{"id":"https://openalex.org/W4386220653","doi":"https://doi.org/10.1186/s13677-023-00492-w","title":"MFGAD-INT: in-band network telemetry data-driven anomaly detection using multi-feature fusion graph deep learning","display_name":"MFGAD-INT: in-band network telemetry data-driven anomaly detection using multi-feature fusion graph deep learning","publication_year":2023,"publication_date":"2023-08-28","ids":{"openalex":"https://openalex.org/W4386220653","doi":"https://doi.org/10.1186/s13677-023-00492-w"},"language":"en","primary_location":{"id":"doi:10.1186/s13677-023-00492-w","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s13677-023-00492-w","pdf_url":"https://journalofcloudcomputing.springeropen.com/counter/pdf/10.1186/s13677-023-00492-w","source":{"id":"https://openalex.org/S2486819371","display_name":"Journal of Cloud Computing Advances Systems and Applications","issn_l":"2192-113X","issn":["2192-113X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cloud Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://journalofcloudcomputing.springeropen.com/counter/pdf/10.1186/s13677-023-00492-w","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5111225943","display_name":"Yunfeng Duan","orcid":null},"institutions":[{"id":"https://openalex.org/I180662265","display_name":"China Mobile (China)","ror":"https://ror.org/05gftfe97","country_code":"CN","type":"company","lineage":["https://openalex.org/I180662265"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yunfeng Duan","raw_affiliation_strings":["China Mobile Information Technology Co., Ltd., 102206, Beijing, China"],"affiliations":[{"raw_affiliation_string":"China Mobile Information Technology Co., Ltd., 102206, Beijing, China","institution_ids":["https://openalex.org/I180662265"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101943709","display_name":"Chenxu Li","orcid":"https://orcid.org/0000-0003-2366-5104"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenxu Li","raw_affiliation_strings":["State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, 100876, Beijing, China"],"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, 100876, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085123302","display_name":"Guotao Bai","orcid":null},"institutions":[{"id":"https://openalex.org/I180662265","display_name":"China Mobile (China)","ror":"https://ror.org/05gftfe97","country_code":"CN","type":"company","lineage":["https://openalex.org/I180662265"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guotao Bai","raw_affiliation_strings":["China Mobile Information Technology Co., Ltd., 102206, Beijing, China"],"affiliations":[{"raw_affiliation_string":"China Mobile Information Technology Co., Ltd., 102206, Beijing, China","institution_ids":["https://openalex.org/I180662265"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100751668","display_name":"Chen Guo","orcid":"https://orcid.org/0000-0002-5198-3938"},"institutions":[{"id":"https://openalex.org/I180662265","display_name":"China Mobile (China)","ror":"https://ror.org/05gftfe97","country_code":"CN","type":"company","lineage":["https://openalex.org/I180662265"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guo Chen","raw_affiliation_strings":["China Mobile Information Technology Co., Ltd., 102206, Beijing, China"],"affiliations":[{"raw_affiliation_string":"China Mobile Information Technology Co., Ltd., 102206, Beijing, China","institution_ids":["https://openalex.org/I180662265"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021772015","display_name":"Fanqin Zhou","orcid":"https://orcid.org/0000-0002-4158-6517"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fanqin Zhou","raw_affiliation_strings":["State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, 100876, Beijing, China"],"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, 100876, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100685940","display_name":"Jiaxing Chen","orcid":"https://orcid.org/0009-0002-1997-4246"},"institutions":[{"id":"https://openalex.org/I180662265","display_name":"China Mobile (China)","ror":"https://ror.org/05gftfe97","country_code":"CN","type":"company","lineage":["https://openalex.org/I180662265"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiaxing Chen","raw_affiliation_strings":["China Mobile Information Technology Co., Ltd., 102206, Beijing, China"],"affiliations":[{"raw_affiliation_string":"China Mobile Information Technology Co., Ltd., 102206, Beijing, China","institution_ids":["https://openalex.org/I180662265"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087500657","display_name":"Zehua Gao","orcid":"https://orcid.org/0000-0002-3690-3012"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Zehua Gao","raw_affiliation_strings":["School of Information and Communication Engineering, Beijing University of Posts and Telecommunications, 100876, Beijing, China"],"affiliations":[{"raw_affiliation_string":"School of Information and Communication Engineering, Beijing University of Posts and Telecommunications, 100876, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5074033048","display_name":"Chun