{"id":"https://openalex.org/W3208318474","doi":"https://doi.org/10.1142/s0218126622501080","title":"An Effective Reconstruction Method of the APT Attack Based on Hidden Markov Model","display_name":"An Effective Reconstruction Method of the APT Attack Based on Hidden Markov Model","publication_year":2021,"publication_date":"2021-10-28","ids":{"openalex":"https://openalex.org/W3208318474","doi":"https://doi.org/10.1142/s0218126622501080","mag":"3208318474"},"language":"en","primary_location":{"id":"doi:10.1142/s0218126622501080","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218126622501080","pdf_url":null,"source":{"id":"https://openalex.org/S167602672","display_name":"Journal of Circuits Systems and Computers","issn_l":"0218-1266","issn":["0218-1266","1793-6454"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Circuits, Systems and Computers","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5065844850","display_name":"Yonghui Huang","orcid":"https://orcid.org/0000-0002-9745-4177"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yonghui Huang","raw_affiliation_strings":["National Engineering Laboratory for Mobile Network Technologies, Beijing University of Posts and Telecommunications, Beijing, P. R. China","School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, P. R. China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Engineering Laboratory for Mobile Network Technologies, Beijing University of Posts and Telecommunications, Beijing, P. R. China","institution_ids":["https://openalex.org/I139759216"]},{"raw_affiliation_string":"School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, P. R. China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081933850","display_name":"Yi Sun","orcid":"https://orcid.org/0000-0002-1427-8682"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Yi Sun","raw_affiliation_strings":["National Engineering Laboratory for Mobile Network Technologies, Beijing University of Posts and Telecommunications, Beijing, P. R. China","School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, P. R. China"],"raw_orcid":"https://orcid.org/0000-0002-1427-8682","affiliations":[{"raw_affiliation_string":"National Engineering Laboratory for Mobile Network Technologies, Beijing University of Posts and Telecommunications, Beijing, P. R. China","institution_ids":["https://openalex.org/I139759216"]},{"raw_affiliation_string":"School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, P. R. China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071753410","display_name":"Kaixiang Lin","orcid":"https://orcid.org/0000-0001-9254-0431"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kaixiang Lin","raw_affiliation_strings":["National Engineering Laboratory for Mobile Network Technologies, Beijing University of Posts and Telecommunications, Beijing, P. R. China","School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, P. R. China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Engineering Laboratory for Mobile Network Technologies, Beijing University of Posts and Telecommunications, Beijing, P. R. China","institution_ids":["https://openalex.org/I139759216"]},{"raw_affiliation_string":"School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, P. R. China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102745489","display_name":"Bowen Xie","orcid":"https://orcid.org/0000-0003-2476-0357"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bowen Xie","raw_affiliation_strings":["National Engineering Laboratory for Mobile Network Technologies, Beijing University of Posts and Telecommunications, Beijing, P. R. China","School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, P. R. China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Engineering Laboratory for Mobile Network Technologies, Beijing University of Posts and Telecommunications, Beijing, P. R. China","institution_ids":["https://openalex.org/I139759216"]},{"raw_affiliation_string":"School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, P. R. China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005340229","display_name":"Jiayang Fan","orcid":null},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiayang Fan","raw_affiliation_strings":["International School, Beijing University of Posts and Telecommunications, Beijing, P. R. China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"International School, Beijing University of Posts and Telecommunications, Beijing, P. R. China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5054182752","display_name":"Yan Ma","orcid":"https://orcid.org/0000-0003-4626-1401"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yan Ma","raw_affiliation_strings":["National Engineering Laboratory for Mobile Network Technologies, Beijing University of Posts and Telecommunications, Beijing, P. R. China","School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, P. R. China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Engineering Laboratory for Mobile Network Technologies, Beijing University of Posts and Telecommunications, Beijing, P. R. China","institution_ids":["https://openalex.org/I139759216"]},{"raw_affiliation_string":"School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, P. R. China","institution_ids":["https://openalex.org/I139759216"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5081933850"],"corresponding_institution_ids":["https://openalex.org/I139759216"],"apc_list":null,"apc_paid":null,"fwci":0.3038,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.60437041,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"31","issue":"06","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.994700014591217,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7267571687698364},{"id":"https://openalex.org/keywords/hidden-markov-model","display_name":"Hidden