{"id":"https://openalex.org/W4285358207","doi":"https://doi.org/10.1109/dsc53577.2021.00098","title":"APT Detection Based on Association Rule Mining with Bayesian Model","display_name":"APT Detection Based on Association Rule Mining with Bayesian Model","publication_year":2021,"publication_date":"2021-10-01","ids":{"openalex":"https://openalex.org/W4285358207","doi":"https://doi.org/10.1109/dsc53577.2021.00098"},"language":"en","primary_location":{"id":"doi:10.1109/dsc53577.2021.00098","is_oa":false,"landing_page_url":"https://doi.org/10.1109/dsc53577.2021.00098","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE Sixth International Conference on Data Science in Cyberspace (DSC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069736915","display_name":"Liang Ge","orcid":"https://orcid.org/0000-0001-5136-8081"},"institutions":[{"id":"https://openalex.org/I34949971","display_name":"University of Jinan","ror":"https://ror.org/02mjz6f26","country_code":"CN","type":"education","lineage":["https://openalex.org/I34949971"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Liang Ge","raw_affiliation_strings":["School of Mathematical Sciences, University of Jinan,Jinan,P.R. China,250022"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Mathematical Sciences, University of Jinan,Jinan,P.R. China,250022","institution_ids":["https://openalex.org/I34949971"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5069736915"],"corresponding_institution_ids":["https://openalex.org/I34949971"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.26274014,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"621","last_page":"624"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9952999949455261,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7683095932006836},{"id":"https://openalex.org/keywords/association-rule-learning","display_name":"Association rule learning","score":0.6441271305084229},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.6234914660453796},{"id":"https://openalex.org/keywords/rank","display_name":"Rank (graph theory)","score":0.5822194218635559},{"id":"https://openalex.org/keywords/bayesian-probability","display_name":"Bayesian probability","score":0.5763526558876038},{"id":"https://openalex.org/keywords/variety","display_name":"Variety (cybernetics)","score":0.5558505654335022},{"id":"https://openalex.org/keywords/event","display_name":"Event (particle physics)","score":0.5456174612045288},{"id":"https://openalex.org/keywords/trace","display_name":"TRACE (psycholinguistics)","score":0.5313661098480225},{"id":"https://openalex.org/keywords/bayesian-network","display_name":"Bayesian network","score":0.47818902134895325},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.2724572718143463},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2693573236465454}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7683095932006836},{"id":"https://openalex.org/C193524817","wikidata":"https://www.wikidata.org/wiki/Q386780","display_name":"Association rule learning","level":2,"score":0.6441271305084229},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.6234914660453796},{"id":"https://openalex.org/C164226766","wikidata":"https://www.wikidata.org/wiki/Q7293202","display_name":"Rank (graph theory)","level":2,"score":0.5822194218635559},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.5763526558876038},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.5558505654335022},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.5456174612045288},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.5313661098480225},{"id":"https://openalex.org/C33724603","wikidata":"https://www.wikidata.org/wiki/Q812540","display_name":"Bayesian network","level":2,"score":0.47818902134895325},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2724572718143463},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2693573236465454},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/dsc53577.2021.00098","is_oa":false,"landing_page_url":"https://doi.org/10.1109/dsc53577.2021.00098","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE Sixth International Conference on Data Science in Cyberspace (DSC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6800000071525574,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W1978845641","https://openalex.org/W2074937039","https://openalex.org/W2079557269","https://openalex.org/W2089554624","https://openalex.org/W2212753854","https://openalex.org/W2278186031","https://openalex.org/W2284900416","https://openalex.org/W2701195988","https://openalex.org/W2751114427","https://openalex.org/W2790316935","https://openalex.org/W3009144758","https://openalex.org/W6675021112","https://openalex.org/W6740255781","https://openalex.org/W6743841043"],"related_works":["https://openalex.org/W2751920613","https://openalex.org/W2415164632","https://openalex.org/W2238349241","https://openalex.org/W2355668701","https://openalex.org/W2370453500","https://openalex.org/W1561334777","https://openalex.org/W3012205960","https://openalex.org/W2079402849","https://openalex.org/W2359717995","https://openalex.org/W2338045944"],"abstract_inverted_index":{"Advanced":[0],"persistent":[1],"threats":[2],"(APT)":[3],"are":[4,8,26,48],"stealthy":[5],"cyber-attacks":[6],"that":[7],"aimed":[9],"at":[10],"stealing":[11],"valuable":[12],"information":[13],"from":[14],"target":[15],"organizations":[16],"and":[17,39,44,60],"tend":[18],"to":[19,107],"extend":[20],"in":[21],"time.":[22],"Blocking":[23],"all":[24],"APTs":[25],"impossible,":[27],"security":[28],"experts":[29],"caution,":[30],"hence":[31],"the":[32],"importance":[33],"of":[34,100],"research":[35],"on":[36,91,97],"early":[37],"detection":[38,74,103],"damage":[40],"limitation.":[41],"Whole-system":[42],"provenance-tracking":[43],"provenance":[45],"trace":[46],"mining":[47,83],"considered":[49],"promising":[50],"as":[51,65,112],"they":[52,66],"can":[53],"help":[54],"find":[55],"causal":[56],"relationships":[57],"between":[58],"activities":[59],"flag":[61],"suspicious":[62],"event":[63],"sequences":[64],"occur.":[67],"We":[68],"proposed":[69],"a":[70,98],"novel":[71],"OS-agnostic":[72],"APT":[73,96],"method":[75],"which":[76],"detects":[77],"anomalous":[78,114],"entities":[79],"using":[80],"an":[81],"association":[82],"rule":[84],"based":[85],"bayesian":[86],"network.":[87],"It":[88],"was":[89,105],"evaluated":[90],"large":[92],"datasets":[93],"containing":[94],"realistic":[95],"variety":[99],"OS.":[101],"The":[102],"rate":[104],"shown":[106],"consistently":[108],"rank":[109],"attack":[110],"processes":[111],"highly":[113],"entities.":[115]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}