Zhang","orcid":"https://orcid.org/0000-0001-9791-4500"},"institutions":[{"id":"https://openalex.org/I180662265","display_name":"China Mobile (China)","ror":"https://ror.org/05gftfe97","country_code":"CN","type":"company","lineage":["https://openalex.org/I180662265"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chun Zhang","raw_affiliation_strings":["China Mobile Information Technology Co., Ltd., 102206, Beijing, China"],"affiliations":[{"raw_affiliation_string":"China Mobile Information Technology Co., Ltd., 102206, Beijing, China","institution_ids":["https://openalex.org/I180662265"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5087500657"],"corresponding_institution_ids":["https://openalex.org/I139759216"],"apc_list":{"value":990,"currency":"GBP","value_usd":1214},"apc_paid":{"value":990,"currency":"GBP","value_usd":1214},"fwci":0.9922,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.77292592,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"12","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/telemetry","display_name":"Telemetry","score":0.8357748985290527},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6617758274078369},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.5988271236419678},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5605211853981018},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5569632649421692},{"id":"https://openalex.org/keywords/granularity","display_name":"Granularity","score":0.5094776749610901},{"id":"https://openalex.org/keywords/network-monitoring","display_name":"Network monitoring","score":0.508009672164917},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.49834775924682617},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.44636911153793335},{"id":"https://openalex.org/keywords/simple-network-management-protocol","display_name":"Simple Network Management Protocol","score":0.43458619713783264},{"id":"https://openalex.org/keywords/network-management","display_name":"Network management","score":0.3530423641204834},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3387339115142822},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.20013034343719482},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.10334479808807373}],"concepts":[{"id":"https://openalex.org/C183121708","wikidata":"https://www.wikidata.org/wiki/Q209867","display_name":"Telemetry","level":2,"score":0.8357748985290527},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6617758274078369},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.5988271236419678},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5605211853981018},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5569632649421692},{"id":"https://openalex.org/C177774035","wikidata":"https://www.wikidata.org/wiki/Q1246948","display_name":"Granularity","level":2,"score":0.5094776749610901},{"id":"https://openalex.org/C81877898","wikidata":"https://www.wikidata.org/wiki/Q1965787","display_name":"Network monitoring","level":2,"score":0.508009672164917},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.49834775924682617},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.44636911153793335},{"id":"https://openalex.org/C69527307","wikidata":"https://www.wikidata.org/wiki/Q184230","display_name":"Simple Network Management Protocol","level":3,"score":0.43458619713783264},{"id":"https://openalex.org/C129763632","wikidata":"https://www.wikidata.org/wiki/Q1454667","display_name":"Network management","level":2,"score":0.3530423641204834},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3387339115142822},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.20013034343719482},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.10334479808807373},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1186/s13677-023-00492-w","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s13677-023-00492-w","pdf_url":"https://journalofcloudcomputing.springeropen.com/counter/pdf/10.1186/s13677-023-00492-w","source":{"id":"https://openalex.org/S2486819371","display_name":"Journal of Cloud Computing Advances Systems and Applications","issn_l":"2192-113X","issn":["2192-113X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cloud Computing","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:648b61504d14488ba33382dfa4b4c99e","is_oa":true,"landing_page_url":"https://doaj.org/article/648b61504d14488ba33382dfa4b4c99e","pdf_url":null,"source":{"id":"https://openalex.org/S112646816","display_name":"SHILAP Revista de lepidopterolog\u00eda","issn_l":"0300-5267","issn":["0300-5267","2340-4078"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Cloud Computing: Advances, Systems and Applications, Vol 12, Iss 1, Pp 1-16 (2023)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s13677-023-00492-w","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s13677-023-00492-w","pdf_url":"https://journalofcloudcomputing.springeropen.com/counter/pdf/10.1186/s13677-023-00492-w","source":{"id":"https://openalex.org/S2486819371","display_name":"Journal of Cloud Computing Advances Systems and