{"id":"https://openalex.org/W4386317488","doi":"https://doi.org/10.1587/transinf.2022ofp0004","title":"Few-Shot Learning-Based Malicious IoT Traffic Detection with Prototypical Graph Neural Networks","display_name":"Few-Shot Learning-Based Malicious IoT Traffic Detection with Prototypical Graph Neural Networks","publication_year":2023,"publication_date":"2023-08-31","ids":{"openalex":"https://openalex.org/W4386317488","doi":"https://doi.org/10.1587/transinf.2022ofp0004"},"language":"en","primary_location":{"id":"doi:10.1587/transinf.2022ofp0004","is_oa":true,"landing_page_url":"https://doi.org/10.1587/transinf.2022ofp0004","pdf_url":"https://www.jstage.jst.go.jp/article/transinf/E106.D/9/E106.D_2022OFP0004/_pdf","source":{"id":"https://openalex.org/S2486202937","display_name":"IEICE Transactions on Information and Systems","issn_l":"0916-8532","issn":["0916-8532","1745-1361"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Information and Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://www.jstage.jst.go.jp/article/transinf/E106.D/9/E106.D_2022OFP0004/_pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5044964944","display_name":"Thin Tharaphe Thein","orcid":"https://orcid.org/0000-0002-1213-0393"},"institutions":[{"id":"https://openalex.org/I65837984","display_name":"Kobe University","ror":"https://ror.org/03tgsfw79","country_code":"JP","type":"education","lineage":["https://openalex.org/I65837984"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Thin Tharaphe THEIN","raw_affiliation_strings":["Kobe University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kobe University","institution_ids":["https://openalex.org/I65837984"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076797774","display_name":"Yoshiaki Shiraishi","orcid":"https://orcid.org/0000-0002-8970-9408"},"institutions":[{"id":"https://openalex.org/I65837984","display_name":"Kobe University","ror":"https://ror.org/03tgsfw79","country_code":"JP","type":"education","lineage":["https://openalex.org/I65837984"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Yoshiaki SHIRAISHI","raw_affiliation_strings":["Kobe University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kobe University","institution_ids":["https://openalex.org/I65837984"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5048694461","display_name":"Masakatu Morii","orcid":null},"institutions":[{"id":"https://openalex.org/I65837984","display_name":"Kobe University","ror":"https://ror.org/03tgsfw79","country_code":"JP","type":"education","lineage":["https://openalex.org/I65837984"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Masakatu MORII","raw_affiliation_strings":["Kobe University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kobe University","institution_ids":["https://openalex.org/I65837984"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I65837984"],"apc_list":null,"apc_paid":null,"fwci":1.8535,"has_fulltext":true,"cited_by_count":14,"citation_normalized_percentile":{"value":0.85399071,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"E106.D","issue":"9","first_page":"1480","last_page":"1489"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8327924013137817},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5136792063713074},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5089588165283203},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.498950719833374},{"id":"https://openalex.org/keywords/traffic-generation-model","display_name":"Traffic generation model","score":0.4848254919052124},{"id":"https://openalex.org/keywords/traffic-flow","display_name":"Traffic flow (computer networking)","score":0.4422297477722168},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.4420185089111328},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.4136480689048767},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.39495551586151123},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.35341185331344604},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3262735605239868},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2675139307975769},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.16249576210975647}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8327924013137817},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5136792063713074},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5089588165283203},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.498950719833374},{"id":"https://openalex.org/C176715033","wikidata":"https://www.wikidata.org/wiki/Q2080768","display_name":"Traffic generation model","level":2,"score":0.4848254919052124},{"id":"https://openalex.org/C207512268","wikidata":"https://www.wikidata.org/wiki/Q3074551","display_name":"Traffic flow (computer networking)","level":2,"score":0.4422297477722168},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.4420185089111328},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4136480689048767},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.39495551586151123},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.35341185331344604},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3262735605239868},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2675139307975769},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.16249576210975647},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1587/transinf.2022ofp0004","is_oa":true,"landing_page_url":"https://doi.org/10.1587/transinf.2022ofp0004","pdf_url":"https://www.jstage.jst.go.jp/article/transinf/E106.D/9/E106.D_2022OFP0004/_pdf","source":{"id":"https://openalex.org/S2486202937","display_name":"IEICE Transactions on Information and Systems","issn_l":"0916-8532","issn":["0916-8532","1745-1361"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Information