Markov model","score":0.6502373814582825},{"id":"https://openalex.org/keywords/sequence","display_name":"Sequence (biology)","score":0.5516350269317627},{"id":"https://openalex.org/keywords/path","display_name":"Path (computing)","score":0.5125860571861267},{"id":"https://openalex.org/keywords/vertex","display_name":"Vertex (graph theory)","score":0.46011123061180115},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4263615012168884},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.41029587388038635},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.38905295729637146},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.32818514108657837},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.16340315341949463},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.12914854288101196},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.10178789496421814}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7267571687698364},{"id":"https://openalex.org/C23224414","wikidata":"https://www.wikidata.org/wiki/Q176769","display_name":"Hidden Markov model","level":2,"score":0.6502373814582825},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.5516350269317627},{"id":"https://openalex.org/C2777735758","wikidata":"https://www.wikidata.org/wiki/Q817765","display_name":"Path (computing)","level":2,"score":0.5125860571861267},{"id":"https://openalex.org/C80899671","wikidata":"https://www.wikidata.org/wiki/Q1304193","display_name":"Vertex (graph theory)","level":3,"score":0.46011123061180115},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4263615012168884},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.41029587388038635},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.38905295729637146},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.32818514108657837},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.16340315341949463},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.12914854288101196},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.10178789496421814},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C54355233","wikidata":"https://www.wikidata.org/wiki/Q7162","display_name":"Genetics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1142/s0218126622501080","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218126622501080","pdf_url":null,"source":{"id":"https://openalex.org/S167602672","display_name":"Journal of Circuits Systems and Computers","issn_l":"0218-1266","issn":["0218-1266","1793-6454"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Circuits, Systems and Computers","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.46000000834465027}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W1109422923","https://openalex.org/W1483874305","https://openalex.org/W1979377564","https://openalex.org/W1992705187","https://openalex.org/W2142991417","https://openalex.org/W2333483407","https://openalex.org/W2592627133","https://openalex.org/W2729546866","https://openalex.org/W2748696935","https://openalex.org/W2765664114","https://openalex.org/W2767094836","https://openalex.org/W2789667377","https://openalex.org/W2818789173","https://openalex.org/W2906690230","https://openalex.org/W2909573631","https://openalex.org/W2956781771","https://openalex.org/W3088034552","https://openalex.org/W3091074232","https://openalex.org/W3117926661","https://openalex.org/W3124684701","https://openalex.org/W3161325351","https://openalex.org/W3170518756","https://openalex.org/W3186745756","https://openalex.org/W3201410046"],"related_works":["https://openalex.org/W2053269318","https://openalex.org/W2364370872","https://openalex.org/W2025614924","https://openalex.org/W2294335174","https://openalex.org/W3145575561","https://openalex.org/W2097963413","https://openalex.org/W2995886640","https://openalex.org/W1591475660","https://openalex.org/W2001275470","https://openalex.org/W4243663106"],"abstract_inverted_index":{"Advanced":[0],"Persistent":[1],"Threat":[2],"(APT)":[3],"is":[4],"a":[5],"multi-stage":[6],"and":[7,68,90,119,124,144,151,169],"multi-step":[8],"attack":[9,16,23,41,52,60,66,72,94,104,114,160,167,173],"process.":[10],"The":[11],"reconstruction":[12,171],"of":[13,31,33,112,148,165,172],"the":[14,28,40,50,58,64,69,75,80,84,88,93,102,109,116,120,130,133,139,146,157,163,170],"APT":[15,34,51,65,113,159,166],"scene":[17,174],"can":[18],"start":[19],"with":[20],"discrete":[21,37,71],"stage":[22],"detection.":[24],"However,":[25],"due":[26],"to":[27,48,56,63,79,129,155],"strong":[29],"characteristic":[30],"concealment":[32],"attacks,":[35],"some":[36],"events":[38,61],"in":[39],"scenarios":[42],"may":[43],"not":[44],"be":[45],"detected.":[46],"Therefore,":[47],"reconstruct":[49,92],"scene,":[53],"we":[54,99,107],"need":[55],"mine":[57,156],"hidden":[59,140,158],"according":[62,78],"target":[67,111],"detected":[70],"events,":[73],"describe":[74],"action":[76],"sequence":[77,82],"time":[81],"or":[83],"conditions":[85],"reached":[86],"by":[87],"attack,":[89],"finally":[91],"path.":[95],"In":[96],"this":[97,136],"paper,":[98],"depend":[100],"on":[101],"EP-IKC":[103],"cooperation":[105],"model,":[106],"take":[108],"total":[110],"as":[115,132],"pyramid":[117],"vertex,":[118],"alerted":[121],"network":[122],"entities":[123,127],"potential":[125],"attacked":[126],"related":[128],"vertex":[131],"facet":[134],"nodes,":[135],"paper":[137],"introduces":[138],"Markov":[141],"model":[142],"(HMM),":[143],"uses":[145],"methods":[147],"data":[149],"association":[150],"advanced":[152],"probability":[153],"theory":[154],"stages,":[161],"Finally,":[162],"detection":[164],"process":[168],"are":[175],"realized.":[176]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2023,"cited_by_count":2}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}