Applications","issn_l":"2192-113X","issn":["2192-113X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cloud Computing","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.5099999904632568,"display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G2087396116","display_name":null,"funder_award_id":"China","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3085993365","display_name":null,"funder_award_id":"(Grant No.","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3317480652","display_name":null,"funder_award_id":"Science","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4432232303","display_name":null,"funder_award_id":"A2022256","funder_id":"https://openalex.org/F4320321470","funder_display_name":"Beijing University of Posts and Telecommunications"},{"id":"https://openalex.org/G5994120800","display_name":null,"funder_award_id":"Natural","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G641910601","display_name":null,"funder_award_id":"U21B2022","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7726157001","display_name":null,"funder_award_id":"Grant No.","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321470","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59"}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4386220653.pdf"},"referenced_works_count":39,"referenced_works":["https://openalex.org/W2009481304","https://openalex.org/W2116300222","https://openalex.org/W2152576712","https://openalex.org/W2157331557","https://openalex.org/W2584316068","https://openalex.org/W2868447023","https://openalex.org/W2891574672","https://openalex.org/W2951809603","https://openalex.org/W3010296785","https://openalex.org/W3010508824","https://openalex.org/W3034877820","https://openalex.org/W3049290327","https://openalex.org/W3080595942","https://openalex.org/W3102937575","https://openalex.org/W3109037541","https://openalex.org/W3159562992","https://openalex.org/W3164675724","https://openalex.org/W3169450514","https://openalex.org/W3197875103","https://openalex.org/W3208033258","https://openalex.org/W3214976678","https://openalex.org/W3215527255","https://openalex.org/W4200255791","https://openalex.org/W4206450891","https://openalex.org/W4214545322","https://openalex.org/W4224314467","https://openalex.org/W4225586447","https://openalex.org/W4226179997","https://openalex.org/W4226457790","https://openalex.org/W4254182148","https://openalex.org/W4283750307","https://openalex.org/W4285237764","https://openalex.org/W4285272834","https://openalex.org/W4285295176","https://openalex.org/W4292262852","https://openalex.org/W4312323945","https://openalex.org/W4319232919","https://openalex.org/W4321365604","https://openalex.org/W4322775556"],"related_works":["https://openalex.org/W2380400043","https://openalex.org/W4205316883","https://openalex.org/W1569390378","https://openalex.org/W2378302710","https://openalex.org/W624949607","https://openalex.org/W2376818286","https://openalex.org/W1973478904","https://openalex.org/W2379489722","https://openalex.org/W2394469871","https://openalex.org/W1979528400"],"abstract_inverted_index":{"Abstract":[0],"As":[1],"the":[2,85,89,110,122,132,139,143,151,163],"cloud":[3,7,25,35],"services":[4],"market":[5],"grows,":[6],"management":[8],"tools":[9],"that":[10,138],"detect":[11],"network":[12,29,70,82,156,164],"anomalies":[13,59],"in":[14,34,88,95,126],"a":[15,101],"non-intrusive":[16],"manner":[17],"are":[18,37,46,92],"critical":[19],"to":[20,56,67,117,150,162],"improve":[21],"users\u2019":[22],"experience":[23],"of":[24,47,142],"services.":[26],"However,":[27,84],"some":[28],"anomalies,":[30],"such":[31,58],"as":[32,115],"Microburst,":[33],"systems":[36],"very":[38],"discreet.":[39],"Network":[40,63,112],"monitoring":[41],"methods,":[42],"e.g.,":[43],"SNMP,":[44],"Ping,":[45],"coarse":[48],"temporal":[49,74],"granularity":[50],"or":[51],"low-dimension":[52],"metrics,":[53],"have":[54],"difficulty":[55],"identify":[57,131],"quickly":[60],"and":[61,120,129,158],"accurately.":[62],"telemetry":[64,90,127,157],"is":[65],"able":[66],"collect":[68],"rich":[69,86],"metrics":[71],"with":[72],"fine":[73],"granularity,":[75],"which":[76],"can":[77],"provide":[78],"deep":[79],"insight":[80],"into":[81],"anomalies.":[83,133],"features":[87],"data":[91,128],"insufficient":[93],"exploited":[94],"existing":[96],"research.":[97],"This":[98],"paper":[99],"proposes":[100],"Multi-feature":[102],"Fusion":[103],"Graph":[104],"Deep":[105],"learning":[106],"approach":[107],"driven":[108],"by":[109],"In-band":[111],"Telemetry,":[113],"shorted":[114],"MFGAD-INT,":[116],"efficiently":[118],"extract":[119],"process":[121],"spatial-temporal":[123],"correlation":[124],"information":[125],"effectively":[130],"The":[134],"experimental":[135],"results":[136],"show":[137],"accuracy":[140],"performance":[141],"proposed":[144],"method":[145,154],"improves":[146],"about":[147,159],"10.56%":[148],"compared":[149,161],"anomaly":[152],"detection":[153],"without":[155],"9.73%":[160],"telemetry-based":[165],"method.":[166]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1}],"updated_date":"2026-04-13T07:58:08.660418","created_date":"2025-10-10T00:00:00"}