945996535","https://openalex.org/W2949848919","https://openalex.org/W2963197901","https://openalex.org/W2963351448","https://openalex.org/W2966841471","https://openalex.org/W2972765956","https://openalex.org/W2978956219","https://openalex.org/W2984239289","https://openalex.org/W2984951742","https://openalex.org/W2987160260","https://openalex.org/W2992054303","https://openalex.org/W2997619488","https://openalex.org/W3005822506","https://openalex.org/W3012871709","https://openalex.org/W3022945404","https://openalex.org/W3023056190","https://openalex.org/W3028353965","https://openalex.org/W3034329572","https://openalex.org/W3040389479","https://openalex.org/W3133932565","https://openalex.org/W3136205675","https://openalex.org/W3137205257","https://openalex.org/W3137832402","https://openalex.org/W3166888304","https://openalex.org/W3169450514","https://openalex.org/W3170937175","https://openalex.org/W3171389163","https://openalex.org/W3173170122","https://openalex.org/W3174086521","https://openalex.org/W3213858345","https://openalex.org/W4213009331","https://openalex.org/W4225163358","https://openalex.org/W4282982824","https://openalex.org/W4284701118","https://openalex.org/W4285612255","https://openalex.org/W4290945181","https://openalex.org/W4312433903","https://openalex.org/W4324007233","https://openalex.org/W4365790450","https://openalex.org/W4384822835","https://openalex.org/W4386453587","https://openalex.org/W4400275925","https://openalex.org/W4401863513","https://openalex.org/W4403937471","https://openalex.org/W6631190155","https://openalex.org/W6732510986","https://openalex.org/W6745537798","https://openalex.org/W6750729320","https://openalex.org/W6760203611","https://openalex.org/W6771988894","https://openalex.org/W6796648609","https://openalex.org/W6796927292"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Identifying":[0],"hidden":[1,31,91],"cybercrimes":[2],"is":[3,98],"a":[4,65],"challenging":[5],"task,":[6],"as":[7],"these":[8],"behaviors":[9,35,48],"are":[10,36,53,146],"often":[11],"carefully":[12],"planned":[13],"by":[14,142],"criminals":[15],"with":[16],"counter-surveillance":[17],"awareness.":[18],"Existing":[19],"solutions":[20],"for":[21,186],"cybercrime":[22,151],"detection":[23,89],"struggle":[24],"to":[25,29,55,73,99],"uncover":[26],"enough":[27],"clues":[28],"identify":[30],"criminal":[32],"behaviors.":[33],"Malicious":[34],"concealed":[37],"beneath":[38],"benign":[39,47],"behaviors,":[40],"and":[41,46,83,169],"the":[42,50,75,117,124],"boundaries":[43],"between":[44,133],"malicious":[45],"in":[49,113],"representation":[51],"space":[52],"blurred":[54],"evade":[56],"mainstream":[57],"deep":[58],"learning-based":[59],"security":[60],"authentication":[61],"models.":[62],"We":[63],"introduce":[64],"<underline":[66,69],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[67,70],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">b</u>ehavior":[68],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">t</u>omographer":[71],"(BT)":[72],"reconstruct":[74,100],"behavior":[76,104],"structure":[77,105],"from":[78,106,129],"three":[79],"slices:":[80],"agent,":[81],"event,":[82],"attribute":[84],"slices,":[85,108],"enabling":[86],"more":[87],"granular":[88],"of":[90,96,119,126],"cybercrimes.":[92],"The":[93],"core":[94],"idea":[95],"BT":[97,158,174],"interior":[101,131],"information":[102,128,139],"about":[103],"multiple":[107],"much":[109],"like":[110],"computed":[111],"tomography":[112],"modern":[114],"medicine":[115],"enables":[116,123],"reconstruction":[118],"internal":[120],"body.":[121],"It":[122],"extraction":[125],"discriminative":[127],"intricate":[130],"associations":[132],"behavioral":[134],"attributes":[135],"rather":[136],"than":[137],"surface":[138],"meticulously":[140],"crafted":[141],"criminals.":[143],"Our":[144],"experiments":[145],"conducted":[147],"on":[148,162],"two":[149],"representative":[150],"datasets.":[152],"Promising":[153],"experimental":[154],"results":[155],"demonstrate":[156],"that":[157],"outperforms":[159],"state-of-the-art":[160],"models":[161],"key":[163],"metrics,":[164],"achieving":[165],"around":[166],"0.99":[167],"AUC-ROC":[168],"approximately":[170],"0.9":[171],"AUC-PR.":[172],"Moreover,":[173],"notably":[175],"excels":[176],"at":[177],"low":[178],"false":[179],"positive":[180],"rates,":[181],"showcasing":[182],"its":[183],"high":[184],"effectiveness":[185],"real-world":[187],"applications.":[188]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2025-10-10T00:00:00"}