and Systems","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1587/transinf.2022ofp0004","is_oa":true,"landing_page_url":"https://doi.org/10.1587/transinf.2022ofp0004","pdf_url":"https://www.jstage.jst.go.jp/article/transinf/E106.D/9/E106.D_2022OFP0004/_pdf","source":{"id":"https://openalex.org/S2486202937","display_name":"IEICE Transactions on Information and Systems","issn_l":"0916-8532","issn":["0916-8532","1745-1361"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Information and Systems","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.5,"id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G1613875913","display_name":null,"funder_award_id":"JPJ000254\u201d","funder_id":"https://openalex.org/F4320325628","funder_display_name":"Ministry of Internal Affairs and Communications"},{"id":"https://openalex.org/G3048983140","display_name":null,"funder_award_id":"JP21H03444","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"},{"id":"https://openalex.org/G8378125957","display_name":"Modelling Attack Generation Process by Introducing Machine Learning and Domain Knowledge and Its Verification for Real Attack Data","funder_award_id":"23K21670","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"}],"funders":[{"id":"https://openalex.org/F4320325628","display_name":"Ministry of Internal Affairs and Communications","ror":"https://ror.org/00vs1pz50"},{"id":"https://openalex.org/F4320334764","display_name":"Japan Society for the Promotion of Science","ror":"https://ror.org/00hhkn466"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4386317488.pdf"},"referenced_works_count":28,"referenced_works":["https://openalex.org/W1550383259","https://openalex.org/W2065890363","https://openalex.org/W2108598243","https://openalex.org/W2116341502","https://openalex.org/W2149600645","https://openalex.org/W2194775991","https://openalex.org/W2432717477","https://openalex.org/W2519887557","https://openalex.org/W2596636257","https://openalex.org/W2601450892","https://openalex.org/W2606537796","https://openalex.org/W2770468159","https://openalex.org/W2903294440","https://openalex.org/W2922140331","https://openalex.org/W2941288225","https://openalex.org/W2943605315","https://openalex.org/W2964105864","https://openalex.org/W2972542656","https://openalex.org/W2979046245","https://openalex.org/W2990268365","https://openalex.org/W3011040471","https://openalex.org/W3021740526","https://openalex.org/W3035366542","https://openalex.org/W3049465447","https://openalex.org/W3090781815","https://openalex.org/W3121972055","https://openalex.org/W3206014301","https://openalex.org/W3209498073"],"related_works":["https://openalex.org/W2587362999","https://openalex.org/W432084041","https://openalex.org/W2963251637","https://openalex.org/W2986732134","https://openalex.org/W2394010358","https://openalex.org/W2361078351","https://openalex.org/W2052374615","https://openalex.org/W4239349137","https://openalex.org/W1463884142","https://openalex.org/W239469043"],"abstract_inverted_index":{"With":[0],"a":[1,18,52,75,90,98,141,158,168,216],"rapidly":[2],"escalating":[3],"number":[4,54],"of":[5,10,23,55,71,111,137,221,230,243],"sophisticated":[6],"cyber-attacks,":[7],"protecting":[8],"Internet":[9],"Things":[11],"(IoT)":[12],"networks":[13],"against":[14],"unauthorized":[15],"activity":[16],"is":[17,27,121,174,197,213],"major":[19],"concern.":[20],"The":[21,103,119,148,210,232],"detection":[22,42,95,150],"malicious":[24,40,92],"attack":[25],"traffic":[26,41,59,78,94,117,125,144,156,165,180,218,223,225],"thus":[28],"crucial":[29],"for":[30,82],"IoT":[31,93],"security":[32],"to":[33,61,129,133,177,181,203,206,227],"prevent":[34],"unwanted":[35],"traffic.":[36],"However,":[37],"existing":[38],"traditional":[39],"systems":[43],"which":[44],"relied":[45],"on":[46,123,199,215],"supervised":[47],"machine":[48,64],"learning":[49,65],"approach":[50,105],"need":[51],"considerable":[53],"benign":[56,222],"and":[57,127,161,224,245,249,253],"malware":[58],"samples":[60,79,145],"train":[62],"the":[63,69,154,163,178,188,195,255],"models.":[66,257],"Moreover,":[67],"in":[68,247],"cases":[70],"zero-day":[72],"attacks,":[73],"only":[74,140],"few":[76,142],"labeled":[77,124,143],"are":[80,146],"accessible":[81],"analysis.":[83],"To":[84],"deal":[85],"with":[86,97],"this,":[87],"we":[88],"propose":[89],"few-shot":[91,190,201],"system":[96,151],"prototypical":[99],"graph":[100,191],"neural":[101,172,192],"network.":[102],"proposed":[104,149,189,211,237],"does":[106],"not":[107],"require":[108],"prior":[109],"knowledge":[110],"network":[112,116,155,173,193,217],"payload":[113],"binaries":[114],"or":[115],"signatures.":[118],"model":[120,196,212,238],"trained":[122,198],"data":[126],"tested":[128],"evaluate":[130],"its":[131],"ability":[132],"detect":[134],"new":[135,207],"types":[136,229],"attacks":[138],"when":[139],"available.":[147],"first":[152],"categorizes":[153],"as":[157,167],"bidirectional":[159],"flow":[160,166],"visualizes":[162],"binary":[164],"color":[169],"image.":[170],"A":[171],"then":[175],"applied":[176],"visualized":[179],"extract":[182],"important":[183],"features.":[184],"After":[185],"that,":[186],"using":[187],"approach,":[194],"different":[200],"tasks":[202],"generalize":[204],"it":[205],"unseen":[208],"attacks.":[209,231],"evaluated":[214],"dataset":[219],"consisting":[220],"corresponding":[226],"six":[228],"results":[233],"revealed":[234],"that":[235],"our":[236],"achieved":[239],"an":[240],"F1":[241],"score":[242],"0.91":[244],"0.94":[246],"5-shot":[248],"10-shot":[250],"classification,":[251],"respectively,":[252],"outperformed":[254],"baseline":[256]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":5}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}