{"id":"https://openalex.org/W2896742542","doi":"https://doi.org/10.1145/3269206.3272022","title":"Behavior-based Community Detection","display_name":"Behavior-based Community Detection","publication_year":2018,"publication_date":"2018-10-17","ids":{"openalex":"https://openalex.org/W2896742542","doi":"https://doi.org/10.1145/3269206.3272022","mag":"2896742542"},"language":"en","primary_location":{"id":"doi:10.1145/3269206.3272022","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3269206.3272022","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 27th ACM International Conference on Information and Knowledge Management","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101509118","display_name":"Cheng Cao","orcid":"https://orcid.org/0000-0003-0329-6188"},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Cheng Cao","raw_affiliation_strings":["Amazon Inc., Seattle, WA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Amazon Inc., Seattle, WA, USA","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075127080","display_name":"Zhengzhang Chen","orcid":"https://orcid.org/0000-0002-6803-0535"},"institutions":[{"id":"https://openalex.org/I20089843","display_name":"Princeton University","ror":"https://ror.org/00hx57361","country_code":"US","type":"education","lineage":["https://openalex.org/I20089843"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhengzhang Chen","raw_affiliation_strings":["NEC Laboratories America, Princeton, NJ, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NEC Laboratories America, Princeton, NJ, USA","institution_ids":["https://openalex.org/I20089843"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048489384","display_name":"James Caverlee","orcid":"https://orcid.org/0000-0001-8350-8528"},"institutions":[{"id":"https://openalex.org/I91045830","display_name":"Texas A&M University","ror":"https://ror.org/01f5ytq51","country_code":"US","type":"education","lineage":["https://openalex.org/I91045830"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"James Caverlee","raw_affiliation_strings":["Texas A&M University, College Station, TX, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Texas A&M University, College Station, TX, USA","institution_ids":["https://openalex.org/I91045830"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086816138","display_name":"Lu\u2010An Tang","orcid":null},"institutions":[{"id":"https://openalex.org/I20089843","display_name":"Princeton University","ror":"https://ror.org/00hx57361","country_code":"US","type":"education","lineage":["https://openalex.org/I20089843"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lu-An Tang","raw_affiliation_strings":["NEC Laboratories America, Princeton, NJ, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NEC Laboratories America, Princeton, NJ, USA","institution_ids":["https://openalex.org/I20089843"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100717020","display_name":"Luo Chen","orcid":"https://orcid.org/0000-0003-2665-6086"},"institutions":[{"id":"https://openalex.org/I74775410","display_name":"Rice University","ror":"https://ror.org/008zs3103","country_code":"US","type":"education","lineage":["https://openalex.org/I74775410"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chen Luo","raw_affiliation_strings":["Rice University, Houston, TX, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Rice University, Houston, TX, USA","institution_ids":["https://openalex.org/I74775410"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5091296600","display_name":"Zhichun Li","orcid":"https://orcid.org/0000-0002-1451-0904"},"institutions":[{"id":"https://openalex.org/I20089843","display_name":"Princeton University","ror":"https://ror.org/00hx57361","country_code":"US","type":"education","lineage":["https://openalex.org/I20089843"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhichun Li","raw_affiliation_strings":["NEC Laboratories America, Princeton, NJ, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NEC Laboratories America, Princeton, NJ, USA","institution_ids":["https://openalex.org/I20089843"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":18,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1977","last_page":"1985"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.9847999811172485,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.8109380006790161},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7431952953338623},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6028550863265991},{"id":"https://openalex.org/keywords/node","display_name":"Node (physics)","score":0.5997257828712463},{"id":"https://openalex.org/keywords/community-structure","display_name":"Community structure","score":0.4532219171524048},{"id":"https://openalex.org/keywords/scale","display_name":"Scale (ratio)","score":0.4527466893196106},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.43196582794189453},{"id":"https://openalex.org/keywords/network-topology","display_name":"Network topology","score":0.42984604835510254},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4071246087551117},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.398751437664032},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.33448436856269836},{"id":"https://openalex.org/keywords/geography","display_name":"Geography","score":0.10311639308929443},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.09679204225540161}],"concepts":[{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.8109380006790161},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7431952953338623},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6028550863265991},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.5997257828712463},{"id":"https://openalex.org/C133079900","wikidata":"https://www.wikidata.org/wiki/Q5155065","display_name":"Community