{"id":"https://openalex.org/W2758080252","doi":"https://doi.org/10.1587/transinf.2016inp0007","title":"Modeling Attack Process of Advanced Persistent Threat Using Network Evolution","display_name":"Modeling Attack Process of Advanced Persistent Threat Using Network Evolution","publication_year":2017,"publication_date":"2017-01-01","ids":{"openalex":"https://openalex.org/W2758080252","doi":"https://doi.org/10.1587/transinf.2016inp0007","mag":"2758080252"},"language":"en","primary_location":{"id":"doi:10.1587/transinf.2016inp0007","is_oa":true,"landing_page_url":"https://doi.org/10.1587/transinf.2016inp0007","pdf_url":"https://www.jstage.jst.go.jp/article/transinf/E100.D/10/E100.D_2016INP0007/_pdf","source":{"id":"https://openalex.org/S2486202937","display_name":"IEICE Transactions on Information and Systems","issn_l":"0916-8532","issn":["0916-8532","1745-1361"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Information and Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://www.jstage.jst.go.jp/article/transinf/E100.D/10/E100.D_2016INP0007/_pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078928845","display_name":"Weina Niu","orcid":"https://orcid.org/0000-0002-0072-5541"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Weina NIU","raw_affiliation_strings":["School of Computer Science and Engineering, University of Electronic Science and Technology of China"],"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100780268","display_name":"Xiaosong Zhang","orcid":"https://orcid.org/0000-0001-9886-1412"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaosong ZHANG","raw_affiliation_strings":["School of Computer Science and Engineering, University of Electronic Science and Technology of China"],"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012354366","display_name":"Guowu Yang","orcid":"https://orcid.org/0000-0002-5133-0320"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guowu YANG","raw_affiliation_strings":["School of Computer Science and Engineering, University of Electronic Science and Technology of China"],"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101893410","display_name":"Ruidong Chen","orcid":"https://orcid.org/0000-0002-1970-5743"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruidong CHEN","raw_affiliation_strings":["School of Computer Science and Engineering, University of Electronic Science and Technology of China"],"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100391512","display_name":"Dong Wang","orcid":"https://orcid.org/0000-0002-8569-8713"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dong WANG","raw_affiliation_strings":["School of Computer Science and Engineering, University of Electronic Science and Technology of China"],"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China","institution_ids":["https://openalex.org/I150229711"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5078928845"],"corresponding_institution_ids":["https://openalex.org/I150229711"],"apc_list":null,"apc_paid":null,"fwci":1.7541,"has_fulltext":true,"cited_by_count":19,"citation_normalized_percentile":{"value":0.87222835,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":"E100.D","issue":"10","first_page":"2275","last_page":"2286"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.992900013923645,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.870640218257904},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.582370400428772},{"id":"https://openalex.org/keywords/flexibility","display_name":"Flexibility (engineering)","score":0.5616454482078552},{"id":"https://openalex.org/keywords/dynamic-network-analysis","display_name":"Dynamic network analysis","score":0.5153817534446716},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4536747634410858},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.44620364904403687},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.4413602650165558},{"id":"https://openalex.org/keywords/cyberspace","display_name":"Cyberspace","score":0.4316139221191406},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.21103230118751526},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.1430177390575409}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.870640218257904},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.582370400428772},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.5616454482078552},{"id":"https://openalex.org/C13540734","wikidata":"https://www.wikidata.org/wiki/Q5318996","display_name":"Dynamic network analysis","level":2,"score":0.5153817534446716},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4536747634410858},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.44620364904403687},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.4413602650165558},{"id":"https://openalex.org/C2781241145","wikidata":"https://www.wikidata.org/wiki/Q204606","display_name":"Cyberspace","level":3,"score":0.4316139221191406},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.21103230118751526},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.1430177390575409},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1587/transinf.2016inp0007","is_oa":true,"landing_page_url":"https://doi.org/10.1587/transinf.2016inp0007","pdf_url":"https://www.jstage.jst.go.jp/article/transinf/E100.D/10/E100.D_2016INP0007/_pdf","source":{"id":"https://openalex.org/S2486202937","display_name":"IEICE