{"id":"https://openalex.org/W4408082134","doi":"https://doi.org/10.1186/s42400-024-00292-y","title":"Bag2image: a multi-instance network traffic representation for network security event prediction","display_name":"Bag2image: a multi-instance network traffic representation for network security event prediction","publication_year":2025,"publication_date":"2025-03-03","ids":{"openalex":"https://openalex.org/W4408082134","doi":"https://doi.org/10.1186/s42400-024-00292-y"},"language":"en","primary_location":{"id":"doi:10.1186/s42400-024-00292-y","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-024-00292-y","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-024-00292-y","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-024-00292-y","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100639057","display_name":"Jiachen Zhang","orcid":"https://orcid.org/0000-0001-9546-9159"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiachen Zhang","raw_affiliation_strings":["School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009595207","display_name":"Daoqi Han","orcid":"https://orcid.org/0000-0002-8014-8050"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Daoqi Han","raw_affiliation_strings":["School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102602351","display_name":"Zhaoxuan Lv","orcid":null},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhaoxuan Lv","raw_affiliation_strings":["School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011351180","display_name":"Yueming Lu","orcid":"https://orcid.org/0000-0003-3196-0349"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yueming Lu","raw_affiliation_strings":["School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-3196-0349","affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Junke Duan","orcid":null},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Junke Duan","raw_affiliation_strings":["School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100355773","display_name":"Yang Liu","orcid":"https://orcid.org/0000-0002-0367-8189"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Liu","raw_affiliation_strings":["School of Automation, Beijing Institute of Technology, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Automation, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100390693","display_name":"Xinyu Zhang","orcid":"https://orcid.org/0000-0002-2999-3291"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinyu Zhang","raw_affiliation_strings":["School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.6332,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.95691426,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"8","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7150708436965942},{"id":"https://openalex.org/keywords/event","display_name":"Event (particle physics)","score":0.5537914037704468},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.5022728443145752},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.48463067412376404},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4643018841743469},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.34106212854385376}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7150708436965942},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.5537914037704468},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.5022728443145752},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.48463067412376404},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4643018841743469},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.34106212854385376},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1186/s42400-024-00292-y","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-024-00292-y","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-024-00292-y","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:d131a1c7fa1c4a47a076a90b16eb98cd","is_oa":true,"landing_page_url":"https://doaj.org/article/d131a1c7fa1c4a47a076a90b16eb98cd","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cybersecurity, Vol 8, Iss 1, Pp 1-25 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s42400-024-00292-y","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-024-00292-y","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-024-00292-y","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G963554315","display_name":null,"funder_award_id":"2021YFB3101903","funder_id":"https://openalex.org/F4320335774","funder_display_name":"Key Technologies Research and Development Program"}],"funders":[{"id":"https://openalex.org/F4320335774","display_name":"Key