{"id":"https://openalex.org/W4386511194","doi":"https://doi.org/10.1145/3584714.3584715","title":"Anomaly detection of traffic session based on graph neural network","display_name":"Anomaly detection of traffic session based on graph neural network","publication_year":2022,"publication_date":"2022-12-16","ids":{"openalex":"https://openalex.org/W4386511194","doi":"https://doi.org/10.1145/3584714.3584715"},"language":"en","primary_location":{"id":"doi:10.1145/3584714.3584715","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3584714.3584715","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2022 International Conference on Cyber Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101801194","display_name":"Peng Du","orcid":"https://orcid.org/0009-0008-2780-8938"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Peng Du","raw_affiliation_strings":["School of Software and Microelectronics, Peking University, School of Software and Microelectronics, Peking University, Beijing, China,, China"],"raw_orcid":"https://orcid.org/0009-0008-2780-8938","affiliations":[{"raw_affiliation_string":"School of Software and Microelectronics, Peking University, School of Software and Microelectronics, Peking University, Beijing, China,, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085351680","display_name":"Chengwei Peng","orcid":"https://orcid.org/0009-0005-8953-2381"},"institutions":[{"id":"https://openalex.org/I4210087772","display_name":"National Computer Network Emergency Response Technical Team/Coordination Center of Chinar","ror":"https://ror.org/00247dh76","country_code":"CN","type":"nonprofit","lineage":["https://openalex.org/I4210087772"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chengwei Peng","raw_affiliation_strings":["National Computer Network Emergency Response Technical Team/Coordination Center of China, China"],"raw_orcid":"https://orcid.org/0009-0005-8953-2381","affiliations":[{"raw_affiliation_string":"National Computer Network Emergency Response Technical Team/Coordination Center of China, China","institution_ids":["https://openalex.org/I4210087772"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025717689","display_name":"Xiang Peng","orcid":"https://orcid.org/0009-0002-5659-6571"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peng Xiang","raw_affiliation_strings":["School of Software and Microelectronics, Peking University, School of Software and Microelectronics, Peking University, Beijing, China,, China"],"raw_orcid":"https://orcid.org/0009-0002-5659-6571","affiliations":[{"raw_affiliation_string":"School of Software and Microelectronics, Peking University, School of Software and Microelectronics, Peking University, Beijing, China,, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007894967","display_name":"Qingshan Li","orcid":"https://orcid.org/0009-0004-7993-1728"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Qingshan Li","raw_affiliation_strings":["Boya Regchain Inc, Beijing, China, China"],"raw_orcid":"https://orcid.org/0009-0004-7993-1728","affiliations":[{"raw_affiliation_string":"Boya Regchain Inc, Beijing, China, China","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5101801194"],"corresponding_institution_ids":["https://openalex.org/I20231570"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.23924917,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"9"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7930071353912354},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6027534604072571},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.557193398475647},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.5560271739959717},{"id":"https://openalex.org/keywords/session","display_name":"Session (web analytics)","score":0.48668843507766724},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.4778263568878174},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.46906778216362},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4637497067451477},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.44686171412467957},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.32837313413619995},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.32029521465301514},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.28618425130844116}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7930071353912354},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6027534604072571},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.557193398475647},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.5560271739959717},{"id":"https://openalex.org/C2779182362","wikidata":"https://www.wikidata.org/wiki/Q17126187","display_name":"Session (web analytics)","level":2,"score":0.48668843507766724},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4778263568878174},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.46906778216362},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4637497067451477},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.44686171412467957},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.32837313413619995},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.32029521465301514},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.28618425130844116},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3584714.3584715","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3584714.3584715","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2022 International Conference on Cyber Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W1501856433","https://openalex.org/W2096118443","https://openalex.org/W2144098589","https://openalex.org/W2170505850","https://openalex.org/W2170902455","https://openalex.org/W2184652140","https://openalex.org/W2188041026","https://openalex.org/W2284900416","https://openalex.org/W2604105233","https://openalex.org/W2789828921","https://openalex.org/W2925211503","https://openalex.org/W2991507433","https://openalex.org/W2997442262","https://openalex.org/W3006165800","https://openalex.org/W3032021129","https://openalex.org/W3093410479","https://openalex.org/W3141581892","https://openalex.org/W3157745594","https://openalex.org/W3197913358","https://openalex.org/W4200261849","https://openalex.org/W4205613923","https://openalex.org/W4220982217","https://openalex.org/W6600719526","https://openalex.org/W6811416509"],"related_works":["https://openalex.org/W4230197055","https://openalex.org/W4296749040","https://openalex.org/W621808327","https://openalex.org/W644007644","https://openalex.org/W2497198634","https://openalex.org/W3012257603","https://openalex.org/W1586784764","https://openalex.org/W4292264782","https://openalex.org/W1559289099","https://openalex.org/W3016450995"],"abstract_inverted_index":{"In":[0],"recent":[1],"years,":[2],"with":[3],"the":[4,20,28,52,64,69,72,93,97,104,109,115,119,136,151,173,177,181],"development":[5],"of":[6,10,19,30,118],"network":[7,11,22,31,36,56,139,159],"technology,":[8],"methods":[9,39],"security":[12,32],"threats":[13],"have":[14],"emerged":[15],"in":[16,51,71,176],"endlessly.":[17],"Most":[18],"existing":[21,174],"anomaly":[23,37,81],"detection":[24,38,82],"researches":[25],"cannot":[26],"meet":[27],"requirements":[29],"detection.":[33],"The":[34,163],"traditional":[35],"based":[40,84],"on":[41,63,85,180],"static":[42],"rule":[43],"matching":[44],"and":[45,54,58,102,134,148],"machine":[46],"learning":[47],"don't":[48],"perform":[49],"well":[50],"complex":[53],"dynamic":[55],"environment,":[57],"it":[59],"is":[60,170],"highly":[61],"dependent":[62],"statistical":[65],"features":[66,95,144],"designed":[67],"by":[68],"expert":[70],"specific":[73],"domain.":[74],"This":[75],"paper":[76],"proposes":[77],"a":[78,126],"traffic":[79,120],"session":[80,105,130],"method":[83,169],"graph":[86,128,137,146,152],"neural":[87,138],"network,":[88],"called":[89],"TSGNN,":[90],"which":[91],"extracts":[92],"protocol":[94,122],"from":[96,129],"original":[98],"Packet":[99],"Capture(PACP)":[100],"file":[101],"form":[103],"representation,":[106],"further":[107],"use":[108],"gate":[110],"recurrent":[111],"unit(GRU)":[112],"to":[113,141,172],"extract":[114],"internal":[116],"characteristics":[117],"data":[121],"field,":[123],"then":[124],"constructs":[125],"directed":[127],"packet":[131],"structure":[132],"relationships":[133],"uses":[135],"model":[140],"learn":[142],"association":[143],"between":[145],"nodes,":[147],"finally":[149],"inputs":[150],"representation":[153],"feature":[154],"vector":[155],"into":[156],"fully":[157],"connected":[158],"layer":[160],"for":[161],"classification.":[162],"experimental":[164],"results":[165],"show":[166],"that":[167],"our":[168],"superior":[171],"research":[175],"evaluation":[178],"indicators":[179],"CSE-CIC-IDS2018":[182],"datasets.":[183]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}