Transactions on Information and Systems","issn_l":"0916-8532","issn":["0916-8532","1745-1361"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Information and Systems","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1587/transinf.2016inp0007","is_oa":true,"landing_page_url":"https://doi.org/10.1587/transinf.2016inp0007","pdf_url":"https://www.jstage.jst.go.jp/article/transinf/E100.D/10/E100.D_2016INP0007/_pdf","source":{"id":"https://openalex.org/S2486202937","display_name":"IEICE Transactions on Information and Systems","issn_l":"0916-8532","issn":["0916-8532","1745-1361"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Information and Systems","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.6600000262260437}],"awards":[{"id":"https://openalex.org/G1231421488","display_name":null,"funder_award_id":"under","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2087396116","display_name":null,"funder_award_id":"China","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3317480652","display_name":null,"funder_award_id":"Science","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5994120800","display_name":null,"funder_award_id":"Natural","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6248607417","display_name":null,"funder_award_id":"61572115","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7820223330","display_name":null,"funder_award_id":"6157211","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2758080252.pdf","grobid_xml":"https://content.openalex.org/works/W2758080252.grobid-xml"},"referenced_works_count":31,"referenced_works":["https://openalex.org/W44295252","https://openalex.org/W323184818","https://openalex.org/W1109422923","https://openalex.org/W1505844724","https://openalex.org/W1533945010","https://openalex.org/W1964567805","https://openalex.org/W1967385589","https://openalex.org/W1972914730","https://openalex.org/W1988871317","https://openalex.org/W1999762141","https://openalex.org/W2004360894","https://openalex.org/W2021884758","https://openalex.org/W2025113626","https://openalex.org/W2033188305","https://openalex.org/W2044257043","https://openalex.org/W2068417913","https://openalex.org/W2083658929","https://openalex.org/W2092681734","https://openalex.org/W2114611306","https://openalex.org/W2159128662","https://openalex.org/W2189515241","https://openalex.org/W2277924269","https://openalex.org/W2332689491","https://openalex.org/W2342850280","https://openalex.org/W2408793237","https://openalex.org/W2545820541","https://openalex.org/W2624609788","https://openalex.org/W2962760373","https://openalex.org/W2964324369","https://openalex.org/W4248986893","https://openalex.org/W4302039042"],"related_works":["https://openalex.org/W2368745349","https://openalex.org/W2372005904","https://openalex.org/W144012884","https://openalex.org/W3167675181","https://openalex.org/W2360897455","https://openalex.org/W2377660959","https://openalex.org/W4251169878","https://openalex.org/W2131575257","https://openalex.org/W2527886746","https://openalex.org/W3025849083"],"abstract_inverted_index":{"Advanced":[0],"Persistent":[1],"Threat":[2],"(APT)":[3],"is":[4,138,143],"one":[5],"of":[6,117,164,192],"the":[7,107,115,128,147,165,190],"most":[8],"serious":[9],"network":[10,79,94,109,160],"attacks":[11],"that":[12,185],"occurred":[13],"in":[14,106,114],"cyberspace":[15],"due":[16],"to":[17,56,110,126,174],"sophisticated":[18],"techniques":[19,36],"and":[20,32,78,162],"deep":[21],"concealment.":[22],"Modeling":[23],"APT":[24,29,45,70],"attack":[25,46,71,76,130,134,167,193],"process":[26,72,191],"can":[27,188],"facilitate":[28],"analysis,":[30],"detection,":[31],"prediction.":[33],"However,":[34],"current":[35,83],"focus":[37],"on":[38,74,103,158],"modeling":[39],"known":[40],"attacks,":[41],"which":[42,142],"neither":[43],"reflect":[44],"dynamically":[47],"nor":[48],"take":[49],"human":[50,88],"factors":[51,89],"into":[52,132],"considerations.":[53],"In":[54,150],"order":[55],"overcome":[57],"this":[58,118],"limitation,":[59],"we":[60,97,152,170],"propose":[61,153],"a":[62,92,99,172,178],"Targeted":[63],"Complex":[64],"Attack":[65],"Network":[66],"(TCAN)":[67],"model":[68,86,101,122,137,187,189],"for":[69],"based":[73,102,157],"dynamic":[75,133,154],"graph":[77,131],"evolution.":[80],"Compared":[81],"with":[82],"models,":[84],"our":[85,121,186],"addresses":[87],"by":[90,140,177],"conducting":[91],"two-layer":[93],"structure.":[95],"Meanwhile,":[96],"present":[98],"stochastic":[100],"states":[104],"change":[105],"target":[108],"specify":[111],"nodes":[112,176],"involved":[113],"procedure":[116,173],"APT.":[119],"Besides,":[120],"adopts":[123],"time":[124],"domain":[125],"expand":[127],"traditional":[129],"network.":[135],"Our":[136],"featured":[139],"flexibility,":[141],"proven":[144],"through":[145],"changing":[146],"related":[148],"parameters.":[149],"addition,":[151],"evolution":[155],"rules":[156],"complex":[159],"theory":[161],"characteristics":[163],"actual":[166],"scenarios.":[168],"Finally,":[169],"elaborate":[171],"add":[175],"matrix":[179],"operation.":[180],"The":[181],"simulation":[182],"results":[183],"show":[184],"effectively.":[194]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":3}],"updated_date":"2026-04-10T15:06:20.359241","created_date":"2025-10-10T00:00:00"}