structure","level":2,"score":0.4532219171524048},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.4527466893196106},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.43196582794189453},{"id":"https://openalex.org/C199845137","wikidata":"https://www.wikidata.org/wiki/Q145490","display_name":"Network topology","level":2,"score":0.42984604835510254},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4071246087551117},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.398751437664032},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.33448436856269836},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.10311639308929443},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.09679204225540161},{"id":"https://openalex.org/C66938386","wikidata":"https://www.wikidata.org/wiki/Q633538","display_name":"Structural engineering","level":1,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C58640448","wikidata":"https://www.wikidata.org/wiki/Q42515","display_name":"Cartography","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3269206.3272022","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3269206.3272022","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 27th ACM International Conference on Information and Knowledge Management","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.4300000071525574,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":42,"referenced_works":["https://openalex.org/W1532325895","https://openalex.org/W1888005072","https://openalex.org/W1941427975","https://openalex.org/W1964274671","https://openalex.org/W1971477462","https://openalex.org/W1980849679","https://openalex.org/W1984350393","https://openalex.org/W1987971958","https://openalex.org/W2012921801","https://openalex.org/W2015953751","https://openalex.org/W2032280284","https://openalex.org/W2047940964","https://openalex.org/W2066090568","https://openalex.org/W2071949631","https://openalex.org/W2089458547","https://openalex.org/W2097562995","https://openalex.org/W2098509290","https://openalex.org/W2106545428","https://openalex.org/W2111315907","https://openalex.org/W2121914937","https://openalex.org/W2127048411","https://openalex.org/W2130978632","https://openalex.org/W2137962371","https://openalex.org/W2147620601","https://openalex.org/W2150753219","https://openalex.org/W2152790380","https://openalex.org/W2153843773","https://openalex.org/W2162833336","https://openalex.org/W2165515835","https://openalex.org/W2165840237","https://openalex.org/W2250333922","https://openalex.org/W2517417371","https://openalex.org/W2518012597","https://openalex.org/W2524714597","https://openalex.org/W2592249290","https://openalex.org/W2767206826","https://openalex.org/W2809401017","https://openalex.org/W2950133940","https://openalex.org/W3102641634","https://openalex.org/W3102647957","https://openalex.org/W3105705953","https://openalex.org/W4213009331"],"related_works":["https://openalex.org/W2086397253","https://openalex.org/W2133122801","https://openalex.org/W600422426","https://openalex.org/W2007156430","https://openalex.org/W3081478936","https://openalex.org/W2117112636","https://openalex.org/W2782859253","https://openalex.org/W2045864404","https://openalex.org/W252900523","https://openalex.org/W4206022723"],"abstract_inverted_index":{"Community":[0],"detection":[1,94,135],"in":[2,30,59,95,142],"complex":[3],"networks":[4,174],"is":[5],"a":[6,132],"fundamental":[7],"problem":[8,91],"that":[9],"attracts":[10],"much":[11],"attention":[12],"across":[13],"various":[14],"disciplines.":[15],"Previous":[16],"studies":[17],"have":[18],"been":[19],"mostly":[20],"focusing":[21],"on":[22,107,148,172],"external":[23,104],"connections":[24],"between":[25],"nodes":[26,47],"(i.e.,":[27,38],"topology":[28],"structure)":[29],"the":[31,68,90,166,176],"network":[32],"whereas":[33],"largely":[34],"ignoring":[35],"internal":[36,55,101],"intricacies":[37],"local":[39],"behavior)":[40],"of":[41,46,92,178],"each":[42,83,108],"node.":[43],"A":[44],"pair":[45],"without":[48],"any":[49],"interaction":[50],"can":[51,117],"still":[52],"share":[53],"similar":[54,73],"behaviors.":[56],"For":[57],"example,":[58],"an":[60,156],"enterprise":[61,96,143,173],"information":[62,97,144],"network,":[63],"compromised":[64],"computers":[65],"controlled":[66],"by":[67,164],"same":[69],"intruder":[70],"often":[71],"demonstrate":[72,175],"abnormal":[74],"behaviors":[75],"even":[76],"if":[77],"they":[78],"do":[79],"not":[80],"connect":[81],"with":[82],"other.":[84],"In":[85,128],"this":[86],"paper,":[87],"we":[88,130],"study":[89],"community":[93,134],"networks,":[98,145],"where":[99],"large-scale":[100,149],"events":[102,105],"and":[103],"coexist":[106],"host.":[109],"The":[110],"discovered":[111],"host":[112,125,140,168],"communities,":[113],"capturing":[114],"behavioral":[115],"affinity,":[116],"benefit":[118],"many":[119],"comparative":[120],"analysis":[121],"tasks":[122],"such":[123],"as":[124],"anomaly":[126,162],"assessment.":[127],"particular,":[129],"propose":[131],"novel":[133],"framework":[136],"to":[137],"identify":[138],"behavior-based":[139],"communities":[141],"purely":[146],"based":[147],"heterogeneous":[150],"event":[151],"data.":[152],"We":[153],"continue":[154],"proposing":[155],"efficient":[157],"method":[158],"for":[159],"assessing":[160],"host's":[161],"level":[163],"leveraging":[165],"detected":[167],"communities.":[169],"Experimental":[170],"results":[171],"effectiveness":[177],"our":[179],"model.":[180]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}