Technologies Research and Development Program","ror":null}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4408082134.pdf"},"referenced_works_count":40,"referenced_works":["https://openalex.org/W1524926518","https://openalex.org/W1999427165","https://openalex.org/W2027266161","https://openalex.org/W2048616039","https://openalex.org/W2099001231","https://openalex.org/W2099940443","https://openalex.org/W2194775991","https://openalex.org/W2261059368","https://openalex.org/W2295598076","https://openalex.org/W2305976078","https://openalex.org/W2343974644","https://openalex.org/W2407898405","https://openalex.org/W2625602624","https://openalex.org/W2766585573","https://openalex.org/W2767011015","https://openalex.org/W2887387465","https://openalex.org/W2891432086","https://openalex.org/W2897256107","https://openalex.org/W2905097561","https://openalex.org/W2963961561","https://openalex.org/W2964348082","https://openalex.org/W2999178765","https://openalex.org/W3036749504","https://openalex.org/W3093459272","https://openalex.org/W3094487067","https://openalex.org/W3148181069","https://openalex.org/W3173515311","https://openalex.org/W3179147591","https://openalex.org/W3192172357","https://openalex.org/W4200013827","https://openalex.org/W4220880333","https://openalex.org/W4242175757","https://openalex.org/W4254830262","https://openalex.org/W4285142897","https://openalex.org/W4297492883","https://openalex.org/W4297492888","https://openalex.org/W4308643055","https://openalex.org/W4322620789","https://openalex.org/W4386275697","https://openalex.org/W4387362861"],"related_works":["https://openalex.org/W2062195135","https://openalex.org/W2111375262","https://openalex.org/W2317728013","https://openalex.org/W4252076617","https://openalex.org/W1991205173","https://openalex.org/W2795079307","https://openalex.org/W2109048960","https://openalex.org/W2793058541","https://openalex.org/W2741481635","https://openalex.org/W1983629434"],"abstract_inverted_index":{"Abstract":[0],"In":[1],"practical":[2],"scenarios,":[3],"security":[4,23,78,126],"events":[5,24],"triggered":[6],"by":[7],"abnormal":[8],"network":[9,92,101,125],"traffic":[10,93,102],"often":[11],"result":[12],"from":[13],"the":[14,108,114,124,160,168,179,198],"collective":[15,26],"behavior":[16],"of":[17,44,111,163,183,193,208],"multiple":[18,62],"data":[19,34,48,63,83,103],"streams,":[20,35],"embodying":[21],"group":[22],"with":[25,42,68,147],"characteristics.":[27],"Existing":[28],"research":[29],"methods,":[30],"focusing":[31],"on":[32,166,187],"individual":[33],"lack":[36],"a":[37,57,66,69,77,90,172],"macroscopic":[38],"analysis":[39],"and":[40,81,119,154,171,185,195,210],"struggle":[41],"challenges":[43],"analyzing":[45],"massive,":[46],"imbalanced":[47],"sets.":[49],"To":[50],"address":[51],"these":[52,188],"challenges,":[53],"this":[54],"paper":[55],"adopts":[56],"multi-instance":[58,91,100,150],"learning":[59,151],"approach,":[60,71],"mapping":[61],"streams":[64],"into":[65,104],"bag":[67,74,115],"coarse-grained":[70],"where":[72],"each":[73,82],"corresponds":[75],"to":[76,130],"event":[79,127],"label":[80],"stream":[84],"represents":[85],"an":[86,134],"instance.":[87],"We":[88],"propose":[89],"conversion":[94],"method,":[95],"Bag2Image,":[96],"which":[97],"transforms":[98],"temporal":[99],"image":[105,117,135,140],"representations,":[106],"preserving":[107],"spatio-temporal":[109],"characteristics":[110],"instances":[112],"within":[113],"through":[116],"channels":[118],"pixels.":[120],"This":[121],"strategy":[122],"allows":[123],"prediction":[128],"task":[129],"be":[131],"approached":[132],"as":[133],"classification":[136,141,157],"problem,":[137],"leveraging":[138],"advanced":[139,149],"techniques":[142],"for":[143],"prediction.":[144],"Our":[145],"cross-experiments":[146],"six":[148,155],"(MIL)":[152],"algorithms":[153],"different":[156],"models":[158],"demonstrate":[159],"superior":[161],"performance":[162],"our":[164,176],"method":[165,177],"both":[167],"UNSW-NB15":[169],"dataset":[170],"private":[173],"dataset.":[174],"Specifically,":[175],"achieved":[178],"highest":[180],"F1":[181],"scores":[182],"77.9%":[184],"74.4%":[186],"datasets,":[189],"respectively,":[190],"representing":[191],"improvements":[192],"4.1%":[194,209],"13.5%":[196],"over":[197],"second-best":[199],"MIL":[200],"algorithm.":[201],"The":[202],"recall":[203],"rates":[204],"also":[205],"saw":[206],"increases":[207],"13.2%,":[211],"respectively.":[212]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":3}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}